last executing test programs:

24.971373681s ago: executing program 1 (id=135):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x2, 0x0, &(0x7f0000000200))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000ffdbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="05005300010000001400040064766ded3930000000000000000000000800050002000000"], 0x40}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x2, 0x0, &(0x7f0000000200)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000ffdbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="05005300010000001400040064766ded3930000000000000000000000800050002000000"], 0x40}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) (async)

24.971202476s ago: executing program 1 (id=135):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x2, 0x0, &(0x7f0000000200))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000ffdbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="05005300010000001400040064766ded3930000000000000000000000800050002000000"], 0x40}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x2, 0x0, &(0x7f0000000200)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000ffdbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="05005300010000001400040064766ded3930000000000000000000000800050002000000"], 0x40}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) (async)

24.971087254s ago: executing program 1 (id=135):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x2, 0x0, &(0x7f0000000200))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000ffdbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="05005300010000001400040064766ded3930000000000000000000000800050002000000"], 0x40}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x2, 0x0, &(0x7f0000000200)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000ffdbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="05005300010000001400040064766ded3930000000000000000000000800050002000000"], 0x40}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) (async)

24.970971616s ago: executing program 1 (id=135):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x2, 0x0, &(0x7f0000000200))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000ffdbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="05005300010000001400040064766ded3930000000000000000000000800050002000000"], 0x40}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x2, 0x0, &(0x7f0000000200)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000ffdbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="05005300010000001400040064766ded3930000000000000000000000800050002000000"], 0x40}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) (async)

14.595777479s ago: executing program 1 (id=135):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x2, 0x0, &(0x7f0000000200))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000ffdbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="05005300010000001400040064766ded3930000000000000000000000800050002000000"], 0x40}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x2, 0x0, &(0x7f0000000200)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000ffdbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="05005300010000001400040064766ded3930000000000000000000000800050002000000"], 0x40}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) (async)

5.359039689s ago: executing program 0 (id=774):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) (async, rerun: 32)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r1 = socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, <r2=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000005c0)={{r2, 0x4, 0x0, 0x2, 0x2, 0x10, 0xa46, 0x4, 0x56, 0x1, 0xb9d6, 0x3, 0x6, 0x7fff, 0x4}}) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500e1fd08005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

4.604238483s ago: executing program 4 (id=780):
socketpair(0x18, 0x5, 0x3, &(0x7f0000000000)) (async)
socketpair(0x18, 0x5, 0x3, &(0x7f0000000000))
r0 = socket$kcm(0x11, 0x3, 0x0)
close(r0) (async)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0)
write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="06060300d28605003c000089014fca37d2e06e6d05595e2bf7836cf555eda080940ad28d7b8f383f63cafba400657d6b4423ab3db3170741079f33fc19e508e06bb3516356119761c07155ee73a902bbcc843b8bb37012564158bf5f55b36d80f41b1355b515443c195ff8ed92dc167ccebfa9874ed1cf3c9a2e61af49eb78688d1db4eaed17d1d5d1a4b5817d52803b36fcef58be130c04154bb27c8fec"], 0x59) (async)
write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="06060300d28605003c000089014fca37d2e06e6d05595e2bf7836cf555eda080940ad28d7b8f383f63cafba400657d6b4423ab3db3170741079f33fc19e508e06bb3516356119761c07155ee73a902bbcc843b8bb37012564158bf5f55b36d80f41b1355b515443c195ff8ed92dc167ccebfa9874ed1cf3c9a2e61af49eb78688d1db4eaed17d1d5d1a4b5817d52803b36fcef58be130c04154bb27c8fec"], 0x59)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x282, 0x4)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) (async)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@in={0x2, 0x4e33, @empty}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042712590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f00000002c0)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000000840)="6d470043ae8b", 0x6}], 0x4}, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
close(r5)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10)
r8 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r8, &(0x7f0000000040)={0x2, 0x1, @rand_addr=0x64010101}, 0x10) (async)
connect$inet(r8, &(0x7f0000000040)={0x2, 0x1, @rand_addr=0x64010101}, 0x10)
r9 = accept4(r8, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f00000002c0)=r5}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x19, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000003000000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000083000000bf090000000000005509010000000000950000000000000018280000beb1350574fdc9000c15eb21b8e9a072758929bc1f16a8a02257d917835b10df43b5a6c786f847cc2f9dfb77dd96b410f1e7969ee8a067596e8ed24ac11e9dd3b02cd8b1359fe9c06d5876b5f89fce", @ANYRES32, @ANYBLOB="00000000020000009500000000000000186900000200000000000000ff000000183b0000050000000000000000000000852000000300000045343000fcffffff8510000005000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000800)='GPL\x00', 0x9, 0x5c, &(0x7f0000000880)=""/92, 0x40f00, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0x1, 0xff, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000b00)=[0xffffffffffffffff, r4, r7], &(0x7f0000000b40)=[{0x2, 0x1, 0xf, 0x7}, {0x4, 0x1, 0xe, 0xa}], 0x10, 0x3669, @void, @value}, 0x94)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r11 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0011000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000004560100008e0100006f776e657200000000000000000000000000000000000000db21b519bf83d1fb180000000000", @ANYRES32=<r12=>r11, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"]}, 0x296)
syz_emit_ethernet(0x7e, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86"], 0x0) (async)
syz_emit_ethernet(0x7e, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86"], 0x0)
write$tun(r10, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES64=r12], 0xfdef)

4.603380615s ago: executing program 0 (id=781):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_buf(r1, 0x0, 0x4, &(0x7f0000000040)="9f0910bc996c301c8107070400", 0x28)
getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f0000000240))
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="d3ddd1de00000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x44}}, 0x0)

4.390761293s ago: executing program 4 (id=783):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x50, &(0x7f0000000000)={&(0x7f0000000040)={0x18, 0x1409, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x18}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000240)={'macvlan0\x00', @remote})
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28e)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000001000350500000000fff3000000000000", @ANYRES32=r6, @ANYBLOB="05980000000000004400128008000100687372003800028008000200", @ANYRES32=r6, @ANYBLOB="050007000200000005000700010000000a0004000000000000000000050003008e00000008000100", @ANYRES32=r6, @ANYBLOB], 0x64}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000003c0012800800010067726500300002"], 0x5c}}, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r9 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r8, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r9}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r8, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=@newneigh={0x48, 0x1c, 0x4, 0x70bd25, 0x25dfdbfe, {0x2, 0x0, 0x0, r6, 0x40, 0x0, 0x1}, [@NDA_DST_IPV4={0x8, 0x1, @broadcast}, @NDA_CACHEINFO={0x14, 0x3, {0x7, 0xfff, 0x6d, 0x100}}, @NDA_PORT={0x6, 0x6, 0x4e20}, @NDA_NH_ID={0x8, 0xd, 0x7}]}, 0x48}}, 0x0)
close(r2)
socket$nl_xfrm(0x10, 0x3, 0x6)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYBLOB="3000000003010102000000e318946c000a0000000c0019800800010094fb"], 0x30}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'ip6erspan0\x00'})

4.199306081s ago: executing program 0 (id=784):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f0000001200)=ANY=[@ANYBLOB="000086dd41"], 0xfce)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x80)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001e0001000000000000000000070000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n'], 0x30}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x140e, 0x1, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x24000801)

3.883395334s ago: executing program 4 (id=787):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, &(0x7f00000000c0))
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="0a0006000802110000000000380050800800030006ac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0)

3.615190256s ago: executing program 4 (id=790):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000002800010029bd7000fedbdfc145011113154349ae5339f5aeed900d25020010800700000300000000080010000a000000080001007f00000108000b00f601000008000400060000008b762a8ffb9e91a1689c25e2efd36e7899b21a68baf06274763f2ecaf18b2f6e72c1cd148770ad687d59f2287ea670d842b7d3a4d183b64d9ba7d3364f882159213c6099da9fe95ae9ad052a7f5db8cb4a8780fc1fdc53a6df933b2ad806cc48b48d5608c06083a0d111efb4fb8609d01a97c348f89020a21e7acc337de27f747cde1bb6c0eee61f2cc7c4a9ebb0c7f4cdf23635"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = socket$kcm(0x10, 0x100000000002, 0x4)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000200), 0x4)
sendmmsg$inet6(r3, &(0x7f0000000640)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)
r5 = socket(0x1, 0x2, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0x2, 0x0, 0x0, 0x2}, &(0x7f0000000500)=0x18)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000800), &(0x7f00000001c0)=@tcp=r5, 0x2}, 0x20)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$rds(0x15, 0x5, 0x0)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0x13, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000006800e97800ab0000000000000a0003000000000004000400b05f5063ceec"], 0x1c}}, 0x880)
sendmsg$nl_route(r7, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000800000000020a000000000000060000020008001e0001000000"], 0x24}}, 0x0)

3.587710083s ago: executing program 2 (id=791):
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async, rerun: 64)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e9b3d0007e03dd65193dfb6c575963f8864f067", 0x14}, {&(0x7f0000000300)="99e31b00", 0x4}], 0x2) (rerun: 64)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
splice(r3, &(0x7f0000000040)=0xfffffffffffffffc, r0, 0x0, 0x800000000ff, 0x0) (async)
socketpair(0x8979d398cbba0db7, 0x6, 0xb6, &(0x7f0000000000))
r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r5 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async)
getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async)
r8 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r8, 0x29, 0xc8, 0x0, 0xc000000) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r10 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r10, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async)
r11 = socket$key(0xf, 0x3, 0x2) (async)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r11, 0x8b27, &(0x7f0000000040)) (async, rerun: 32)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (rerun: 32)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@delchain={0x24, 0x64, 0xf31, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff2, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)

3.171409362s ago: executing program 2 (id=793):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x6, 0x18}, 0xc)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x2d0, 0x178, 0x178, 0x2d0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}, {[{}, {0xe}]}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x0, 0x1ff}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x3, 0x1, {0x4413}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x5}, {0x1, 0x4, 0x5}, 0xb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3c8) (async)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x2d0, 0x178, 0x178, 0x2d0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}, {[{}, {0xe}]}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x0, 0x1ff}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x3, 0x1, {0x4413}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x5}, {0x1, 0x4, 0x5}, 0xb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3c8)

3.114286129s ago: executing program 0 (id=794):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendto$inet(r0, &(0x7f0000001340)="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", 0xfffffffffffffdc0, 0x40040011, 0x0, 0x5a)
r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80000)
accept$nfc_llcp(r1, &(0x7f0000000100), &(0x7f0000000180)=0x60)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1fc})
socket$inet(0x2, 0x4000000000000001, 0x0) (async)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async)
sendto$inet(r0, &(0x7f0000001340)="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", 0xfffffffffffffdc0, 0x40040011, 0x0, 0x5a) (async)
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80000) (async)
accept$nfc_llcp(r1, &(0x7f0000000100), &(0x7f0000000180)=0x60) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1fc}) (async)

2.775111293s ago: executing program 2 (id=796):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES16=r0], 0x2c}}, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000200)='blkio.throttle.read_iops_device\x00', 0x2, 0x0)
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$ax25_int(r5, 0x101, 0x8, &(0x7f0000000440), 0x4)
readv(r4, &(0x7f00000003c0)=[{&(0x7f0000001400)=""/227, 0xe3}], 0x1)
r6 = socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, 0x0, &(0x7f0000000800))
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0xcc, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8c, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc8f6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ed4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4dcf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb67}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72d2c56a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f61bb3e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b93}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23ac6dfb}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47d11cb8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1605}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x400}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x743a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfaf1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8029}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb833}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa555}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfffffffc}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0xcc}}, 0x0)
ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000000))
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x44, r11, 0x821, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x81}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000004)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', <r12=>0x0})
r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r12, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r13}]}]}, 0x2c}}, 0x0)
bind$bt_sco(r8, &(0x7f0000000000)={0x1f, @fixed}, 0x8)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, 0x0, &(0x7f0000004000))
unshare(0x22020600)
r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000022000000ff7f000022e47e59920200b2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000080)={r15, 0x0, 0x0, 0x4}, 0x20)

2.74459271s ago: executing program 0 (id=797):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xd91c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x29}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

2.721759527s ago: executing program 3 (id=798):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x4, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}}, 0x20000094)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r6, 0x29, 0x18, 0x0, 0x0)
r7 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000b00)={'veth1_to_batadv\x00', &(0x7f0000000a00)=@ethtool_rxnfc={0x30, 0x0, 0x0, {0x0, @udp_ip6_spec={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote}, {0x0, @dev}, @tcp_ip6_spec={@private1, @private1}, {0x0, @broadcast}}}})
sendmsg$nl_generic(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x5}}, 0x14}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r9=>r4, @ANYBLOB="0000000000000000b702000014000000b7030000720311598500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r8}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r10}, 0x10)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x26, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x1, 0x7c7d4964bf60b567, 0x4, 0x1, 0x80, 0x1}, @map_fd={0x18, 0xa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @alu={0x4, 0x1, 0xb, 0x0, 0x1, 0xffffffffffffffff, 0x1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x76, &(0x7f0000000300)=""/118, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0x4, 0x1000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0, r1, r0, r4, r1, r0], 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x8001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r13 = socket(0x10, 0x3, 0x0)
r14 = socket$packet(0x11, 0x2, 0x300)
r15 = socket$inet6(0xa, 0x3, 0x100)
sendmmsg$inet6(r15, &(0x7f0000000940)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}}], 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002b00)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0xeec}]}}]}, 0x60}}, 0x4048)
setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f00000010c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x760, 0x608, 0x340, 0x608, 0x608, 0x98, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, &(0x7f0000000240), {[{{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x30}, 0xff, 0x0, 'veth0_macvtap\x00', 'ip_vti0\x00', {}, {0xff}, 0xff, 0x1, 0x28}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0xca}}}, {{@ip={@local, @empty, 0xff000000, 0x0, 'pim6reg\x00', 'virt_wifi0\x00', {0xff}, {}, 0x11, 0x7}, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x30000000, 0x9, 0x0, 0x0, 0xc0000000, 0x2, 0x6, 0x0, 0x78}, {0x1000}}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2a0, 0x2c8, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x16, [{0x2b3, 0x7, 0x4, 0xfffffff8}, {0x0, 0x2, 0x2, 0x6}, {0x1, 0xd1, 0xf9, 0x6}, {0x4, 0x0, 0x6, 0x2}, {0xb0, 0x57, 0x1, 0x2}, {0x8d, 0x7, 0x5, 0x4}, {0x8, 0x0, 0x1, 0x6}, {0x3, 0x7f, 0x2, 0x2}, {0x7f, 0x1, 0xa, 0x1}, {0x6, 0xa7, 0x9e, 0x10000}, {0x5, 0xdd, 0xf, 0x9}, {0xfec7, 0x3, 0x4, 0x548}, {0xae5, 0x89, 0x2, 0x8}, {0x9, 0x4, 0x2, 0x9}, {0x7, 0x10, 0x80, 0x200}, {0xf, 0x8, 0x4, 0x1}, {0x9, 0x4, 0x0, 0x1}, {0x4, 0xff, 0xd}, {0xfffe, 0x4, 0x1, 0x8001}, {0x2, 0x8, 0x6, 0x39f062fc}, {0x3548, 0x7, 0x3, 0x8}, {0x401, 0x7, 0x4, 0xfffffff2}, {0xc, 0x33, 0x80, 0x8}, {0xde1e, 0x8, 0x8, 0x3}, {0x1ff, 0x0, 0x3, 0xfffffff2}, {0x0, 0x4, 0x3, 0x51}, {0x579a, 0x5, 0x8, 0x800}, {0xfffb, 0x7}, {0x2ea4, 0x7, 0xfd, 0xd}, {0x9, 0x1, 0x40, 0x9}, {0x9, 0x5, 0x1, 0x7ff}, {0x3, 0x5, 0x5, 0x4}, {0x8, 0x60, 0x6, 0x7ff}, {0x200, 0x2, 0xd, 0x5}, {0x2, 0x40, 0x7, 0x3}, {0x10, 0x1, 0x8, 0x2}, {0x1882, 0x1, 0xea, 0x2}, {0xa, 0x3, 0x6, 0x5}, {0xfff7, 0x3, 0x30, 0x6}, {0x8, 0x4, 0x3, 0xfffffffa}, {0x21e, 0x7, 0x4, 0x8}, {0x800, 0x0, 0x8, 0xa}, {0xd, 0x8, 0x5, 0xffff5cba}, {0x5, 0x5, 0xa6, 0x6}, {0x1, 0x0, 0xe, 0x80000000}, {0x2, 0x64, 0x1, 0x7}, {0x2, 0xf1, 0x0, 0xfffffffb}, {0x1, 0x4, 0x3, 0x4}, {0xe6e, 0x17, 0x7, 0x7}, {0x7f, 0x10, 0xff, 0x486}, {0xffee, 0xdc, 0x8, 0x7}, {0xe0a, 0x7, 0x6, 0x1}, {0x7, 0xc, 0x4, 0x4}, {0x1, 0x37, 0x8, 0x3}, {0x1, 0x3, 0x3, 0x8}, {0x8, 0x9, 0x8, 0xa}, {0x3, 0x8, 0x1, 0x4d77592e}, {0x200, 0x37, 0x2, 0x3}, {0x5, 0xab, 0x9, 0x2}, {0x9, 0x2, 0xf, 0xe}, {0x7, 0x1, 0x6, 0x5}, {0x2, 0x2, 0x40, 0x61}, {0x4, 0xff, 0x8, 0x8001}, {0x5, 0x0, 0x0, 0x5}], {0x3}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x41}}}, {{@ip={@remote, @multicast1, 0x0, 0xffffffff, 'team0\x00', 'netdevsim0\x00', {0xff}, {}, 0x73, 0x1, 0x20}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x7c0)
ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000640))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r12}, 0x10)

2.499197371s ago: executing program 4 (id=799):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r0, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f4}]}, 0x24}}, 0x0)
read(r0, &(0x7f00000003c0)=""/21, 0x15)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1]}})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = accept4(r5, 0x0, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r6)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r6, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001280)={0x200, r8, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x2b}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x1d0, 0x84, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="634d052653c2"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1d, 0x1, @random="1a6b21329fa547788514f6656ffdd182aac05c8c155e89c767"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xffff}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x400}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="7107469c6d29"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x200}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x91ca}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}]}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xc56}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffff8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffffe}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}]}, {0x90, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0x4806}, @NL80211_BAND_LC={0x8, 0x5, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xe71b}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x78}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x844}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0x7fff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}]}, @NL80211_ATTR_BSSID={0xa}]}, 0x200}, 0x1, 0x0, 0x0, 0x80c0}, 0x20002002)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
getsockopt$sock_buf(r9, 0x1, 0x3b, 0xffffffffffffffff, &(0x7f00000003c0))
sendmsg$can_raw(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@canfd={{0x2, 0x1, 0x1}, 0x1b, 0x0, 0x0, 0x0, "c3ef40f7941eaca39ded4eeb135ca95f995c5934a80e783a8d7b29f50406bbc037da9d77cd304d0e5bab962c61b77e1287c80cd5bea41c3362b2858399e9530d"}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x200440c0)
r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="17000000", @ANYRES16=r10, @ANYBLOB="00082bbd7000fedbdf25030000001400050020010000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x48005)

2.323424942s ago: executing program 3 (id=800):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x7, 0x100, 0x0, 0x0, {0x5}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x6}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040801}, 0x4000004)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, <r2=>0x0}, &(0x7f0000000040)=0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="9976ef7a", 0x4}], 0x1}}], 0x2, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r6=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000001c0)={r6, 0x2}, 0x8)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069105a000000000004000000020000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x22, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2}, [@typed={0x8, 0x140, 0x0, 0x0, @uid=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x800)

2.250064771s ago: executing program 2 (id=801):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r2, &(0x7f0000000200)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f118db0049d90491ceaebfd26ceeef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000002200)="fcd206f7844cfa", 0x7}], 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009e215b95200fddbdf25020800cb", @ANYRES32=r4, @ANYBLOB="08000a0004000000080008004801000008000900b5fdffff08000200ff"], 0x48}}, 0x90)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000180)={'gretap0\x00', <r5=>0x0, 0x1, 0x8000, 0x3, 0xced, {{0xc, 0x4, 0x0, 0x35, 0x30, 0x68, 0x0, 0x74, 0x29, 0x0, @multicast2, @private=0xa010101, {[@timestamp_addr={0x44, 0x1c, 0x49, 0x1, 0xa, [{@loopback, 0x8000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc}, {@local, 0x3d}]}]}}}}})
sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000006a00000127bd7000fedbdf25020000000000000008000500", @ANYRES32=r4, @ANYBLOB="08000a000100000008000500", @ANYRES32=r4, @ANYBLOB="08000a000100000008000500", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=r4, @ANYBLOB='\x00\x00 \x00', @ANYRES32=r4, @ANYBLOB="08000500", @ANYRES32=r4, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)

2.120990188s ago: executing program 1 (id=135):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x2, 0x0, &(0x7f0000000200))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000ffdbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="05005300010000001400040064766ded3930000000000000000000000800050002000000"], 0x40}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x2, 0x0, &(0x7f0000000200)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000ffdbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="05005300010000001400040064766ded3930000000000000000000000800050002000000"], 0x40}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) (async)

2.085873133s ago: executing program 3 (id=802):
r0 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg0\x00'})
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000000)={0x4})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800000000000061107e000000000006000000000000009500000000002000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

486.504237ms ago: executing program 0 (id=803):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$isdn(0x22, 0x3, 0x22)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000e00)={0x0, 0x5e, &(0x7f0000000880)={&(0x7f0000000440)={0x30, r5, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x1, 0x5d}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xa7, 0x27}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x0)

485.195443ms ago: executing program 2 (id=804):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f000100feffffff0000000001"], 0x114}], 0x1}, 0x0) (async)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
syz_emit_ethernet(0x4d, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\b\x00', 0x17, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}, {"2100f2"}}}}}}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000640)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x6, {[@mss={0x2, 0x4, 0x5}]}}}}}}}}, 0x0) (async)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)={0x1c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x804}, @typed={0x8, 0xf, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x21}}]}, 0x1c}], 0x1}, 0x40810) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r5=>0x0}) (async, rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0xd07, 0xc041}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x800) (async, rerun: 64)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=<r8=>0x0, &(0x7f0000000240)=0x4) (rerun: 64)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1d0, r4, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x2000}, 0x4008840)

484.874832ms ago: executing program 3 (id=805):
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x21ee, 0x4) (async)
sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) (async)
recvfrom(r1, 0x0, 0x0, 0x2101, 0x0, 0x0) (async)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={&(0x7f0000000080)="433454baf8ea9339af44c378f1ca01c555bd98fe599a39cda33a53b43e15267c1452cfab57059981227bb482066babe0958edad841f54b070b6dd65b3283aa544fd633fd556a75737452edd87879677eb9f56416fdaec8ac9358352352c6b6ff1b3d0db38d47203883387bb024f0ffa994670bee59024bf63708094108c26168617085c69c164261f28871af4c0ae90ebf60381209117d820df7a6e9b75eef34e32c1b1097a04356d8b2f31ef6fe5b", &(0x7f0000000140)=""/86, &(0x7f00000001c0)="385f2b73727a530d0a2024602faca18435cdc69944e373af0dd6a1945eea8c5eee1b4581b877eeb06e9d88977d3c13881c5d8dc7d0ebe387ea33b7e1379054102d2cf0626c41143b71b98b75e309dd7e65ee0e1c40b1bbaa307da657c39fdffb50e7226a1f4ff20ae0e47acb5292bebeec886782ad7e97a900a555f44b62b2ee39e6016c626c31cd66c9d50e761c227e2196182f31314c80d94c122664ecf1800c6e6fe4deda66e9a7f5f1af71decfb85b1a47f555b909bceb9b1b7b6ffa5730bc859fc87b52d4cba3c65d0a94eb320b8ba3e7adac", &(0x7f00000002c0)="274b711e0c48bfc7ff4c05dd0ad396ade3934c32acafa1b3847769f04a4ab68aae475106d1e567f9f2a0707f8179fd3d3951086f55f2bfbeada5fef069472029ae8dd1b90f10847a0ae5bd11a448e550cf3395faf86604ffa9573b4db1cff21af98fd8d952c2afd7684a47bf99dec170193685617daaf2683b199bbfe86d249ab0d5c419b4e00330e331e9e1234a9827fc41010febc65106d0a29cfdbe5bd735b0c16e9361792c448734cf67c33b19bf039d5b0ad7adc9a5dd8b61d5db6edde23dc7497aa313aa27ddbe0095552b80bba6888f467a1fe4dc14451eb3a757cc31ea6c4aae47703769f228bd814809f81ee368af6d4b1b515dca3ea8", 0x87, r2}, 0x38)

482.824285ms ago: executing program 4 (id=806):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0x4000) (async)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x20004014)
r4 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMSETDEVNAME(r4, 0x80184947, 0x0) (async)
write(r4, &(0x7f0000000100)="ae67082aa6b9a7e3d522bc29157b1c195095176266417c7183df6f4c3b5a6e9f2f9ad6850d48a3ffbecab16b66262feb54bd5e3fb230806122421edd8fa219e90b6ff09600c5ee6fa9242a00cea2279badce74cb3cd080", 0x57)

211.262332ms ago: executing program 3 (id=807):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}]}}]}, 0x3c}}, 0x24000000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}]}}]}, 0x3c}}, 0x24000000)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10000) (async)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)='%pS    \x00'}, 0x20) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pS    \x00'}, 0x20)
pipe(&(0x7f0000000040)) (async)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x8001, <r3=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r3, 0x4)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x2a, 0x0, 0x0, 0x800001, 0x0, @void, @value}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000101840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffff050000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x9, 0x0, 0x0, 0x7ffffff, &(0x7f0000000200), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000001000000022246e66300000008800000", @ANYRES32=r1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="030000000300"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x50)

148.983844ms ago: executing program 2 (id=808):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r3, 0x104, 0x6, &(0x7f00000000c0), 0x4)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x40)
write$tun(r0, 0x0, 0x72)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r4, &(0x7f0000000080)='J', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
shutdown(r4, 0x1)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
socket$unix(0x1, 0x2, 0x0)

0s ago: executing program 3 (id=809):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000840)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300000000000000002e000000180001801400020067656e65766530"], 0x2c}}, 0x0)

kernel console output (not intermixed with test programs):

mailing list
[   92.337346][ T5845] Bluetooth: hci1: command tx timeout
[   92.337355][ T5853] Bluetooth: hci0: command tx timeout
[   92.393035][ T5971] Cannot find map_set index 0 as target
[   92.419461][ T5845] Bluetooth: hci3: command tx timeout
[   92.424910][ T5853] Bluetooth: hci2: command tx timeout
[   92.439949][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.478852][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.495542][ T5845] Bluetooth: hci4: command tx timeout
[   92.520776][ T4116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.547263][ T4116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.717316][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.750846][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.762681][ T5984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17'.
[   92.818131][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.867951][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.167674][ T5997] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2'.
[   93.251873][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   93.664429][ T6010] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.718827][ T6013] bond0: entered promiscuous mode
[   93.733885][ T6013] bond_slave_0: entered promiscuous mode
[   93.737788][ T6016] netlink: 'syz.0.26': attribute type 7 has an invalid length.
[   93.746240][ T6013] bond_slave_1: entered promiscuous mode
[   93.762024][ T6016] netlink: 15 bytes leftover after parsing attributes in process `syz.0.26'.
[   93.774406][ T6016] netlink: 40 bytes leftover after parsing attributes in process `syz.0.26'.
[   93.816177][ T6016] netlink: 872 bytes leftover after parsing attributes in process `syz.0.26'.
[   93.829890][ T6005] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.891013][ T6010] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.927342][ T6016] netlink: 'syz.0.26': attribute type 7 has an invalid length.
[   93.943061][ T6016] netlink: 15 bytes leftover after parsing attributes in process `syz.0.26'.
[   93.949448][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28'.
[   94.008916][ T6010] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.039735][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.105515][ T6022] bridge_slave_1 (unregistering): left allmulticast mode
[   94.124845][ T6022] bridge_slave_1 (unregistering): left promiscuous mode
[   94.132121][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.207234][ T6030] xt_limit: Overflow, try lower: 0/0
[   94.296104][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.32'.
[   94.321472][ T6010] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.422309][ T6032] vlan2: entered promiscuous mode
[   94.429864][ T6032] bridge0: entered promiscuous mode
[   94.435670][ T6032] vlan2: entered allmulticast mode
[   94.440814][ T6032] bridge0: entered allmulticast mode
[   94.771059][ T6046] Zero length message leads to an empty skb
[   95.588607][ T6086] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   95.653018][ T6086] bridge0: port 2(batadv1) entered blocking state
[   95.684354][ T6086] bridge0: port 2(batadv1) entered disabled state
[   95.692512][ T6086] batadv1: entered allmulticast mode
[   95.716993][ T6086] batadv1: entered promiscuous mode
[   95.894102][ T6106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   96.146203][ T5857] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   96.154201][   T36] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[   96.164784][   T36] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[   96.245004][ T5895] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   96.285001][ T5857] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   96.425173][ T5899] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   96.454229][ T5899] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   96.496069][  T977] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   96.545074][ T5922] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   96.585398][  T977] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   96.615049][  T977] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   96.641489][ T6127] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   96.660198][ T5899] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   96.712139][ T6140] __nla_validate_parse: 10 callbacks suppressed
[   96.712238][ T6140] netlink: 104 bytes leftover after parsing attributes in process `syz.4.60'.
[   96.985320][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'.
[   97.037364][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.64'.
[   97.084453][ T6155] netlink: 32 bytes leftover after parsing attributes in process `syz.3.66'.
[   97.368598][ T6165] netlink: 16 bytes leftover after parsing attributes in process `syz.1.68'.
[   97.628281][ T6186] netlink: 'syz.4.72': attribute type 58 has an invalid length.
[   97.658234][ T6186] netlink: 20 bytes leftover after parsing attributes in process `syz.4.72'.
[   97.871428][ T6199] Cannot find add_set index 0 as target
[   97.916141][ T6188] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.949170][ T6195] netlink: 'syz.0.76': attribute type 2 has an invalid length.
[   98.067872][ T6188] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.115520][ T6209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.78'.
[   98.164943][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.78'.
[   98.275651][ T6214] x_tables: duplicate underflow at hook 3
[   98.291470][ T6188] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.353783][ T6213] warning: `syz.1.79' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   98.423565][ T6010] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.476153][ T6010] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.516984][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'.
[   98.536920][ T6188] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.644340][ T6010] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.692618][ T6010] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.880373][ T6188] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.952999][ T6188] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.998509][ T6188] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.003859][ T6236] netlink: 44 bytes leftover after parsing attributes in process `syz.2.86'.
[   99.028548][ T6236] netlink: 'syz.2.86': attribute type 5 has an invalid length.
[   99.052149][ T6188] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.852289][ T6266] syz.1.95 uses obsolete (PF_INET,SOCK_PACKET)
[  100.568753][ T6290] x_tables: duplicate underflow at hook 1
[  100.583436][ T6291] geneve2: entered promiscuous mode
[  100.607196][ T6291] geneve2: entered allmulticast mode
[  100.872207][ T6303] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  100.906287][ T6305] netem: unknown loss type 0
[  100.911154][ T6305] netem: change failed
[  100.922452][ T6307] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  101.194964][ T6320] geneve1: entered promiscuous mode
[  101.277719][ T6321] geneve1: left promiscuous mode
[  101.377241][ T6329] unknown channel width for channel at 909000KHz?
[  101.418985][ T6329] unknown channel width for channel at 909000KHz?
[  101.450064][ T6335] pimreg3: entered allmulticast mode
[  101.464024][ T6329] unknown channel width for channel at 909000KHz?
[  101.696166][ T6348] xt_l2tp: invalid flags combination: c
[  101.725516][ T6350] xt_TCPMSS: Only works on TCP SYN packets
[  102.196547][ T6367] bridge0: port 3(ipvlan0) entered blocking state
[  102.226049][ T6367] bridge0: port 3(ipvlan0) entered disabled state
[  102.232743][ T6367] ipvlan0: entered allmulticast mode
[  102.257283][ T6367] veth0_vlan: entered allmulticast mode
[  102.308839][ T6367] ipvlan0: left allmulticast mode
[  102.313935][ T6367] veth0_vlan: left allmulticast mode
[  102.534420][ T6375] netem: change failed
[  102.788293][  T969] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.942128][  T969] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.052742][  T969] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.160285][ T6389] __nla_validate_parse: 9 callbacks suppressed
[  103.160306][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'.
[  103.202443][  T969] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.243467][ T6396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.484417][ T6401] ip6t_rpfilter: unknown options
[  103.595789][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  103.604215][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  103.612297][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  103.626670][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  103.635764][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  103.863233][  T969] bridge_slave_1: left allmulticast mode
[  103.896801][  T969] bridge_slave_1: left promiscuous mode
[  103.924339][  T969] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.982013][  T969] bridge_slave_0: left allmulticast mode
[  103.993609][  T969] bridge_slave_0: left promiscuous mode
[  104.007427][  T969] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.782164][  T969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.800997][  T969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  104.814294][  T969] bond0 (unregistering): Released all slaves
[  105.003344][ T6442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.146'.
[  105.523383][ T6458] netlink: 'syz.2.150': attribute type 11 has an invalid length.
[  105.705225][ T5853] Bluetooth: hci3: command tx timeout
[  105.819189][  T969] hsr_slave_0: left promiscuous mode
[  105.839863][  T969] hsr_slave_1: left promiscuous mode
[  105.859158][  T969] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.880362][  T969] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.908095][  T969] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.929537][  T969] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.994756][ T6468] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  106.058003][  T969] veth1_macvtap: left promiscuous mode
[  106.096894][  T969] veth0_macvtap: left promiscuous mode
[  106.116943][  T969] veth1_vlan: left promiscuous mode
[  106.143403][  T969] veth0_vlan: left promiscuous mode
[  106.435213][ T6492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.155'.
[  106.698641][ T6499] xt_CT: You must specify a L4 protocol and not use inversions on it
[  107.127437][  T969] team0 (unregistering): Port device team_slave_1 removed
[  107.167267][  T969] team0 (unregistering): Port device team_slave_0 removed
[  107.577979][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.586606][ T6492] bridge0: entered allmulticast mode
[  107.785124][ T5853] Bluetooth: hci3: command tx timeout
[  108.120365][ T6403] chnl_net:caif_netlink_parms(): no params data found
[  108.292735][ T6523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.163'.
[  108.302167][ T6524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.162'.
[  108.320401][ T6525] netlink: 20 bytes leftover after parsing attributes in process `syz.4.163'.
[  108.378388][ T6524] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  108.544551][ T6535] netlink: 96 bytes leftover after parsing attributes in process `syz.2.164'.
[  108.758459][ T6523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.163'.
[  108.817939][ T6525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.163'.
[  108.992944][ T6548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.165'.
[  109.048186][ T6548] netlink: 20 bytes leftover after parsing attributes in process `syz.3.165'.
[  109.052032][ T6553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.165'.
[  109.095216][ T6553] netlink: 20 bytes leftover after parsing attributes in process `syz.3.165'.
[  109.290866][ T6403] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.335282][ T6403] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.344200][ T6403] bridge_slave_0: entered allmulticast mode
[  109.368298][ T6403] bridge_slave_0: entered promiscuous mode
[  109.396649][ T6403] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.406341][ T6403] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.424436][ T6403] bridge_slave_1: entered allmulticast mode
[  109.458385][ T6403] bridge_slave_1: entered promiscuous mode
[  109.753149][ T6403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.782924][ T6570] tipc: Started in network mode
[  109.800545][ T6570] tipc: Node identity ffffa848, cluster identity 4711
[  109.810649][ T6570] tipc: Node number set to 4294944840
[  109.858838][ T5853] Bluetooth: hci3: command tx timeout
[  109.868018][ T6403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.132776][ T6589] xt_hashlimit: max too large, truncated to 1048576
[  110.327866][ T6403] team0: Port device team_slave_0 added
[  110.338024][ T6580] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  110.356317][ T6403] team0: Port device team_slave_1 added
[  110.626676][ T6601] SET target dimension over the limit!
[  110.636642][ T6403] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.661781][ T6403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.737413][ T6403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.775204][ T6606] xt_policy: too many policy elements
[  110.888888][ T6403] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.934828][ T6403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.991475][ T6403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.279989][ T6403] hsr_slave_0: entered promiscuous mode
[  111.317442][ T6403] hsr_slave_1: entered promiscuous mode
[  111.338538][ T6403] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  111.388660][ T6403] Cannot create hsr debugfs directory
[  111.935063][ T5853] Bluetooth: hci3: command tx timeout
[  112.140703][ T6663] syz_tun: entered allmulticast mode
[  113.336664][ T6694] __nla_validate_parse: 8 callbacks suppressed
[  113.336686][ T6694] netlink: 165 bytes leftover after parsing attributes in process `syz.4.200'.
[  113.540308][ T6696] sctp: [Deprecated]: syz.2.201 (pid 6696) Use of int in max_burst socket option.
[  113.540308][ T6696] Use struct sctp_assoc_value instead
[  113.601822][ T6696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.201'.
[  114.028445][ T5853] Bluetooth: hci3: command tx timeout
[  114.108730][ T6403] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  114.166610][ T6403] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  114.236883][ T6723] tipc: Started in network mode
[  114.241822][ T6723] tipc: Node identity ac1414aa, cluster identity 4711
[  114.255959][ T6726] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20004
[  114.291261][ T6723] tipc: Enabled bearer <udp:s>, priority 10
[  114.329372][ T6403] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  114.373195][ T6403] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  114.374009][ T6726] IPVS: set_ctl: invalid protocol: 135 172.20.20.28:20000
[  114.761970][ T6403] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.839407][ T6403] 8021q: adding VLAN 0 to HW filter on device team0
[  114.914279][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.921510][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.065306][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.072506][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.407193][   T54] tipc: Node number set to 2886997162
[  115.753499][ T6778] netlink: 'syz.4.220': attribute type 2 has an invalid length.
[  115.823980][ T6778] netlink: 40 bytes leftover after parsing attributes in process `syz.4.220'.
[  115.940301][ T6778] netlink: 80 bytes leftover after parsing attributes in process `syz.4.220'.
[  115.975853][ T6403] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.196835][ T6403] veth0_vlan: entered promiscuous mode
[  116.258247][ T6403] veth1_vlan: entered promiscuous mode
[  116.370858][ T6403] veth0_macvtap: entered promiscuous mode
[  116.426995][ T6403] veth1_macvtap: entered promiscuous mode
[  116.500524][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.580325][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.617280][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.661920][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.708574][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.741926][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.786465][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.831300][ T6822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'.
[  116.832829][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.843554][ T6822] netlink: 'syz.4.224': attribute type 15 has an invalid length.
[  116.930227][ T6403] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.015617][ T6826] netlink: 204 bytes leftover after parsing attributes in process `syz.2.226'.
[  117.017597][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.094749][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.125622][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.154721][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.166254][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.213212][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.233155][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.247301][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.270190][ T6403] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.393995][ T6403] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.442249][ T6403] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.480400][ T6403] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.519351][ T6403] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.584994][ T6846] netlink: 'syz.3.228': attribute type 13 has an invalid length.
[  117.656604][ T6846] veth0_macvtap: left promiscuous mode
[  117.715629][ T6846] macvtap0: entered allmulticast mode
[  117.736780][ T6846] macvtap0: refused to change device tx_queue_len
[  118.203071][  T969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.231664][  T969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.383536][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.412009][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.911595][ T6890] netlink: 72 bytes leftover after parsing attributes in process `syz.2.239'.
[  118.945820][ T6860] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.953123][ T6860] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.019746][ T6403] syz-executor (6403) used greatest stack depth: 19392 bytes left
[  119.157639][ T6896] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001
[  119.157959][ T6898] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 3, id = 0
[  119.304504][   T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.663431][   T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.862180][   T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.943830][ T6924] lo: entered promiscuous mode
[  120.034718][ T6924] tunl0: entered promiscuous mode
[  120.057633][ T6924] gre0: entered promiscuous mode
[  120.076312][ T6924] gretap0: entered promiscuous mode
[  120.165705][ T6924] erspan0: entered promiscuous mode
[  120.222614][ T6937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.249'.
[  120.251230][ T6924] ip_vti0: entered promiscuous mode
[  120.405398][   T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.687749][ T6952] netlink: 256 bytes leftover after parsing attributes in process `syz.4.253'.
[  120.745001][ T6952] unsupported nlmsg_type 40
[  120.776690][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.253'.
[  120.795007][ T6952] netlink: 'syz.4.253': attribute type 3 has an invalid length.
[  120.860406][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'.
[  120.873976][ T6956] netlink: 176 bytes leftover after parsing attributes in process `syz.2.254'.
[  120.900415][ T6956] netlink: 'syz.2.254': attribute type 5 has an invalid length.
[  120.953442][ T5898] hid (null): unknown global tag 0xe
[  121.057287][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'.
[  121.287979][   T46] bridge_slave_1: left allmulticast mode
[  121.315061][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  121.332048][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  121.340129][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  121.354354][   T46] bridge_slave_1: left promiscuous mode
[  121.364703][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  121.373248][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.387880][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  121.533794][   T46] bridge_slave_0: left allmulticast mode
[  121.542955][   T46] bridge_slave_0: left promiscuous mode
[  121.548840][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.709454][ T6992] netlink: 736 bytes leftover after parsing attributes in process `syz.0.262'.
[  121.757472][ T6991] netlink: 'syz.0.262': attribute type 1 has an invalid length.
[  121.787262][ T6991] netlink: 'syz.0.262': attribute type 2 has an invalid length.
[  121.826200][ T6991] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.262'.
[  122.511039][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.524556][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  122.547154][   T46] bond0 (unregistering): Released all slaves
[  122.790377][ T7027] netlink: 830 bytes leftover after parsing attributes in process `syz.2.266'.
[  123.133674][ T5898] hid-generic 0005:046D:0A0F.0001: unknown global tag 0xe
[  123.164875][ T5898] hid-generic 0005:046D:0A0F.0001: item 0 2 1 14 parsing failed
[  123.173323][ T5898] hid-generic 0005:046D:0A0F.0001: probe with driver hid-generic failed with error -22
[  123.240941][ T7051] tipc: Started in network mode
[  123.260181][ T7051] tipc: Node identity b268f014e3c2, cluster identity 4711
[  123.305873][ T7051] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.503662][ T7046] syzkaller0: entered promiscuous mode
[  123.510437][ T7046] syzkaller0: entered allmulticast mode
[  123.540804][ T5845] Bluetooth: hci3: command tx timeout
[  123.548260][ T7040] tipc: Resetting bearer <eth:syzkaller0>
[  123.670088][ T7040] tipc: Disabling bearer <eth:syzkaller0>
[  123.897366][   T46] hsr_slave_0: left promiscuous mode
[  123.919810][   T46] hsr_slave_1: left promiscuous mode
[  123.926073][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.933517][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.963495][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.001753][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.087010][   T46] veth1_macvtap: left promiscuous mode
[  124.099745][   T46] veth0_macvtap: left promiscuous mode
[  124.113028][   T46] veth1_vlan: left promiscuous mode
[  124.126908][   T46] veth0_vlan: left promiscuous mode
[  124.510249][ T7112] __nla_validate_parse: 2 callbacks suppressed
[  124.510271][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'.
[  124.531378][ T7112] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  125.114427][   T46] team0 (unregistering): Port device team_slave_1 removed
[  125.157692][   T46] team0 (unregistering): Port device team_slave_0 removed
[  125.528126][ T7123] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.614925][ T5845] Bluetooth: hci3: command tx timeout
[  125.721582][ T7129] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  125.739225][ T7129] syzkaller0: entered promiscuous mode
[  125.745041][ T7129] syzkaller0: entered allmulticast mode
[  125.752206][ T7129] tipc: Resetting bearer <eth:syzkaller0>
[  125.790405][ T7140] gre1: entered promiscuous mode
[  125.802988][ T7140] gre1: entered allmulticast mode
[  125.856317][ T7129] tipc: Resetting bearer <eth:syzkaller0>
[  126.133677][ T7158] netlink: zone id is out of range
[  126.139054][ T7158] netlink: zone id is out of range
[  126.144263][ T7158] netlink: zone id is out of range
[  126.150501][ T7158] netlink: zone id is out of range
[  126.558324][ T5895] tipc: Node number set to 1370157076
[  127.012746][ T7129] tipc: Disabling bearer <eth:syzkaller0>
[  127.089889][ T6974] chnl_net:caif_netlink_parms(): no params data found
[  127.261916][ T7163] syzkaller1: entered promiscuous mode
[  127.274825][ T7163] syzkaller1: entered allmulticast mode
[  127.305126][ T7163] netlink: 216 bytes leftover after parsing attributes in process `syz.3.297'.
[  127.314160][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.297'.
[  127.404470][ T7172] netlink: 64 bytes leftover after parsing attributes in process `syz.3.297'.
[  127.443058][ T7179] openvswitch: netlink: IPv4 tunnel dst address is zero
[  127.698031][ T5845] Bluetooth: hci3: command tx timeout
[  127.705282][ T6974] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.722243][ T6974] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.729804][ T6974] bridge_slave_0: entered allmulticast mode
[  127.739311][ T6974] bridge_slave_0: entered promiscuous mode
[  127.754942][ T6974] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.762467][ T6974] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.771507][ T6974] bridge_slave_1: entered allmulticast mode
[  127.783886][ T6974] bridge_slave_1: entered promiscuous mode
[  128.017725][ T7197] vlan3: entered allmulticast mode
[  128.022913][ T7197] bond0: entered allmulticast mode
[  128.051469][ T7197] bond_slave_0: entered allmulticast mode
[  128.065339][ T7197] bond_slave_1: entered allmulticast mode
[  128.414366][ T6974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  128.467810][ T6974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  128.514214][ T7204] syzkaller1: entered promiscuous mode
[  128.534000][ T7204] syzkaller1: entered allmulticast mode
[  128.712525][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'.
[  128.909424][ T6974] team0: Port device team_slave_0 added
[  128.950146][ T6974] team0: Port device team_slave_1 added
[  128.985611][ T7237] netlink: 'syz.3.313': attribute type 13 has an invalid length.
[  128.987827][ T7239] trusted_key: syz.2.314 sent an empty control message without MSG_MORE.
[  129.027946][ T7237] netlink: 20 bytes leftover after parsing attributes in process `syz.3.313'.
[  129.037780][ T7237] tipc: Invalid UDP bearer configuration
[  129.037837][ T7237] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  129.093441][ T7237] x_tables: duplicate underflow at hook 3
[  129.173120][ T6974] batman_adv: batadv0: Adding interface: batadv_slave_0
[  129.182001][ T6974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.208723][ T6974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  129.245697][ T6974] batman_adv: batadv0: Adding interface: batadv_slave_1
[  129.260049][ T6974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.292596][ T6974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  129.328866][ T7242] syzkaller1: entered promiscuous mode
[  129.352711][ T7242] syzkaller1: entered allmulticast mode
[  129.433305][ T7251] xt_CT: You must specify a L4 protocol and not use inversions on it
[  129.465317][ T7252] team0: No ports can be present during mode change
[  129.485447][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.319'.
[  129.580103][ T7264] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  129.630065][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.320'.
[  129.757279][ T7263] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.774894][ T5845] Bluetooth: hci3: command tx timeout
[  129.918314][ T7284] netlink: 'syz.4.325': attribute type 11 has an invalid length.
[  129.927205][ T7284] netlink: 228 bytes leftover after parsing attributes in process `syz.4.325'.
[  129.938883][ T7263] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.951712][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.323'.
[  129.965600][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.323'.
[  129.991228][ T6974] hsr_slave_0: entered promiscuous mode
[  129.998171][ T6974] hsr_slave_1: entered promiscuous mode
[  130.008611][ T6974] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  130.019789][ T6974] Cannot create hsr debugfs directory
[  130.071235][ T7291] bond1: entered promiscuous mode
[  130.076609][ T7291] bond1: entered allmulticast mode
[  130.082336][ T7291] 8021q: adding VLAN 0 to HW filter on device bond1
[  130.200491][ T7291] bond1 (unregistering): Released all slaves
[  130.241344][ T7263] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.401822][ T7263] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.624418][ T7263] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.788397][ T7263] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.887009][ T7263] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.003386][ T7263] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.050462][ T7327] bridge1: entered allmulticast mode
[  131.077931][ T7333] xt_l2tp: invalid flags combination: 4
[  131.140250][ T7327] netlink: 'syz.0.332': attribute type 5 has an invalid length.
[  131.199952][ T7328] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.303733][ T7340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.335'.
[  131.344420][ T7342] netlink: 'syz.4.336': attribute type 11 has an invalid length.
[  131.367748][ T7342] netlink: 224 bytes leftover after parsing attributes in process `syz.4.336'.
[  131.880100][ T7366] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  131.913541][ T7365] netlink: 32 bytes leftover after parsing attributes in process `syz.4.342'.
[  132.024268][ T7371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.343'.
[  132.073984][ T7371] netlink: 152 bytes leftover after parsing attributes in process `syz.3.343'.
[  132.097257][ T7371] netlink: 152 bytes leftover after parsing attributes in process `syz.3.343'.
[  132.385614][ T6974] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  132.435701][ T7393] netlink: zone id is out of range
[  132.438543][ T6974] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  132.459466][ T7393] netlink: zone id is out of range
[  132.469581][ T7393] netlink: zone id is out of range
[  132.490084][ T7393] netlink: zone id is out of range
[  132.677083][ T6974] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  132.712563][ T6974] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  132.823680][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  132.835074][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  132.960630][ T7409] xt_CT: You must specify a L4 protocol and not use inversions on it
[  133.178694][ T5857] hid-generic 0005:699A:5505.0002: unknown main item tag 0x0
[  133.194399][ T5857] hid-generic 0005:699A:5505.0002: unknown main item tag 0x0
[  133.203096][ T5857] hid-generic 0005:699A:5505.0002: unknown main item tag 0x0
[  133.211181][ T5857] hid-generic 0005:699A:5505.0002: unknown main item tag 0x0
[  133.221048][ T5857] hid-generic 0005:699A:5505.0002: unknown main item tag 0x0
[  133.229878][ T5857] hid-generic 0005:699A:5505.0002: unknown main item tag 0x0
[  133.231515][ T6974] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.238038][ T5857] hid-generic 0005:699A:5505.0002: unknown main item tag 0x1
[  133.277052][ T5857] hid-generic 0005:699A:5505.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz1] on aa:aa:aa:aa:aa:aa
[  133.315664][ T6974] 8021q: adding VLAN 0 to HW filter on device team0
[  133.371695][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.378920][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.468307][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.475554][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.817941][ T7441] netlink: 'syz.4.361': attribute type 10 has an invalid length.
[  133.846699][   T36] bond0: (slave bond_slave_0): interface is now down
[  133.853676][   T36] bond0: (slave bond_slave_1): interface is now down
[  133.881405][ T7441] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.896746][ T7441] batadv0: entered promiscuous mode
[  133.902856][ T7441] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  133.930323][   T36] bond0: (slave bond_slave_0): interface is now down
[  133.958920][ T7445] xt_CT: You must specify a L4 protocol and not use inversions on it
[  133.967560][   T36] bond0: (slave bond_slave_1): interface is now down
[  134.006617][   T36] bond0: (slave bond_slave_0): interface is now down
[  134.021234][   T36] bond0: (slave bond_slave_1): interface is now down
[  134.079899][   T36] bond0: now running without any active interface!
[  134.246247][ T7455] netlink: 'syz.4.365': attribute type 1 has an invalid length.
[  134.340827][ T7464] openvswitch: netlink: Key type 2822 is out of range max 32
[  134.380813][ T6974] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.657903][ T6974] veth0_vlan: entered promiscuous mode
[  134.723573][ T6974] veth1_vlan: entered promiscuous mode
[  134.871302][ T6974] veth0_macvtap: entered promiscuous mode
[  134.964517][ T6974] veth1_macvtap: entered promiscuous mode
[  135.020299][ T6974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.074964][ T6974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.128477][ T6974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.174398][ T6974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.197310][ T6974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.210604][ T6974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.216143][ T7508] __nla_validate_parse: 3 callbacks suppressed
[  135.216164][ T7508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.379'.
[  135.229191][ T6974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.243815][ T7509] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  135.246665][ T6974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.252967][ T7509] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  135.272747][ T6974] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.279003][ T7509] openvswitch: netlink: IPv6 tunnel dst address is zero
[  135.306575][ T7486] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.353373][ T6974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.401703][ T6974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.432333][ T6974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.453281][ T6974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.487432][ T7512] xt_CT: You must specify a L4 protocol and not use inversions on it
[  135.499605][ T6974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.523267][ T6974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.544133][ T7512] xt_CT: You must specify a L4 protocol and not use inversions on it
[  135.557302][ T6974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.568512][ T6974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.625768][ T6974] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.742884][ T6974] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.773720][ T6974] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.813331][ T6974] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.824585][ T6974] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.841727][ T7530] netlink: 'syz.2.384': attribute type 21 has an invalid length.
[  135.853013][ T7530] netlink: 156 bytes leftover after parsing attributes in process `syz.2.384'.
[  136.053377][ T7550] netlink: 88 bytes leftover after parsing attributes in process `syz.4.387'.
[  136.174602][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.214885][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.338315][ T6517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.370329][ T6517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.902580][ T7596] netlink: 220 bytes leftover after parsing attributes in process `syz.2.396'.
[  137.029154][ T7600] sctp: [Deprecated]: syz.3.398 (pid 7600) Use of struct sctp_assoc_value in delayed_ack socket option.
[  137.029154][ T7600] Use struct sctp_sack_info instead
[  137.140876][ T7607] syz_tun: entered promiscuous mode
[  137.161264][ T7607] syz_tun: left promiscuous mode
[  137.453560][ T4116] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.589936][ T4116] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.710001][ T4116] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.853822][ T4116] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.923214][ T7630] veth0_virt_wifi: entered promiscuous mode
[  137.973082][ T7630] veth0_virt_wifi: left promiscuous mode
[  138.329591][ T7644] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  138.513095][ T7647] netlink: 40 bytes leftover after parsing attributes in process `syz.3.410'.
[  138.526764][ T4116] bridge_slave_1: left allmulticast mode
[  138.532472][ T4116] bridge_slave_1: left promiscuous mode
[  138.592870][ T4116] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.632146][ T4116] bridge_slave_0: left allmulticast mode
[  138.642075][ T4116] bridge_slave_0: left promiscuous mode
[  138.658934][ T4116] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.692260][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  138.706822][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  138.718331][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  138.727086][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  138.736626][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  138.980956][ T4116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.992402][ T4116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  139.005661][ T4116] bond0 (unregistering): Released all slaves
[  139.712559][ T7688] IPVS: Scheduler module ip_vs_sip not found
[  139.919985][ T7705] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  140.667390][ T4116] hsr_slave_0: left promiscuous mode
[  140.683919][ T4116] hsr_slave_1: left promiscuous mode
[  140.692557][ T4116] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.712367][ T4116] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.723301][ T7741] netlink: 40 bytes leftover after parsing attributes in process `syz.3.432'.
[  140.727235][ T4116] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.747757][ T4116] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.778897][ T4116] veth1_macvtap: left promiscuous mode
[  140.784497][ T4116] veth0_macvtap: left promiscuous mode
[  140.790684][ T4116] veth1_vlan: left promiscuous mode
[  140.796285][ T4116] veth0_vlan: left promiscuous mode
[  140.815461][ T5853] Bluetooth: hci3: command tx timeout
[  140.942090][ T7752] netlink: 'syz.2.433': attribute type 4 has an invalid length.
[  141.251068][ T4116] team0 (unregistering): Port device team_slave_1 removed
[  141.288129][ T4116] team0 (unregistering): Port device team_slave_0 removed
[  141.631050][ T7742] netlink: 'syz.3.432': attribute type 1 has an invalid length.
[  141.820447][ T7658] chnl_net:caif_netlink_parms(): no params data found
[  142.186778][ T7767] netlink: 284 bytes leftover after parsing attributes in process `syz.2.437'.
[  142.224515][ T7658] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.234275][ T7658] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.259385][ T7658] bridge_slave_0: entered allmulticast mode
[  142.271856][ T7658] bridge_slave_0: entered promiscuous mode
[  142.282268][ T7658] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.289747][ T7658] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.297064][ T7658] bridge_slave_1: entered allmulticast mode
[  142.306370][ T7658] bridge_slave_1: entered promiscuous mode
[  142.399168][ T7781] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[  142.509284][ T7781] bond3: entered promiscuous mode
[  142.534321][ T7781] bond3: entered allmulticast mode
[  142.555278][ T7781] 8021q: adding VLAN 0 to HW filter on device bond3
[  142.570330][ T7658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.609811][ T7788] netlink: 32 bytes leftover after parsing attributes in process `syz.4.441'.
[  142.718845][ T7658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.749485][ T7788] netlink: 32 bytes leftover after parsing attributes in process `syz.4.441'.
[  142.765391][ T7788] netlink: 32 bytes leftover after parsing attributes in process `syz.4.441'.
[  142.816813][ T7788] netlink: 32 bytes leftover after parsing attributes in process `syz.4.441'.
[  142.876128][ T7788] netlink: 32 bytes leftover after parsing attributes in process `syz.4.441'.
[  142.892886][ T7658] team0: Port device team_slave_0 added
[  142.899041][ T5853] Bluetooth: hci3: command tx timeout
[  142.932560][ T7658] team0: Port device team_slave_1 added
[  143.012384][ T7788] netlink: 32 bytes leftover after parsing attributes in process `syz.4.441'.
[  143.035976][ T7805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.447'.
[  143.071768][ T7788] netlink: 32 bytes leftover after parsing attributes in process `syz.4.441'.
[  143.073203][ T7658] batman_adv: batadv0: Adding interface: batadv_slave_0
[  143.090908][ T7658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.128129][ T7658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  143.145595][ T7807] ªªªªªª: renamed from vlan0 (while UP)
[  143.166328][ T7809] 8021q: VLANs not supported on sit0
[  143.182715][ T7658] batman_adv: batadv0: Adding interface: batadv_slave_1
[  143.204127][ T7658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.275452][ T7658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.647131][ T7658] hsr_slave_0: entered promiscuous mode
[  143.656072][ T7658] hsr_slave_1: entered promiscuous mode
[  143.676749][ T7658] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  143.687537][ T7658] Cannot create hsr debugfs directory
[  143.706788][ T7831] tipc: Started in network mode
[  143.711696][ T7831] tipc: Node identity _, cluster identity 4711
[  143.823961][ T7836] netlink: 'syz.4.454': attribute type 2 has an invalid length.
[  144.498673][ T7852] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.631685][ T7852] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.783980][ T7870] team0: Port device team_slave_0 removed
[  144.994196][ T5853] Bluetooth: hci3: command tx timeout
[  145.321233][ T7887] netlink: 'syz.0.467': attribute type 21 has an invalid length.
[  145.352169][ T7902] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535)
[  145.659725][ T7658] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  145.728812][ T7658] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  145.757775][ T7924] Bluetooth: MGMT ver 1.23
[  145.797910][ T7658] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  145.861046][ T7658] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  146.212454][ T7941] __nla_validate_parse: 29 callbacks suppressed
[  146.212478][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.477'.
[  146.310341][ T7658] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.426465][ T7658] 8021q: adding VLAN 0 to HW filter on device team0
[  146.473195][ T7955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.482'.
[  146.501466][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.508746][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.569307][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.576584][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.032545][ T7978] netlink: 52 bytes leftover after parsing attributes in process `syz.4.489'.
[  147.056101][ T5853] Bluetooth: hci3: command tx timeout
[  147.219901][ T7658] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.318655][ T7994] xt_hashlimit: size too large, truncated to 1048576
[  147.345004][ T7997] sch_fq: defrate 0 ignored.
[  147.421633][ T7994] syz.2.491: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  147.439827][ T7992] sch_fq: defrate 0 ignored.
[  147.484824][ T7994] CPU: 0 UID: 0 PID: 7994 Comm: syz.2.491 Not tainted 6.15.0-rc2-syzkaller-00258-g750d0ac001e8 #0 PREEMPT(full) 
[  147.484854][ T7994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  147.484871][ T7994] Call Trace:
[  147.484879][ T7994]  <TASK>
[  147.484887][ T7994]  dump_stack_lvl+0x241/0x360
[  147.484934][ T7994]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.484964][ T7994]  ? __pfx__printk+0x10/0x10
[  147.484992][ T7994]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  147.485018][ T7994]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  147.485040][ T7994]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  147.485066][ T7994]  warn_alloc+0x27c/0x410
[  147.485099][ T7994]  ? __pfx_warn_alloc+0x10/0x10
[  147.485133][ T7994]  ? htable_create+0x10c/0x890
[  147.485162][ T7994]  ? __get_vm_area_node+0x1c8/0x2d0
[  147.485184][ T7994]  ? __get_vm_area_node+0x25c/0x2d0
[  147.485215][ T7994]  __vmalloc_node_range_noprof+0x634/0x1390
[  147.485273][ T7994]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  147.485300][ T7994]  ? __kasan_kmalloc_large+0x1a/0xa0
[  147.485336][ T7994]  ? htable_create+0x10c/0x890
[  147.485383][ T7994]  __kvmalloc_node_noprof+0x3b2/0x5a0
[  147.485406][ T7994]  ? htable_create+0x10c/0x890
[  147.485432][ T7994]  ? htable_create+0x10c/0x890
[  147.485458][ T7994]  ? hashlimit_pernet+0x23/0x240
[  147.485490][ T7994]  htable_create+0x10c/0x890
[  147.485525][ T7994]  hashlimit_mt_check_common+0x763/0xa50
[  147.485564][ T7994]  hashlimit_mt_check_v1+0x2ec/0x550
[  147.485594][ T7994]  ? __pfx_hashlimit_mt_check_v1+0x10/0x10
[  147.485626][ T7994]  ? xt_find_match+0x1e5/0x240
[  147.485655][ T7994]  ? __mutex_unlock_slowpath+0x229/0x800
[  147.485682][ T7994]  xt_check_match+0x36a/0xa40
[  147.485711][ T7994]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  147.485735][ T7994]  ? __pfx_xt_check_match+0x10/0x10
[  147.485776][ T7994]  ? xt_find_match+0x1e5/0x240
[  147.485809][ T7994]  translate_table+0x1721/0x24b0
[  147.485832][ T7994]  ? __x64_sys_setsockopt+0x187/0x210
[  147.485860][ T7994]  ? do_syscall_64+0xf3/0x210
[  147.485881][ T7994]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.485929][ T7994]  ? __pfx_translate_table+0x10/0x10
[  147.485982][ T7994]  ? copy_from_sockptr_offset+0x60/0xb0
[  147.486010][ T7994]  do_ip6t_set_ctl+0xb79/0x1190
[  147.486042][ T7994]  ? __pfx___mutex_trylock_common+0x10/0x10
[  147.486065][ T7994]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  147.486106][ T7994]  ? __mutex_unlock_slowpath+0x229/0x800
[  147.486140][ T7994]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  147.486180][ T7994]  nf_setsockopt+0x295/0x2c0
[  147.486215][ T7994]  rawv6_setsockopt+0x2b3/0x6d0
[  147.486247][ T7994]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  147.486275][ T7994]  ? aa_sock_opt_perm+0x79/0x120
[  147.486301][ T7994]  ? sock_common_setsockopt+0x37/0xc0
[  147.486329][ T7994]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  147.486353][ T7994]  do_sock_setsockopt+0x3b1/0x710
[  147.486396][ T7994]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  147.486424][ T7994]  ? __fget_files+0x2a/0x420
[  147.486444][ T7994]  ? __fget_files+0x39d/0x420
[  147.486462][ T7994]  ? __fget_files+0x2a/0x420
[  147.486489][ T7994]  __x64_sys_setsockopt+0x187/0x210
[  147.486526][ T7994]  do_syscall_64+0xf3/0x210
[  147.486547][ T7994]  ? clear_bhb_loop+0x45/0xa0
[  147.486571][ T7994]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.486589][ T7994] RIP: 0033:0x7f40aed8e169
[  147.486613][ T7994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  147.486629][ T7994] RSP: 002b:00007f40afc38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  147.486651][ T7994] RAX: ffffffffffffffda RBX: 00007f40aefb6160 RCX: 00007f40aed8e169
[  147.486665][ T7994] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004
[  147.486677][ T7994] RBP: 00007f40aee10a68 R08: 00000000000004c0 R09: 0000000000000000
[  147.486689][ T7994] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000
[  147.486701][ T7994] R13: 0000000000000000 R14: 00007f40aefb6160 R15: 00007ffd45e05618
[  147.486732][ T7994]  </TASK>
[  147.486740][ T7994] Mem-Info:
[  147.895057][ T7994] active_anon:5191 inactive_anon:0 isolated_anon:0
[  147.895057][ T7994]  active_file:1169 inactive_file:38333 isolated_file:0
[  147.895057][ T7994]  unevictable:768 dirty:74 writeback:0
[  147.895057][ T7994]  slab_reclaimable:9871 slab_unreclaimable:99130
[  147.895057][ T7994]  mapped:29549 shmem:1401 pagetables:1000
[  147.895057][ T7994]  sec_pagetables:0 bounce:0
[  147.895057][ T7994]  kernel_misc_reclaimable:0
[  147.895057][ T7994]  free:1344383 free_pcp:273 free_cma:0
[  147.953963][ T7994] Node 0 active_anon:20764kB inactive_anon:0kB active_file:4676kB inactive_file:153256kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118196kB dirty:296kB writeback:0kB shmem:4068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11276kB pagetables:3900kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  147.954165][ T7751] bond0: (slave bond_slave_0): interface is now down
[  148.015467][ T7751] bond0: (slave bond_slave_1): interface is now down
[  148.025732][ T7994] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  148.067904][ T5973] bond0: (slave bond_slave_0): interface is now down
[  148.111751][ T5973] bond0: (slave bond_slave_1): interface is now down
[  148.147963][   T12] bond0: (slave bond_slave_0): interface is now down
[  148.158704][ T7658] veth0_vlan: entered promiscuous mode
[  148.168402][ T7994] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  148.219232][   T12] bond0: (slave bond_slave_1): interface is now down
[  148.232075][ T7658] veth1_vlan: entered promiscuous mode
[  148.270197][ T7994] lowmem_reserve[]: 0 2487 2487 2487 2487
[  148.278585][   T64] bond0: (slave bond_slave_0): interface is now down
[  148.312760][   T64] bond0: (slave bond_slave_1): interface is now down
[  148.332629][ T7994] Node 0 DMA32 free:1457428kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:20556kB inactive_anon:0kB active_file:4676kB inactive_file:153156kB unevictable:1536kB writepending:296kB present:3129332kB managed:2547272kB mlocked:0kB bounce:0kB free_pcp:1972kB local_pcp:1236kB free_cma:0kB
[  148.352764][   T64] bond0: now running without any active interface!
[  148.459735][ T7658] veth0_macvtap: entered promiscuous mode
[  148.474992][ T7994] lowmem_reserve[]: 0 0 0 0 0
[  148.489985][ T7994] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  148.499235][ T7658] veth1_macvtap: entered promiscuous mode
[  148.589321][ T7994] lowmem_reserve[]: 0 0 0 0 0
[  148.629815][ T7658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.636099][ T7994] Node 1 Normal free:3906084kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  148.664150][ T7658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.749500][ T7658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.794729][ T7658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.804846][ T7994] lowmem_reserve[]: 0 0 0 0 0
[  148.809622][ T7994] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  148.834819][ T7658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.865121][ T7994] Node 0 DMA32: 2*4kB (UM) 5*8kB (ME) 18*16kB (UME) 277*32kB (UME) 925*64kB (UME) 690*128kB (UM) 488*256kB (UME) 268*512kB (UME) 111*1024kB (U) 7*2048kB (UM) 222*4096kB (UM) = 1456176kB
[  148.878406][ T7658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.904478][ T7994] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  148.933879][ T7658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.939639][ T7994] Node 1 Normal: 241*4kB (UE) 66*8kB (UME) 45*16kB (UME) 220*32kB (UME) 98*64kB (UME) 31*128kB (UME) 16*256kB (UM) 11*512kB (UME) 4*1024kB (UME) 5*2048kB (UE) 943*4096kB (M) = 3906084kB
[  148.976566][ T7658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.007624][ T7658] batman_adv: batadv0: Interface activated: batadv_slave_0
[  149.057097][ T7994] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  149.077100][ T7658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.139790][ T7658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.154013][ T7994] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  149.192642][ T7994] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  149.209641][ T7658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.220181][ T7994] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  149.220207][ T7994] 40906 total pagecache pages
[  149.220227][ T7994] 0 pages in swap cache
[  149.220236][ T7994] Free swap  = 124996kB
[  149.220245][ T7994] Total swap = 124996kB
[  149.220255][ T7994] 2097051 pages RAM
[  149.220264][ T7994] 0 pages HighMem/MovableOnly
[  149.220272][ T7994] 428575 pages reserved
[  149.220281][ T7994] 0 pages cma reserved
[  149.334693][ T7658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.354705][ T7658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.383010][ T7658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.437561][ T7658] batman_adv: batadv0: Interface activated: batadv_slave_1
[  149.469601][ T7658] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.544964][ T7658] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.553725][ T7658] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.611167][ T7658] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.654073][ T8054] syzkaller1: entered promiscuous mode
[  149.671261][ T8054] syzkaller1: entered allmulticast mode
[  149.960473][ T8082] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.509'.
[  149.993124][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.508'.
[  149.995859][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.019825][ T8083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.508'.
[  150.040576][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.051601][ T8083] netlink: 'syz.4.508': attribute type 5 has an invalid length.
[  150.210922][ T7751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.243680][ T7751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.298595][ T8098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.511'.
[  150.353738][ T8098] netlink: 212936 bytes leftover after parsing attributes in process `syz.0.511'.
[  150.365133][ T8098] netlink: 'syz.0.511': attribute type 4 has an invalid length.
[  150.695205][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.515'.
[  150.883938][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.519'.
[  150.969290][ T8130] netlink: 'syz.4.518': attribute type 1 has an invalid length.
[  150.978567][ T8130] netlink: 'syz.4.518': attribute type 1 has an invalid length.
[  150.988606][ T8130] netlink: 'syz.4.518': attribute type 2 has an invalid length.
[  151.103066][ T5973] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.287017][ T5973] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.410438][ T5973] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.479215][ T5973] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.659798][ T5973] bridge_slave_1: left allmulticast mode
[  151.668480][ T5973] bridge_slave_1: left promiscuous mode
[  151.674206][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.683737][ T5973] bridge_slave_0: left allmulticast mode
[  151.689763][ T5973] bridge_slave_0: left promiscuous mode
[  151.701776][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.928266][ T8154] __nla_validate_parse: 2 callbacks suppressed
[  151.928290][ T8154] netlink: 104 bytes leftover after parsing attributes in process `syz.0.520'.
[  152.464104][ T8176] netlink: 'syz.0.530': attribute type 2 has an invalid length.
[  152.543239][ T5973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.565666][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  152.574419][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  152.587929][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  152.597136][ T5973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.597560][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  152.615353][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  152.617780][ T5973] bond0 (unregistering): Released all slaves
[  152.796236][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.532'.
[  152.935909][ T8184] team_slave_0: entered promiscuous mode
[  152.941872][ T8184] team_slave_1: entered promiscuous mode
[  152.972037][ T8184] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  153.036708][ T8188] wg2: entered promiscuous mode
[  153.041715][ T8188] wg2: entered allmulticast mode
[  153.273676][ T8201] xt_TCPMSS: Only works on TCP SYN packets
[  153.438548][ T5973] hsr_slave_0: left promiscuous mode
[  153.444576][ T5973] hsr_slave_1: left promiscuous mode
[  153.452277][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.460600][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.471122][ T8215] netlink: 'syz.3.537': attribute type 10 has an invalid length.
[  153.490881][ T8217] netlink: 16 bytes leftover after parsing attributes in process `syz.4.540'.
[  153.503872][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.512359][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.522123][ T8217] netlink: 'syz.4.540': attribute type 2 has an invalid length.
[  153.570874][ T5973] veth1_macvtap: left promiscuous mode
[  153.581574][ T5973] veth0_macvtap: left promiscuous mode
[  153.588282][ T5973] veth1_vlan: left promiscuous mode
[  153.593720][ T5973] veth0_vlan: left promiscuous mode
[  154.159463][ T5973] team0 (unregistering): Port device team_slave_1 removed
[  154.192225][ T5973] team0 (unregistering): Port device team_slave_0 removed
[  154.520541][ T8215] syz_tun: entered promiscuous mode
[  154.548801][ T8215] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  154.566602][   T12] bond0: (slave syz_tun): interface is now down
[  154.590723][ T8235] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  154.599797][   T12] bond0: (slave syz_tun): interface is now down
[  154.617495][   T64] bond0: (slave syz_tun): interface is now down
[  154.646245][   T64] bond0: (slave syz_tun): interface is now down
[  154.660399][ T5845] Bluetooth: hci3: command tx timeout
[  154.667392][   T12] bond0: (slave syz_tun): interface is now down
[  154.692863][ T4116] bond0: (slave syz_tun): interface is now down
[  154.735740][ T4116] bond0: (slave syz_tun): interface is now down
[  154.764916][   T64] bond0: (slave syz_tun): interface is now down
[  154.787736][  T969] bond0: (slave syz_tun): interface is now down
[  154.809528][   T36] bond0: (slave syz_tun): interface is now down
[  154.852088][   T36] bond0: now running without any active interface!
[  154.937079][ T8251] netlink: 156 bytes leftover after parsing attributes in process `syz.2.546'.
[  155.031359][ T8256] x_tables: duplicate underflow at hook 2
[  155.114432][ T8259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.548'.
[  155.258840][ T8256] 8021q: VLANs not supported on gre0
[  155.353640][ T8264] tipc: Cannot configure node identity twice
[  155.387265][ T8275] ip6t_srh: unknown srh invflags A757
[  155.397130][ T8268] netlink: 'syz.2.549': attribute type 12 has an invalid length.
[  155.591557][ T8178] chnl_net:caif_netlink_parms(): no params data found
[  155.981061][ T8301] SET target dimension over the limit!
[  156.064927][ T8178] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.095678][ T8178] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.103256][ T8178] bridge_slave_0: entered allmulticast mode
[  156.123841][ T8178] bridge_slave_0: entered promiscuous mode
[  156.180588][ T8178] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.203150][ T8178] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.225069][ T8178] bridge_slave_1: entered allmulticast mode
[  156.249590][ T8178] bridge_slave_1: entered promiscuous mode
[  156.447066][ T5892] IPVS: starting estimator thread 0...
[  156.546794][ T8332] IPVS: using max 27 ests per chain, 64800 per kthread
[  156.667779][ T8178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  156.734881][ T5845] Bluetooth: hci3: command tx timeout
[  156.740671][ T8178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.141849][ T8178] team0: Port device team_slave_0 added
[  157.172773][ T8349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  157.176205][ T8365] tipc: New replicast peer: 255.255.255.255
[  157.196418][ T8365] tipc: Enabled bearer <udp:syz2>, priority 10
[  157.209762][ T8178] team0: Port device team_slave_1 added
[  157.275809][ T8365] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  157.463652][ T8178] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.504856][ T8178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.566454][ T8384] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  157.594683][ T8178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.673573][ T8388] bridge_slave_0: left allmulticast mode
[  157.693614][ T8388] bridge_slave_0: left promiscuous mode
[  157.734336][ T8388] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.766263][ T8388] bridge_slave_1: left allmulticast mode
[  157.771971][ T8388] bridge_slave_1: left promiscuous mode
[  157.782774][ T8388] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.822183][ T8388] bond0: (slave bond_slave_0): Releasing backup interface
[  157.906782][ T8388] bond0: (slave bond_slave_1): Releasing backup interface
[  158.029144][ T8388] team0: Port device team_slave_0 removed
[  158.085366][ T8388] team0: Port device team_slave_1 removed
[  158.113285][ T8388] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.146280][ T8388] batman_adv: batadv0: Removing interface: batadv_slave_0
[  158.157174][ T8388] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  158.166789][ T8388] batman_adv: batadv0: Removing interface: batadv_slave_1
[  158.202456][ T8178] batman_adv: batadv0: Adding interface: batadv_slave_1
[  158.234724][ T8178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.300702][ T8178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  158.818404][ T5845] Bluetooth: hci3: command tx timeout
[  158.877365][ T8431] netlink: 'syz.4.579': attribute type 12 has an invalid length.
[  158.894587][ T8431] netlink: 132 bytes leftover after parsing attributes in process `syz.4.579'.
[  158.951145][ T8178] hsr_slave_0: entered promiscuous mode
[  158.984406][ T8178] hsr_slave_1: entered promiscuous mode
[  159.017923][ T8178] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  159.041871][ T8178] Cannot create hsr debugfs directory
[  159.600737][ T5857] IPVS: starting estimator thread 0...
[  159.614136][   T30] audit: type=1800 audit(1745005529.352:2): pid=8453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.582" name="cgroup.controllers" dev="tmpfs" ino=761 res=0 errno=0
[  159.739408][ T8461] IPVS: using max 28 ests per chain, 67200 per kthread
[  160.237362][ T8485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.591'.
[  160.327074][ T8491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.593'.
[  160.439345][ T8493] tipc: Enabled bearer <eth:caif0>, priority 10
[  160.496417][ T8493] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.589402][ T8493] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.693697][ T8493] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.784558][ T8507] pimreg: entered allmulticast mode
[  160.811779][ T8493] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.895062][ T5845] Bluetooth: hci3: command tx timeout
[  160.931415][ T8178] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  160.962205][ T8178] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  161.017537][ T8178] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  161.053914][ T8493] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.082422][ T8493] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.093735][ T8178] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  161.162018][ T8493] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.191553][ T8493] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.400771][ T8529] netlink: 'syz.3.604': attribute type 2 has an invalid length.
[  161.416972][ T8529] netlink: 'syz.3.604': attribute type 6 has an invalid length.
[  161.440136][ T8530] xt_connbytes: Forcing CT accounting to be enabled
[  161.459091][ T8531] netlink: 60 bytes leftover after parsing attributes in process `syz.2.605'.
[  161.477450][ T8530] Cannot find add_set index 0 as target
[  161.490759][ T8531] team0: Mode changed to "roundrobin"
[  161.514012][ T8178] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.544375][ T8531] netlink: 'syz.2.605': attribute type 23 has an invalid length.
[  161.582656][ T8178] 8021q: adding VLAN 0 to HW filter on device team0
[  161.680030][ T8542] netlink: 72 bytes leftover after parsing attributes in process `syz.4.607'.
[  161.719971][ T8542] netlink: 72 bytes leftover after parsing attributes in process `syz.4.607'.
[  161.737359][ T4116] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.744747][ T4116] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.769678][ T4116] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.777015][ T4116] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.249472][ T8178] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.311129][ T8178] veth0_vlan: entered promiscuous mode
[  162.326606][ T8178] veth1_vlan: entered promiscuous mode
[  162.378069][ T8178] veth0_macvtap: entered promiscuous mode
[  162.389062][ T8178] veth1_macvtap: entered promiscuous mode
[  162.419149][ T8178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.433682][ T8178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.444206][ T8178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.455347][ T8178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.465231][ T8178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.476072][ T8178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.487677][ T8178] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.500231][ T8178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.512499][ T8178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.523150][ T8178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.537601][ T8178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.549169][ T8178] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.571548][ T8178] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.581157][ T8178] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.592123][ T8178] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.601286][ T8178] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.702024][ T4116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.712445][ T4116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.773618][ T4116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.789469][ T4116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.889679][  T969] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.768504][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  164.777657][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  164.785726][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  164.794590][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  164.802697][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  164.892188][  T969] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.006753][ T8591] chnl_net:caif_netlink_parms(): no params data found
[  165.097636][ T8591] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.105936][ T8591] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.113153][ T8591] bridge_slave_0: entered allmulticast mode
[  165.120997][ T8591] bridge_slave_0: entered promiscuous mode
[  165.130226][ T8591] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.137950][ T8591] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.145855][ T8591] bridge_slave_1: entered allmulticast mode
[  165.153122][ T8591] bridge_slave_1: entered promiscuous mode
[  165.188819][ T8591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.200868][ T8591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.242932][ T8591] team0: Port device team_slave_0 added
[  165.253449][ T8591] team0: Port device team_slave_1 added
[  165.287164][ T8591] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.294171][ T8591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.322164][ T8591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.334391][ T8591] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.342065][ T8591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.368525][ T8591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.419639][ T8591] hsr_slave_0: entered promiscuous mode
[  165.426143][ T8591] hsr_slave_1: entered promiscuous mode
[  165.432261][ T8591] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  165.440116][ T8591] Cannot create hsr debugfs directory
[  165.517799][  T969] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.592726][  T969] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.752254][  T969] bridge_slave_1: left allmulticast mode
[  165.759632][  T969] bridge_slave_1: left promiscuous mode
[  165.765800][  T969] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.776634][  T969] bridge_slave_0: left allmulticast mode
[  165.782298][  T969] bridge_slave_0: left promiscuous mode
[  165.790227][  T969] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.068726][  T969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  166.080606][  T969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  166.092334][  T969] bond0 (unregistering): Released all slaves
[  166.370282][  T969] hsr_slave_0: left promiscuous mode
[  166.381897][  T969] hsr_slave_1: left promiscuous mode
[  166.395939][  T969] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  166.403961][  T969] batman_adv: batadv0: Removing interface: batadv_slave_0
[  166.421860][  T969] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  166.436942][  T969] batman_adv: batadv0: Removing interface: batadv_slave_1
[  166.470763][  T969] veth1_macvtap: left promiscuous mode
[  166.479120][  T969] veth0_macvtap: left promiscuous mode
[  166.485071][  T969] veth1_vlan: left promiscuous mode
[  166.492515][  T969] veth0_vlan: left promiscuous mode
[  166.905615][ T5845] Bluetooth: hci3: command tx timeout
[  166.970530][  T969] team0 (unregistering): Port device team_slave_1 removed
[  167.002737][  T969] team0 (unregistering): Port device team_slave_0 removed
[  167.448450][ T8591] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  167.473498][ T8591] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  167.500257][ T8591] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  167.523653][ T8591] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  167.637798][ T8591] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.687403][ T8591] 8021q: adding VLAN 0 to HW filter on device team0
[  167.710540][ T6517] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.717750][ T6517] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.741201][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.748424][ T5973] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.985883][ T8591] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.034471][ T8591] veth0_vlan: entered promiscuous mode
[  168.047869][ T8591] veth1_vlan: entered promiscuous mode
[  168.079211][ T8591] veth0_macvtap: entered promiscuous mode
[  168.088863][ T8591] veth1_macvtap: entered promiscuous mode
[  168.107036][ T8591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.118612][ T8591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.129427][ T8591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.140198][ T8591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.151021][ T8591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.161522][ T8591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.173024][ T8591] batman_adv: batadv0: Interface activated: batadv_slave_0
[  168.189007][ T8591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.199863][ T8591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.210726][ T8591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.221446][ T8591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.233468][ T8591] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.248776][ T8591] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.258052][ T8591] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.267769][ T8591] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.277049][ T8591] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.353104][ T6517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.370814][ T6517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.400048][ T7751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.409304][ T7751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.050494][ T7751] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.009020][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  171.018650][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  171.026871][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  171.036247][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  171.045332][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  171.218366][ T8633] chnl_net:caif_netlink_parms(): no params data found
[  171.315728][ T8633] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.323935][ T8633] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.331687][ T8633] bridge_slave_0: entered allmulticast mode
[  171.339442][ T8633] bridge_slave_0: entered promiscuous mode
[  171.348834][ T8633] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.356256][ T8633] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.363657][ T8633] bridge_slave_1: entered allmulticast mode
[  171.371115][ T8633] bridge_slave_1: entered promiscuous mode
[  171.410885][ T8633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.426165][ T8633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.466593][ T8633] team0: Port device team_slave_0 added
[  171.474735][ T8633] team0: Port device team_slave_1 added
[  171.510037][ T8633] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.517138][ T8633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.545933][ T8633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.558895][ T8633] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.566130][ T8633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.592224][ T8633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  171.619723][ T7751] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.672732][ T8633] hsr_slave_0: entered promiscuous mode
[  171.679219][ T8633] hsr_slave_1: entered promiscuous mode
[  171.689179][ T8633] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  171.697465][ T8633] Cannot create hsr debugfs directory
[  171.719298][ T7751] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.828486][ T7751] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.003134][ T7751] bridge_slave_1: left allmulticast mode
[  172.014374][ T7751] bridge_slave_1: left promiscuous mode
[  172.022782][ T7751] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.048989][ T7751] bridge_slave_0: left allmulticast mode
[  172.057386][ T7751] bridge_slave_0: left promiscuous mode
[  172.063204][ T7751] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.492921][ T7751] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.505788][ T7751] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  172.520212][ T7751] bond0 (unregistering): Released all slaves
[  172.883292][ T7751] hsr_slave_0: left promiscuous mode
[  172.889381][ T7751] hsr_slave_1: left promiscuous mode
[  172.897366][ T7751] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.906021][ T7751] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.914092][ T7751] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.921752][ T7751] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.947991][ T7751] veth1_macvtap: left promiscuous mode
[  172.954504][ T7751] veth0_macvtap: left promiscuous mode
[  172.961097][ T7751] veth1_vlan: left promiscuous mode
[  172.967002][ T7751] veth0_vlan: left promiscuous mode
[  173.137975][ T5853] Bluetooth: hci3: command tx timeout
[  173.402426][ T7751] team0 (unregistering): Port device team_slave_1 removed
[  173.437987][ T7751] team0 (unregistering): Port device team_slave_0 removed
[  173.792476][ T8633] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  173.805134][ T8633] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  173.817527][ T8633] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  173.843079][ T8633] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  173.970326][ T8633] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.992700][ T8633] 8021q: adding VLAN 0 to HW filter on device team0
[  174.019103][ T4116] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.026390][ T4116] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.070487][ T4116] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.077779][ T4116] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.342998][ T8633] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.429246][ T8633] veth0_vlan: entered promiscuous mode
[  174.449914][ T8633] veth1_vlan: entered promiscuous mode
[  174.500850][ T8633] veth0_macvtap: entered promiscuous mode
[  174.512751][ T8633] veth1_macvtap: entered promiscuous mode
[  174.533877][ T8633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.549797][ T8633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.560107][ T8633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.571057][ T8633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.583913][ T8633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.595637][ T8633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.607539][ T8633] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.623757][ T8633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.636592][ T8633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.646758][ T8633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.657663][ T8633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.669776][ T8633] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.690887][ T8633] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.705614][ T8633] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.714341][ T8633] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.726193][ T8633] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.827661][  T969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.847231][  T969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.890999][  T969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.903199][  T969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.453134][  T969] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.521955][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  177.530382][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  177.540530][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  177.549317][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  177.557641][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  177.734098][ T8730] chnl_net:caif_netlink_parms(): no params data found
[  177.817613][ T8730] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.825393][ T8730] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.832576][ T8730] bridge_slave_0: entered allmulticast mode
[  177.840099][ T8730] bridge_slave_0: entered promiscuous mode
[  177.849931][ T8730] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.857771][ T8730] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.865782][ T8730] bridge_slave_1: entered allmulticast mode
[  177.874443][ T8730] bridge_slave_1: entered promiscuous mode
[  177.910412][ T8730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.922444][ T8730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.961640][ T8730] team0: Port device team_slave_0 added
[  177.969922][ T8730] team0: Port device team_slave_1 added
[  178.004250][ T8730] batman_adv: batadv0: Adding interface: batadv_slave_0
[  178.016326][ T8730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.043051][ T8730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  178.067734][  T969] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.087129][ T8730] batman_adv: batadv0: Adding interface: batadv_slave_1
[  178.094095][ T8730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.120562][ T8730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  178.174047][ T8730] hsr_slave_0: entered promiscuous mode
[  178.182732][ T8730] hsr_slave_1: entered promiscuous mode
[  178.189182][ T8730] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  178.196863][ T8730] Cannot create hsr debugfs directory
[  178.216688][  T969] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.288891][  T969] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.437500][  T969] bridge_slave_1: left allmulticast mode
[  178.443550][  T969] bridge_slave_1: left promiscuous mode
[  178.449809][  T969] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.467205][  T969] bridge_slave_0: left allmulticast mode
[  178.472880][  T969] bridge_slave_0: left promiscuous mode
[  178.479162][  T969] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.759534][  T969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  178.774208][  T969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  178.785133][  T969] bond0 (unregistering): Released all slaves
[  179.129425][  T969] hsr_slave_0: left promiscuous mode
[  179.142207][  T969] hsr_slave_1: left promiscuous mode
[  179.152328][  T969] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.163174][  T969] batman_adv: batadv0: Removing interface: batadv_slave_0
[  179.178148][  T969] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.189917][  T969] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.218236][  T969] veth1_macvtap: left promiscuous mode
[  179.223835][  T969] veth0_macvtap: left promiscuous mode
[  179.230035][  T969] veth1_vlan: left promiscuous mode
[  179.235973][  T969] veth0_vlan: left promiscuous mode
[  179.617235][ T5853] Bluetooth: hci3: command tx timeout
[  179.665487][  T969] team0 (unregistering): Port device team_slave_1 removed
[  179.695975][  T969] team0 (unregistering): Port device team_slave_0 removed
[  180.096347][ T8730] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  180.123161][ T8730] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  180.151836][ T8730] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  180.185222][ T8730] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  180.321290][ T8730] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.380010][ T8730] 8021q: adding VLAN 0 to HW filter on device team0
[  180.413241][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.420518][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.443999][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.451194][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.699071][ T8730] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.745919][ T8730] veth0_vlan: entered promiscuous mode
[  180.759643][ T8730] veth1_vlan: entered promiscuous mode
[  180.791863][ T8730] veth0_macvtap: entered promiscuous mode
[  180.800990][ T8730] veth1_macvtap: entered promiscuous mode
[  180.820084][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.837093][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.848213][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.859455][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.869847][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.880332][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.891657][ T8730] batman_adv: batadv0: Interface activated: batadv_slave_0
[  180.908403][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.918999][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.928960][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.939903][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.951815][ T8730] batman_adv: batadv0: Interface activated: batadv_slave_1
[  180.964039][ T8730] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.972866][ T8730] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.982710][ T8730] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.991733][ T8730] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.063926][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.080726][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.109476][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.117539][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.857351][ T4116] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.050326][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  184.060197][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  184.068059][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  184.076556][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  184.084294][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  184.267304][ T8771] chnl_net:caif_netlink_parms(): no params data found
[  184.359182][ T8771] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.367393][ T8771] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.374593][ T8771] bridge_slave_0: entered allmulticast mode
[  184.382073][ T8771] bridge_slave_0: entered promiscuous mode
[  184.392941][ T8771] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.402009][ T8771] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.409365][ T8771] bridge_slave_1: entered allmulticast mode
[  184.418493][ T8771] bridge_slave_1: entered promiscuous mode
[  184.457106][ T4116] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.489892][ T8771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  184.502366][ T8771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  184.557511][ T4116] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.577600][ T8771] team0: Port device team_slave_0 added
[  184.586304][ T8771] team0: Port device team_slave_1 added
[  184.875703][ T4116] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.901001][ T8771] batman_adv: batadv0: Adding interface: batadv_slave_0
[  184.916570][ T8771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.951099][ T8771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  184.965320][ T8771] batman_adv: batadv0: Adding interface: batadv_slave_1
[  184.972398][ T8771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.003600][ T8771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  185.263584][ T8771] hsr_slave_0: entered promiscuous mode
[  185.274556][ T8771] hsr_slave_1: entered promiscuous mode
[  185.287406][ T8771] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  185.314948][ T8771] Cannot create hsr debugfs directory
[  185.320632][ T8809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  185.446325][ T8816] netlink: 14 bytes leftover after parsing attributes in process `syz.4.619'.
[  185.503203][ T8823] netlink: 'syz.0.622': attribute type 3 has an invalid length.
[  185.976667][ T4116] bridge_slave_1: left allmulticast mode
[  185.988623][ T4116] bridge_slave_1: left promiscuous mode
[  185.994418][ T4116] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.041644][ T4116] bridge_slave_0: left allmulticast mode
[  186.070263][ T4116] bridge_slave_0: left promiscuous mode
[  186.077411][ T4116] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.175870][ T5845] Bluetooth: hci3: command tx timeout
[  186.401322][ T4116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  186.412574][ T4116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  186.423865][ T4116] bond0 (unregistering): Released all slaves
[  186.439395][ T8840] netlink: 'syz.3.628': attribute type 2 has an invalid length.
[  186.639249][ T8856] netlink: 'syz.2.632': attribute type 3 has an invalid length.
[  186.691565][ T8856] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.632'.
[  187.065551][ T4116] hsr_slave_0: left promiscuous mode
[  187.077631][ T4116] hsr_slave_1: left promiscuous mode
[  187.104201][ T4116] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.122221][ T4116] batman_adv: batadv0: Removing interface: batadv_slave_0
[  187.150013][ T4116] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.164095][ T4116] batman_adv: batadv0: Removing interface: batadv_slave_1
[  187.231307][ T4116] veth1_macvtap: left promiscuous mode
[  187.249487][ T4116] veth0_macvtap: left promiscuous mode
[  187.256384][ T4116] veth1_vlan: left promiscuous mode
[  187.261843][ T4116] veth0_vlan: left promiscuous mode
[  187.962339][ T4116] team0 (unregistering): Port device team_slave_1 removed
[  187.996497][ T4116] team0 (unregistering): Port device team_slave_0 removed
[  188.257110][ T5845] Bluetooth: hci3: command tx timeout
[  188.673699][ T8893] netlink: 20 bytes leftover after parsing attributes in process `syz.2.637'.
[  188.962296][ T8903] Driver unsupported XDP return value 0 on prog  (id 128) dev N/A, expect packet loss!
[  188.997167][ T8904] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  189.029921][ T8903] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  189.185217][ T8907] bond1: entered promiscuous mode
[  189.191339][ T8907] bond1: entered allmulticast mode
[  189.199491][ T8907] 8021q: adding VLAN 0 to HW filter on device bond1
[  189.208077][ T8915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.644'.
[  189.244897][ T8912] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  189.245234][ T8907] netlink: 'syz.4.643': attribute type 4 has an invalid length.
[  189.481269][ T8771] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  189.579715][ T8771] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  189.626598][ T8771] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  189.672344][ T8771] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  189.766219][ T8941] netlink: 872 bytes leftover after parsing attributes in process `syz.2.653'.
[  189.786883][ T8943] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode
[  189.798706][ T8942] netlink: 'syz.3.654': attribute type 9 has an invalid length.
[  189.825428][ T8942] netlink: 'syz.3.654': attribute type 6 has an invalid length.
[  189.861159][ T8942] netlink: 'syz.3.654': attribute type 9 has an invalid length.
[  189.889797][ T8942] netlink: 'syz.3.654': attribute type 6 has an invalid length.
[  190.202859][   T54] hid-generic 0005:10CF:5540.0003: unknown main item tag 0x0
[  190.226123][ T8771] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.234928][   T54] hid-generic 0005:10CF:5540.0003: unknown main item tag 0x0
[  190.265091][   T54] hid-generic 0005:10CF:5540.0003: hidraw0: BLUETOOTH HID v0.c7 Device [syz1] on aa:aa:aa:aa:aa:aa
[  190.282731][ T8771] 8021q: adding VLAN 0 to HW filter on device team0
[  190.335155][ T5845] Bluetooth: hci3: command tx timeout
[  190.368324][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.661'.
[  190.428173][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.435391][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  190.466483][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.473719][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  190.518726][ T8974] xt_cgroup: xt_cgroup: no path or classid specified
[  190.569852][ T8977] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  190.751507][ T8984] netlink: 'syz.4.664': attribute type 4 has an invalid length.
[  190.895718][ T8989] Bluetooth: MGMT ver 1.23
[  191.231059][ T8998] netlink: 'syz.3.667': attribute type 21 has an invalid length.
[  191.650787][ T9006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.668'.
[  191.669624][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.669'.
[  191.712881][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.669'.
[  191.756665][ T9006] netlink: 320 bytes leftover after parsing attributes in process `syz.4.668'.
[  191.788735][ T9006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.668'.
[  191.805689][ T9008] pim6reg527: entered allmulticast mode
[  192.047353][ T9030] nbd: must specify a device to reconfigure
[  192.416171][ T5853] Bluetooth: hci3: command tx timeout
[  192.462166][ T8771] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.523138][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.674'.
[  192.552496][ T9048] netlink: 'syz.2.674': attribute type 3 has an invalid length.
[  192.600316][ T9057] veth0: entered promiscuous mode
[  192.694804][ T9056] veth0: left promiscuous mode
[  192.757752][ T8771] veth0_vlan: entered promiscuous mode
[  192.805968][ T9067] Bluetooth: MGMT ver 1.23
[  192.817613][ T8771] veth1_vlan: entered promiscuous mode
[  192.940001][ T8771] veth0_macvtap: entered promiscuous mode
[  192.976327][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout
[  192.979859][ T8771] veth1_macvtap: entered promiscuous mode
[  192.983359][ T5845] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  193.036586][ T8771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  193.047780][ T8771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.057935][ T8771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  193.068527][ T8771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.078834][ T8771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  193.089438][ T8771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.101428][ T8771] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.113079][ T8771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  193.123907][ T8771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.144864][ T8771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  193.217781][ T8771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.243719][ T8771] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.381372][ T8771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.399261][ T8771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.424784][ T8771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.437280][ T8771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.461550][ T9084] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  193.765604][ T9108] syz_tun: entered allmulticast mode
[  193.956724][ T6517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.975001][ T6517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.148408][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.195704][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.256300][ T9128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.693'.
[  194.267876][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  194.274205][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  194.306856][ T9129] netlink: 40 bytes leftover after parsing attributes in process `syz.4.693'.
[  194.698938][ T9149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'.
[  195.055525][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout
[  195.061734][ T5845] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  195.158852][ T6517] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.251812][ T6517] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.541831][ T6517] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.641879][ T6517] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.896379][ T6517] bridge_slave_1: left allmulticast mode
[  195.902095][ T6517] bridge_slave_1: left promiscuous mode
[  195.913502][ T6517] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.923792][ T6517] bridge_slave_0: left allmulticast mode
[  195.938277][ T6517] bridge_slave_0: left promiscuous mode
[  195.944045][ T6517] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.475582][ T6517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  196.498230][ T6517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  196.518170][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.700'.
[  196.538534][ T6517] bond0 (unregistering): Released all slaves
[  196.919858][ T9230] netlink: 'syz.4.706': attribute type 9 has an invalid length.
[  196.927625][ T9229] netlink: 'syz.2.707': attribute type 1 has an invalid length.
[  197.014422][ T9235] SET target dimension over the limit!
[  197.030577][ T9229] netlink: 228 bytes leftover after parsing attributes in process `syz.2.707'.
[  197.080529][ T9237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.708'.
[  197.226589][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  197.241688][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  197.249560][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  197.265254][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  197.284911][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  197.469813][ T6517] hsr_slave_0: left promiscuous mode
[  197.493829][ T6517] hsr_slave_1: left promiscuous mode
[  197.502448][ T6517] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.524777][ T6517] batman_adv: batadv0: Removing interface: batadv_slave_0
[  197.531397][ T9257] netlink: 56 bytes leftover after parsing attributes in process `syz.2.712'.
[  197.566102][ T9257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.712'.
[  197.567108][ T6517] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.591471][ T6517] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.600009][ T9257] netlink: 31 bytes leftover after parsing attributes in process `syz.2.712'.
[  197.619128][ T9264] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  197.641849][ T9257] netlink: 'syz.2.712': attribute type 3 has an invalid length.
[  197.658278][ T6517] veth1_macvtap: left promiscuous mode
[  197.665862][ T9257] netlink: 'syz.2.712': attribute type 2 has an invalid length.
[  197.675718][ T6517] veth0_macvtap: left promiscuous mode
[  197.681566][ T6517] veth1_vlan: left promiscuous mode
[  197.684776][ T9257] netlink: 31 bytes leftover after parsing attributes in process `syz.2.712'.
[  197.697778][ T6517] veth0_vlan: left promiscuous mode
[  197.711477][ T9268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.713'.
[  197.739034][ T9269] netlink: 'syz.4.711': attribute type 10 has an invalid length.
[  198.213725][ T6517] team0 (unregistering): Port device team_slave_1 removed
[  198.251744][ T6517] team0 (unregistering): Port device team_slave_0 removed
[  198.616457][ T9269] 8021q: adding VLAN 0 to HW filter on device team0
[  198.628257][ T9269] team0: entered promiscuous mode
[  198.633344][ T9269] team_slave_1: entered promiscuous mode
[  198.675761][ T9269] bond0: (slave team0): Enslaving as an active interface with an up link
[  198.752262][ T9280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.714'.
[  198.803036][ T9285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.715'.
[  199.055698][ T9293] netlink: 16 bytes leftover after parsing attributes in process `syz.3.717'.
[  199.098113][ T9298] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  199.377394][ T5853] Bluetooth: hci3: command tx timeout
[  199.700171][ T9244] chnl_net:caif_netlink_parms(): no params data found
[  200.145000][ T9244] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.158179][ T9244] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.170931][ T9244] bridge_slave_0: entered allmulticast mode
[  200.181754][ T9244] bridge_slave_0: entered promiscuous mode
[  200.193263][ T9244] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.202130][ T9244] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.209965][ T9244] bridge_slave_1: entered allmulticast mode
[  200.218321][ T9244] bridge_slave_1: entered promiscuous mode
[  200.281975][ T9244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.320068][ T9244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.446920][ T9244] team0: Port device team_slave_0 added
[  200.470602][ T9244] team0: Port device team_slave_1 added
[  200.616316][ T9244] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.628118][ T9244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.656933][ T9244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.755243][ T9244] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.762544][ T9244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.849388][ T9244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.193748][ T9244] hsr_slave_0: entered promiscuous mode
[  201.220588][ T9244] hsr_slave_1: entered promiscuous mode
[  201.243565][ T9244] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  201.252291][ T9244] Cannot create hsr debugfs directory
[  201.330691][ T9401] netlink: 'syz.0.740': attribute type 10 has an invalid length.
[  201.417613][ T9401] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  201.430328][ T9401] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  201.456370][ T5853] Bluetooth: hci3: command tx timeout
[  202.395155][ T9442] __nla_validate_parse: 11 callbacks suppressed
[  202.395185][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'.
[  202.872857][ T9244] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  202.939568][ T9244] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  202.992174][ T9244] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  203.048959][ T9244] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  203.200025][ T9464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.756'.
[  203.217298][ T9464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.756'.
[  203.255557][ T9464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.756'.
[  203.279354][ T9464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.756'.
[  203.301629][ T9464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.756'.
[  203.329657][ T9464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.756'.
[  203.342783][ T9464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.756'.
[  203.352987][ T9464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.756'.
[  203.365712][ T9464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.756'.
[  203.422127][ T9473] bridge4: entered promiscuous mode
[  203.431589][ T9473] bridge4: entered allmulticast mode
[  203.545208][ T5853] Bluetooth: hci3: command tx timeout
[  203.615531][ T9244] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.745844][ T9244] 8021q: adding VLAN 0 to HW filter on device team0
[  203.773540][  T969] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.780813][  T969] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.833895][ T9492] netlink: 'syz.4.766': attribute type 29 has an invalid length.
[  203.859248][ T6517] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.866480][ T6517] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.898052][ T9498] netlink: 'syz.2.769': attribute type 12 has an invalid length.
[  204.163385][ T9510] nft_compat: unsupported protocol 0
[  204.430448][ T9529] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4
[  204.452905][ T9530] netlink: 'syz.4.776': attribute type 10 has an invalid length.
[  204.901090][ T9244] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.153289][ T9558] macsec2: entered promiscuous mode
[  205.283307][ T9569] netlink: 'syz.4.783': attribute type 1 has an invalid length.
[  205.304424][ T9244] veth0_vlan: entered promiscuous mode
[  205.352605][ T9244] veth1_vlan: entered promiscuous mode
[  205.501699][ T9574] xfrm0 speed is unknown, defaulting to 1000
[  205.513655][ T9244] veth0_macvtap: entered promiscuous mode
[  205.531487][ T9574] xfrm0 speed is unknown, defaulting to 1000
[  205.549733][ T9244] veth1_macvtap: entered promiscuous mode
[  205.563396][ T9574] xfrm0 speed is unknown, defaulting to 1000
[  205.617283][   T56] Bluetooth: hci3: command tx timeout
[  205.626253][ T9574] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  205.635078][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.669407][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.701896][ T9574] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  205.719953][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.748799][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.769161][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.800528][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.827385][ T9244] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.885629][ T9574] xfrm0 speed is unknown, defaulting to 1000
[  205.909675][ T9574] xfrm0 speed is unknown, defaulting to 1000
[  205.947749][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.015537][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.044515][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.062194][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.091045][ T9244] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.109147][ T9574] xfrm0 speed is unknown, defaulting to 1000
[  206.117667][ T9574] xfrm0 speed is unknown, defaulting to 1000
[  206.167050][ T9574] xfrm0 speed is unknown, defaulting to 1000
[  206.195554][ T9244] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.216591][ T9244] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.231650][ T9244] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.256272][ T9244] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.485826][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.493704][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.502604][ T9615] xt_connbytes: Forcing CT accounting to be enabled
[  206.526000][ T9616] xt_connbytes: Forcing CT accounting to be enabled
[  206.574936][ T5846] Bluetooth: hci1: command 0x0406 tx timeout
[  206.578308][ T5848] Bluetooth: hci2: command 0x0406 tx timeout
[  206.581472][   T56] Bluetooth: hci0: command 0x0c1a tx timeout
[  206.588556][ T9621] xt_l2tp: wrong L2TP version: 0
[  206.652568][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.682615][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.697369][ T9623] ü
: renamed from bridge_slave_0 (while UP)
[  207.534509][ T9665] __nla_validate_parse: 45 callbacks suppressed
[  207.534532][ T9665] netlink: 16 bytes leftover after parsing attributes in process `syz.2.801'.
[  207.601974][ T9667] netlink: 16 bytes leftover after parsing attributes in process `syz.2.801'.
[  207.658932][ T1149] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.835275][ T1149] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.963486][ T1149] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.119567][ T1149] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.364023][ T1149] bridge_slave_1: left allmulticast mode
[  208.372423][ T1149] bridge_slave_1: left promiscuous mode
[  208.378680][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.393103][ T1149] bridge_slave_0: left allmulticast mode
[  208.399195][ T1149] bridge_slave_0: left promiscuous mode
[  208.409345][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.803521][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  208.820999][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  208.834025][ T1149] bond0 (unregistering): Released all slaves
[  209.216783][ T9708] netlink: 256 bytes leftover after parsing attributes in process `syz.2.804'.
[  209.243146][ T1149] hsr_slave_0: left promiscuous mode
[  209.266524][ T1149] hsr_slave_1: left promiscuous mode
[  209.289648][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.309999][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.337495][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.375622][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.495048][ T1149] veth1_macvtap: left promiscuous mode
[  209.508438][ T1149] veth0_macvtap: left promiscuous mode
[  209.525235][ T1149] veth1_vlan: left promiscuous mode
[  209.543587][ T1149] veth0_vlan: left promiscuous mode
[  209.867739][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  209.877748][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  209.886342][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  209.894561][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  209.907058][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  210.364313][ T1149] team0 (unregistering): Port device team_slave_1 removed
[  210.403396][ T1149] team0 (unregistering): Port device team_slave_0 removed
[  210.728675][ T9706] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  210.802217][ T9736] ==================================================================
[  210.810342][ T9736] BUG: KASAN: null-ptr-deref in generic_hwtstamp_ioctl_lower+0x195/0x2d0
[  210.818804][ T9736] Read of size 24 at addr 0000000000000010 by task syz.3.809/9736
[  210.826634][ T9736] 
[  210.828983][ T9736] CPU: 1 UID: 0 PID: 9736 Comm: syz.3.809 Not tainted 6.15.0-rc2-syzkaller-00258-g750d0ac001e8 #0 PREEMPT(full) 
[  210.829009][ T9736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  210.829024][ T9736] Call Trace:
[  210.829032][ T9736]  <TASK>
[  210.829041][ T9736]  dump_stack_lvl+0x241/0x360
[  210.829076][ T9736]  ? __pfx_dump_stack_lvl+0x10/0x10
[  210.829105][ T9736]  ? __pfx__printk+0x10/0x10
[  210.829133][ T9736]  ? _printk+0xd5/0x120
[  210.829161][ T9736]  print_report+0xe3/0x5b0
[  210.829181][ T9736]  ? __virt_addr_valid+0x58/0x530
[  210.829209][ T9736]  ? generic_hwtstamp_ioctl_lower+0x195/0x2d0
[  210.829236][ T9736]  kasan_report+0x143/0x180
[  210.829256][ T9736]  ? generic_hwtstamp_ioctl_lower+0x195/0x2d0
[  210.829284][ T9736]  ? generic_hwtstamp_ioctl_lower+0x195/0x2d0
[  210.829309][ T9736]  kasan_check_range+0x28f/0x2a0
[  210.829328][ T9736]  ? generic_hwtstamp_ioctl_lower+0x195/0x2d0
[  210.829356][ T9736]  __asan_memcpy+0x29/0x70
[  210.829382][ T9736]  generic_hwtstamp_ioctl_lower+0x195/0x2d0
[  210.829409][ T9736]  ? __pfx_generic_hwtstamp_ioctl_lower+0x10/0x10
[  210.829445][ T9736]  tsconfig_prepare_data+0x135/0x740
[  210.829470][ T9736]  ? __pfx_tsconfig_prepare_data+0x10/0x10
[  210.829499][ T9736]  ? genlmsg_put+0x145/0x2e0
[  210.829529][ T9736]  ? __pfx_tsconfig_prepare_data+0x10/0x10
[  210.829550][ T9736]  ethnl_default_dumpit+0x5a1/0xd70
[  210.829599][ T9736]  ? ethnl_default_dumpit+0x7d/0xd70
[  210.829632][ T9736]  genl_dumpit+0x10d/0x1b0
[  210.829653][ T9736]  netlink_dump+0x678/0xeb0
[  210.829676][ T9736]  ? ethnl_default_start+0x341/0x570
[  210.829708][ T9736]  ? __pfx_netlink_dump+0x10/0x10
[  210.829742][ T9736]  ? genl_start+0x59d/0x6d0
[  210.829777][ T9736]  __netlink_dump_start+0x5a2/0x790
[  210.829806][ T9736]  genl_rcv_msg+0x8a4/0xf00
[  210.829841][ T9736]  ? __pfx_genl_rcv_msg+0x10/0x10
[  210.829870][ T9736]  ? __dev_queue_xmit+0x1780/0x3f60
[  210.829894][ T9736]  ? __pfx_genl_start+0x10/0x10
[  210.829923][ T9736]  ? __pfx_genl_dumpit+0x10/0x10
[  210.829940][ T9736]  ? __pfx_genl_done+0x10/0x10
[  210.829965][ T9736]  ? __lock_acquire+0xad5/0xd80
[  210.829994][ T9736]  ? __pfx_ethnl_default_start+0x10/0x10
[  210.830020][ T9736]  ? __pfx_ethnl_default_dumpit+0x10/0x10
[  210.830047][ T9736]  ? __pfx_ethnl_default_done+0x10/0x10
[  210.830081][ T9736]  netlink_rcv_skb+0x208/0x480
[  210.830106][ T9736]  ? __pfx_genl_rcv_msg+0x10/0x10
[  210.830138][ T9736]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  210.830189][ T9736]  ? netlink_deliver_tap+0x2e/0x1b0
[  210.830219][ T9736]  genl_rcv+0x28/0x40
[  210.830247][ T9736]  netlink_unicast+0x7f8/0x9a0
[  210.830275][ T9736]  ? __pfx_netlink_unicast+0x10/0x10
[  210.830298][ T9736]  ? skb_put+0x114/0x1f0
[  210.830331][ T9736]  netlink_sendmsg+0x8c3/0xcd0
[  210.830363][ T9736]  ? __pfx_netlink_sendmsg+0x10/0x10
[  210.830392][ T9736]  ? aa_sock_msg_perm+0x91/0x160
[  210.830421][ T9736]  ? __pfx_netlink_sendmsg+0x10/0x10
[  210.830446][ T9736]  __sock_sendmsg+0x221/0x270
[  210.830472][ T9736]  ____sys_sendmsg+0x523/0x860
[  210.830510][ T9736]  ? __pfx_____sys_sendmsg+0x10/0x10
[  210.830541][ T9736]  ? __fget_files+0x2a/0x420
[  210.830563][ T9736]  ? __fget_files+0x2a/0x420
[  210.830603][ T9736]  __sys_sendmsg+0x271/0x360
[  210.830622][ T9736]  ? __pfx_futex_wake+0x10/0x10
[  210.830652][ T9736]  ? __pfx___sys_sendmsg+0x10/0x10
[  210.830700][ T9736]  ? do_syscall_64+0xb6/0x210
[  210.830726][ T9736]  do_syscall_64+0xf3/0x210
[  210.830748][ T9736]  ? clear_bhb_loop+0x45/0xa0
[  210.830773][ T9736]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.830793][ T9736] RIP: 0033:0x7f00a038e169
[  210.830812][ T9736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  210.830831][ T9736] RSP: 002b:00007f00a1110038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  210.830856][ T9736] RAX: ffffffffffffffda RBX: 00007f00a05b5fa0 RCX: 00007f00a038e169
[  210.830873][ T9736] RDX: 0000000000000000 RSI: 0000200000000bc0 RDI: 0000000000000003
[  210.830887][ T9736] RBP: 00007f00a0410a68 R08: 0000000000000000 R09: 0000000000000000
[  210.830901][ T9736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  210.830914][ T9736] R13: 0000000000000000 R14: 00007f00a05b5fa0 R15: 00007fff81695458
[  210.830939][ T9736]  </TASK>
[  210.830947][ T9736] ==================================================================
[  211.368298][ T9736] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  211.375560][ T9736] CPU: 0 UID: 0 PID: 9736 Comm: syz.3.809 Not tainted 6.15.0-rc2-syzkaller-00258-g750d0ac001e8 #0 PREEMPT(full) 
[  211.387492][ T9736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  211.397557][ T9736] Call Trace:
[  211.400842][ T9736]  <TASK>
[  211.403777][ T9736]  dump_stack_lvl+0x241/0x360
[  211.408491][ T9736]  ? __pfx_dump_stack_lvl+0x10/0x10
[  211.413706][ T9736]  ? __pfx__printk+0x10/0x10
[  211.418311][ T9736]  ? vscnprintf+0x5d/0x90
[  211.422667][ T9736]  panic+0x349/0x880
[  211.426572][ T9736]  ? check_panic_on_warn+0x21/0xb0
[  211.431778][ T9736]  ? __pfx_panic+0x10/0x10
[  211.436207][ T9736]  ? _raw_spin_unlock_irqrestore+0x134/0x140
[  211.442203][ T9736]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  211.448549][ T9736]  ? print_report+0xe3/0x5b0
[  211.453140][ T9736]  check_panic_on_warn+0x86/0xb0
[  211.458085][ T9736]  ? generic_hwtstamp_ioctl_lower+0x195/0x2d0
[  211.464162][ T9736]  end_report+0x77/0x160
[  211.468462][ T9736]  kasan_report+0x154/0x180
[  211.472982][ T9736]  ? generic_hwtstamp_ioctl_lower+0x195/0x2d0
[  211.479061][ T9736]  ? generic_hwtstamp_ioctl_lower+0x195/0x2d0
[  211.485138][ T9736]  kasan_check_range+0x28f/0x2a0
[  211.490078][ T9736]  ? generic_hwtstamp_ioctl_lower+0x195/0x2d0
[  211.496175][ T9736]  __asan_memcpy+0x29/0x70
[  211.500599][ T9736]  generic_hwtstamp_ioctl_lower+0x195/0x2d0
[  211.506500][ T9736]  ? __pfx_generic_hwtstamp_ioctl_lower+0x10/0x10
[  211.512928][ T9736]  tsconfig_prepare_data+0x135/0x740
[  211.518221][ T9736]  ? __pfx_tsconfig_prepare_data+0x10/0x10
[  211.524037][ T9736]  ? genlmsg_put+0x145/0x2e0
[  211.528636][ T9736]  ? __pfx_tsconfig_prepare_data+0x10/0x10
[  211.534445][ T9736]  ethnl_default_dumpit+0x5a1/0xd70
[  211.539675][ T9736]  ? ethnl_default_dumpit+0x7d/0xd70
[  211.544989][ T9736]  genl_dumpit+0x10d/0x1b0
[  211.549424][ T9736]  netlink_dump+0x678/0xeb0
[  211.553952][ T9736]  ? ethnl_default_start+0x341/0x570
[  211.559266][ T9736]  ? __pfx_netlink_dump+0x10/0x10
[  211.564325][ T9736]  ? genl_start+0x59d/0x6d0
[  211.568849][ T9736]  __netlink_dump_start+0x5a2/0x790
[  211.574081][ T9736]  genl_rcv_msg+0x8a4/0xf00
[  211.578620][ T9736]  ? __pfx_genl_rcv_msg+0x10/0x10
[  211.583655][ T9736]  ? __dev_queue_xmit+0x1780/0x3f60
[  211.588853][ T9736]  ? __pfx_genl_start+0x10/0x10
[  211.593708][ T9736]  ? __pfx_genl_dumpit+0x10/0x10
[  211.598641][ T9736]  ? __pfx_genl_done+0x10/0x10
[  211.603429][ T9736]  ? __lock_acquire+0xad5/0xd80
[  211.608297][ T9736]  ? __pfx_ethnl_default_start+0x10/0x10
[  211.613937][ T9736]  ? __pfx_ethnl_default_dumpit+0x10/0x10
[  211.619660][ T9736]  ? __pfx_ethnl_default_done+0x10/0x10
[  211.625220][ T9736]  netlink_rcv_skb+0x208/0x480
[  211.629992][ T9736]  ? __pfx_genl_rcv_msg+0x10/0x10
[  211.635028][ T9736]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  211.640325][ T9736]  ? netlink_deliver_tap+0x2e/0x1b0
[  211.645529][ T9736]  genl_rcv+0x28/0x40
[  211.649521][ T9736]  netlink_unicast+0x7f8/0x9a0
[  211.654292][ T9736]  ? __pfx_netlink_unicast+0x10/0x10
[  211.659577][ T9736]  ? skb_put+0x114/0x1f0
[  211.663827][ T9736]  netlink_sendmsg+0x8c3/0xcd0
[  211.668618][ T9736]  ? __pfx_netlink_sendmsg+0x10/0x10
[  211.674008][ T9736]  ? aa_sock_msg_perm+0x91/0x160
[  211.678993][ T9736]  ? __pfx_netlink_sendmsg+0x10/0x10
[  211.684303][ T9736]  __sock_sendmsg+0x221/0x270
[  211.689010][ T9736]  ____sys_sendmsg+0x523/0x860
[  211.693802][ T9736]  ? __pfx_____sys_sendmsg+0x10/0x10
[  211.699095][ T9736]  ? __fget_files+0x2a/0x420
[  211.703695][ T9736]  ? __fget_files+0x2a/0x420
[  211.708305][ T9736]  __sys_sendmsg+0x271/0x360
[  211.712900][ T9736]  ? __pfx_futex_wake+0x10/0x10
[  211.717770][ T9736]  ? __pfx___sys_sendmsg+0x10/0x10
[  211.722911][ T9736]  ? do_syscall_64+0xb6/0x210
[  211.727591][ T9736]  do_syscall_64+0xf3/0x210
[  211.732093][ T9736]  ? clear_bhb_loop+0x45/0xa0
[  211.736776][ T9736]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.742671][ T9736] RIP: 0033:0x7f00a038e169
[  211.747101][ T9736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  211.766713][ T9736] RSP: 002b:00007f00a1110038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  211.775137][ T9736] RAX: ffffffffffffffda RBX: 00007f00a05b5fa0 RCX: 00007f00a038e169
[  211.783113][ T9736] RDX: 0000000000000000 RSI: 0000200000000bc0 RDI: 0000000000000003
[  211.791086][ T9736] RBP: 00007f00a0410a68 R08: 0000000000000000 R09: 0000000000000000
[  211.799063][ T9736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  211.807035][ T9736] R13: 0000000000000000 R14: 00007f00a05b5fa0 R15: 00007fff81695458
[  211.815037][ T9736]  </TASK>
[  211.818417][ T9736] Kernel Offset: disabled
[  211.822750][ T9736] Rebooting in 86400 seconds..