last executing test programs:

43.643306095s ago: executing program 1 (id=2916):
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff36)
socket(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x1, 0x4}, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)={'security\x00', 0x0, [0x10, 0x0, 0x8001, 0xc, 0x4]}, &(0x7f0000000300)=0x54)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
r4 = socket$kcm(0xf, 0x3, 0x2)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYRESHEX=r2], 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
unshare(0x4000400)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e00000000000000fcfe070008000000000000008013205e6318f527fd0c33d57e80b9931f3f7c17d357b965b40b9a6dc0ac4654131d61a3601102cf951661e666d4afbbe02886290e19b3c585cbb0d642382c3300f8d5a6ae69799395416da959f8c8cde17e26936655", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001fffffff3000000000001"], 0x114}], 0x1}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6)
sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1}, 0x4)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a008080"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x4000)

43.399188331s ago: executing program 1 (id=2920):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
unshare(0x62040200)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x609, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket(0xa, 0x40000000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, 0x0, 0x3c0)
close(r0)
r3 = socket$netlink(0x10, 0x3, 0x0)
preadv(r1, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f00"/53], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0200"/11, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
socket$inet_dccp(0x2, 0x6, 0x0)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_genetlink_get_family_id$nl80211(0x0, r3)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

41.445215748s ago: executing program 1 (id=2934):
socket$caif_stream(0x25, 0x1, 0x0)

41.214995685s ago: executing program 1 (id=2937):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000080000006a0a00ff000000002e40000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="1000000000000025050000000000000000000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x8, &(0x7f0000000080)=""/177, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x3b, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49)

39.821946132s ago: executing program 2 (id=2942):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000529f0a50c1a671520ad9230ba42e2e7026b623e77000000000a27ec08dbdf7050000003573201e4d64371c46a91d4db5486a8e2efae6f561c6641a812fdacac2d67a91890589d1b7a1ec4e0c81cb943d90e5f7ce3306eeb444f7dcb1915df31ccf625e0fe8d98e5367d53e1880a6d2c791cd78a321b439e41d9d1755a4fb6c399e6ec9eada6a80daac7ffb56c6ddc886f324931838fbc32c0b7a8d"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
close(0x3)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
r2 = socket$rds(0x15, 0x5, 0x0)
ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, 0x0, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r0}, 0x18)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0xf000)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private, 0x4e24, 0x0, 0x0, 0xfffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x1}, {0x0, 0xffffffffffffff6e}, 0xfffffffd, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x1, 0x0, 0x1}}, 0xb8}}, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x20, 0x0, 0x1}}, 0xb8}}, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x1, <r10=>0x0}, 0x8)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x4000, r4}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x7, &(0x7f0000000040)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_fd={0x18, 0x2, 0x1, 0x0, r6}, @call={0x85, 0x0, 0x0, 0x54}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @alu={0x7, 0x1, 0xc, 0x4, 0xb, 0xffffffffffffffc0, 0x1}], &(0x7f0000000180)='GPL\x00', 0x2, 0x7c, &(0x7f00000004c0)=""/124, 0x41100, 0x1, '\x00', 0x0, @fallback=0x29, r5, 0x8, &(0x7f00000001c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x3, 0x1, 0x873d}, 0x10, r10, r3, 0x4, &(0x7f0000000700)=[0xffffffffffffffff, r11, r12, r13], &(0x7f0000000740)=[{0x3, 0x5, 0xb, 0x4}, {0x2, 0x2, 0x7, 0x4}, {0x1, 0x2, 0x1, 0x7}, {0x0, 0x4, 0x10, 0x2}], 0x10, 0x9, @void, @value}, 0x94)
ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})

38.777444511s ago: executing program 2 (id=2944):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xaa, 0xfffffffffffffffc}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

38.670986646s ago: executing program 2 (id=2945):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
unshare(0x62040200)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x609, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket(0xa, 0x40000000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, 0x0, 0x3c0)
close(r0)
r3 = socket$netlink(0x10, 0x3, 0x0)
preadv(r1, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f00"/53], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0200"/11, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
socket$inet_dccp(0x2, 0x6, 0x0)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_genetlink_get_family_id$nl80211(0x0, r3)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

35.71835832s ago: executing program 2 (id=2956):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

34.811021757s ago: executing program 2 (id=2957):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x5c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
socket(0x1d, 0x2, 0x6)

33.102331528s ago: executing program 1 (id=2937):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000080000006a0a00ff000000002e40000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="1000000000000025050000000000000000000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x8, &(0x7f0000000080)=""/177, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x3b, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49)

22.192640766s ago: executing program 2 (id=2957):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x5c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
socket(0x1d, 0x2, 0x6)

21.273714908s ago: executing program 1 (id=2937):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000080000006a0a00ff000000002e40000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="1000000000000025050000000000000000000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x8, &(0x7f0000000080)=""/177, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x3b, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49)

2.026300452s ago: executing program 3 (id=3131):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000002100000000000000e3ff17110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)

1.983076569s ago: executing program 0 (id=3132):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0)

1.982921336s ago: executing program 4 (id=3133):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00', <r2=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x68, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @loopback, 0x401}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}}, 0x0)

1.863397752s ago: executing program 3 (id=3134):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x4030582a, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4})

1.845023789s ago: executing program 4 (id=3135):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
close(r1)

1.663540023s ago: executing program 4 (id=3136):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x8}]}, 0x24}}, 0x40)

1.663082002s ago: executing program 3 (id=3137):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0)

1.57099582s ago: executing program 0 (id=3138):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, <r1=>0x0}, 0x0)
r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4)

1.455694774s ago: executing program 4 (id=3139):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee6}, &(0x7f0000000000)=0x1d)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009d00)=[{{0x0, 0x0, &(0x7f0000005300)}}], 0x1, 0x0)
ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f00000009c0)={0x4004, 0xfff, 0xff, 0x80000000})
socket$xdp(0x2c, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
close(r6)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000002"], 0x50)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002680)={r7, &(0x7f0000002640)="cf47ed1e", 0x0}, 0x20)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100030e000000000000000000000005000600000000000a00000000000000fc000000000000000000000000000000000000000000000005000500000000000a00000000000000060100000000000000000000000000aa0100000000000000020013"], 0x70}}, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000280)={'wg1\x00', 0x100})
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfe}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r10}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)

1.432556728s ago: executing program 0 (id=3140):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}, 0x1, 0xba01}, 0x0)

1.259178531s ago: executing program 3 (id=3141):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x30d26732fe5b7335, 0x100408)

1.162058361s ago: executing program 3 (id=3142):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0xe7b, 0x4)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x92c, 0x4)
recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0)

1.156796928s ago: executing program 0 (id=3143):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40)

918.107158ms ago: executing program 0 (id=3144):
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071122b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r1 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000003c0))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
sendto$inet6(r2, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c)
sendmsg$inet6(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0)
shutdown(r2, 0x1)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x22020400)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
sendmmsg$inet(r4, 0x0, 0x0, 0x10)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000b80)={{r3}, 0x0, 0x0, @unused=[0x93, 0x6, 0x10000, 0x4a8e], @name="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"})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r7=>0x0})
sendmsg$nl_generic(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x294}, 0x1, 0x0, 0x0, 0x890}, 0x8811)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3)
bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x25dfdbfe}, 0xc)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r7, @ANYBLOB="f88596f4b42da6d12a4db82ab1ff2b5905a3f12997cce11486dfcd99f936c8a0f9e8370983c32479e1c80907236fd09728bf588e2a98507d7f5a2a88fab7ffa17e43be4a9df11fdc5801122c979a008b1d0f7450a47cef65af34f99f220a95ba37df52b077785e903c1014a465cd8fd993104aafadfc234b"], 0x1c}}, 0x0)

485.67491ms ago: executing program 4 (id=3145):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x40050, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0xfffffff8, 0x4)

187.363589ms ago: executing program 3 (id=3146):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x80000000, 0x1a)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/139, 0x8b}, 0x4}], 0x1, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

29.035933ms ago: executing program 4 (id=3147):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)={0x38, r1, 0x1, 0x80000000, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x5}]}]}, 0x38}}, 0x0)

0s ago: executing program 0 (id=3148):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000013002f0afdffffff0000000007006800", @ANYRES32=r1, @ANYBLOB="000900001020000024001a8009000100766c616e0000000014000480100004800c"], 0x44}}, 0x4050)

kernel console output (not intermixed with test programs):

32008][T10034] virt_wifi0 speed is unknown, defaulting to 1000
[  277.936369][T10031] lo speed is unknown, defaulting to 1000
[  278.117427][T10074] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  278.778862][ T1157] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  279.527695][T10077] batadv_slave_1: left promiscuous mode
[  279.897737][T10077] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.897897][ T1157] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  279.923775][T10077] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.932748][T10077] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.941751][T10077] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  280.446168][T10034] lo speed is unknown, defaulting to 1000
[  280.659097][T10105] __nla_validate_parse: 1 callbacks suppressed
[  280.659119][T10105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1002'.
[  280.696233][T10106] virt_wifi0 speed is unknown, defaulting to 1000
[  281.028543][ T3452] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  281.508184][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1005'.
[  281.543340][T10120] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1005'.
[  282.081994][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1010'.
[  282.110170][T10100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1001'.
[  282.147689][T10106] lo speed is unknown, defaulting to 1000
[  282.201162][ T1157] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  282.372288][T10143] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1012'.
[  282.711494][T10157] bridge4: entered allmulticast mode
[  283.300511][T10174] ip6gretap0: entered promiscuous mode
[  283.307011][T10174] batadv_slave_0: entered promiscuous mode
[  283.320237][T10174] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  283.330414][T10174] Cannot create hsr debugfs directory
[  283.378337][ T1157] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  283.555434][T10178] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1019'.
[  283.625138][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'.
[  283.733849][T10189] sch_tbf: burst 0 is lower than device lo mtu (39798) !
[  284.464029][T10191] A link change request failed with some changes committed already. Interface 
 may have been left with an inconsistent configuration, please check.
[  284.519559][ T6065] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  284.619164][T10206] netlink: 'syz.0.1026': attribute type 12 has an invalid length.
[  284.883745][T10218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1031'.
[  284.926640][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1029'.
[  284.940630][T10216] netlink: 'syz.0.1029': attribute type 1 has an invalid length.
[  284.996026][T10228] netlink: 'syz.2.1032': attribute type 1 has an invalid length.
[  285.007773][ T5851] block nbd2: Receive control failed (result -107)
[  285.099296][T10228] 8021q: adding VLAN 0 to HW filter on device bond0
[  285.124354][T10223] 8021q: adding VLAN 0 to HW filter on device batadv2
[  285.169435][T10223] bond0: (slave batadv2): making interface the new active one
[  285.185700][T10223] bond0: (slave batadv2): Enslaving as an active interface with an up link
[  285.213562][T10228] vlan0: entered promiscuous mode
[  285.220527][T10228] bond0: entered promiscuous mode
[  285.225699][T10228] batadv2: entered promiscuous mode
[  285.234888][T10228] bond0: left promiscuous mode
[  285.244608][T10228] batadv2: left promiscuous mode
[  285.267974][T10242] netlink: 'syz.3.1034': attribute type 32 has an invalid length.
[  285.658641][ T1157] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  285.681294][T10257] rdma_rxe: rxe_newlink: failed to add lo
[  285.867754][T10260] __nla_validate_parse: 5 callbacks suppressed
[  285.867778][T10260] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1038'.
[  285.967672][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1038'.
[  286.616706][T10284] netlink: 'syz.4.1040': attribute type 4 has an invalid length.
[  286.681329][T10284] ip6t_srh: unknown srh invflags 4000
[  286.742587][T10275] delete_channel: no stack
[  286.780363][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  287.142085][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1050'.
[  287.187292][T10300] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  287.197848][T10300] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  287.206327][T10300] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  287.566539][T10312] virt_wifi0 speed is unknown, defaulting to 1000
[  287.687207][T10305] netlink: 'syz.1.1051': attribute type 1 has an invalid length.
[  287.948692][ T6045] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  288.379625][T10329] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1055'.
[  288.736275][T10333] netlink: 'syz.3.1056': attribute type 10 has an invalid length.
[  289.118346][ T6064] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  289.416121][T10331] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  289.445233][T10331] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  289.482799][T10331] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  289.508051][T10331] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  289.685968][T10337] ªªªªª: left promiscuous mode
[  289.708237][T10337] ªªªªª: left allmulticast mode
[  289.739887][T10337] 8021q: adding VLAN 0 to HW filter on device bond0
[  289.759062][T10337] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  289.837718][T10333] 
: (slave netdevsim0): Releasing backup interface
[  289.873792][T10333] team0: Port device netdevsim0 added
[  289.919349][T10312] lo speed is unknown, defaulting to 1000
[  290.473861][T10347] delete_channel: no stack
[  290.813212][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1062'.
[  291.053698][T10371] tipc: Started in network mode
[  291.062144][T10371] tipc: Node identity 6e66e17d9925, cluster identity 4711
[  291.073026][T10371] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  291.129059][T10371] tipc: Disabling bearer <eth:syzkaller0>
[  291.171157][ T6026] IPVS: starting estimator thread 0...
[  291.308063][T10375] IPVS: using max 20 ests per chain, 48000 per kthread
[  291.416632][T10380] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1065'.
[  291.508732][T10288] Set syz1 is full, maxelem 65536 reached
[  291.680349][T10382] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  291.696108][T10392] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1068'.
[  291.725437][T10391] virt_wifi0 speed is unknown, defaulting to 1000
[  291.934735][T10402] netlink: 'syz.3.1070': attribute type 1 has an invalid length.
[  291.949002][T10402] netlink: 'syz.3.1070': attribute type 4 has an invalid length.
[  291.978090][T10402] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.1070'.
[  292.237329][T10383] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  292.341545][T10391] lo speed is unknown, defaulting to 1000
[  292.355095][T10400] rdma_rxe: rxe_newlink: failed to add lo
[  292.511863][T10377] netlink: 'syz.1.1066': attribute type 10 has an invalid length.
[  292.820407][T10417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'.
[  292.958446][T10426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1074'.
[  293.067541][T10428] xt_nfacct: accounting object `syz1' does not exists
[  293.665264][T10437] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1078'.
[  293.680193][T10437] netlink: 'syz.4.1078': attribute type 1 has an invalid length.
[  293.690377][T10437] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1078'.
[  293.822592][T10439] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1079'.
[  293.855715][T10439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1079'.
[  293.865108][T10443] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  293.874091][T10439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1079'.
[  293.913425][T10447] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  294.554073][T10458] delete_channel: no stack
[  296.510244][T10533] __nla_validate_parse: 16 callbacks suppressed
[  296.510275][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1099'.
[  296.583150][T10523] delete_channel: no stack
[  296.734864][T10543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1101'.
[  296.744190][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1101'.
[  296.757586][T10543] netlink: 'syz.3.1101': attribute type 3 has an invalid length.
[  296.765504][T10543] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1101'.
[  297.163181][T10560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1105'.
[  297.395627][T10566] bridge6: entered promiscuous mode
[  297.401487][T10566] bridge6: entered allmulticast mode
[  297.444592][T10570] netlink: 'syz.2.1106': attribute type 10 has an invalid length.
[  298.543960][T10602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1116'.
[  298.621268][T10590] delete_channel: no stack
[  299.031583][T10632] xt_nfacct: accounting object `syz1' does not exists
[  299.362394][T10641] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11
[  299.405850][T10641] syzkaller1: entered promiscuous mode
[  299.416335][T10641] syzkaller1: entered allmulticast mode
[  299.477470][T10608] lo speed is unknown, defaulting to 1000
[  300.228762][T10666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1131'.
[  301.239759][T10691] x_tables: duplicate underflow at hook 2
[  302.162894][T10680] lo speed is unknown, defaulting to 1000
[  302.712075][T10727] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  303.356433][T10739] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  303.364917][T10739] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  304.063870][T10751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1152'.
[  304.104595][T10729] lo speed is unknown, defaulting to 1000
[  304.567264][T10760] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  306.147714][T10784] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 4, id = 0
[  306.944442][T10775] batman_adv: batadv0: Interface activated: batadv_slave_1
[  307.267706][T10813] bond0: (slave team0): Releasing backup interface
[  307.402327][T10813] bond0: (slave bond_slave_0): Releasing backup interface
[  307.480200][T10813] bond0: (slave bond_slave_1): Releasing backup interface
[  307.577888][T10813] infiniband syz1: set down
[  307.588534][T10813] team0: Port device team_slave_0 removed
[  307.613901][T10813] team0: Port device team_slave_1 removed
[  307.631620][T10813] bond0: (slave netdevsim0): Releasing backup interface
[  307.645494][T10813] bond0: (slave 
): Releasing backup interface
[  307.683833][T10813] team0: Port device bridge1 removed
[  307.692887][T10772] lo speed is unknown, defaulting to 1000
[  307.729840][T10814] team0: Mode changed to "loadbalance"
[  307.744457][T10832] netlink: 'syz.4.1168': attribute type 1 has an invalid length.
[  307.795049][T10832] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1168'.
[  307.875200][T10826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1169'.
[  308.151901][T10801] lo speed is unknown, defaulting to 1000
[  308.168077][T10800] siw: device registration error -23
[  308.180128][ T6045] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:1c71:cdff:fe54:cf11 error=-28
[  309.136760][T10850] lo speed is unknown, defaulting to 1000
[  309.288051][T10862] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1176'.
[  309.735230][ T6026] hid-generic 0005:07C0:0058.0002: item fetching failed at offset 0/1
[  309.745244][ T6026] hid-generic 0005:07C0:0058.0002: probe with driver hid-generic failed with error -22
[  309.768460][T10863] bridge0: port 3(ip6gretap0) entered disabled state
[  309.802784][T10863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  310.033355][T10865] bridge0: port 3(ip6gretap0) entered blocking state
[  310.040354][T10865] bridge0: port 3(ip6gretap0) entered forwarding state
[  310.096479][T10865] 8021q: adding VLAN 0 to HW filter on device 

[  310.115912][T10865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  310.562523][T10883] dvmrp5: entered allmulticast mode
[  310.589887][T10885] xt_l2tp: missing protocol rule (udp|l2tpip)
[  310.607085][T10883] hsr0: left allmulticast mode
[  310.627319][T10883] hsr_slave_0: left allmulticast mode
[  310.632762][T10883] hsr_slave_1: left allmulticast mode
[  310.649650][T10885] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1181'.
[  310.718890][T10880] delete_channel: no stack
[  310.733417][T10882] dvmrp5: left allmulticast mode
[  311.312522][T10907] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1188'.
[  311.335212][T10906] syzkaller1: entered promiscuous mode
[  311.376213][T10906] syzkaller1: entered allmulticast mode
[  311.504118][T10899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  311.776234][T10907] 8021q: adding VLAN 0 to HW filter on device 

[  311.804415][T10907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  311.939258][T10910] erspan1: entered promiscuous mode
[  311.957110][T10910] erspan1: entered allmulticast mode
[  312.620539][T10910] netlink: 'syz.2.1190': attribute type 21 has an invalid length.
[  312.637365][T10910] netlink: 'syz.2.1190': attribute type 6 has an invalid length.
[  312.664129][T10910] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1190'.
[  313.424177][T10952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1201'.
[  313.454073][T10963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  313.507841][ T5839] Bluetooth: hci4: command 0x0406 tx timeout
[  314.064487][T10972] syzkaller0: entered promiscuous mode
[  314.083933][T10972] syzkaller0: entered allmulticast mode
[  314.137369][T10975] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1207'.
[  314.391579][T10980] tipc: Started in network mode
[  314.396656][T10980] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  314.414175][T10980] tipc: Enabled bearer <eth:ipvlan0>, priority 0
[  314.760257][T10998] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1212'.
[  315.540236][ T5918] tipc: Node number set to 10136234
[  315.593421][T10991] delete_channel: no stack
[  316.047760][T11015] Cannot find add_set index 32768 as target
[  317.597256][T11016] delete_channel: no stack
[  317.809031][T11014] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  317.822813][T11014] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  317.840939][T11014] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  318.043375][T11027] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1220'.
[  318.307719][T11041] xt_socket: unknown flags 0x8
[  318.331894][T11041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1221'.
[  318.585572][T11048] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1224'.
[  318.590778][T11049] netlink: 'syz.3.1223': attribute type 1 has an invalid length.
[  319.243228][T11072] sch_tbf: burst 0 is lower than device lo mtu (39798) !
[  319.559119][T11087] netlink: 'syz.4.1233': attribute type 1 has an invalid length.
[  319.567243][T11087] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1233'.
[  319.594778][T11088] netlink: 'syz.2.1232': attribute type 1 has an invalid length.
[  319.610802][T11088] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1232'.
[  320.009569][T11070] lo speed is unknown, defaulting to 1000
[  320.119532][T11102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1237'.
[  320.254257][T11116] netlink: 'syz.0.1239': attribute type 1 has an invalid length.
[  320.310097][T11116] bond1: entered promiscuous mode
[  320.327601][T11118] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1239'.
[  320.339361][T11116] 8021q: adding VLAN 0 to HW filter on device bond1
[  320.355954][T11118] batadv0: entered promiscuous mode
[  320.361498][T11118] batadv0: entered allmulticast mode
[  320.370443][T11118] 8021q: adding VLAN 0 to HW filter on device batadv0
[  320.392889][T11118] bond1: (slave batadv0): making interface the new active one
[  320.413727][T11118] bond1: (slave batadv0): Enslaving as an active interface with an up link
[  320.954204][T11125] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  321.077904][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1244'.
[  321.743542][T11162] rdma_rxe: rxe_newlink: failed to add lo
[  322.417164][T11157] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  322.602938][T11168] bridge8: entered promiscuous mode
[  322.621510][T11168] bridge8: entered allmulticast mode
[  322.634317][T11168] team0: Port device bridge8 added
[  322.729854][T11178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1253'.
[  322.804777][T11168] netlink: 'syz.0.1260': attribute type 10 has an invalid length.
[  322.826010][T11168] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  322.866509][T11168] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  322.886865][T11175] bridge0: port 1(ip6gretap0) entered blocking state
[  322.895495][T11175] bridge0: port 1(ip6gretap0) entered disabled state
[  322.907401][T11175] ip6gretap0: entered allmulticast mode
[  322.914741][T11175] ip6gretap0: entered promiscuous mode
[  323.038479][T11167] lo speed is unknown, defaulting to 1000
[  323.564616][T11194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  323.674379][T11203] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1256'.
[  324.220793][T11216] pimreg: entered allmulticast mode
[  324.240080][T11216] pimreg: left allmulticast mode
[  324.336772][T11221] bridge0: port 3(ip6gretap0) entered disabled state
[  324.350931][T11221] A link change request failed with some changes committed already. Interface 
 may have been left with an inconsistent configuration, please check.
[  324.395395][ T5851] Bluetooth: hci4: link tx timeout
[  324.400870][ T5851] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  324.410522][ T5851] Bluetooth: hci4: link tx timeout
[  324.415695][ T5851] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  324.543205][T11220] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1263'.
[  324.702533][T11231] netlink: 'syz.1.1267': attribute type 10 has an invalid length.
[  324.728548][T11236] bridge5: entered promiscuous mode
[  324.733798][T11236] bridge5: entered allmulticast mode
[  326.472285][ T5851] Bluetooth: hci4: command 0x0406 tx timeout
[  327.170715][T11236] bridge0: port 1(ip6gretap0) entered blocking state
[  327.177954][T11236] bridge0: port 1(ip6gretap0) entered disabled state
[  327.184955][T11236] ip6gretap0: entered allmulticast mode
[  327.192175][T11236] ip6gretap0: left allmulticast mode
[  327.215708][T11271] netlink: 'syz.2.1272': attribute type 1 has an invalid length.
[  327.241311][T11271] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1272'.
[  327.511725][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1277'.
[  327.923600][T11296] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  328.092465][T11305] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  328.570574][T11310] veth0_vlan: left allmulticast mode
[  328.623392][T11310] bridge1: left promiscuous mode
[  328.631188][T11310] bridge1: left allmulticast mode
[  328.644154][T11310] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  328.655822][T11310] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  328.671344][T11310] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  328.681707][T11310] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  328.761886][T11310] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  328.793859][T11310] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  328.813112][T11310] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  328.822410][T11310] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  328.860543][T11310] bond1: left promiscuous mode
[  328.872521][T11310] batadv0: left promiscuous mode
[  328.879915][T11310] batadv0: left allmulticast mode
[  328.886576][T11310] bridge8: left promiscuous mode
[  328.894894][T11310] bridge8: left allmulticast mode
[  328.915324][T11315] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1284'.
[  329.328985][T11344] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  329.521778][T11353] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1296'.
[  329.536525][T11353] netlink: 'syz.1.1296': attribute type 1 has an invalid length.
[  329.544915][T11353] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1296'.
[  329.745037][T11346] veth0_to_bond: left promiscuous mode
[  330.220773][T11346] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  330.487226][T11371] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1301'.
[  331.108690][T11401] sctp: [Deprecated]: syz.2.1309 (pid 11401) Use of int in max_burst socket option deprecated.
[  331.108690][T11401] Use struct sctp_assoc_value instead
[  331.302721][T11407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1310'.
[  331.348548][T11407] ip6gretap0: left allmulticast mode
[  331.357424][T11407] ip6gretap0: left promiscuous mode
[  331.384575][T11407] bridge0: port 1(ip6gretap0) entered disabled state
[  331.602573][T11423] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1314'.
[  331.624551][T11423] netlink: 'syz.4.1314': attribute type 1 has an invalid length.
[  331.856604][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1316'.
[  331.875417][T11428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1316'.
[  332.045105][T11434] netlink: 'syz.3.1319': attribute type 1 has an invalid length.
[  332.278699][T11438] __nla_validate_parse: 2 callbacks suppressed
[  332.278725][T11438] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1320'.
[  332.898284][T11453] netlink: 'syz.0.1324': attribute type 9 has an invalid length.
[  332.906180][T11453] netlink: 'syz.0.1324': attribute type 7 has an invalid length.
[  332.927261][T11453] netlink: 'syz.0.1324': attribute type 8 has an invalid length.
[  333.862407][T11471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1326'.
[  335.393422][T11471] ip6gretap0: left allmulticast mode
[  335.401485][T11471] ip6gretap0: left promiscuous mode
[  335.406934][T11471] bridge0: port 3(ip6gretap0) entered disabled state
[  335.484500][T11471] bridge_slave_1: left allmulticast mode
[  335.511408][T11471] bridge_slave_1: left promiscuous mode
[  335.521752][T11471] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.572853][T11471] bridge_slave_0: left allmulticast mode
[  335.591239][T11471] bridge_slave_0: left promiscuous mode
[  335.602421][T11471] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.700264][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1330'.
[  335.858881][T11488] netlink: 'syz.1.1332': attribute type 1 has an invalid length.
[  335.878156][T11488] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1332'.
[  335.886913][T11460] lo speed is unknown, defaulting to 1000
[  335.938347][T11490] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1334'.
[  335.976925][T11164] IPVS: starting estimator thread 0...
[  336.077207][T11493] IPVS: using max 19 ests per chain, 45600 per kthread
[  336.196317][T11484] delete_channel: no stack
[  336.281108][T11498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1334'.
[  336.737640][T11514] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1338'.
[  337.016892][T11522] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  337.220148][T11492] lo speed is unknown, defaulting to 1000
[  337.510227][T11533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1345'.
[  337.562147][T11495] batman_adv: batadv0: Interface activated: batadv_slave_1
[  337.586672][T11533] ip6gretap0: left allmulticast mode
[  337.594049][T11533] ip6gretap0: left promiscuous mode
[  337.614212][T11533] bridge0: port 1(ip6gretap0) entered disabled state
[  338.109292][T11525] lo speed is unknown, defaulting to 1000
[  338.115898][T11526] siw: device registration error -23
[  338.437624][T11552] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1350'.
[  338.457872][T11552] unsupported nlmsg_type 40
[  338.896919][T11566] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1353'.
[  339.127454][T11559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1349'.
[  340.119234][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1356'.
[  341.577235][T11583] sch_tbf: burst 0 is lower than device lo mtu (39798) !
[  341.797673][T11590] Cannot find del_set index 2416 as target
[  342.266886][T11610] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  342.296832][T11611] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  343.491624][T11638] veth0_to_team: entered promiscuous mode
[  343.527263][T11638] veth0_to_team: entered allmulticast mode
[  343.610216][T11637] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1372'.
[  343.760418][T11637] tap0: tun_chr_ioctl cmd 1074025677
[  343.766678][T11637] tap0: linktype set to 0
[  344.136573][T11668] sch_tbf: burst 0 is lower than device lo mtu (39798) !
[  344.306730][T11675] A link change request failed with some changes committed already. Interface 
 may have been left with an inconsistent configuration, please check.
[  344.979107][T11693] netlink: 'syz.4.1390': attribute type 21 has an invalid length.
[  344.998845][T11693] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1390'.
[  345.019566][T11693] netlink: 'syz.4.1390': attribute type 5 has an invalid length.
[  345.037457][T11693] netlink: 'syz.4.1390': attribute type 6 has an invalid length.
[  345.057304][T11693] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1390'.
[  345.351576][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1393'.
[  345.502276][T11707] sch_tbf: burst 0 is lower than device lo mtu (39798) !
[  345.660591][T11711] sch_tbf: burst 0 is lower than device lo mtu (39798) !
[  345.879613][T11595] Set syz1 is full, maxelem 65536 reached
[  346.106900][T11726] netlink: 'syz.3.1402': attribute type 31 has an invalid length.
[  346.358212][T11739] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  347.102804][T11782] sch_tbf: burst 0 is lower than device lo mtu (39798) !
[  347.207497][T11788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1429'.
[  347.492572][T11802] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  347.824104][T11824] A link change request failed with some changes committed already. Interface 
 may have been left with an inconsistent configuration, please check.
[  347.938649][T11828] netlink: 'syz.0.1444': attribute type 1 has an invalid length.
[  347.961925][T11828] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1444'.
[  348.244620][T11838] xt_CT: No such helper "netbios-ns"
[  348.738509][T11863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1454'.
[  349.409103][T11889] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1462'.
[  350.277516][T11913] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1472'.
[  350.855184][T11924] A link change request failed with some changes committed already. Interface 
 may have been left with an inconsistent configuration, please check.
[  350.919790][T11926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1478'.
[  351.222910][T11930] netlink: 'syz.2.1480': attribute type 1 has an invalid length.
[  351.234008][T11930] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1480'.
[  351.532706][T11942] sch_tbf: burst 0 is lower than device lo mtu (39798) !
[  351.624201][T11919] Can't find ip_set type hash:ip,por
[  351.743254][T11844] Set syz1 is full, maxelem 65536 reached
[  351.801948][T11950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1486'.
[  352.214949][T11967] netlink: 'syz.4.1493': attribute type 1 has an invalid length.
[  352.223547][T11968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'.
[  352.247502][T11967] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1493'.
[  352.642137][T11989] xt_TCPMSS: Only works on TCP SYN packets
[  353.633479][T12020] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1514'.
[  353.842265][T12031] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  353.909271][T12033] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1520'.
[  354.012855][T12044] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  354.169157][T12053] IPv6: sit1: Disabled Multicast RS
[  354.476012][T12064] netlink: zone id is out of range
[  354.494918][T12064] netlink: set zone limit has 8 unknown bytes
[  354.773601][T12070] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1535'.
[  354.874698][T12075] A link change request failed with some changes committed already. Interface 
 may have been left with an inconsistent configuration, please check.
[  355.380356][T12113] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1542'.
[  357.251885][T12097] sch_tbf: burst 0 is lower than device lo mtu (39798) !
[  357.355826][T12125] openvswitch: netlink: Tunnel attr 216 out of range max 16
[  357.502621][T12130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1553'.
[  358.076770][T12159] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1565'.
[  358.193607][T12146] delete_channel: no stack
[  359.379270][T12203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1580'.
[  359.443773][T12216] A link change request failed with some changes committed already. Interface 
 may have been left with an inconsistent configuration, please check.
[  359.838542][T12225] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1587'.
[  360.983714][T12248] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1594'.
[  361.771957][ T5851] Bluetooth: hci4: command 0x0406 tx timeout
[  362.837565][T12242] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1593'.
[  362.860957][T12242] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  363.009617][T12248] 8021q: adding VLAN 0 to HW filter on device 

[  363.018671][T12248] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  363.042538][T12253] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  363.499765][T12270] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  363.974713][T12292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1609'.
[  364.233471][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1615'.
[  364.407845][T12315] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1616'.
[  364.425801][T12315] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1616'.
[  364.442259][T12315] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1616'.
[  364.964942][T12345] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1627'.
[  365.208840][T12358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1631'.
[  365.958063][T12404] netlink: 'syz.0.1647': attribute type 29 has an invalid length.
[  366.328943][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1657'.
[  366.780953][T12447] smc: net device bond0 applied user defined pnetid SYZ0
[  367.242891][T12466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1674'.
[  367.704397][T12450] delete_channel: no stack
[  369.053649][T12517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1689'.
[  370.976878][T12566] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  371.396526][T12571] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1707'.
[  374.436234][T12607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1721'.
[  374.534482][T12613] netlink: zone id is out of range
[  374.540019][T12613] netlink: zone id is out of range
[  374.548660][T12613] netlink: zone id is out of range
[  374.569642][T12613] netlink: zone id is out of range
[  374.584433][T12613] netlink: zone id is out of range
[  374.602685][T12613] netlink: zone id is out of range
[  374.617500][T12613] netlink: zone id is out of range
[  374.642246][T12615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1724'.
[  374.657228][T12613] netlink: zone id is out of range
[  374.662410][T12613] netlink: zone id is out of range
[  375.872272][T12670] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1742'.
[  375.882252][T12668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1741'.
[  376.059442][T12675] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  376.818330][T12712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1754'.
[  377.209290][T12732] sch_tbf: burst 0 is lower than device lo mtu (39798) !
[  377.287476][T12733] IPVS: Unknown mcast interface: syzkaller0
[  377.378477][T12718] delete_channel: no stack
[  377.475091][T12747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1762'.
[  377.477405][T12746] netlink: 'syz.2.1764': attribute type 1 has an invalid length.
[  377.500826][T12746] netlink: 'syz.2.1764': attribute type 2 has an invalid length.
[  377.902770][T12769] net_ratelimit: 308 callbacks suppressed
[  377.902788][T12769] A link change request failed with some changes committed already. Interface 
 may have been left with an inconsistent configuration, please check.
[  378.266913][T12781] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  378.532202][T12791] xt_CT: You must specify a L4 protocol and not use inversions on it
[  378.864209][T12798] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1780'.
[  380.915251][T12814] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  381.177322][T12839] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  381.335408][T12842] IPVS: Error connecting to the multicast addr
[  381.429215][T12846] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  381.592847][T12856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1800'.
[  381.643857][T12859] sch_tbf: burst 0 is lower than device lo mtu (39798) !
[  381.854226][T12869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1807'.
[  381.986357][T12874] netlink: 'syz.1.1809': attribute type 4 has an invalid length.
[  381.995356][T12874] netlink: 'syz.1.1809': attribute type 2 has an invalid length.
[  382.195048][T12882] netlink: 'syz.2.1813': attribute type 1 has an invalid length.
[  382.213099][T12880] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  382.224048][T12882] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1813'.
[  382.253396][T12882] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1813'.
[  382.405335][T12888] sch_tbf: burst 0 is lower than device lo mtu (39798) !
[  382.618898][T12896] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1820'.
[  382.666005][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1819'.
[  383.493363][T12939] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  383.543824][T12941] tun0: tun_chr_ioctl cmd 2147767519
[  384.082731][T12959] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1840'.
[  386.623091][T12971] 8021q: adding VLAN 0 to HW filter on device bond3
[  386.635300][T12971] bond0: (slave bond3): Enslaving as an active interface with an up link
[  386.845135][T12996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1849'.
[  386.944560][T13005] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1851'.
[  387.215362][T13017] vlan0: entered allmulticast mode
[  387.221264][T13017] macvlan1: entered allmulticast mode
[  387.251393][T13017] macvlan1: left allmulticast mode
[  387.582003][T13034] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1865'.
[  387.692732][T13035] xt_CT: No such helper "netbios-ns"
[  387.755299][T13040] tun0: tun_chr_ioctl cmd 1074025677
[  387.804659][T13040] tun0: linktype set to 270
[  388.108177][T13065] Bluetooth: MGMT ver 1.23
[  388.339610][T13076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1876'.
[  388.511453][T13086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1878'.
[  388.883328][T13106] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1883'.
[  389.569937][T13142] A link change request failed with some changes committed already. Interface 
 may have been left with an inconsistent configuration, please check.
[  389.897141][T13151] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  390.008139][T13160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1902'.
[  390.775489][T13190] A link change request failed with some changes committed already. Interface 
 may have been left with an inconsistent configuration, please check.
[  391.410132][T13204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1916'.
[  393.103651][T13255] tun0: tun_chr_ioctl cmd 1074025677
[  393.109284][T13255] tun0: linktype set to 823
[  393.254104][T13264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1933'.
[  394.353050][T13302] sch_tbf: burst 0 is lower than device lo mtu (39798) !
[  394.436250][T13305] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  394.582825][T13313] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  395.536008][T13356] tipc: Enabled bearer <eth:geneve1>, priority 0
[  395.630662][T13363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1961'.
[  396.204420][T13387] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536
[  397.197784][T13432] syzkaller1: entered promiscuous mode
[  397.203517][T13432] syzkaller1: entered allmulticast mode
[  397.336025][T13440] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  397.354637][T13438] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1984'.
[  397.629742][T13453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1987'.
[  397.701973][T13458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1990'.
[  397.859701][T13462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1992'.
[  399.717552][T13469] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  401.333720][T13544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2018'.
[  401.551852][T13539] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2016'.
[  401.808648][T13571] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2025'.
[  401.975482][T13579] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  401.994592][T13575] netlink: 'syz.3.2026': attribute type 1 has an invalid length.
[  402.003108][T13575] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2026'.
[  402.174234][T13585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2029'.
[  402.231397][T13594] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2034'.
[  402.251724][T13594] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  402.496162][T13607] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  402.892335][T13621] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  403.215825][T13626] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2044'.
[  403.845583][T13661] netlink: 604 bytes leftover after parsing attributes in process `syz.0.2053'.
[  404.126643][T13667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2054'.
[  405.486351][T13658] netlink: 'syz.0.2053': attribute type 29 has an invalid length.
[  405.643648][T13671] netlink: 'syz.1.2055': attribute type 1 has an invalid length.
[  405.680740][T13671] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2055'.
[  405.713423][T13678] syzkaller1: entered promiscuous mode
[  405.719034][T13678] syzkaller1: entered allmulticast mode
[  405.726814][T13679] sch_tbf: burst 0 is lower than device lo mtu (39798) !
[  406.047891][T13693] netlink: 'syz.1.2062': attribute type 1 has an invalid length.
[  406.087288][T13694] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  406.432286][T13719] __nla_validate_parse: 2 callbacks suppressed
[  406.432308][T13719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2068'.
[  406.507762][T13721] netlink: 'syz.0.2073': attribute type 1 has an invalid length.
[  406.531148][T13721] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2073'.
[  406.616682][T13730] netlink: 'syz.4.2077': attribute type 1 has an invalid length.
[  406.625056][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2077'.
[  407.026771][T13755] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  407.534521][T13778] netlink: 264 bytes leftover after parsing attributes in process `syz.4.2091'.
[  407.635896][T13782] syz.2.2093[13782] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  407.636005][T13782] syz.2.2093[13782] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  407.667526][T13782] syz.2.2093[13782] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  407.802513][T13790] netlink: 'syz.0.2097': attribute type 1 has an invalid length.
[  407.836120][T13788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2096'.
[  407.845950][T13790] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2097'.
[  407.950068][T13799] netlink: 'syz.1.2100': attribute type 12 has an invalid length.
[  408.403316][T13821] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  409.177199][T13850] netlink: 'syz.4.2117': attribute type 9 has an invalid length.
[  409.476914][T13860] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  410.367821][T13895] sctp: [Deprecated]: syz.2.2136 (pid 13895) Use of struct sctp_assoc_value in delayed_ack socket option.
[  410.367821][T13895] Use struct sctp_sack_info instead
[  410.578884][T13904] sch_tbf: burst 0 is lower than device lo mtu (39798) !
[  410.977566][T13877] lo speed is unknown, defaulting to 1000
[  411.177904][T13879] netlink: 'syz.4.2128': attribute type 4 has an invalid length.
[  411.185832][T13879] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2128'.
[  411.795990][T13922] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  412.202292][T13940] sch_tbf: burst 0 is lower than device lo mtu (39798) !
[  412.412949][T13946] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2153'.
[  414.850168][T13953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  414.865809][T13966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  415.472575][T14003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2165'.
[  416.184423][T14026] netlink: 'syz.1.2172': attribute type 5 has an invalid length.
[  416.400279][T14038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2174'.
[  418.134024][T14069] syzkaller1: entered promiscuous mode
[  418.171618][T14069] syzkaller1: entered allmulticast mode
[  418.207758][T14074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2186'.
[  419.255831][T14103] syzkaller1: tun_chr_ioctl cmd 1074025677
[  419.274737][T14103] syzkaller1: Linktype set failed because interface is up
[  419.307366][ T5891] syzkaller1: tun_net_xmit 90
[  419.889279][T14131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2204'.
[  420.353102][T14155] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  420.512445][T14168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2218'.
[  420.638889][T14171] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  421.583537][T14186] lo speed is unknown, defaulting to 1000
[  421.719942][T14213] A link change request failed with some changes committed already. Interface 
 may have been left with an inconsistent configuration, please check.
[  423.144015][T14256] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2245'.
[  423.319033][T14271] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  423.449613][T14269] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  423.475832][T14278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2251'.
[  424.052218][T14313] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2260'.
[  424.191239][T14321] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2261'.
[  424.627305][T14336] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2268'.
[  424.668208][T14336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2268'.
[  425.649213][T14377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2284'.
[  425.688680][T14375] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  425.769106][T14347] lo speed is unknown, defaulting to 1000
[  426.043817][T14391] syz.3.2288[14391] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  426.043952][T14391] syz.3.2288[14391] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  426.056808][T14391] syz.3.2288[14391] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  426.148411][T14394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2286'.
[  426.890254][T14413] syzkaller1: entered promiscuous mode
[  426.927443][T14413] syzkaller1: entered allmulticast mode
[  427.001055][T14382] lo speed is unknown, defaulting to 1000
[  427.094063][T14425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2298'.
[  427.372631][T14435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2301'.
[  428.024562][T14449] netlink: 'syz.1.2307': attribute type 1 has an invalid length.
[  428.045001][T14449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2307'.
[  428.620422][T14469] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  428.983534][ T6026] IPVS: starting estimator thread 0...
[  429.112107][T14483] IPVS: using max 18 ests per chain, 43200 per kthread
[  429.438445][T14501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2324'.
[  432.188547][T14547] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2342'.
[  434.856118][T14598] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2357'.
[  435.669737][T14623] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2366'.
[  436.505689][T14667] netlink: 'syz.2.2372': attribute type 1 has an invalid length.
[  437.935024][T14636] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  437.941048][T14667] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  438.057365][T14675] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  438.085577][T14676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2373'.
[  438.263782][T14690] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2379'.
[  440.331464][T14732] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2389'.
[  441.047287][T14740] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  441.078819][T14741] syz.2.2392[14741] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  441.078937][T14741] syz.2.2392[14741] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  441.116277][T14746] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2392'.
[  441.153350][T14741] syz.2.2392[14741] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  441.176834][T14748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2395'.
[  441.243405][T14748] netlink: 'syz.3.2395': attribute type 7 has an invalid length.
[  441.251662][T14748] netlink: 'syz.3.2395': attribute type 8 has an invalid length.
[  441.270272][T14748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2395'.
[  441.336444][T14759] netlink: 'syz.2.2399': attribute type 1 has an invalid length.
[  441.379230][T14759] 8021q: adding VLAN 0 to HW filter on device bond2
[  441.416522][T14767] bond2: (slave ip6gretap1): making interface the new active one
[  441.440335][T14767] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  441.466906][T14767] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  441.476694][T14767] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  441.511455][ T6045] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  441.560449][ T5891] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  441.579274][T14768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2398'.
[  441.757597][ T3452] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  441.967264][T14792] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2404'.
[  441.998680][ T5891] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  442.468686][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  442.753269][T14812] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  442.810114][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  442.846596][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  443.079271][T14832] syzkaller0: entered allmulticast mode
[  443.090774][T14832] syzkaller0 (unregistering): left allmulticast mode
[  443.587273][ T3452] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  445.600155][T14862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2432'.
[  446.299300][T14902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2448'.
[  446.349997][T14906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2450'.
[  446.690092][T14919] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2456'.
[  446.947312][    C1] ip6_tnl_xmit_ctl: 3 callbacks suppressed
[  446.947337][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  447.008525][ T6065] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  447.148542][T14948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2465'.
[  447.181954][T14947] A link change request failed with some changes committed already. Interface 
 may have been left with an inconsistent configuration, please check.
[  447.860811][T14963] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2473'.
[  447.966857][T14969] netlink: 940 bytes leftover after parsing attributes in process `syz.2.2475'.
[  447.999935][T14969] netlink: 940 bytes leftover after parsing attributes in process `syz.2.2475'.
[  448.038137][T14968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2476'.
[  448.219369][ T6065] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  448.604145][T15002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2485'.
[  449.378128][ T6069] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  450.015019][T15051] tipc: Enabled bearer <eth:xfrm0>, priority 10
[  450.281444][T15060] A link change request failed with some changes committed already. Interface 
 may have been left with an inconsistent configuration, please check.
[  450.528674][ T6045] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  450.568715][T15076] netlink: 'syz.3.2513': attribute type 4 has an invalid length.
[  450.582609][T15076] netlink: 'syz.3.2513': attribute type 4 has an invalid length.
[  451.256632][T15100] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  451.649063][ T3452] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  451.676582][T15119] __nla_validate_parse: 2 callbacks suppressed
[  451.676604][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2527'.
[  452.064853][T15124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2529'.
[  452.777242][ T3452] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  453.917318][ T6065] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  455.068511][ T6065] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  455.587192][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  455.766641][T15213] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  456.178744][T15220] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  456.216755][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  456.505071][T15235] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2563'.
[  457.339510][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  457.636208][T15254] ip6gre2: entered allmulticast mode
[  458.044482][T15266] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  458.068154][T15266] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  458.217277][T15275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2574'.
[  458.251088][T15275] netlink: 'syz.0.2574': attribute type 2 has an invalid length.
[  458.497786][ T6045] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  458.519999][T15284] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2577'.
[  459.042688][T15292] syzkaller0: entered promiscuous mode
[  459.048382][T15292] syzkaller0: entered allmulticast mode
[  459.612235][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  460.737191][ T6064] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  461.678904][T15296] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  461.844074][T15313] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  461.858430][ T6065] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  461.864778][T15313] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  461.911399][T15313] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2584'.
[  461.973224][T15322] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2586'.
[  462.278944][T15334] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2592'.
[  462.958228][T15342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2592'.
[  462.988857][ T6065] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  463.654803][T15371] netlink: 'syz.2.2603': attribute type 1 has an invalid length.
[  463.712688][T15371] 8021q: adding VLAN 0 to HW filter on device bond3
[  463.762092][T15374] 8021q: adding VLAN 0 to HW filter on device bond4
[  463.781584][T15374] bond3: (slave bond4): Enslaving as an active interface with a down link
[  463.797111][T15360] lo speed is unknown, defaulting to 1000
[  463.893944][T15371] 8021q: adding VLAN 0 to HW filter on device bond5
[  463.931208][T15371] bond3: (slave bond5): Enslaving as an active interface with a down link
[  464.023354][T15371] 8021q: adding VLAN 0 to HW filter on device bond6
[  464.053344][T15371] bond3: (slave bond6): Enslaving as an active interface with a down link
[  464.126485][ T6064] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  464.937136][T15397] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2611'.
[  465.107735][T15402] netlink: 'syz.0.2612': attribute type 39 has an invalid length.
[  465.231779][ T6065] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  465.579999][T15409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2615'.
[  465.893005][T15418] bridge0: entered promiscuous mode
[  465.939341][T15420] netlink: 'syz.3.2619': attribute type 4 has an invalid length.
[  465.947503][T15418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2618'.
[  465.996847][T15421] netlink: 'syz.3.2619': attribute type 4 has an invalid length.
[  466.294083][T15418] bridge0 (unregistering): left promiscuous mode
[  466.486504][T15428] vlan0: entered promiscuous mode
[  466.754396][T15436] netlink: 'syz.2.2625': attribute type 1 has an invalid length.
[  466.785447][T15434] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  466.835329][T15436] 8021q: adding VLAN 0 to HW filter on device bond7
[  466.865110][ T6065] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  466.902271][T15443] bond7: (slave gretap3): making interface the new active one
[  466.931252][T15445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  466.934094][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2627'.
[  466.980447][T15443] bond7: (slave gretap3): Enslaving as an active interface with an up link
[  467.372348][T15454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2630'.
[  467.422784][T15454] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link
[  467.441836][T15454] 8021q: adding VLAN 0 to HW filter on device bond8
[  467.588181][T15463] sch_tbf: burst 0 is lower than device lo mtu (39798) !
[  468.261306][ T6069] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  468.394786][T15485] netlink: 'syz.0.2639': attribute type 1 has an invalid length.
[  468.492014][T15485] 8021q: adding VLAN 0 to HW filter on device bond3
[  468.569629][T15489] 8021q: adding VLAN 0 to HW filter on device bond3
[  468.650229][T15489] bond3: (slave vcan1): The slave device specified does not support setting the MAC address
[  468.681886][T15489] bond3: (slave vcan1): Error -95 calling set_mac_address
[  468.746889][T15490] 8021q: adding VLAN 0 to HW filter on device batadv1
[  468.786340][T15490] bond3: (slave batadv1): making interface the new active one
[  468.813131][T15490] bond3: (slave batadv1): Enslaving as an active interface with an up link
[  468.938313][T15492] syzkaller0: entered promiscuous mode
[  468.954095][T15492] syzkaller0: entered allmulticast mode
[  469.410368][ T3452] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  470.535098][ T6065] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  471.591623][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  471.658257][ T3452] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  472.595818][T15529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  472.791047][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  472.925389][T15546] syzkaller0: entered promiscuous mode
[  472.931582][T15546] syzkaller0: entered allmulticast mode
[  473.186014][T15559] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2657'.
[  473.948352][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  473.984229][T15573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2660'.
[  473.996070][T15573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2660'.
[  475.077526][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  475.874616][T15589] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  476.228378][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  477.052309][T15606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2670'.
[  477.305269][T15616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2672'.
[  477.367913][ T3452] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  477.455831][T15618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2673'.
[  478.015427][T15629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2676'.
[  478.247572][T15643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2679'.
[  478.306847][T15643] macvtap0: entered promiscuous mode
[  478.327223][T15643] bond0: entered promiscuous mode
[  478.332359][T15643] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  478.351071][T15643] macvtap0: entered allmulticast mode
[  478.360382][T15643] bond0: entered allmulticast mode
[  478.368335][T15643] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  478.385169][T15643] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  478.420348][T15648] bond0: left allmulticast mode
[  478.425535][T15648] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  478.450014][T15648] bond0: left promiscuous mode
[  478.455230][T15648] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  478.498589][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  478.880225][T15665] SET target dimension over the limit!
[  479.071420][T15644] lo speed is unknown, defaulting to 1000
[  479.118942][T15671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2691'.
[  479.307873][T15682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2693'.
[  479.574462][T15691] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2695'.
[  479.658620][ T3452] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  479.981716][T15704] vlan0: entered promiscuous mode
[  480.657551][T15722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2700'.
[  480.777357][ T3452] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  481.111680][T15743] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2706'.
[  481.150666][T15743] netlink: 'syz.2.2706': attribute type 1 has an invalid length.
[  481.354633][T15747] IPVS: Scheduler module ip_vs_sip not found
[  481.378445][T15750] IPVS: length: 24 != 3221225496
[  481.909010][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  481.985919][T15730] lo speed is unknown, defaulting to 1000
[  482.064194][T15763] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2710'.
[  483.042420][ T6045] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  484.172267][ T6069] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  484.681163][T15729] lo speed is unknown, defaulting to 1000
[  484.890659][T15791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2718'.
[  484.899727][T15791] netlink: 824 bytes leftover after parsing attributes in process `syz.3.2718'.
[  485.014741][T15732] bond0: (slave netdevsim0): Releasing backup interface
[  485.205746][T15797] vlan0: entered promiscuous mode
[  485.212533][T15797] 
: (slave vlan0): Opening slave failed
[  485.292236][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  485.578419][T15810] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2723'.
[  485.608008][T15810] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2723'.
[  485.669453][T15810] macvlan1: entered promiscuous mode
[  485.696485][T15810] 
: entered promiscuous mode
[  485.705798][T15814] netlink: 'syz.2.2724': attribute type 10 has an invalid length.
[  485.729216][T15810] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  485.743501][T15810] Cannot create hsr debugfs directory
[  485.775423][T15810] hsr1: Slave A (macvlan1) is not up; please bring it up to get a fully working HSR network
[  485.807607][T15810] hsr1: Slave B (
) is not up; please bring it up to get a fully working HSR network
[  486.237246][T15828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2728'.
[  486.269959][T15828] macvtap0: entered promiscuous mode
[  486.275667][T15828] dummy0: entered promiscuous mode
[  486.293237][T15828] macvtap0: entered allmulticast mode
[  486.306292][T15828] dummy0: entered allmulticast mode
[  486.333567][T15831] dummy0: left allmulticast mode
[  486.347642][T15831] dummy0: left promiscuous mode
[  486.437101][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  486.760143][T15820] lo speed is unknown, defaulting to 1000
[  486.827781][T15851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2731'.
[  487.555516][T15877] vlan0: entered promiscuous mode
[  487.585720][ T6064] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  488.131258][T15893] ip6t_srh: unknown srh invflags 92A7
[  488.175858][T15893] bridge10: entered promiscuous mode
[  488.182263][T15893] bridge10: entered allmulticast mode
[  488.407329][T15903] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2745'.
[  488.471142][T15904] netlink: 'syz.3.2745': attribute type 1 has an invalid length.
[  488.486987][T15904] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2745'.
[  488.738628][  T206] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  488.938027][T15911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2747'.
[  489.186051][T15918] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2750'.
[  489.867118][ T6069] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  490.058713][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2754'.
[  490.135469][T15950] tipc: Disabling bearer <eth:ipvlan0>
[  490.951894][T15987] netlink: 'syz.4.2767': attribute type 10 has an invalid length.
[  490.963102][T15987] 8021q: adding VLAN 0 to HW filter on device team0
[  490.973814][T15987] team0: entered promiscuous mode
[  490.989724][  T206] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  491.083847][T15991] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2768'.
[  491.167427][T15994] netlink: 'syz.4.2769': attribute type 1 has an invalid length.
[  491.208808][T15994] 8021q: adding VLAN 0 to HW filter on device bond1
[  491.222633][T15994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2769'.
[  491.314801][T15997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2770'.
[  491.331536][T15997] macvtap1: entered promiscuous mode
[  491.337484][T15997] team0: entered promiscuous mode
[  491.347136][T15997] bridge8: entered promiscuous mode
[  491.363643][T15997] macvtap1: entered allmulticast mode
[  491.384480][T15997] team0: entered allmulticast mode
[  491.394938][T15997] bridge8: entered allmulticast mode
[  491.405037][T15997] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  491.430594][T16000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2771'.
[  491.464693][T15999] team0: left allmulticast mode
[  491.472691][T15999] bridge8: left allmulticast mode
[  491.481611][T15999] team0: left promiscuous mode
[  491.486516][T15999] bridge8: left promiscuous mode
[  491.717729][T16008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2775'.
[  491.786182][T16008] gretap0: entered promiscuous mode
[  491.819156][T16008] batman_adv: batadv0: Adding interface: macvlan0
[  491.855563][T16008] batman_adv: batadv0: Interface activated: macvlan0
[  492.014687][T16012] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  492.037546][T16017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2779'.
[  492.108637][ T6069] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  492.151693][T16022] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2781'.
[  492.455120][T16031] netlink: 'syz.4.2784': attribute type 10 has an invalid length.
[  492.627439][ T5851] Bluetooth: hci4: command 0x0406 tx timeout
[  492.721869][T16044] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  492.806517][T16050] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2787'.
[  493.238648][  T206] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  493.395678][T16054] dvmrp0: entered allmulticast mode
[  493.445106][T16058] pimreg: entered allmulticast mode
[  494.420362][  T206] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  494.458979][T16076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2793'.
[  494.732889][T16098] block nbd0: NBD_DISCONNECT
[  494.746463][T16098] block nbd0: Send disconnect failed -32
[  494.758782][T16098] block nbd0: shutting down sockets
[  495.578232][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  495.675528][T16115] __nla_validate_parse: 2 callbacks suppressed
[  495.675553][T16115] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2805'.
[  496.715058][T16143] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  496.737228][T16143] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  496.747246][ T3452] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  496.817387][T16143] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2813'.
[  497.107468][ T5851] Bluetooth: hci4: command 0x0406 tx timeout
[  497.568934][T16160] netlink: 'syz.2.2816': attribute type 1 has an invalid length.
[  497.611497][T16165] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2817'.
[  497.922768][T16177] sch_tbf: burst 0 is lower than device lo mtu (39798) !
[  497.938112][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  497.984235][T16180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2821'.
[  498.064719][T16180] bond1: (slave batadv0): Releasing active interface
[  498.329738][T16192] smc: net device bond0 erased user defined pnetid SYZ0
[  499.038182][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  499.216504][T16215] A link change request failed with some changes committed already. Interface 
 may have been left with an inconsistent configuration, please check.
[  499.437405][T16225] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2832'.
[  499.495781][T16224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2834'.
[  499.521763][T16224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2834'.
[  499.559424][T16224] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2834'.
[  499.674936][T16236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2835'.
[  499.697174][T16236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2835'.
[  499.810766][T16240] vlan0: entered promiscuous mode
[  499.815998][T16240] vlan0: entered allmulticast mode
[  499.822992][T16240] team0: entered allmulticast mode
[  499.839979][T16241] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  500.110474][T16251] hsr_slave_1 (unregistering): left promiscuous mode
[  500.197251][ T3452] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  501.145830][T16298] __nla_validate_parse: 4 callbacks suppressed
[  501.145852][T16298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2848'.
[  501.365145][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  501.395195][T16304] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  501.459755][T16278] lo speed is unknown, defaulting to 1000
[  501.526450][T16306] netlink: 'syz.2.2852': attribute type 4 has an invalid length.
[  501.547169][T16306] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2852'.
[  502.364408][T16313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2854'.
[  502.411427][T16311] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  502.497631][ T6069] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  502.678221][T16317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2854'.
[  502.731924][T16306] lo speed is unknown, defaulting to 1000
[  502.732152][T16307] ipt_rpfilter: unknown options
[  502.772894][T16314] lo speed is unknown, defaulting to 1000
[  502.785788][T16314] lo speed is unknown, defaulting to 1000
[  502.860936][T16314] lo speed is unknown, defaulting to 1000
[  502.931713][T16325] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:20003
[  503.380197][T16314] infiniband syz0: set down
[  503.384842][ T5888] lo speed is unknown, defaulting to 1000
[  503.401914][T16314] infiniband syz0: added lo
[  503.424258][T16314] syz0: rxe_create_cq: returned err = -12
[  503.453805][T16314] infiniband syz0: Couldn't create ib_mad CQ
[  503.471634][T16314] infiniband syz0: Couldn't open port 1
[  503.508547][T16333] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2858'.
[  503.552396][T16314] RDS/IB: syz0: added
[  503.564907][T16314] smc: adding ib device syz0 with port count 1
[  503.584178][T16314] smc:    ib device syz0 port 1 has pnetid 
[  503.597161][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  503.622952][ T5888] lo speed is unknown, defaulting to 1000
[  503.639820][  T206] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  503.659712][T16314] lo speed is unknown, defaulting to 1000
[  503.722458][T16339] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  503.931125][T16350] A link change request failed with some changes committed already. Interface 
 may have been left with an inconsistent configuration, please check.
[  503.975263][T16314] lo speed is unknown, defaulting to 1000
[  504.321063][T16314] lo speed is unknown, defaulting to 1000
[  504.331750][T16357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2864'.
[  504.552345][T16364] netlink: 'syz.4.2866': attribute type 4 has an invalid length.
[  504.578952][T16364] netlink: 'syz.4.2866': attribute type 4 has an invalid length.
[  504.656728][T16314] lo speed is unknown, defaulting to 1000
[  504.676401][T16367] A link change request failed with some changes committed already. Interface 
 may have been left with an inconsistent configuration, please check.
[  504.848826][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  504.999712][T16314] lo speed is unknown, defaulting to 1000
[  505.031262][T16369] netlink: 'syz.4.2868': attribute type 1 has an invalid length.
[  505.069686][T16369] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2868'.
[  505.559897][T16398] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:20003
[  506.001914][T16404] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2874'.
[  506.023341][ T3452] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  506.068580][T16401] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2874'.
[  506.257134][T16408] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2876'.
[  506.310295][T16414] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2875'.
[  506.338517][T16415] netlink: 'syz.4.2877': attribute type 1 has an invalid length.
[  506.363431][T16415] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2877'.
[  506.873376][T16436] xt_hashlimit: max too large, truncated to 1048576
[  507.169753][ T6064] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  507.253023][T16448] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  507.344827][T16448] syzkaller0: entered promiscuous mode
[  507.354257][T16448] syzkaller0: entered allmulticast mode
[  507.364227][T16448] tipc: Resetting bearer <eth:syzkaller0>
[  507.464106][T16456] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  507.999733][T16444] tipc: Resetting bearer <eth:syzkaller0>
[  508.198896][T16475] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2891'.
[  508.287250][ T5888] tipc: Node number set to 4148420989
[  508.302601][  T206] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  508.473308][T16486] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2892'.
[  508.501688][T16486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2892'.
[  509.427456][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  510.131729][T16444] tipc: Disabling bearer <eth:syzkaller0>
[  510.529059][ T6064] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  510.747855][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2898'.
[  510.915294][T16512] tipc: Disabling bearer <eth:ipvlan0>
[  511.566860][T16527] tipc: Started in network mode
[  511.597108][T16527] tipc: Node identity 5a975cd0dc8b, cluster identity 4711
[  511.604414][T16527] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  511.659116][  T206] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  511.729615][T16489] lo speed is unknown, defaulting to 1000
[  511.746870][T16489] lo speed is unknown, defaulting to 1000
[  511.922511][T16536] syzkaller0: MTU too low for tipc bearer
[  511.977557][T16536] tipc: Disabling bearer <eth:syzkaller0>
[  512.045887][T16538] A link change request failed with some changes committed already. Interface 
 may have been left with an inconsistent configuration, please check.
[  512.735858][T16558] netlink: 'syz.1.2907': attribute type 10 has an invalid length.
[  512.774315][T16561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2906'.
[  512.783324][T16558] netlink: 'syz.1.2907': attribute type 10 has an invalid length.
[  512.791894][T16561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2906'.
[  512.795459][T16558] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2907'.
[  512.823987][ T6045] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  512.937384][T16565] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  512.996094][T16565] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  513.061506][T16565] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  513.096687][T16570] Cannot find add_set index 32768 as target
[  513.782051][T16598] xt_CT: You must specify a L4 protocol and not use inversions on it
[  513.958771][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  514.106484][T16611] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  514.275547][T16617] team0: Unable to change to the same mode the team is in
[  514.469893][T16631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2919'.
[  514.870644][T16642] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  515.067423][ T3452] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  515.156653][T16620] lo speed is unknown, defaulting to 1000
[  515.163775][T16620] lo speed is unknown, defaulting to 1000
[  515.306241][T16633] siw: device registration error -23
[  515.817456][T16625] 
: (slave netdevsim0): Releasing backup interface
[  515.837438][T16600] Bluetooth: hci4: command 0x0406 tx timeout
[  516.179213][  T206] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  517.309236][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  517.724550][T16600] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  517.735589][T16600] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  517.747503][T16600] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  517.917465][T16600] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  517.926720][T16600] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  517.934564][T16600] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  518.165079][T16716] lo speed is unknown, defaulting to 1000
[  518.172326][T16716] lo speed is unknown, defaulting to 1000
[  518.259690][T16725] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input12
[  518.554647][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  518.568296][T16716] chnl_net:caif_netlink_parms(): no params data found
[  518.974064][T16716] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.991667][T16716] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.021332][T16716] bridge_slave_0: entered allmulticast mode
[  519.058290][T16716] bridge_slave_0: entered promiscuous mode
[  519.088350][T16716] bridge0: port 2(bridge_slave_1) entered blocking state
[  519.095519][T16716] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.103019][T16716] bridge_slave_1: entered allmulticast mode
[  519.129065][T16716] bridge_slave_1: entered promiscuous mode
[  519.335403][T16737] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  519.344213][T16737] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  519.364571][T16744] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  519.393831][T16737] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  519.397203][T16744] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  519.472499][T16716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  519.550922][T16716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  519.702638][T16716] team0: Port device team_slave_0 added
[  519.751540][T16716] team0: Port device team_slave_1 added
[  519.847883][T16753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2948'.
[  519.858806][T16716] batman_adv: batadv0: Adding interface: batadv_slave_0
[  519.867247][T16753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2948'.
[  519.896339][T16716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  519.935071][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  519.978826][T16716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  520.008186][T16716] batman_adv: batadv0: Adding interface: batadv_slave_1
[  520.025496][T16716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  520.052017][T16716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  520.077130][T16600] Bluetooth: hci2: command tx timeout
[  520.138091][T16716] hsr_slave_0: entered promiscuous mode
[  520.181882][T16716] hsr_slave_1: entered promiscuous mode
[  520.206129][T16716] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  520.225798][T16716] Cannot create hsr debugfs directory
[  520.442511][T16742] lo speed is unknown, defaulting to 1000
[  520.458153][T16742] lo speed is unknown, defaulting to 1000
[  520.954824][T16716] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  520.976295][T16716] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  520.998514][T16716] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  521.069615][ T6045] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  521.088848][T16716] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  521.395617][T16773] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  521.438245][T16716] 8021q: adding VLAN 0 to HW filter on device bond0
[  521.574077][T16716] 8021q: adding VLAN 0 to HW filter on device team0
[  521.602933][  T206] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.610117][  T206] bridge0: port 1(bridge_slave_0) entered forwarding state
[  521.651350][  T206] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.658587][  T206] bridge0: port 2(bridge_slave_1) entered forwarding state
[  521.725052][T16716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  521.736054][T16716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  521.833441][T16781] xt_CT: You must specify a L4 protocol and not use inversions on it
[  522.085489][T16716] 8021q: adding VLAN 0 to HW filter on device batadv0
[  522.147262][T16600] Bluetooth: hci2: command tx timeout
[  522.175012][T16716] veth0_vlan: entered promiscuous mode
[  522.211178][T16716] veth1_vlan: entered promiscuous mode
[  522.217254][ T6069] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  522.336727][T16716] veth0_macvtap: entered promiscuous mode
[  522.380019][T16716] veth1_macvtap: entered promiscuous mode
[  522.399674][T16716] batman_adv: batadv0: Interface activated: batadv_slave_0
[  522.409382][T16716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  522.420006][T16716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  522.431065][T16716] batman_adv: batadv0: Interface activated: batadv_slave_1
[  522.441116][T16716] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  522.450317][T16716] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  522.459229][T16716] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  522.468167][T16716] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  522.757302][ T3452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  522.765178][ T3452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  523.113085][  T206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  523.136670][  T206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  523.401894][T16796] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  523.437993][T16799] IPv6: NLM_F_CREATE should be specified when creating new route
[  523.510233][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  523.768709][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  523.779284][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  523.788381][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  523.801587][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  523.809582][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  523.822387][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  523.994149][T16815] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  524.221860][T16811] lo speed is unknown, defaulting to 1000
[  524.252822][T16811] lo speed is unknown, defaulting to 1000
[  524.305948][T16825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2967'.
[  524.659467][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  524.756308][ T6045] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.235696][T16811] chnl_net:caif_netlink_parms(): no params data found
[  525.412654][T16820] lo speed is unknown, defaulting to 1000
[  525.445996][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  525.456893][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  525.468383][T16820] lo speed is unknown, defaulting to 1000
[  525.469191][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  525.492970][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  525.501046][ T5839] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  525.512901][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  525.600981][ T6045] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.765992][ T6045] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.806322][T16811] bridge0: port 1(bridge_slave_0) entered blocking state
[  525.808675][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  525.821955][T16811] bridge0: port 1(bridge_slave_0) entered disabled state
[  525.830748][T16811] bridge_slave_0: entered allmulticast mode
[  525.838625][T16811] bridge_slave_0: entered promiscuous mode
[  525.846472][T16811] bridge0: port 2(bridge_slave_1) entered blocking state
[  525.853647][T16811] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.860984][T16811] bridge_slave_1: entered allmulticast mode
[  525.868123][T16811] bridge_slave_1: entered promiscuous mode
[  525.907508][T16600] Bluetooth: hci2: command tx timeout
[  526.049123][ T6045] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.108646][T16811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  526.142298][T16863] team0: Port device netdevsim0 removed
[  526.154590][T16863] bond2: (slave ip6gretap1): Releasing active interface
[  526.225215][T16863] team0: Port device bridge1 removed
[  526.243453][T16811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  526.316217][T16811] team0: Port device team_slave_0 added
[  526.352915][T16811] team0: Port device team_slave_1 added
[  526.558582][T16865] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  526.607908][T16811] batman_adv: batadv0: Adding interface: batadv_slave_0
[  526.627246][T16811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  526.664899][T16811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  526.685871][T16823] lo speed is unknown, defaulting to 1000
[  526.727836][T16811] batman_adv: batadv0: Adding interface: batadv_slave_1
[  526.736996][T16811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  526.797020][T16811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  526.817781][T16823] lo speed is unknown, defaulting to 1000
[  526.826753][T16870] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  526.849227][ T6045] bridge_slave_1: left allmulticast mode
[  526.855462][ T6045] bridge_slave_1: left promiscuous mode
[  526.869807][ T6045] bridge0: port 2(bridge_slave_1) entered disabled state
[  526.927264][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  526.949056][ T6045] bridge_slave_0: left allmulticast mode
[  526.976967][ T6045] bridge_slave_0: left promiscuous mode
[  526.982862][ T6045] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.544494][ T6045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  527.555953][ T6045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  527.574129][ T6045] bond0 (unregistering): Released all slaves
[  527.580830][T16883] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2977'.
[  527.594924][T16600] Bluetooth: hci4: command tx timeout
[  527.616982][T16844] lo speed is unknown, defaulting to 1000
[  527.779133][T16811] hsr_slave_0: entered promiscuous mode
[  527.785860][T16811] hsr_slave_1: entered promiscuous mode
[  527.800181][T16811] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  527.814433][T16811] Cannot create hsr debugfs directory
[  527.823496][T16844] lo speed is unknown, defaulting to 1000
[  527.987191][T16600] Bluetooth: hci2: command tx timeout
[  528.077180][ T6065] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  528.643869][T16902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2980'.
[  528.854589][ T6045] hsr_slave_0: left promiscuous mode
[  528.877162][ T6045] hsr_slave_1: left promiscuous mode
[  528.883897][ T6045] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  528.902339][ T6045] batman_adv: batadv0: Removing interface: batadv_slave_0
[  528.934309][ T6045] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  528.951647][ T6045] batman_adv: batadv0: Removing interface: batadv_slave_1
[  529.030118][ T6045] veth1_macvtap: left promiscuous mode
[  529.046634][ T6045] veth0_macvtap: left promiscuous mode
[  529.054226][ T6045] veth1_vlan: left promiscuous mode
[  529.069533][ T6045] veth0_vlan: left promiscuous mode
[  529.075570][T16908] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2982'.
[  529.207994][ T6065] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  529.399492][T16917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2984'.
[  529.667187][T16600] Bluetooth: hci4: command tx timeout
[  529.771547][ T6045] team0 (unregistering): Port device team_slave_1 removed
[  529.822747][ T6045] team0 (unregistering): Port device team_slave_0 removed
[  530.076745][T16600] Bluetooth: hci2: command tx timeout
[  530.317341][  T206] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  530.364915][T16920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  530.385564][T16844] chnl_net:caif_netlink_parms(): no params data found
[  530.675307][T16844] bridge0: port 1(bridge_slave_0) entered blocking state
[  530.686450][T16844] bridge0: port 1(bridge_slave_0) entered disabled state
[  530.693958][T16844] bridge_slave_0: entered allmulticast mode
[  530.709760][T16844] bridge_slave_0: entered promiscuous mode
[  530.729387][T16844] bridge0: port 2(bridge_slave_1) entered blocking state
[  530.737692][T16844] bridge0: port 2(bridge_slave_1) entered disabled state
[  530.744932][T16844] bridge_slave_1: entered allmulticast mode
[  530.752348][T16844] bridge_slave_1: entered promiscuous mode
[  530.804305][T16844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  530.844791][T16844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  530.854286][T16811] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  530.872953][T16934] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2990'.
[  530.910613][T16811] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  530.923303][T16811] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  530.939624][T16844] team0: Port device team_slave_0 added
[  530.948427][T16844] team0: Port device team_slave_1 added
[  530.992572][T16811] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  531.007616][T16844] batman_adv: batadv0: Adding interface: batadv_slave_0
[  531.015976][T16844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  531.042831][T16844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  531.064021][T16844] batman_adv: batadv0: Adding interface: batadv_slave_1
[  531.077521][T16844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  531.121109][T16844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  531.278358][T16844] hsr_slave_0: entered promiscuous mode
[  531.284731][T16844] hsr_slave_1: entered promiscuous mode
[  531.307716][T16844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  531.315422][T16844] Cannot create hsr debugfs directory
[  531.428981][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  531.616519][T16948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2995'.
[  531.747220][T16600] Bluetooth: hci4: command tx timeout
[  531.999413][T16955] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  532.046073][T16811] 8021q: adding VLAN 0 to HW filter on device bond0
[  532.147164][T16600] Bluetooth: hci2: command tx timeout
[  532.174807][T16811] 8021q: adding VLAN 0 to HW filter on device team0
[  532.190382][ T6065] bridge0: port 1(bridge_slave_0) entered blocking state
[  532.197647][ T6065] bridge0: port 1(bridge_slave_0) entered forwarding state
[  532.278870][ T6065] bridge0: port 2(bridge_slave_1) entered blocking state
[  532.286117][ T6065] bridge0: port 2(bridge_slave_1) entered forwarding state
[  532.558933][ T6064] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  532.589387][T16844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  532.640021][T16844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  532.671010][T16844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  532.692896][T16844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  532.818883][T16953] lo speed is unknown, defaulting to 1000
[  532.823321][T16844] 8021q: adding VLAN 0 to HW filter on device bond0
[  532.847734][T16972] sock: sock_timestamping_bind_phc: sock not bind to device
[  532.863149][T16844] 8021q: adding VLAN 0 to HW filter on device team0
[  532.885100][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  532.892316][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  532.929119][T16953] lo speed is unknown, defaulting to 1000
[  532.946757][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state
[  532.953950][ T6045] bridge0: port 2(bridge_slave_1) entered forwarding state
[  533.005438][T16811] 8021q: adding VLAN 0 to HW filter on device batadv0
[  533.169714][T16811] veth0_vlan: entered promiscuous mode
[  533.217892][T16811] veth1_vlan: entered promiscuous mode
[  533.293815][T16811] veth0_macvtap: entered promiscuous mode
[  533.344752][T16811] veth1_macvtap: entered promiscuous mode
[  533.496811][T16811] batman_adv: batadv0: Interface activated: batadv_slave_0
[  533.515080][T16811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  533.532657][T16811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  533.545350][T16811] batman_adv: batadv0: Interface activated: batadv_slave_1
[  533.586557][T16987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3008'.
[  533.588706][T16811] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  533.612918][T16811] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  533.622046][T16811] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  533.631039][T16811] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  533.652935][T16844] 8021q: adding VLAN 0 to HW filter on device batadv0
[  533.697548][ T6065] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  533.834511][T16600] Bluetooth: hci4: command tx timeout
[  533.891227][T16844] veth0_vlan: entered promiscuous mode
[  533.932895][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  533.965411][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  533.994381][T16844] veth1_vlan: entered promiscuous mode
[  534.085002][ T6045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  534.107057][ T6045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  534.115966][T16844] veth0_macvtap: entered promiscuous mode
[  534.130903][T16844] veth1_macvtap: entered promiscuous mode
[  534.146577][T16844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  534.157652][T16844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  534.170695][T16844] batman_adv: batadv0: Interface activated: batadv_slave_0
[  534.180831][T16844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  534.191720][T16844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  534.201694][T16844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  534.212246][T16844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  534.223346][T16844] batman_adv: batadv0: Interface activated: batadv_slave_1
[  534.304638][T16844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  534.314682][T16844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  534.337385][T16844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  534.355937][T16844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  534.837357][ T6045] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  534.908082][ T6064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  534.921727][ T6064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  534.961809][T17008] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  535.002667][  T206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  535.011118][  T206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  535.417903][T17016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3019'.
[  535.568932][T17018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3020'.
[  535.684661][ T6064] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.938761][ T6065] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  535.986133][T17030] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3025'.
[  536.007055][T17030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3025'.
[  536.197784][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  536.211359][ T6064] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.224908][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  536.235686][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  536.253974][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  536.263490][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  536.271186][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  536.374866][ T6064] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.549196][ T6064] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.602179][T17045] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  536.797531][ T6064] bridge_slave_1: left allmulticast mode
[  536.803261][ T6064] bridge_slave_1: left promiscuous mode
[  536.812072][ T6064] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.854488][ T6064] bridge_slave_0: left allmulticast mode
[  536.866320][ T6064] bridge_slave_0: left promiscuous mode
[  536.886258][ T6064] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.941397][T17059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3032'.
[  537.068293][ T1157] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  537.442739][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  537.453331][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  537.463116][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  537.488292][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  537.513058][ T5839] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  537.534040][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  537.787616][T17075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3038'.
[  537.821096][ T6064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  537.851423][ T6064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  537.853711][T17076] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3038'.
[  537.873264][ T6064] bond0 (unregistering): Released all slaves
[  538.127414][T17035] lo speed is unknown, defaulting to 1000
[  538.134307][T17035] lo speed is unknown, defaulting to 1000
[  538.288792][ T6045] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  538.307612][T16600] Bluetooth: hci2: command tx timeout
[  538.451283][T17067] lo speed is unknown, defaulting to 1000
[  538.481129][T17067] lo speed is unknown, defaulting to 1000
[  538.696025][T17091] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3042'.
[  539.148845][T17035] chnl_net:caif_netlink_parms(): no params data found
[  539.406530][T17067] chnl_net:caif_netlink_parms(): no params data found
[  539.447254][  T206] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  539.468866][T17107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3049'.
[  539.502067][ T6064] hsr_slave_0: left promiscuous mode
[  539.523781][ T6064] hsr_slave_1: left promiscuous mode
[  539.530773][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  539.567217][ T6064] batman_adv: batadv0: Removing interface: batadv_slave_0
[  539.585643][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  539.597446][T16600] Bluetooth: hci4: command tx timeout
[  539.614183][ T6064] batman_adv: batadv0: Removing interface: batadv_slave_1
[  539.647939][ T6064] veth1_macvtap: left promiscuous mode
[  539.653525][ T6064] veth0_macvtap: left promiscuous mode
[  539.659933][ T6064] veth1_vlan: left promiscuous mode
[  539.666839][ T6064] veth0_vlan: left promiscuous mode
[  540.245525][ T6064] team0 (unregistering): Port device team_slave_1 removed
[  540.294981][ T6064] team0 (unregistering): Port device team_slave_0 removed
[  540.387740][T16600] Bluetooth: hci2: command tx timeout
[  540.578158][ T3452] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  540.843635][T17122] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  541.006274][T17035] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.023708][T17035] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.036615][T17035] bridge_slave_0: entered allmulticast mode
[  541.047572][T17035] bridge_slave_0: entered promiscuous mode
[  541.116379][T17035] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.124426][T17035] bridge0: port 2(bridge_slave_1) entered disabled state
[  541.137651][T17035] bridge_slave_1: entered allmulticast mode
[  541.155211][T17035] bridge_slave_1: entered promiscuous mode
[  541.247302][T17067] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.264198][T17067] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.281287][T17067] bridge_slave_0: entered allmulticast mode
[  541.292343][T17067] bridge_slave_0: entered promiscuous mode
[  541.336268][T17035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  541.368970][T17035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  541.413064][T17067] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.422771][T17067] bridge0: port 2(bridge_slave_1) entered disabled state
[  541.437260][T17067] bridge_slave_1: entered allmulticast mode
[  541.444509][T17067] bridge_slave_1: entered promiscuous mode
[  541.569158][T17035] team0: Port device team_slave_0 added
[  541.595957][T17067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  541.630104][T17067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  541.656755][T17035] team0: Port device team_slave_1 added
[  541.667547][T16600] Bluetooth: hci4: command tx timeout
[  541.755410][ T6045] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  541.835382][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3065'.
[  541.901641][T17067] team0: Port device team_slave_0 added
[  541.931573][T17067] team0: Port device team_slave_1 added
[  541.967905][T17035] batman_adv: batadv0: Adding interface: batadv_slave_0
[  541.974917][T17035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  542.025379][T17035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  542.209633][T17165] netlink: 596 bytes leftover after parsing attributes in process `syz.4.3070'.
[  542.267844][T17035] batman_adv: batadv0: Adding interface: batadv_slave_1
[  542.298065][T17035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  542.389052][T17035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  542.434215][T17067] batman_adv: batadv0: Adding interface: batadv_slave_0
[  542.453419][T17067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  542.480121][T16600] Bluetooth: hci2: command tx timeout
[  542.515947][T17067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  542.569734][T17067] batman_adv: batadv0: Adding interface: batadv_slave_1
[  542.576733][T17067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  542.635109][T17067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  542.806634][ T6064] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.854076][T17035] hsr_slave_0: entered promiscuous mode
[  542.882285][T17035] hsr_slave_1: entered promiscuous mode
[  542.898751][ T6045] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  542.908464][T17035] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  542.916084][T17035] Cannot create hsr debugfs directory
[  543.000574][T17067] hsr_slave_0: entered promiscuous mode
[  543.013722][T17067] hsr_slave_1: entered promiscuous mode
[  543.047612][T17067] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  543.055254][T17067] Cannot create hsr debugfs directory
[  543.096372][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3080'.
[  543.108087][ T6064] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.282793][T17208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3083'.
[  543.323361][ T6064] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.481102][ T6064] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.607904][T17213] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3084'.
[  543.747438][T16600] Bluetooth: hci4: command tx timeout
[  544.007812][ T6045] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  544.547648][T16600] Bluetooth: hci2: command tx timeout
[  545.127268][ T6069] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  545.315085][T17240] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  545.732189][T17247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3095'.
[  545.828233][T16600] Bluetooth: hci4: command tx timeout
[  546.238033][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  546.869487][ T6064] bridge_slave_1: left allmulticast mode
[  546.887260][ T6064] bridge_slave_1: left promiscuous mode
[  546.896619][ T6064] bridge0: port 2(bridge_slave_1) entered disabled state
[  546.940910][ T6064] bridge_slave_0: left allmulticast mode
[  546.946608][ T6064] bridge_slave_0: left promiscuous mode
[  546.954071][T17254] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3096'.
[  546.968082][ T6064] bridge0: port 1(bridge_slave_0) entered disabled state
[  547.378839][ T6069] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  547.412948][ T6064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  547.430807][ T6064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  547.442867][ T6064] bond0 (unregistering): Released all slaves
[  548.493613][ T6045] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  549.613118][  T206] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  549.834421][T17265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  550.114001][T17277] vlan2: entered promiscuous mode
[  550.425265][T17290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3107'.
[  550.707964][ T6064] hsr_slave_0: left promiscuous mode
[  550.718046][ T6064] hsr_slave_1: left promiscuous mode
[  550.723981][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  550.738171][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  550.746748][ T6064] batman_adv: batadv0: Removing interface: batadv_slave_0
[  550.756395][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  550.773551][ T6064] batman_adv: batadv0: Removing interface: batadv_slave_1
[  550.806403][ T6064] veth1_macvtap: left promiscuous mode
[  550.812306][ T6064] veth0_macvtap: left promiscuous mode
[  550.818099][ T6064] veth1_vlan: left promiscuous mode
[  550.823638][ T6064] veth0_vlan: left promiscuous mode
[  551.504240][ T6064] team0 (unregistering): Port device team_slave_1 removed
[  551.560855][ T6064] team0 (unregistering): Port device team_slave_0 removed
[  551.887480][ T6065] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  552.033106][T17304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  552.142277][T17309] bridge0: port 1(hsr0) entered blocking state
[  552.155597][T17309] bridge0: port 1(hsr0) entered disabled state
[  552.177312][T17309] hsr0: entered allmulticast mode
[  552.182727][T17309] hsr_slave_0: entered allmulticast mode
[  552.199572][T17309] hsr_slave_1: entered allmulticast mode
[  552.216102][T17309] hsr0: entered promiscuous mode
[  552.384184][T17310] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3116'.
[  552.484354][T17035] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  552.516323][T17067] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  552.527948][T17067] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  552.537987][T17067] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  552.550167][T17035] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  552.567664][T17035] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  552.594276][T17035] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  552.616708][T17067] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  552.686822][T17320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3119'.
[  552.856239][T17323] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  552.903057][T17035] 8021q: adding VLAN 0 to HW filter on device bond0
[  553.008843][ T6064] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  554.179717][ T6064] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  555.231411][T17337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  555.282732][T17067] 8021q: adding VLAN 0 to HW filter on device bond0
[  555.298429][T17035] 8021q: adding VLAN 0 to HW filter on device team0
[  555.309746][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  555.363093][  T206] bridge0: port 1(bridge_slave_0) entered blocking state
[  555.370373][  T206] bridge0: port 1(bridge_slave_0) entered forwarding state
[  555.435292][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  555.442576][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  555.505203][T17067] 8021q: adding VLAN 0 to HW filter on device team0
[  555.564595][ T3452] bridge0: port 1(bridge_slave_0) entered blocking state
[  555.571796][ T3452] bridge0: port 1(bridge_slave_0) entered forwarding state
[  555.648468][ T3452] bridge0: port 2(bridge_slave_1) entered blocking state
[  555.655627][ T3452] bridge0: port 2(bridge_slave_1) entered forwarding state
[  556.138326][T17035] 8021q: adding VLAN 0 to HW filter on device batadv0
[  556.206981][T17067] 8021q: adding VLAN 0 to HW filter on device batadv0
[  556.303238][T17381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:10) already exists on: macvlan0
[  556.314876][T17381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  556.369932][T17382] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  556.420443][T17035] veth0_vlan: entered promiscuous mode
[  556.437699][ T3452] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  556.479714][T17067] veth0_vlan: entered promiscuous mode
[  556.498002][T17035] veth1_vlan: entered promiscuous mode
[  556.543862][T17067] veth1_vlan: entered promiscuous mode
[  556.595955][T17035] veth0_macvtap: entered promiscuous mode
[  556.621637][T17035] veth1_macvtap: entered promiscuous mode
[  556.690628][T17035] batman_adv: batadv0: Interface activated: batadv_slave_0
[  556.709812][T17035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  556.738001][T17035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  556.765306][T17035] batman_adv: batadv0: Interface activated: batadv_slave_1
[  556.773924][T17067] veth0_macvtap: entered promiscuous mode
[  556.802308][T17035] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  556.813547][T17035] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  556.828165][T17035] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  556.837437][T17035] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  556.850751][T17067] veth1_macvtap: entered promiscuous mode
[  556.894170][T17067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  556.905988][T17067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  556.926139][T17067] batman_adv: batadv0: Interface activated: batadv_slave_0
[  556.952302][T17067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  556.973725][T17067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  556.994500][T17067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  557.010204][T17067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  557.031240][T17067] batman_adv: batadv0: Interface activated: batadv_slave_1
[  557.086463][T17067] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  557.096578][T17067] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  557.105980][T17067] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  557.115401][T17067] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  557.175810][ T6065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  557.193618][ T6065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  557.293988][  T206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  557.308273][  T206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  557.390028][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  557.407611][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  557.476438][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  557.550113][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  557.591745][  T206] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  557.702922][T17067] ------------[ cut here ]------------
[  557.709436][T17067] refcount_t: underflow; use-after-free.
[  557.715749][T17067] WARNING: CPU: 1 PID: 17067 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0
[  557.725561][T17067] Modules linked in:
[  557.729639][T17067] CPU: 1 UID: 0 PID: 17067 Comm: syz-executor Not tainted 6.13.0-rc6-syzkaller-00975-gb1b62d6d332e #0
[  557.740780][T17067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  557.751014][T17067] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0
[  557.757275][T17067] Code: a0 6b 5f 8c e8 b7 c0 9d fc 90 0f 0b 90 90 eb 99 e8 db 1c dd fc c6 05 de 12 42 0b 01 90 48 c7 c7 00 6c 5f 8c e8 97 c0 9d fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 b8 1c dd fc c6 05 b8 12 42 0b 01 90
[  557.777087][T17067] RSP: 0018:ffffc9000b8ef7b8 EFLAGS: 00010246
[  557.783223][T17067] RAX: c51492cc6db5f800 RBX: ffff88807da8c478 RCX: ffff88804e2bbc00
[  557.791322][T17067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  557.799531][T17067] RBP: 0000000000000003 R08: ffffffff81602a82 R09: fffffbfff1cfa210
[  557.807651][T17067] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff88807da8c460
[  557.815673][T17067] R13: ffffffff8603af00 R14: 1ffff1100fb5188c R15: ffff88807da8c460
[  557.823735][T17067] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  557.832912][T17067] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  557.839579][T17067] CR2: 000055558ec80588 CR3: 0000000052b6e000 CR4: 00000000003526f0
[  557.847642][T17067] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  557.855658][T17067] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  557.863813][T17067] Call Trace:
[  557.867194][T17067]  <TASK>
[  557.870163][T17067]  ? __warn+0x165/0x4d0
[  557.874389][T17067]  ? refcount_warn_saturate+0x15a/0x1d0
[  557.880069][T17067]  ? report_bug+0x2b3/0x500
[  557.884635][T17067]  ? refcount_warn_saturate+0x15a/0x1d0
[  557.890292][T17067]  ? handle_bug+0x60/0x90
[  557.894661][T17067]  ? exc_invalid_op+0x1a/0x50
[  557.899439][T17067]  ? asm_exc_invalid_op+0x1a/0x20
[  557.904519][T17067]  ? __pfx_klist_children_put+0x10/0x10
[  557.910344][T17067]  ? __warn_printk+0x292/0x360
[  557.915144][T17067]  ? refcount_warn_saturate+0x15a/0x1d0
[  557.920790][T17067]  ? refcount_warn_saturate+0x159/0x1d0
[  557.926395][T17067]  klist_dec_and_del+0x3ec/0x3f0
[  557.931403][T17067]  ? __pfx_klist_children_put+0x10/0x10
[  557.937045][T17067]  ? __pfx_klist_children_put+0x10/0x10
[  557.942647][T17067]  ? __pfx_klist_children_put+0x10/0x10
[  557.948364][T17067]  klist_remove+0x25e/0x480
[  557.952925][T17067]  ? __pfx_klist_remove+0x10/0x10
[  557.958047][T17067]  ? __pfx_kobject_move+0x10/0x10
[  557.963141][T17067]  ? get_device_parent+0x25d/0x410
[  557.968346][T17067]  device_move+0x1b4/0x710
[  557.972804][T17067]  ? kasan_quarantine_put+0xdc/0x230
[  557.978245][T17067]  hci_conn_del_sysfs+0xac/0x160
[  557.983253][T17067]  hci_conn_del+0x8c4/0xc40
[  557.993201][T17067]  hci_conn_hash_flush+0x258/0x350
[  557.998476][T17067]  ? __pfx_hci_conn_hash_flush+0x10/0x10
[  558.004173][T17067]  ? drain_workqueue+0x2d3/0x3a0
[  558.009269][T17067]  ? hci_discovery_set_state+0x57/0x180
[  558.014871][T17067]  hci_dev_close_sync+0xa42/0x11c0
[  558.020078][T17067]  hci_unregister_dev+0x20b/0x510
[  558.025172][T17067]  vhci_release+0x80/0xd0
[  558.029656][T17067]  ? __pfx_vhci_release+0x10/0x10
[  558.034752][T17067]  __fput+0x23c/0xa50
[  558.038844][T17067]  task_work_run+0x24f/0x310
[  558.043498][T17067]  ? __pfx_task_work_run+0x10/0x10
[  558.048732][T17067]  ? do_exit+0xa25/0x28e0
[  558.053110][T17067]  ? do_exit+0xa25/0x28e0
[  558.057540][T17067]  do_exit+0xa2a/0x28e0
[  558.061758][T17067]  ? __pfx_do_exit+0x10/0x10
[  558.066386][T17067]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  558.072673][T17067]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  558.079154][T17067]  ? _raw_spin_unlock_irq+0x23/0x50
[  558.084491][T17067]  ? lockdep_hardirqs_on+0x99/0x150
[  558.089814][T17067]  do_group_exit+0x207/0x2c0
[  558.094473][T17067]  __x64_sys_exit_group+0x3f/0x40
[  558.099604][T17067]  x64_sys_call+0x26a8/0x26b0
[  558.104329][T17067]  do_syscall_64+0xf3/0x230
[  558.108938][T17067]  ? clear_bhb_loop+0x35/0x90
[  558.113680][T17067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  558.119652][T17067] RIP: 0033:0x7eff04785d29
[  558.124120][T17067] Code: Unable to access opcode bytes at 0x7eff04785cff.
[  558.131307][T17067] RSP: 002b:00007ffc5f34a1e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  558.139826][T17067] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007eff04785d29
[  558.148039][T17067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  558.156058][T17067] RBP: 00007eff047e68d0 R08: 00007ffc5f347f87 R09: 0000000000000003
[  558.164160][T17067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  558.172253][T17067] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffc5f34a390
[  558.180349][T17067]  </TASK>
[  558.183433][T17067] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  558.190764][T17067] CPU: 1 UID: 0 PID: 17067 Comm: syz-executor Not tainted 6.13.0-rc6-syzkaller-00975-gb1b62d6d332e #0
[  558.201757][T17067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  558.211846][T17067] Call Trace:
[  558.215137][T17067]  <TASK>
[  558.218097][T17067]  dump_stack_lvl+0x241/0x360
[  558.222816][T17067]  ? __pfx_dump_stack_lvl+0x10/0x10
[  558.228034][T17067]  ? __pfx__printk+0x10/0x10
[  558.232703][T17067]  ? vscnprintf+0x5d/0x90
[  558.237086][T17067]  panic+0x349/0x880
[  558.241026][T17067]  ? __warn+0x174/0x4d0
[  558.245237][T17067]  ? __pfx_panic+0x10/0x10
[  558.249706][T17067]  __warn+0x344/0x4d0
[  558.253724][T17067]  ? refcount_warn_saturate+0x15a/0x1d0
[  558.259302][T17067]  report_bug+0x2b3/0x500
[  558.263647][T17067]  ? refcount_warn_saturate+0x15a/0x1d0
[  558.269218][T17067]  handle_bug+0x60/0x90
[  558.273397][T17067]  exc_invalid_op+0x1a/0x50
[  558.277918][T17067]  asm_exc_invalid_op+0x1a/0x20
[  558.282785][T17067] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0
[  558.288957][T17067] Code: a0 6b 5f 8c e8 b7 c0 9d fc 90 0f 0b 90 90 eb 99 e8 db 1c dd fc c6 05 de 12 42 0b 01 90 48 c7 c7 00 6c 5f 8c e8 97 c0 9d fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 b8 1c dd fc c6 05 b8 12 42 0b 01 90
[  558.308588][T17067] RSP: 0018:ffffc9000b8ef7b8 EFLAGS: 00010246
[  558.314690][T17067] RAX: c51492cc6db5f800 RBX: ffff88807da8c478 RCX: ffff88804e2bbc00
[  558.322678][T17067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  558.330659][T17067] RBP: 0000000000000003 R08: ffffffff81602a82 R09: fffffbfff1cfa210
[  558.338641][T17067] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff88807da8c460
[  558.346637][T17067] R13: ffffffff8603af00 R14: 1ffff1100fb5188c R15: ffff88807da8c460
[  558.354624][T17067]  ? __pfx_klist_children_put+0x10/0x10
[  558.360203][T17067]  ? __warn_printk+0x292/0x360
[  558.365024][T17067]  ? refcount_warn_saturate+0x159/0x1d0
[  558.370591][T17067]  klist_dec_and_del+0x3ec/0x3f0
[  558.375547][T17067]  ? __pfx_klist_children_put+0x10/0x10
[  558.381108][T17067]  ? __pfx_klist_children_put+0x10/0x10
[  558.386677][T17067]  ? __pfx_klist_children_put+0x10/0x10
[  558.392244][T17067]  klist_remove+0x25e/0x480
[  558.396769][T17067]  ? __pfx_klist_remove+0x10/0x10
[  558.401827][T17067]  ? __pfx_kobject_move+0x10/0x10
[  558.406892][T17067]  ? get_device_parent+0x25d/0x410
[  558.412028][T17067]  device_move+0x1b4/0x710
[  558.416468][T17067]  ? kasan_quarantine_put+0xdc/0x230
[  558.421769][T17067]  hci_conn_del_sysfs+0xac/0x160
[  558.426721][T17067]  hci_conn_del+0x8c4/0xc40
[  558.431268][T17067]  hci_conn_hash_flush+0x258/0x350
[  558.436396][T17067]  ? __pfx_hci_conn_hash_flush+0x10/0x10
[  558.442040][T17067]  ? drain_workqueue+0x2d3/0x3a0
[  558.446993][T17067]  ? hci_discovery_set_state+0x57/0x180
[  558.452558][T17067]  hci_dev_close_sync+0xa42/0x11c0
[  558.457692][T17067]  hci_unregister_dev+0x20b/0x510
[  558.462746][T17067]  vhci_release+0x80/0xd0
[  558.467095][T17067]  ? __pfx_vhci_release+0x10/0x10
[  558.472147][T17067]  __fput+0x23c/0xa50
[  558.476160][T17067]  task_work_run+0x24f/0x310
[  558.480777][T17067]  ? __pfx_task_work_run+0x10/0x10
[  558.485904][T17067]  ? do_exit+0xa25/0x28e0
[  558.490252][T17067]  ? do_exit+0xa25/0x28e0
[  558.494601][T17067]  do_exit+0xa2a/0x28e0
[  558.498783][T17067]  ? __pfx_do_exit+0x10/0x10
[  558.503387][T17067]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  558.509408][T17067]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  558.515787][T17067]  ? _raw_spin_unlock_irq+0x23/0x50
[  558.521015][T17067]  ? lockdep_hardirqs_on+0x99/0x150
[  558.526261][T17067]  do_group_exit+0x207/0x2c0
[  558.530881][T17067]  __x64_sys_exit_group+0x3f/0x40
[  558.535953][T17067]  x64_sys_call+0x26a8/0x26b0
[  558.540642][T17067]  do_syscall_64+0xf3/0x230
[  558.545163][T17067]  ? clear_bhb_loop+0x35/0x90
[  558.549861][T17067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  558.555771][T17067] RIP: 0033:0x7eff04785d29
[  558.560198][T17067] Code: Unable to access opcode bytes at 0x7eff04785cff.
[  558.567252][T17067] RSP: 002b:00007ffc5f34a1e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  558.575682][T17067] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007eff04785d29
[  558.583667][T17067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  558.591646][T17067] RBP: 00007eff047e68d0 R08: 00007ffc5f347f87 R09: 0000000000000003
[  558.599631][T17067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  558.607634][T17067] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffc5f34a390
[  558.615645][T17067]  </TASK>
[  558.619131][T17067] Kernel Offset: disabled
[  558.623666][T17067] Rebooting in 86400 seconds..