last executing test programs:

1m29.780152627s ago: executing program 4 (id=319):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x5c, 0x3, 0x0, 0x0, 0x0, 0xf0})
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400900}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x11c, 0x1, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_EXPECT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x800}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x881}, 0x4008000)

1m16.658019855s ago: executing program 0 (id=1503):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090ac3db32b51d36010491000000000000000700000072f992b1e39a916d5f6931f2ee96c808000a40000000000900020073795a31000000000900010073797a30000000000800054000000021300000000c0a01010000000000797a31000000000900010073797a2fffffe5ffe100038014000100100001000000000000"], 0xb4}}, 0x20008844)

1m16.115567375s ago: executing program 1 (id=959):
r0 = socket$netlink(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="06b83ec9e7481ff555ae6a8ad8f0d55621515cd0e4bbd9caa7137462857a444a1c165ffaab290c57d6e2e7059538f09418b00a4ed9c28a44269ef7512591615a0eed940685fe9d0c103f85bf0c89640c166b241e5efb2ff35ea5c792bc785e77e62580", 0x63)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x4}, 0x6)

1m15.326276797s ago: executing program 4 (id=319):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x5c, 0x3, 0x0, 0x0, 0x0, 0xf0})
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400900}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x11c, 0x1, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_EXPECT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x800}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x881}, 0x4008000)

1m2.396048084s ago: executing program 0 (id=1503):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090ac3db32b51d36010491000000000000000700000072f992b1e39a916d5f6931f2ee96c808000a40000000000900020073795a31000000000900010073797a30000000000800054000000021300000000c0a01010000000000797a31000000000900010073797a2fffffe5ffe100038014000100100001000000000000"], 0xb4}}, 0x20008844)

57.349686693s ago: executing program 1 (id=959):
r0 = socket$netlink(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="06b83ec9e7481ff555ae6a8ad8f0d55621515cd0e4bbd9caa7137462857a444a1c165ffaab290c57d6e2e7059538f09418b00a4ed9c28a44269ef7512591615a0eed940685fe9d0c103f85bf0c89640c166b241e5efb2ff35ea5c792bc785e77e62580", 0x63)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x4}, 0x6)

56.567482274s ago: executing program 4 (id=319):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x5c, 0x3, 0x0, 0x0, 0x0, 0xf0})
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400900}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x11c, 0x1, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_EXPECT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x800}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x881}, 0x4008000)

46.061341143s ago: executing program 0 (id=1503):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090ac3db32b51d36010491000000000000000700000072f992b1e39a916d5f6931f2ee96c808000a40000000000900020073795a31000000000900010073797a30000000000800054000000021300000000c0a01010000000000797a31000000000900010073797a2fffffe5ffe100038014000100100001000000000000"], 0xb4}}, 0x20008844)

44.466686068s ago: executing program 1 (id=959):
r0 = socket$netlink(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="06b83ec9e7481ff555ae6a8ad8f0d55621515cd0e4bbd9caa7137462857a444a1c165ffaab290c57d6e2e7059538f09418b00a4ed9c28a44269ef7512591615a0eed940685fe9d0c103f85bf0c89640c166b241e5efb2ff35ea5c792bc785e77e62580", 0x63)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x4}, 0x6)

42.111416771s ago: executing program 4 (id=319):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x5c, 0x3, 0x0, 0x0, 0x0, 0xf0})
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400900}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x11c, 0x1, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_EXPECT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x800}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x881}, 0x4008000)

32.416801207s ago: executing program 0 (id=1503):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090ac3db32b51d36010491000000000000000700000072f992b1e39a916d5f6931f2ee96c808000a40000000000900020073795a31000000000900010073797a30000000000800054000000021300000000c0a01010000000000797a31000000000900010073797a2fffffe5ffe100038014000100100001000000000000"], 0xb4}}, 0x20008844)

29.77769677s ago: executing program 1 (id=959):
r0 = socket$netlink(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="06b83ec9e7481ff555ae6a8ad8f0d55621515cd0e4bbd9caa7137462857a444a1c165ffaab290c57d6e2e7059538f09418b00a4ed9c28a44269ef7512591615a0eed940685fe9d0c103f85bf0c89640c166b241e5efb2ff35ea5c792bc785e77e62580", 0x63)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x4}, 0x6)

28.049623066s ago: executing program 4 (id=319):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x5c, 0x3, 0x0, 0x0, 0x0, 0xf0})
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400900}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x11c, 0x1, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_EXPECT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x800}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x881}, 0x4008000)

15.936191984s ago: executing program 0 (id=1503):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090ac3db32b51d36010491000000000000000700000072f992b1e39a916d5f6931f2ee96c808000a40000000000900020073795a31000000000900010073797a30000000000800054000000021300000000c0a01010000000000797a31000000000900010073797a2fffffe5ffe100038014000100100001000000000000"], 0xb4}}, 0x20008844)

14.793308799s ago: executing program 1 (id=959):
r0 = socket$netlink(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="06b83ec9e7481ff555ae6a8ad8f0d55621515cd0e4bbd9caa7137462857a444a1c165ffaab290c57d6e2e7059538f09418b00a4ed9c28a44269ef7512591615a0eed940685fe9d0c103f85bf0c89640c166b241e5efb2ff35ea5c792bc785e77e62580", 0x63)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x4}, 0x6)

12.022749159s ago: executing program 4 (id=319):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x5c, 0x3, 0x0, 0x0, 0x0, 0xf0})
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400900}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x11c, 0x1, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_EXPECT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x800}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x881}, 0x4008000)

2.24440859s ago: executing program 2 (id=2074):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet(0x2, 0x5, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_void(r2, 0x29, 0x0, 0x0, 0x0)
poll(0xfffffffffffffffc, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="470d00000000000000000000000008000280040005"], 0x1c}}, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r4, 0x8, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x40)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/3344], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b907ef23f66a54f05c13e5f0888e", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000040)={'pim6reg1\x00', {0x2, 0x0, @multicast2}})
r6 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r6, 0x10d, 0x10, &(0x7f0000000080)="d8006b0928", 0x5)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x39, @mcast1, 0x7}, 0x1c)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x40, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c00}, 0x80)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r7, 0x8983, &(0x7f00000000c0))
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x6c, 0xe, 0x6, 0x1002, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20040800)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x118, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xf3, 0x2, {{}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_DELAY_DIST={0xa, 0x2, "58d5c080bbdd"}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x8}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0xe}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_LOSS={0x60, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_REORDER={0xc}]}}}]}, 0x118}}, 0x0)

1.837979171s ago: executing program 3 (id=2075):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x111, 0x4b4, 0x150, 0xd4feffff, 0x2a8, 0x20a, 0x278, 0x2a8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'wlan0\x00', {}, {}, 0x6}, 0x0, 0x120, 0x150, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0x3], [0x10]}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x3e}, [0xff, 0xffffff00, 0xffffffff, 0xff000000], 0x4e21, 0x5c, 0x7, 0x4e24, 0x2, 0x10}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x2, 0xa}, {0x1, 0x2, 0x6}, 0x7fffffff}}}, {{@ipv6={@rand_addr=' \x01\x00', @private1, [], [0xffffff00], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000014480)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r5, &(0x7f0000002580)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000000f80)="ea", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r5, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013d00000000009500000200000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xa}, 0xffffffffffffff9b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.690704771s ago: executing program 2 (id=2076):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74000000000701040000000000000000070000000900010073797a3000000000540007800800024000000100080001400000054f925ec53ed3c5eeeb88c769c74300030800015000000003080001400000007f080002400000000008000140ffffffff0800024080000001080002400000000a08"], 0x74}, 0x1, 0x0, 0x0, 0x48d5}, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000))
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c2000000000095000012000000000e09b9445761db3ed82f7be4b9f1628b9a5c40384cb45e62e827e611f21a01a76f66f616553959b478ad3c46bb20e558783b21dd5307760617deec8b1b75c00853ee69e33ba2c01c28950365dd46fcc9f2ac6d20197fd68292e8445824f49b6fba41a316e13e462e31ca00d2622d56318d78e271d364329e7ae732bf8dade587bb30d67e23f78662621b74aabfd8eaf399893bab50fed33101f5a1085f991877907bd6117db675155932860499977f7384a8d94e810492c284fc7cc784ed942bf11d72897a7896f5f8c957984312e9d39eaa478a3065afd52404cb058b"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c00000018000109000000000000000002180000fe0000080000000008000100ac1414"], 0x2c}}, 0x0)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r4}, 0x10)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
close(r8)
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x18, 0x3a, 0x0, @remote, @local, {[], @ndisc_na={0x90, 0x0, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}}}}}}}, 0x0)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r8, r4, 0x4, r7}, 0x8)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6800000014000100000000000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000000000088000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000c00080008000800000000000c0015000000000000000900"], 0x68}, 0x1, 0x0, 0x0, 0x4041000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800a00010072616e67650000004c00010073797a30000000000900020073797a3200130000140000401100010000000700000000000000000a00"/116], 0x74}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0200000001010000000000000a00000904000000000000000000000400000000040000000000000f030000000000000061"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x14, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x4040000)
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)

1.558548762s ago: executing program 2 (id=2077):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffdd, &(0x7f0000000000)='/proc/0KgOq\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$l2tp6(0xa, 0x2, 0x73) (async)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0204965bf0"], 0x18)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_batadv\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x11}, 0x9, r2})
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000004c40)={@private0={0xfc, 0x0, '\x00', 0x1}, r2}, 0x14)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'caif0\x00', &(0x7f0000000900)=@ethtool_sfeatures={0x3b, 0x2, [{0x5751, 0x7fffffff}, {0x6, 0x11fa}]}}) (async)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'caif0\x00', &(0x7f0000000900)=@ethtool_sfeatures={0x3b, 0x2, [{0x5751, 0x7fffffff}, {0x6, 0x11fa}]}})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000300)={'syztnl2\x00', r2, 0x20, 0x700, 0x2, 0x4, {{0x32, 0x4, 0x2, 0x4, 0xc8, 0x68, 0x0, 0x5, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x20}, {[@end, @noop, @cipso={0x86, 0x66, 0x3, [{0x6, 0x4, '1\v'}, {0x0, 0x12, "3be3c3586853e8be469b740e0c213d89"}, {0x0, 0xc, "cee7f8ed46216b0e030c"}, {0x2, 0x3, "e4"}, {0x7, 0xd, "b6ed8ea58cdca79fb4e82d"}, {0x0, 0x6, "19fba872"}, {0x7, 0x2}, {0x0, 0xf, "9002454fac21db50bfcf282fcb"}, {0x5, 0xf888b1294beff1d, "8f4d25a955230ac2c0d067060464"}, {0x0, 0x7, "c3777ad014"}]}, @end, @timestamp={0x44, 0xc, 0x88, 0x0, 0x0, [0xa, 0x100]}, @timestamp={0x44, 0x2c, 0x69, 0x0, 0x8, [0x9, 0x5, 0x40000007, 0x4, 0xf, 0x3, 0x7, 0xfffffff3, 0x370, 0x9]}, @generic={0x86, 0x12, "9cec32e7e124fd70fb876ab4ba6f2ec6"}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000300)={'syztnl2\x00', r2, 0x20, 0x700, 0x2, 0x4, {{0x32, 0x4, 0x2, 0x4, 0xc8, 0x68, 0x0, 0x5, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x20}, {[@end, @noop, @cipso={0x86, 0x66, 0x3, [{0x6, 0x4, '1\v'}, {0x0, 0x12, "3be3c3586853e8be469b740e0c213d89"}, {0x0, 0xc, "cee7f8ed46216b0e030c"}, {0x2, 0x3, "e4"}, {0x7, 0xd, "b6ed8ea58cdca79fb4e82d"}, {0x0, 0x6, "19fba872"}, {0x7, 0x2}, {0x0, 0xf, "9002454fac21db50bfcf282fcb"}, {0x5, 0xf888b1294beff1d, "8f4d25a955230ac2c0d067060464"}, {0x0, 0x7, "c3777ad014"}]}, @end, @timestamp={0x44, 0xc, 0x88, 0x0, 0x0, [0xa, 0x100]}, @timestamp={0x44, 0x2c, 0x69, 0x0, 0x8, [0x9, 0x5, 0x40000007, 0x4, 0xf, 0x3, 0x7, 0xfffffff3, 0x370, 0x9]}, @generic={0x86, 0x12, "9cec32e7e124fd70fb876ab4ba6f2ec6"}]}}}}})

1.422164605s ago: executing program 3 (id=2078):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0x1}, &(0x7f0000000000), &(0x7f0000000080)='%-010d \x00'}, 0x20)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002000090800000000000000000a0000002000000100000000"], 0x1c}}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0x1}, &(0x7f0000000000), &(0x7f0000000080)='%-010d \x00'}, 0x20) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002000090800000000000000000a0000002000000100000000"], 0x1c}}, 0x0) (async)

1.30245894s ago: executing program 2 (id=2079):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc4}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1.244059695s ago: executing program 3 (id=2080):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001980)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0xb00, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}}, 0x0)

1.07396946s ago: executing program 2 (id=2081):
r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
unshare(0x400) (async)
r1 = socket(0x23, 0x5, 0x0)
connect$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000100000001800018014000200776c616e310000000000000000000000080006000300000008000700f3"], 0x3c}}, 0x0)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) (async)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r5, 0x11, 0xb, 0x0, &(0x7f0000000100))
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$TUNSETNOCSUM(r6, 0xc0189436, 0x1ffffffe) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r7, 0x89f9, &(0x7f0000000080)={'sit0\x00', 0x0}) (async)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)={0x6, <r9=>0x0}, 0x8)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000400)={0x1000}, 0x8) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="00000000a7f49ac200000000", @ANYRES32=r9, @ANYBLOB="2a68d3b30d731cac9bd0aca75dcea837f9262f64328a701826d98537ac5505850728110dc2c24122aceebc85acce9dcbd793805acd0582ab558c40a9f6ad4ec876abeb1a8f6c4353c05727528c15ccce811c593b4ecb8d153fe606e617871a0a7cc5f9f08b03d48e425fa3d94d7499675491f8525ba880e000000000", @ANYRES64=0x0], 0x20)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x80000001, @empty}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000019340)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6001010000081100fe8000000000000000004000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0)
r10 = socket(0x10, 0x80002, 0x0)
r11 = socket(0x10, 0x803, 0x0) (async)
r12 = socket(0x400000000010, 0x3, 0x0) (async)
r13 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0xc4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0xe, 0x7}, {}, {0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x8, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x20006}, {0x8, 0x7, 0x8, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x1}, {0x7fde, 0x40, 0x54, 0x4}, {0x5, 0x2, 0x2, 0x2}, {0x6, 0x0, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800000, 0xa525}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x20000040)
sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtclass={0x0, 0x28, 0x891c7b145f837c30, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r14, {0x5, 0x5}, {0x7, 0x7}, {0x4, 0xfff3}}}, 0x68}}, 0x0)

1.037352006s ago: executing program 3 (id=2082):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0xfff}]}, 0x40}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfb, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x4)

846.910157ms ago: executing program 2 (id=2083):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x2c, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r5=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000001c0)=0x1, 0x66)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10)
ppoll(&(0x7f0000000240)=[{r3}, {r4, 0x205}], 0x2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x6b, &(0x7f0000000500)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x11)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x20, 0x9, 0x70bd28, 0x0, {0x15}}, 0x14}}, 0x0)

782.147233ms ago: executing program 3 (id=2084):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000200001002bbd7000000000000a10800000000007040000000200fc02000000000000000000000000000014000100200100"/68], 0x44}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)

601.340141ms ago: executing program 0 (id=1503):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090ac3db32b51d36010491000000000000000700000072f992b1e39a916d5f6931f2ee96c808000a40000000000900020073795a31000000000900010073797a30000000000800054000000021300000000c0a01010000000000797a31000000000900010073797a2fffffe5ffe100038014000100100001000000000000"], 0xb4}}, 0x20008844)

570.265554ms ago: executing program 3 (id=2085):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10)
connect$inet(r1, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getstats={0x1c, 0x5e, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x2}}, 0x1c}}, 0x20008004)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0)
sendmmsg$inet(r1, &(0x7f0000004bc0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000580)="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", 0x580}, {0x0}, {&(0x7f0000000340)="e5845f2491922f4618038d6d2041a7e62460e43923c303abf908eac48f88fe6d4d2825164ddf9d5cd143f49063463152bd1b6b37290f5927380d26adecb8eb2c3fe841c67796ad1ac63fa01aba6094968d4e178c3d50a42503b7404671c2fc06e6211d1e334ad920cdd88d84f33232d1724c2b66baa10918b12533e69a8d80a11b75c95b83601ecd", 0x88}], 0x3, &(0x7f00000025c0)}}], 0x1, 0x401eb94)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x80000002}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x8c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="6b5b81f6b2d3c0adaea7ecf8255c3c121dec2c5549fb6473e583abc42d9ee3d0fa7a0e9fd01a9fd2988164f0f6f6fcc5fc94b2ec271c6a9ee1bbe80f9db030867de11a84d91db24578a3606edd4e4c15a370402e8018318a2ba1c2dc95f3627935907d6209fdc845821e2443108e610469139956e4966a835b5e6087721d8c696b61d2d01411cfed6ce8718250", 0x8d)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x25, &(0x7f00000000c0)=0x4008007a, 0x4)

0s ago: executing program 1 (id=959):
r0 = socket$netlink(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="06b83ec9e7481ff555ae6a8ad8f0d55621515cd0e4bbd9caa7137462857a444a1c165ffaab290c57d6e2e7059538f09418b00a4ed9c28a44269ef7512591615a0eed940685fe9d0c103f85bf0c89640c166b241e5efb2ff35ea5c792bc785e77e62580", 0x63)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x4}, 0x6)

kernel console output (not intermixed with test programs):

0:50
[  312.300047][  T307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.400734][ T7641] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.429449][ T2896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.442246][ T2896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.578379][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  312.589477][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  312.600607][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  312.625188][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  312.647159][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  312.655751][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  312.729320][T14449] bridee_slave_0 speed is unknown, defaulting to 1000
[  313.073185][ T7641] bridge_slave_1: left allmulticast mode
[  313.078917][ T7641] bridge_slave_1: left promiscuous mode
[  313.092122][ T7641] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.129366][ T7641] bridge_slave_0: left allmulticast mode
[  313.145461][ T7641] bridge_slave_0: left promiscuous mode
[  313.151215][ T7641] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.427065][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  313.451310][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  313.459719][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  313.477375][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  313.486687][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  313.497499][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  313.760508][ T7641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  313.772114][ T7641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  313.784680][ T7641] bond0 (unregistering): Released all slaves
[  313.861454][T14449] chnl_net:caif_netlink_parms(): no params data found
[  314.041861][T14479] bridee_slave_0 speed is unknown, defaulting to 1000
[  314.146633][T14449] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.160519][T14449] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.167985][T14449] bridge_slave_0: entered allmulticast mode
[  314.176120][T14449] bridge_slave_0: entered promiscuous mode
[  314.187841][T14449] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.195077][T14449] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.202228][T14449] bridge_slave_1: entered allmulticast mode
[  314.223861][T14449] bridge_slave_1: entered promiscuous mode
[  314.287561][ T7641] hsr_slave_0: left promiscuous mode
[  314.293912][ T7641] hsr_slave_1: left promiscuous mode
[  314.299603][ T7641] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  314.308784][ T7641] batman_adv: batadv0: Removing interface: batadv_slave_0
[  314.316934][ T7641] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  314.324541][ T7641] batman_adv: batadv0: Removing interface: batadv_slave_1
[  314.343885][ T7641] veth1_macvtap: left promiscuous mode
[  314.349412][ T7641] veth0_macvtap: left promiscuous mode
[  314.355205][ T7641] veth1_vlan: left promiscuous mode
[  314.360453][ T7641] veth0_vlan: left promiscuous mode
[  314.716612][ T5851] Bluetooth: hci1: command tx timeout
[  314.881507][ T7641] team0 (unregistering): Port device team_slave_1 removed
[  314.978808][ T7641] team0 (unregistering): Port device team_slave_0 removed
[  315.111153][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  315.120672][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  315.138995][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  315.166020][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  315.175076][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  315.185794][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  315.476488][T14449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  315.488679][T14510] tunl0: entered promiscuous mode
[  315.499232][T14510] netlink: 'syz.3.1766': attribute type 3 has an invalid length.
[  315.507280][T14510] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1766'.
[  315.536213][T14449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  315.592691][ T5840] Bluetooth: hci2: command tx timeout
[  315.634150][T14521] bridee_slave_0 speed is unknown, defaulting to 1000
[  315.639706][T14524] Bluetooth: MGMT ver 1.23
[  315.647746][T14449] team0: Port device team_slave_0 added
[  315.687121][T14449] team0: Port device team_slave_1 added
[  315.789975][T14527] ipt_REJECT: ECHOREPLY no longer supported.
[  315.956806][T14449] batman_adv: batadv0: Adding interface: batadv_slave_0
[  316.001166][T14449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  316.039650][T14548] openvswitch: netlink: EtherType 50a is less than min 600
[  316.070821][T14449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  316.138967][T14554] xt_ecn: cannot match TCP bits for non-tcp packets
[  316.155439][T14449] batman_adv: batadv0: Adding interface: batadv_slave_1
[  316.162414][T14449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  316.218421][T14449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  316.285194][T14558] tipc: Started in network mode
[  316.290195][T14558] tipc: Node identity ffffffff, cluster identity 4711
[  316.299565][T14558] tipc: Node number set to 4294967295
[  316.334267][T14449] hsr_slave_0: entered promiscuous mode
[  316.354178][T14449] hsr_slave_1: entered promiscuous mode
[  316.375305][T14449] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  316.394222][T14449] Cannot create hsr debugfs directory
[  316.406692][T14479] chnl_net:caif_netlink_parms(): no params data found
[  316.456659][T14569] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  316.577983][T14573] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1775'.
[  316.702365][T14575] vlan0: mtu less than device minimum
[  316.794327][ T5840] Bluetooth: hci1: command tx timeout
[  316.831532][T14479] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.849203][T14479] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.866424][T14479] bridge_slave_0: entered allmulticast mode
[  316.893729][T14479] bridge_slave_0: entered promiscuous mode
[  316.986242][ T7641] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.057265][T14521] chnl_net:caif_netlink_parms(): no params data found
[  317.089309][T14479] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.102093][T14479] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.121487][T14479] bridge_slave_1: entered allmulticast mode
[  317.151975][T14479] bridge_slave_1: entered promiscuous mode
[  317.201458][ T7641] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.222777][T14612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1781'.
[  317.252530][T14612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1781'.
[  317.282696][ T5840] Bluetooth: hci3: command tx timeout
[  317.289434][T14612] netlink: 'syz.3.1781': attribute type 14 has an invalid length.
[  317.324939][ T7641] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.356461][T14479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  317.403818][T14479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  317.443441][ T7641] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.547930][T14479] team0: Port device team_slave_0 added
[  317.594703][T14479] team0: Port device team_slave_1 added
[  317.621800][T14521] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.629702][T14521] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.637276][T14521] bridge_slave_0: entered allmulticast mode
[  317.644382][T14521] bridge_slave_0: entered promiscuous mode
[  317.682817][ T5840] Bluetooth: hci2: command tx timeout
[  317.716743][T14479] batman_adv: batadv0: Adding interface: batadv_slave_0
[  317.725360][T14479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.751717][T14479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  317.764011][T14521] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.771326][T14521] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.783267][T14521] bridge_slave_1: entered allmulticast mode
[  317.789884][T14521] bridge_slave_1: entered promiscuous mode
[  317.857206][T14479] batman_adv: batadv0: Adding interface: batadv_slave_1
[  317.864775][T14479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.901042][T14479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  317.920047][T14521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  317.969033][T14521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  318.066052][T14625] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  318.089855][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  318.117711][ T7641] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.155259][T14479] hsr_slave_0: entered promiscuous mode
[  318.163078][T14627] netlink: 'syz.2.1785': attribute type 11 has an invalid length.
[  318.163680][T14479] hsr_slave_1: entered promiscuous mode
[  318.171068][T14627] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1785'.
[  318.182703][T14479] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  318.193532][T14479] Cannot create hsr debugfs directory
[  318.209795][T14521] team0: Port device team_slave_0 added
[  318.219937][T14521] team0: Port device team_slave_1 added
[  318.259037][T14629] Bluetooth: MGMT ver 1.23
[  318.278812][ T7641] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.401613][T14521] batman_adv: batadv0: Adding interface: batadv_slave_0
[  318.409154][T14521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  318.439140][T14521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  318.485705][ T7641] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.534987][T14521] batman_adv: batadv0: Adding interface: batadv_slave_1
[  318.541986][T14521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  318.608334][T14521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  318.738860][ T7641] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.764451][T14449] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  318.773521][T14449] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  318.829166][T14521] hsr_slave_0: entered promiscuous mode
[  318.843628][T14521] hsr_slave_1: entered promiscuous mode
[  318.849682][T14521] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  318.857476][T14521] Cannot create hsr debugfs directory
[  318.864541][T14449] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  318.872745][ T5840] Bluetooth: hci1: command tx timeout
[  318.880318][T14449] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  319.049366][T14652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1793'.
[  319.158884][T14654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1795'.
[  319.344520][ T7641] bridge_slave_1: left allmulticast mode
[  319.350206][ T7641] bridge_slave_1: left promiscuous mode
[  319.362630][ T5840] Bluetooth: hci3: command tx timeout
[  319.373298][ T7641] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.387167][ T7641] bridge_slave_0: left allmulticast mode
[  319.394349][ T7641] bridge_slave_0: left promiscuous mode
[  319.402914][ T7641] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.436771][ T7641] bridge_slave_1: left allmulticast mode
[  319.442469][ T7641] bridge_slave_1: left promiscuous mode
[  319.460105][ T7641] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.474142][ T7641] bridge_slave_0: left allmulticast mode
[  319.479829][ T7641] bridge_slave_0: left promiscuous mode
[  319.501225][T14674] netlink: 'syz.2.1798': attribute type 10 has an invalid length.
[  319.509758][ T7641] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.763511][ T5840] Bluetooth: hci2: command tx timeout
[  320.180896][ T7641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  320.191560][ T7641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  320.201802][ T7641] bond0 (unregistering): Released all slaves
[  320.312043][ T7641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  320.323302][ T7641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  320.333727][ T7641] bond0 (unregistering): Released all slaves
[  320.719050][T14449] 8021q: adding VLAN 0 to HW filter on device bond0
[  320.953106][ T5840] Bluetooth: hci1: command tx timeout
[  321.076739][T14449] 8021q: adding VLAN 0 to HW filter on device team0
[  321.181273][ T7648] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.188511][ T7648] bridge0: port 1(bridge_slave_0) entered forwarding state
[  321.248542][T14719] netlink: 'syz.3.1804': attribute type 28 has an invalid length.
[  321.261586][T14719] netlink: 'syz.3.1804': attribute type 3 has an invalid length.
[  321.271505][T14719] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1804'.
[  321.299687][ T4789] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.306901][ T4789] bridge0: port 2(bridge_slave_1) entered forwarding state
[  321.381470][ T7641] hsr_slave_0: left promiscuous mode
[  321.403422][ T7641] hsr_slave_1: left promiscuous mode
[  321.409511][ T7641] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  321.417636][ T7641] batman_adv: batadv0: Removing interface: batadv_slave_0
[  321.426318][ T7641] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  321.434464][ T7641] batman_adv: batadv0: Removing interface: batadv_slave_1
[  321.443287][ T5840] Bluetooth: hci3: command tx timeout
[  321.457557][ T7641] hsr_slave_0: left promiscuous mode
[  321.464109][ T7641] hsr_slave_1: left promiscuous mode
[  321.470229][ T7641] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  321.477949][ T7641] batman_adv: batadv0: Removing interface: batadv_slave_0
[  321.492447][ T7641] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  321.501946][ T7641] batman_adv: batadv0: Removing interface: batadv_slave_1
[  321.567479][ T7641] veth1_macvtap: left promiscuous mode
[  321.576666][ T7641] veth0_macvtap: left promiscuous mode
[  321.583059][ T7641] veth1_vlan: left promiscuous mode
[  321.588587][ T7641] veth0_vlan: left promiscuous mode
[  321.596963][ T7641] veth1_macvtap: left promiscuous mode
[  321.602503][ T7641] veth0_macvtap: left promiscuous mode
[  321.608341][ T7641] veth1_vlan: left promiscuous mode
[  321.618091][ T7641] veth0_vlan: left promiscuous mode
[  321.843240][ T5840] Bluetooth: hci2: command tx timeout
[  322.149847][ T7641] team0 (unregistering): Port device team_slave_1 removed
[  322.191499][ T7641] team0 (unregistering): Port device team_slave_0 removed
[  322.858736][ T7641] team0 (unregistering): Port device team_slave_1 removed
[  322.904377][ T7641] team0 (unregistering): Port device team_slave_0 removed
[  323.331707][T14449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  323.429740][T14521] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  323.484745][T14521] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  323.503669][T14521] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  323.512827][ T5840] Bluetooth: hci3: command tx timeout
[  323.540251][T14521] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  323.750145][T14479] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  323.786524][T14479] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  323.832310][T14479] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  323.861021][T14479] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  323.864275][T14755] netlink: 440 bytes leftover after parsing attributes in process `syz.2.1814'.
[  323.882517][T14449] 8021q: adding VLAN 0 to HW filter on device batadv0
[  324.088528][T14449] veth0_vlan: entered promiscuous mode
[  324.126782][T14449] veth1_vlan: entered promiscuous mode
[  324.180525][T14521] 8021q: adding VLAN 0 to HW filter on device bond0
[  324.284753][T14449] veth0_macvtap: entered promiscuous mode
[  324.318132][T14449] veth1_macvtap: entered promiscuous mode
[  324.361298][T14521] 8021q: adding VLAN 0 to HW filter on device team0
[  324.403793][ T7633] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.410950][ T7633] bridge0: port 1(bridge_slave_0) entered forwarding state
[  324.429970][ T7633] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.437143][ T7633] bridge0: port 2(bridge_slave_1) entered forwarding state
[  324.555489][T14449] batman_adv: batadv0: Interface activated: batadv_slave_0
[  324.586988][T14479] 8021q: adding VLAN 0 to HW filter on device bond0
[  324.646493][T14449] batman_adv: batadv0: Interface activated: batadv_slave_1
[  324.725636][T14449] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  324.744888][T14449] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  324.780594][T14449] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  324.817192][T14449] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  324.856285][T14479] 8021q: adding VLAN 0 to HW filter on device team0
[  324.917651][ T7648] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.924817][ T7648] bridge0: port 1(bridge_slave_0) entered forwarding state
[  325.035796][ T7648] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.042989][ T7648] bridge0: port 2(bridge_slave_1) entered forwarding state
[  325.274383][  T307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.291498][  T307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.366317][ T7642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.404709][ T7642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.495313][T14521] 8021q: adding VLAN 0 to HW filter on device batadv0
[  325.732232][T14479] 8021q: adding VLAN 0 to HW filter on device batadv0
[  325.960606][T14479] veth0_vlan: entered promiscuous mode
[  326.118005][ T7642] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.193666][T14479] veth1_vlan: entered promiscuous mode
[  326.294352][ T7642] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.382982][ T7642] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.405488][T14479] veth0_macvtap: entered promiscuous mode
[  326.430203][T14521] veth0_vlan: entered promiscuous mode
[  326.445393][T14479] veth1_macvtap: entered promiscuous mode
[  326.489074][ T7642] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.521685][T14521] veth1_vlan: entered promiscuous mode
[  326.538592][T14479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  326.552398][T14479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.564373][T14479] batman_adv: batadv0: Interface activated: batadv_slave_0
[  326.596045][T14479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  326.610897][T14479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.624561][T14479] batman_adv: batadv0: Interface activated: batadv_slave_1
[  326.640490][T14479] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  326.650582][T14479] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  326.659904][T14479] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  326.669064][T14479] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  326.760758][T14521] veth0_macvtap: entered promiscuous mode
[  326.820200][T14521] veth1_macvtap: entered promiscuous mode
[  326.855193][ T7642] bridge_slave_1: left allmulticast mode
[  326.860897][ T7642] bridge_slave_1: left promiscuous mode
[  326.868350][ T7642] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.889552][ T7642] bridge_slave_0: left allmulticast mode
[  326.895505][ T7642] bridge_slave_0: left promiscuous mode
[  326.901261][ T7642] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.359892][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  327.369529][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  327.378420][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  327.409423][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  327.434040][ T5851] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  327.456180][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  327.556201][ T7642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  327.568075][ T7642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  327.580512][ T7642] bond0 (unregistering): Released all slaves
[  327.607103][T14887] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  327.788959][T14910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1832'.
[  327.805691][T14521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  327.827292][T14521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.838060][T14521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  327.848618][T14521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.859961][T14521] batman_adv: batadv0: Interface activated: batadv_slave_0
[  327.871973][T14897] bridee_slave_0 speed is unknown, defaulting to 1000
[  327.873589][T14521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  327.918760][T14521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.931609][T14521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  327.944831][T14521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.955636][T14521] batman_adv: batadv0: Interface activated: batadv_slave_1
[  327.965234][T14910] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  327.968821][ T7648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  327.996298][ T7648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.030367][T14521] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  328.063830][T14521] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  328.077732][T14521] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  328.088537][T14521] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  328.119033][T14924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1834'.
[  328.245334][ T7633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.259390][ T7633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.281167][ T7642] hsr_slave_0: left promiscuous mode
[  328.287742][ T7642] hsr_slave_1: left promiscuous mode
[  328.298291][ T7642] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  328.308562][ T7642] batman_adv: batadv0: Removing interface: batadv_slave_0
[  328.327284][ T7642] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  328.336201][ T7642] batman_adv: batadv0: Removing interface: batadv_slave_1
[  328.417275][ T7642] veth1_macvtap: left promiscuous mode
[  328.431089][ T7642] veth0_macvtap: left promiscuous mode
[  328.447546][ T7642] veth1_vlan: left promiscuous mode
[  328.450903][T14937] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT
[  328.459887][ T7642] veth0_vlan: left promiscuous mode
[  328.958956][T14954] netlink: 'syz.2.1841': attribute type 1 has an invalid length.
[  328.992311][T14954] netlink: 'syz.2.1841': attribute type 1 has an invalid length.
[  329.017813][T14954] netlink: 'syz.2.1841': attribute type 1 has an invalid length.
[  329.027144][T14954] netlink: 'syz.2.1841': attribute type 1 has an invalid length.
[  329.056244][T14954] netlink: 'syz.2.1841': attribute type 1 has an invalid length.
[  329.073112][T14954] netlink: 'syz.2.1841': attribute type 1 has an invalid length.
[  329.102256][T14954] netlink: 'syz.2.1841': attribute type 1 has an invalid length.
[  329.116284][T14954] netlink: 'syz.2.1841': attribute type 1 has an invalid length.
[  329.136545][T14954] netlink: 'syz.2.1841': attribute type 1 has an invalid length.
[  329.164013][T14954] netlink: 'syz.2.1841': attribute type 1 has an invalid length.
[  329.277376][T14961] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1842'.
[  329.415648][ T7642] team0 (unregistering): Port device team_slave_1 removed
[  329.463787][ T7642] team0 (unregistering): Port device team_slave_0 removed
[  329.517753][ T5851] Bluetooth: hci1: command tx timeout
[  330.290153][T14970] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1844'.
[  330.320968][T14897] chnl_net:caif_netlink_parms(): no params data found
[  330.370398][ T4789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  330.403021][ T4789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  330.619343][T14897] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.647643][T14897] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.663179][T14897] bridge_slave_0: entered allmulticast mode
[  330.669823][T14897] bridge_slave_0: entered promiscuous mode
[  330.690222][T14897] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.708376][T14897] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.723230][T14897] bridge_slave_1: entered allmulticast mode
[  330.729852][T14897] bridge_slave_1: entered promiscuous mode
[  330.823165][T14897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  330.846484][ T4789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  330.853599][T14897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  330.855038][ T4789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  330.978866][T14897] team0: Port device team_slave_0 added
[  331.051146][T14897] team0: Port device team_slave_1 added
[  331.138300][  T307] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.396734][  T307] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.507942][T14897] batman_adv: batadv0: Adding interface: batadv_slave_0
[  331.522904][T14897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  331.572947][T14897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  331.602771][ T5851] Bluetooth: hci1: command tx timeout
[  331.665896][  T307] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.727025][T14897] batman_adv: batadv0: Adding interface: batadv_slave_1
[  331.742685][T14897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  331.802731][T14897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  331.907621][  T307] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.046004][T14897] hsr_slave_0: entered promiscuous mode
[  332.052417][T14897] hsr_slave_1: entered promiscuous mode
[  332.073199][T14897] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  332.091028][T14897] Cannot create hsr debugfs directory
[  332.341693][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  332.354055][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  332.361993][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  332.370972][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  332.381783][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  332.389460][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  332.416340][  T307] bridge_slave_1: left allmulticast mode
[  332.422047][  T307] bridge_slave_1: left promiscuous mode
[  332.443043][  T307] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.454278][  T307] bridge_slave_0: left allmulticast mode
[  332.459964][  T307] bridge_slave_0: left promiscuous mode
[  332.487688][  T307] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.981550][  T307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  332.992298][  T307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  333.002781][  T307] bond0 (unregistering): Released all slaves
[  333.158030][T15015] bridee_slave_0 speed is unknown, defaulting to 1000
[  333.352095][  T307] hsr_slave_0: left promiscuous mode
[  333.360845][  T307] hsr_slave_1: left promiscuous mode
[  333.370342][  T307] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  333.379033][  T307] batman_adv: batadv0: Removing interface: batadv_slave_0
[  333.390196][  T307] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  333.399023][  T307] batman_adv: batadv0: Removing interface: batadv_slave_1
[  333.455873][  T307] veth1_macvtap: left promiscuous mode
[  333.461450][  T307] veth0_macvtap: left promiscuous mode
[  333.478505][  T307] veth1_vlan: left promiscuous mode
[  333.492756][  T307] veth0_vlan: left promiscuous mode
[  333.673331][ T5851] Bluetooth: hci1: command tx timeout
[  333.960208][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  333.971446][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  333.980473][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  333.990288][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  333.998968][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  334.006699][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  334.473930][ T5851] Bluetooth: hci2: command tx timeout
[  334.730681][  T307] team0 (unregistering): Port device team_slave_1 removed
[  334.771598][  T307] team0 (unregistering): Port device team_slave_0 removed
[  335.189653][T15049] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1851'.
[  335.413443][T15088] validate_nla: 60 callbacks suppressed
[  335.413461][T15088] netlink: 'syz.3.1855': attribute type 10 has an invalid length.
[  335.446009][T15056] bridee_slave_0 speed is unknown, defaulting to 1000
[  335.447295][T15015] chnl_net:caif_netlink_parms(): no params data found
[  335.504226][T15088] batadv_slave_0: left promiscuous mode
[  335.509840][T15088] batadv_slave_0: left allmulticast mode
[  335.520150][T15088] bond0: (slave batadv_slave_0): Enslaving as an active interface with a down link
[  335.753119][ T5851] Bluetooth: hci1: command tx timeout
[  335.779468][T15015] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.816803][T15015] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.834115][T15015] bridge_slave_0: entered allmulticast mode
[  335.846040][T15015] bridge_slave_0: entered promiscuous mode
[  335.858903][T15015] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.866906][T15015] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.879691][T15015] bridge_slave_1: entered allmulticast mode
[  335.894483][T15015] bridge_slave_1: entered promiscuous mode
[  336.056310][T15015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  336.072790][ T5851] Bluetooth: hci3: command tx timeout
[  336.081517][T14897] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  336.104898][T15015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  336.144031][T14897] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  336.169796][T14897] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  336.265129][T14897] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  336.352351][T15015] team0: Port device team_slave_0 added
[  336.378612][T15015] team0: Port device team_slave_1 added
[  336.431435][  T307] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.496885][T15132] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1863'.
[  336.519970][T15015] batman_adv: batadv0: Adding interface: batadv_slave_0
[  336.540205][T15015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  336.572957][ T5851] Bluetooth: hci2: command tx timeout
[  336.579309][T15015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  336.593537][T15140] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1865'.
[  336.604360][T15015] batman_adv: batadv0: Adding interface: batadv_slave_1
[  336.611346][T15015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  336.638318][T15015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  336.709795][  T307] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.742468][T15140] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1865'.
[  336.765398][T15140] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1865'.
[  336.796485][T15147] netlink: 'syz.3.1866': attribute type 10 has an invalid length.
[  336.822217][  T307] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.851162][T15145] netlink: 'syz.3.1866': attribute type 1 has an invalid length.
[  336.860051][T15145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1866'.
[  336.870289][T15140] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1865'.
[  336.894635][  T307] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.909260][T15147] team0: Device hsr_slave_0 failed to register rx_handler
[  336.928184][T15056] chnl_net:caif_netlink_parms(): no params data found
[  336.964031][T15140] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1865'.
[  337.016335][T15140] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1865'.
[  337.019769][T15015] hsr_slave_0: entered promiscuous mode
[  337.034349][T15015] hsr_slave_1: entered promiscuous mode
[  337.044864][T15015] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  337.053285][T15015] Cannot create hsr debugfs directory
[  337.101146][T15140] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1865'.
[  337.356062][T15056] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.363690][T15056] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.370920][T15056] bridge_slave_0: entered allmulticast mode
[  337.378028][T15056] bridge_slave_0: entered promiscuous mode
[  337.451676][T15056] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.470568][T15056] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.489458][T15056] bridge_slave_1: entered allmulticast mode
[  337.508486][T15056] bridge_slave_1: entered promiscuous mode
[  337.529252][  T307] bridge_slave_1: left allmulticast mode
[  337.535710][  T307] bridge_slave_1: left promiscuous mode
[  337.541519][  T307] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.556059][  T307] bridge_slave_0: left allmulticast mode
[  337.561746][  T307] bridge_slave_0: left promiscuous mode
[  337.570913][  T307] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.927464][  T307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  337.938125][  T307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  337.948416][  T307] bond0 (unregistering): Released all slaves
[  338.064584][T15056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  338.110840][T15056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  338.156927][ T5851] Bluetooth: hci3: command tx timeout
[  338.254159][T14897] 8021q: adding VLAN 0 to HW filter on device bond0
[  338.271476][T15056] team0: Port device team_slave_0 added
[  338.337906][T15056] team0: Port device team_slave_1 added
[  338.445928][T15056] batman_adv: batadv0: Adding interface: batadv_slave_0
[  338.455157][T15056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.477944][T15190] xt_CT: No such helper "pptp"
[  338.489065][T15056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  338.501851][T15056] batman_adv: batadv0: Adding interface: batadv_slave_1
[  338.515516][T15056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.543274][T15056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  338.566222][T14897] 8021q: adding VLAN 0 to HW filter on device team0
[  338.600013][  T307] hsr_slave_0: left promiscuous mode
[  338.607039][  T307] hsr_slave_1: left promiscuous mode
[  338.614115][  T307] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  338.621593][  T307] batman_adv: batadv0: Removing interface: batadv_slave_0
[  338.630392][  T307] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  338.637997][  T307] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.642851][ T5851] Bluetooth: hci2: command tx timeout
[  338.667678][  T307] veth1_macvtap: left promiscuous mode
[  338.673393][  T307] veth0_macvtap: left promiscuous mode
[  338.678943][  T307] veth1_vlan: left promiscuous mode
[  338.684724][  T307] veth0_vlan: left promiscuous mode
[  339.106295][T15196] ipt_REJECT: TCP_RESET invalid for non-tcp
[  339.141265][  T307] team0 (unregistering): Port device team_slave_1 removed
[  339.222046][  T307] team0 (unregistering): Port device team_slave_0 removed
[  339.711515][T15056] hsr_slave_0: entered promiscuous mode
[  339.720527][T15056] hsr_slave_1: entered promiscuous mode
[  339.731338][T15056] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  339.739215][T15056] Cannot create hsr debugfs directory
[  339.773885][ T4789] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.781025][ T4789] bridge0: port 1(bridge_slave_0) entered forwarding state
[  339.795213][ T4789] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.802337][ T4789] bridge0: port 2(bridge_slave_1) entered forwarding state
[  339.929305][T15213] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7
[  340.211651][T15015] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  340.233233][ T5851] Bluetooth: hci3: command tx timeout
[  340.243739][T15015] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  340.273595][T15225] __nla_validate_parse: 12 callbacks suppressed
[  340.273615][T15225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1887'.
[  340.294651][T15015] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  340.301674][T15225] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1887'.
[  340.318299][T15015] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  340.330382][T15225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1887'.
[  340.468683][T15234] xt_addrtype: ipv6 does not support BROADCAST matching
[  340.497611][T14897] 8021q: adding VLAN 0 to HW filter on device batadv0
[  340.613052][T15015] 8021q: adding VLAN 0 to HW filter on device bond0
[  340.670215][T15015] 8021q: adding VLAN 0 to HW filter on device team0
[  340.680607][T14897] veth0_vlan: entered promiscuous mode
[  340.708114][T15237] netlink: 'syz.3.1889': attribute type 4 has an invalid length.
[  340.719855][ T7648] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.727016][ T7648] bridge0: port 1(bridge_slave_0) entered forwarding state
[  340.735170][ T5851] Bluetooth: hci2: command tx timeout
[  340.736531][T15237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1889'.
[  340.761959][T14897] veth1_vlan: entered promiscuous mode
[  340.775586][ T7648] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.782754][ T7648] bridge0: port 2(bridge_slave_1) entered forwarding state
[  340.787963][T15238] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1889'.
[  340.864579][T15056] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  340.909521][T15056] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  340.931288][T14897] veth0_macvtap: entered promiscuous mode
[  340.950637][T15056] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  340.968445][T14897] veth1_macvtap: entered promiscuous mode
[  340.975301][T15240] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1890'.
[  340.995216][T14897] batman_adv: batadv0: Interface activated: batadv_slave_0
[  341.003200][T15056] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  341.029418][T15015] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  341.050006][T15015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  341.100426][T14897] batman_adv: batadv0: Interface activated: batadv_slave_1
[  341.156469][T14897] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  341.173811][T15243] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1891'.
[  341.175163][T14897] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  341.198383][T14897] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  341.208377][T14897] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  341.468023][T15056] 8021q: adding VLAN 0 to HW filter on device bond0
[  341.516958][T15015] 8021q: adding VLAN 0 to HW filter on device batadv0
[  341.559563][  T307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.578678][  T307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.599318][T15056] 8021q: adding VLAN 0 to HW filter on device team0
[  341.665838][ T7641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.677169][ T7642] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.684314][ T7642] bridge0: port 1(bridge_slave_0) entered forwarding state
[  341.697530][ T7641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.711683][ T7642] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.718856][ T7642] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.764145][T15015] veth0_vlan: entered promiscuous mode
[  341.847407][T15015] veth1_vlan: entered promiscuous mode
[  341.946520][T15015] veth0_macvtap: entered promiscuous mode
[  341.985141][T15015] veth1_macvtap: entered promiscuous mode
[  342.119361][T15015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  342.160160][T15015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.177013][T15015] batman_adv: batadv0: Interface activated: batadv_slave_0
[  342.209591][T15015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  342.222008][T15015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.243309][T15290] x_tables: duplicate underflow at hook 1
[  342.245184][T15015] batman_adv: batadv0: Interface activated: batadv_slave_1
[  342.270233][T15286] bridee_slave_0 speed is unknown, defaulting to 1000
[  342.296967][T15015] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  342.313130][ T5851] Bluetooth: hci3: command tx timeout
[  342.323232][T15015] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  342.331960][T15015] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  342.350717][T15015] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  342.379991][T15056] 8021q: adding VLAN 0 to HW filter on device batadv0
[  342.490575][ T7641] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.625295][ T7641] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.750491][ T7641] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.786518][ T7646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  342.800026][ T7646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  342.837925][ T7641] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.895967][ T4789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  342.916105][ T4789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  342.950939][T15056] veth0_vlan: entered promiscuous mode
[  342.980492][T15056] veth1_vlan: entered promiscuous mode
[  343.032407][T15056] veth0_macvtap: entered promiscuous mode
[  343.050263][T15056] veth1_macvtap: entered promiscuous mode
[  343.106115][T15056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.117504][T15056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.127661][T15056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.138544][T15056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.149711][T15056] batman_adv: batadv0: Interface activated: batadv_slave_0
[  343.169182][T15056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.186865][T15056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.197021][T15056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.208878][T15056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.219777][T15056] batman_adv: batadv0: Interface activated: batadv_slave_1
[  343.249101][T15056] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  343.258072][T15056] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  343.267652][T15056] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  343.277367][T15056] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  343.336145][ T7641] bridge_slave_1: left allmulticast mode
[  343.341843][ T7641] bridge_slave_1: left promiscuous mode
[  343.351061][ T7641] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.374925][ T7641] bridge_slave_0: left allmulticast mode
[  343.380636][ T7641] bridge_slave_0: left promiscuous mode
[  343.398983][ T7641] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.420554][T15308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1904'.
[  343.698120][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  343.708127][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  343.717764][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  343.739413][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  343.751487][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  343.767076][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  343.908399][ T7641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  343.927860][ T7641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  343.938968][ T7641] bond0 (unregistering): Released all slaves
[  344.057672][T15314] bridee_slave_0 speed is unknown, defaulting to 1000
[  344.188833][ T7642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.206117][ T7642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.324749][ T7641] hsr_slave_0: left promiscuous mode
[  344.330819][ T7641] hsr_slave_1: left promiscuous mode
[  344.337675][ T7641] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  344.346270][ T7641] batman_adv: batadv0: Removing interface: batadv_slave_0
[  344.356945][ T7641] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  344.364580][ T7641] batman_adv: batadv0: Removing interface: batadv_slave_1
[  344.414658][ T7641] veth1_macvtap: left promiscuous mode
[  344.420237][ T7641] veth0_macvtap: left promiscuous mode
[  344.431121][ T7641] veth1_vlan: left promiscuous mode
[  344.436648][ T7641] veth0_vlan: left promiscuous mode
[  344.910582][ T7641] team0 (unregistering): Port device team_slave_1 removed
[  344.954391][ T7641] team0 (unregistering): Port device team_slave_0 removed
[  345.303502][ T7633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.318359][ T7633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.449966][T15341] netlink: 'syz.2.1907': attribute type 1 has an invalid length.
[  345.502170][T15340] netlink: 'syz.3.1908': attribute type 4 has an invalid length.
[  345.512244][T15341] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1907'.
[  345.517304][T15340] netlink: 'syz.3.1908': attribute type 4 has an invalid length.
[  345.573451][T15340] netlink: 'syz.3.1908': attribute type 9 has an invalid length.
[  345.578842][T15338] tc_dump_action: action bad kind
[  345.602524][T15340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1908'.
[  345.781611][T15314] chnl_net:caif_netlink_parms(): no params data found
[  345.833320][ T5851] Bluetooth: hci1: command tx timeout
[  345.881539][T15350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1909'.
[  345.895672][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  345.906243][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  345.917845][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  345.930686][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  345.942035][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  345.949748][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  346.068753][T15350] hsr_slave_1 (unregistering): left promiscuous mode
[  346.182277][T15352] bridee_slave_0 speed is unknown, defaulting to 1000
[  346.357508][ T7641] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.382858][T15314] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.395127][T15314] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.402626][T15314] bridge_slave_0: entered allmulticast mode
[  346.409858][T15314] bridge_slave_0: entered promiscuous mode
[  346.424483][T15314] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.432090][T15314] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.439573][T15314] bridge_slave_1: entered allmulticast mode
[  346.447888][T15314] bridge_slave_1: entered promiscuous mode
[  346.548593][ T7641] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.673125][ T7641] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.698995][T15314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  346.712947][T15314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  346.784488][ T7641] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.814633][T15314] team0: Port device team_slave_0 added
[  346.833529][T15314] team0: Port device team_slave_1 added
[  346.931115][T15314] batman_adv: batadv0: Adding interface: batadv_slave_0
[  346.939140][T15314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.965524][T15314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  346.978014][T15314] batman_adv: batadv0: Adding interface: batadv_slave_1
[  346.985159][T15314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  347.013380][T15314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  347.105227][ T7641] bridge_slave_1: left allmulticast mode
[  347.110914][ T7641] bridge_slave_1: left promiscuous mode
[  347.118520][ T7641] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.127390][ T7641] bridge_slave_0: left allmulticast mode
[  347.133464][ T7641] bridge_slave_0: left promiscuous mode
[  347.140550][ T7641] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.468927][ T7641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  347.479544][ T7641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  347.489599][ T7641] bond0 (unregistering): Released all slaves
[  347.498560][T15352] chnl_net:caif_netlink_parms(): no params data found
[  347.519973][T15314] hsr_slave_0: entered promiscuous mode
[  347.528753][T15314] hsr_slave_1: entered promiscuous mode
[  347.536961][T15314] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  347.544928][T15314] Cannot create hsr debugfs directory
[  347.731471][T15352] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.738775][T15352] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.747718][T15352] bridge_slave_0: entered allmulticast mode
[  347.755738][T15352] bridge_slave_0: entered promiscuous mode
[  347.764421][T15352] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.771534][T15352] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.779136][T15352] bridge_slave_1: entered allmulticast mode
[  347.786188][T15352] bridge_slave_1: entered promiscuous mode
[  347.846138][T15352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  347.870504][T15352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  347.902325][ T7641] hsr_slave_0: left promiscuous mode
[  347.908574][ T7641] hsr_slave_1: left promiscuous mode
[  347.915168][ T7641] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  347.922931][ T7641] batman_adv: batadv0: Removing interface: batadv_slave_0
[  347.923257][ T5851] Bluetooth: hci1: command tx timeout
[  347.937854][ T7641] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  347.945825][ T7641] batman_adv: batadv0: Removing interface: batadv_slave_1
[  347.967742][ T7641] veth1_macvtap: left promiscuous mode
[  347.973436][ T7641] veth0_macvtap: left promiscuous mode
[  347.978963][ T7641] veth1_vlan: left promiscuous mode
[  347.984816][ T7641] veth0_vlan: left promiscuous mode
[  347.992926][ T5851] Bluetooth: hci2: command tx timeout
[  348.357152][ T7641] team0 (unregistering): Port device team_slave_1 removed
[  348.451231][ T7641] team0 (unregistering): Port device team_slave_0 removed
[  348.726601][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  348.743590][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  348.751509][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  348.770845][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  348.779985][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  348.792344][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  349.025816][T15402] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1913'.
[  349.101750][T15352] team0: Port device team_slave_0 added
[  349.148355][T15407] bridee_slave_0 speed is unknown, defaulting to 1000
[  349.161043][T15410] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  349.166953][T15352] team0: Port device team_slave_1 added
[  349.263125][T15410] netlink: 'syz.2.1915': attribute type 2 has an invalid length.
[  349.385491][T15352] batman_adv: batadv0: Adding interface: batadv_slave_0
[  349.392475][T15352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  349.428715][T15419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1918'.
[  349.442282][T15419] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1918'.
[  349.477159][T15352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  349.498158][T15352] batman_adv: batadv0: Adding interface: batadv_slave_1
[  349.505744][T15352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  349.551101][T15352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  349.766498][T15352] hsr_slave_0: entered promiscuous mode
[  349.774849][T15352] hsr_slave_1: entered promiscuous mode
[  349.780800][T15438] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1922'.
[  349.791802][T15352] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  349.799661][T15352] Cannot create hsr debugfs directory
[  349.833088][T15438] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4)
[  349.929675][T15446] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1923'.
[  349.940379][T15446] bridge_slave_0: default FDB implementation only supports local addresses
[  349.974342][ T7641] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.992903][ T5851] Bluetooth: hci1: command tx timeout
[  350.007269][T15450] netlink: 'syz.3.1923': attribute type 20 has an invalid length.
[  350.012816][T15314] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  350.041117][T15446] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1923'.
[  350.050453][T15446] bridge_slave_0: default FDB implementation only supports local addresses
[  350.072761][ T5851] Bluetooth: hci2: command tx timeout
[  350.121380][ T7641] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.142895][T15314] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  350.165277][T15314] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  350.194082][T15314] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  350.315108][ T7641] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.374906][T15462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1927'.
[  350.410711][ T7641] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.450123][T15407] chnl_net:caif_netlink_parms(): no params data found
[  350.707004][T15407] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.718827][T15407] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.729261][T15407] bridge_slave_0: entered allmulticast mode
[  350.740537][T15407] bridge_slave_0: entered promiscuous mode
[  350.778178][T15314] 8021q: adding VLAN 0 to HW filter on device bond0
[  350.783950][T15476] __nla_validate_parse: 64 callbacks suppressed
[  350.783967][T15476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1931'.
[  350.786184][ T7641] bridge_slave_1: left allmulticast mode
[  350.807136][ T7641] bridge_slave_1: left promiscuous mode
[  350.814022][T15475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1931'.
[  350.823414][ T7641] bridge0: port 2(bridge_slave_1) entered disabled state
[  350.832045][ T7641] bridge_slave_0: left allmulticast mode
[  350.837986][ T7641] bridge_slave_0: left promiscuous mode
[  350.844119][ T7641] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.882776][ T5851] Bluetooth: hci3: command tx timeout
[  351.167748][ T7641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  351.179329][ T7641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  351.190935][ T7641] bond0 (unregistering): Released all slaves
[  351.205069][T15407] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.221797][T15407] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.250025][T15407] bridge_slave_1: entered allmulticast mode
[  351.258343][T15407] bridge_slave_1: entered promiscuous mode
[  351.393178][T15407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  351.406035][T15407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  351.800761][T15314] 8021q: adding VLAN 0 to HW filter on device team0
[  351.870684][T15407] team0: Port device team_slave_0 added
[  351.901491][ T7641] hsr_slave_0: left promiscuous mode
[  351.930003][ T7641] hsr_slave_1: left promiscuous mode
[  351.938880][ T7641] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  351.957268][ T7641] batman_adv: batadv0: Removing interface: batadv_slave_0
[  351.978910][ T7641] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  351.987201][ T7641] batman_adv: batadv0: Removing interface: batadv_slave_1
[  352.016056][ T7641] veth1_macvtap: left promiscuous mode
[  352.021566][ T7641] veth0_macvtap: left promiscuous mode
[  352.028975][ T7641] veth1_vlan: left promiscuous mode
[  352.034586][ T7641] veth0_vlan: left promiscuous mode
[  352.072810][ T5851] Bluetooth: hci1: command tx timeout
[  352.164209][ T5851] Bluetooth: hci2: command tx timeout
[  352.471106][ T7641] team0 (unregistering): Port device team_slave_1 removed
[  352.516004][ T7641] team0 (unregistering): Port device team_slave_0 removed
[  352.905536][T15407] team0: Port device team_slave_1 added
[  352.923295][T15503] tipc: Resetting bearer <eth:syzkaller0>
[  352.931406][T15503] bond5: (slave ip6gretap1): Releasing backup interface
[  352.955702][T15506] team0: Unable to change to the same mode the team is in
[  352.962770][ T5851] Bluetooth: hci3: command tx timeout
[  352.987289][ T7648] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.994481][ T7648] bridge0: port 1(bridge_slave_0) entered forwarding state
[  353.036985][T15515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1939'.
[  353.105558][ T7648] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.112748][ T7648] bridge0: port 2(bridge_slave_1) entered forwarding state
[  353.206756][T15407] batman_adv: batadv0: Adding interface: batadv_slave_0
[  353.226131][T15407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  353.276656][T15407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  353.338714][T15407] batman_adv: batadv0: Adding interface: batadv_slave_1
[  353.346606][T15407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  353.379235][T15407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  353.496015][T15528] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1945'.
[  353.507934][T15352] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  353.522896][T15528] netlink: 'syz.3.1945': attribute type 8 has an invalid length.
[  353.530672][T15528] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1945'.
[  353.556267][T15407] hsr_slave_0: entered promiscuous mode
[  353.576356][T15407] hsr_slave_1: entered promiscuous mode
[  353.582459][T15407] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  353.597310][T15407] Cannot create hsr debugfs directory
[  353.609865][T15314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  353.633080][T15352] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  353.659324][T15352] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  353.666067][T15535] netlink: 'syz.2.1946': attribute type 10 has an invalid length.
[  353.704819][T15352] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  353.867980][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1948'.
[  354.089014][T15553] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1949'.
[  354.100506][T15555] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1949'.
[  354.117467][T15314] 8021q: adding VLAN 0 to HW filter on device batadv0
[  354.233298][ T5851] Bluetooth: hci2: command tx timeout
[  354.331499][T15352] 8021q: adding VLAN 0 to HW filter on device bond0
[  354.441160][T15352] 8021q: adding VLAN 0 to HW filter on device team0
[  354.487793][T15314] veth0_vlan: entered promiscuous mode
[  354.496443][T15570] netlink: 'syz.3.1954': attribute type 2 has an invalid length.
[  354.510759][T15570] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  354.534806][ T7642] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.542004][ T7642] bridge0: port 1(bridge_slave_0) entered forwarding state
[  354.591380][T15314] veth1_vlan: entered promiscuous mode
[  354.629178][ T7642] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.636370][ T7642] bridge0: port 2(bridge_slave_1) entered forwarding state
[  354.784627][T15314] veth0_macvtap: entered promiscuous mode
[  354.805307][T15314] veth1_macvtap: entered promiscuous mode
[  354.935950][T15314] batman_adv: batadv0: Interface activated: batadv_slave_0
[  354.959044][T15407] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  354.987531][T15407] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  355.008384][T15592] netlink: 'syz.3.1959': attribute type 5 has an invalid length.
[  355.012213][T15314] batman_adv: batadv0: Interface activated: batadv_slave_1
[  355.034384][T15407] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  355.044645][ T5851] Bluetooth: hci3: command tx timeout
[  355.059872][T15407] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  355.081319][T15314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.090926][T15314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.107172][T15314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.117767][T15314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  355.319150][T15352] 8021q: adding VLAN 0 to HW filter on device batadv0
[  355.352956][ T7646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.362462][ T7646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.413676][  T307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.431876][  T307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.456501][T15407] 8021q: adding VLAN 0 to HW filter on device bond0
[  355.495183][T15610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1961'.
[  355.570577][T15352] veth0_vlan: entered promiscuous mode
[  355.628984][T15407] 8021q: adding VLAN 0 to HW filter on device team0
[  355.667083][  T307] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.674248][  T307] bridge0: port 1(bridge_slave_0) entered forwarding state
[  355.742266][T15352] veth1_vlan: entered promiscuous mode
[  355.866373][  T307] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.873669][  T307] bridge0: port 2(bridge_slave_1) entered forwarding state
[  356.070817][ T7633] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.195595][ T7633] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.229866][T15352] veth0_macvtap: entered promiscuous mode
[  356.249462][T15352] veth1_macvtap: entered promiscuous mode
[  356.292245][ T7633] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.337516][T15352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  356.352435][T15352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  356.377728][T15352] batman_adv: batadv0: Interface activated: batadv_slave_0
[  356.402346][T15352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  356.418981][T15352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  356.433515][T15352] batman_adv: batadv0: Interface activated: batadv_slave_1
[  356.463425][ T7633] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.494578][T15352] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  356.508347][T15352] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  356.522012][T15352] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  356.532261][T15352] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  356.562273][T15407] 8021q: adding VLAN 0 to HW filter on device batadv0
[  356.731799][ T7646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  356.775342][ T7646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  356.824277][ T7633] bridge_slave_1: left allmulticast mode
[  356.829987][ T7633] bridge_slave_1: left promiscuous mode
[  356.840948][ T7633] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.858061][ T7633] bridge_slave_0: left allmulticast mode
[  356.864302][ T7633] bridge_slave_0: left promiscuous mode
[  356.870068][ T7633] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.113654][ T5851] Bluetooth: hci3: command tx timeout
[  357.137976][T15671] netlink: 'syz.3.1969': attribute type 2 has an invalid length.
[  357.680576][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  357.690805][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  357.700122][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  357.726564][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  357.742781][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  357.750158][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  357.786644][ T7633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  357.797480][ T7633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  357.808254][ T7633] bond0 (unregistering): Released all slaves
[  357.833167][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  357.850427][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  357.989585][T15700] bridee_slave_0 speed is unknown, defaulting to 1000
[  358.074518][T15407] veth0_vlan: entered promiscuous mode
[  358.130368][T15710] No such timeout policy "syz0"
[  358.156778][T15407] veth1_vlan: entered promiscuous mode
[  358.361590][ T7633] hsr_slave_0: left promiscuous mode
[  358.368483][ T7633] hsr_slave_1: left promiscuous mode
[  358.379485][ T7633] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  358.387088][ T7633] batman_adv: batadv0: Removing interface: batadv_slave_0
[  358.410698][ T7633] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  358.425127][ T7633] batman_adv: batadv0: Removing interface: batadv_slave_1
[  358.437472][ T5918] hid-generic 0005:0458:0001.0002: unknown main item tag 0x0
[  358.451573][ T5918] hid-generic 0005:0458:0001.0002: unknown main item tag 0x4
[  358.459528][ T5918] hid-generic 0005:0458:0001.0002: item fetching failed at offset 3/5
[  358.467885][ T7633] veth1_macvtap: left promiscuous mode
[  358.468001][ T7633] veth0_macvtap: left promiscuous mode
[  358.478552][ T5918] hid-generic 0005:0458:0001.0002: probe with driver hid-generic failed with error -22
[  358.479902][ T7633] veth1_vlan: left promiscuous mode
[  358.495340][ T7633] veth0_vlan: left promiscuous mode
[  359.039913][ T7633] team0 (unregistering): Port device team_slave_1 removed
[  359.078592][ T7633] team0 (unregistering): Port device team_slave_0 removed
[  359.438152][T15407] veth0_macvtap: entered promiscuous mode
[  359.464866][T15407] veth1_macvtap: entered promiscuous mode
[  359.554164][T15407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  359.571059][T15407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.597207][T15407] batman_adv: batadv0: Interface activated: batadv_slave_0
[  359.609232][T15407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  359.620020][T15407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.634438][T15407] batman_adv: batadv0: Interface activated: batadv_slave_1
[  359.722292][T15407] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  359.733262][T15407] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  359.742767][T15407] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  359.751504][T15407] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  359.832997][ T5840] Bluetooth: hci1: command tx timeout
[  359.853973][  T307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  359.862068][  T307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.889413][ T7646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  359.910795][ T7646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.933273][T15700] chnl_net:caif_netlink_parms(): no params data found
[  360.089379][T15700] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.097695][T15700] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.104999][T15700] bridge_slave_0: entered allmulticast mode
[  360.111996][T15700] bridge_slave_0: entered promiscuous mode
[  360.162200][T15700] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.179308][T15700] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.190505][T15700] bridge_slave_1: entered allmulticast mode
[  360.197626][T15700] bridge_slave_1: entered promiscuous mode
[  360.258908][T15760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1978'.
[  360.303190][T15760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1978'.
[  360.318087][T15762] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1979'.
[  360.341361][T15700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  360.380628][T15700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  360.402846][T15762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1979'.
[  360.508398][ T7633] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.694332][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  360.694869][T15700] team0: Port device team_slave_0 added
[  360.708981][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  360.720336][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  360.728607][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  360.738617][ T5851] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  360.747947][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  360.805834][ T7633] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.828897][T15700] team0: Port device team_slave_1 added
[  360.888521][T15700] batman_adv: batadv0: Adding interface: batadv_slave_0
[  360.899113][T15700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  360.930590][T15700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  360.975125][ T7633] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.996631][T15700] batman_adv: batadv0: Adding interface: batadv_slave_1
[  361.004695][T15700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.030847][T15700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  361.058293][T15769] bridee_slave_0 speed is unknown, defaulting to 1000
[  361.080908][ T7633] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.130747][T15700] hsr_slave_0: entered promiscuous mode
[  361.137201][T15700] hsr_slave_1: entered promiscuous mode
[  361.143782][T15700] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  361.151360][T15700] Cannot create hsr debugfs directory
[  361.376586][ T7633] bridge_slave_1: left allmulticast mode
[  361.382274][ T7633] bridge_slave_1: left promiscuous mode
[  361.388114][ T7633] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.397952][ T7633] bridge_slave_0: left allmulticast mode
[  361.404284][ T7633] bridge_slave_0: left promiscuous mode
[  361.412851][ T7633] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.801411][ T7633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  361.812345][ T7633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  361.822360][ T7633] bond0 (unregistering): Released all slaves
[  361.896267][T15769] chnl_net:caif_netlink_parms(): no params data found
[  361.917005][ T5840] Bluetooth: hci1: command tx timeout
[  362.259619][T15769] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.268302][T15769] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.281417][T15769] bridge_slave_0: entered allmulticast mode
[  362.291701][T15769] bridge_slave_0: entered promiscuous mode
[  362.365028][T15769] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.372183][T15769] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.393988][T15769] bridge_slave_1: entered allmulticast mode
[  362.401218][T15769] bridge_slave_1: entered promiscuous mode
[  362.428675][ T7633] hsr_slave_0: left promiscuous mode
[  362.435830][ T7633] hsr_slave_1: left promiscuous mode
[  362.441492][ T7633] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  362.449684][ T7633] batman_adv: batadv0: Removing interface: batadv_slave_0
[  362.458006][ T7633] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  362.465622][ T7633] batman_adv: batadv0: Removing interface: batadv_slave_1
[  362.487569][ T7633] veth1_macvtap: left promiscuous mode
[  362.493304][ T7633] veth0_macvtap: left promiscuous mode
[  362.498848][ T7633] veth1_vlan: left promiscuous mode
[  362.504193][ T7633] veth0_vlan: left promiscuous mode
[  362.809054][ T5840] Bluetooth: hci2: command tx timeout
[  362.958488][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  362.969990][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  362.977892][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  363.004344][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  363.023519][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  363.037761][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  363.164888][ T7633] team0 (unregistering): Port device team_slave_1 removed
[  363.210585][ T7633] team0 (unregistering): Port device team_slave_0 removed
[  363.612149][T15769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  363.659405][T15769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  363.792096][T15769] team0: Port device team_slave_0 added
[  363.812485][T15769] team0: Port device team_slave_1 added
[  363.885642][T15827] netlink: 'syz.3.1983': attribute type 1 has an invalid length.
[  363.893971][T15824] bridee_slave_0 speed is unknown, defaulting to 1000
[  363.914229][T15769] batman_adv: batadv0: Adding interface: batadv_slave_0
[  363.921306][T15769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  363.947841][T15769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  364.003568][ T5840] Bluetooth: hci1: command tx timeout
[  364.010037][T15769] batman_adv: batadv0: Adding interface: batadv_slave_1
[  364.019364][T15769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  364.052324][T15769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  364.118059][T15829] bridee_slave_0 speed is unknown, defaulting to 1000
[  364.139478][T15700] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  364.273810][T15700] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  364.283762][T15700] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  364.293504][T15700] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  364.378861][ T7633] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.475805][ T7633] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.516649][T15769] hsr_slave_0: entered promiscuous mode
[  364.530656][T15769] hsr_slave_1: entered promiscuous mode
[  364.538069][T15769] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  364.552239][T15769] Cannot create hsr debugfs directory
[  364.594810][ T7633] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.859892][ T7633] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.875833][ T5840] Bluetooth: hci2: command tx timeout
[  365.105166][T15824] chnl_net:caif_netlink_parms(): no params data found
[  365.114588][ T5840] Bluetooth: hci3: command tx timeout
[  365.277385][T15876] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1991'.
[  365.451932][ T7633] bridge_slave_1: left allmulticast mode
[  365.473742][ T7633] bridge_slave_1: left promiscuous mode
[  365.482067][ T7633] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.506444][ T7633] bridge_slave_0: left allmulticast mode
[  365.512135][ T7633] bridge_slave_0: left promiscuous mode
[  365.520078][ T7633] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.042201][ T7633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  366.053284][ T7633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  366.065345][ T7633] bond0 (unregistering): Released all slaves
[  366.073229][ T5840] Bluetooth: hci1: command tx timeout
[  366.178287][T15898] 8021q: adding VLAN 0 to HW filter on device bond0
[  366.214491][T15824] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.221651][T15824] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.240376][T15824] bridge_slave_0: entered allmulticast mode
[  366.249552][T15824] bridge_slave_0: entered promiscuous mode
[  366.336656][T15700] 8021q: adding VLAN 0 to HW filter on device bond0
[  366.348403][T15824] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.358051][T15824] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.369866][T15824] bridge_slave_1: entered allmulticast mode
[  366.377023][T15824] bridge_slave_1: entered promiscuous mode
[  366.487598][T15824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  366.506778][T15824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  366.521473][T15700] 8021q: adding VLAN 0 to HW filter on device team0
[  366.589132][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.596333][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  366.610141][T15824] team0: Port device team_slave_0 added
[  366.635227][ T7633] hsr_slave_0: left promiscuous mode
[  366.650463][ T7633] hsr_slave_1: left promiscuous mode
[  366.657338][ T7633] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  366.665415][ T7633] batman_adv: batadv0: Removing interface: batadv_slave_0
[  366.680606][ T7633] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  366.688759][ T7633] batman_adv: batadv0: Removing interface: batadv_slave_1
[  366.723692][ T7633] veth1_macvtap: left promiscuous mode
[  366.729256][ T7633] veth0_macvtap: left promiscuous mode
[  366.735726][ T7633] veth1_vlan: left promiscuous mode
[  366.741007][ T7633] veth0_vlan: left promiscuous mode
[  366.748481][T15913] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1999'.
[  366.800443][T15914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1999'.
[  366.811935][T15915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1999'.
[  366.820903][T15915] netlink: 'syz.3.1999': attribute type 30 has an invalid length.
[  366.829272][T15914] netlink: 'syz.3.1999': attribute type 30 has an invalid length.
[  366.837830][T15914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1999'.
[  366.846941][T15915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1999'.
[  366.957448][ T5840] Bluetooth: hci2: command tx timeout
[  367.166350][ T7633] team0 (unregistering): Port device team_slave_1 removed
[  367.197679][ T5840] Bluetooth: hci3: command tx timeout
[  367.211358][ T7633] team0 (unregistering): Port device team_slave_0 removed
[  367.575349][ T4789] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.582488][ T4789] bridge0: port 2(bridge_slave_1) entered forwarding state
[  367.591023][T15824] team0: Port device team_slave_1 added
[  367.689148][T15769] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  367.717613][T15769] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  367.730634][T15769] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  367.759633][T15824] batman_adv: batadv0: Adding interface: batadv_slave_0
[  367.771024][T15824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  367.817033][T15824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  367.829784][T15922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2001'.
[  367.834646][T15824] batman_adv: batadv0: Adding interface: batadv_slave_1
[  367.846034][T15824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  367.855750][T15922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2001'.
[  367.872759][T15824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  367.898142][T15769] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  367.938119][T15921] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.139348][T15921] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.157583][T15824] hsr_slave_0: entered promiscuous mode
[  368.167064][T15824] hsr_slave_1: entered promiscuous mode
[  368.173188][T15824] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  368.180748][T15824] Cannot create hsr debugfs directory
[  368.269752][T15921] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.276827][T15929] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  368.288340][T15929] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  368.297959][T15929] netlink: 'syz.3.2004': attribute type 10 has an invalid length.
[  368.316182][T15929] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  368.325471][T15929] bond0: (slave netdevsim0): Enslaving as an active interface with a down link
[  368.351722][T15921] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.353989][T15929] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  368.370499][T15931] netlink: 'syz.3.2004': attribute type 10 has an invalid length.
[  368.379639][T15929] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  368.405323][T15700] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  368.592024][T15921] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  368.685242][T15921] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  368.714916][T15921] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  368.749480][T15941] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2006'.
[  368.813785][T15921] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  368.830613][T15700] 8021q: adding VLAN 0 to HW filter on device batadv0
[  368.881917][T15769] 8021q: adding VLAN 0 to HW filter on device bond0
[  368.967123][T15769] 8021q: adding VLAN 0 to HW filter on device team0
[  368.982282][T15946] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  369.027148][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.034347][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state
[  369.041843][ T5840] Bluetooth: hci2: command tx timeout
[  369.077995][T15700] veth0_vlan: entered promiscuous mode
[  369.089771][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.096962][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state
[  369.157579][T15949] syzkaller0: entered promiscuous mode
[  369.163737][T15949] syzkaller0: entered allmulticast mode
[  369.187295][T15700] veth1_vlan: entered promiscuous mode
[  369.273873][ T5840] Bluetooth: hci3: command tx timeout
[  371.008170][T15700] veth0_macvtap: entered promiscuous mode
[  371.046472][T15824] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  371.070202][T15824] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  371.096468][T15700] veth1_macvtap: entered promiscuous mode
[  371.124779][T15824] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  371.156833][T15824] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  371.164953][T15961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2011'.
[  371.235488][T15700] batman_adv: batadv0: Interface activated: batadv_slave_0
[  371.266409][T15700] batman_adv: batadv0: Interface activated: batadv_slave_1
[  371.291016][T15969] sctp: [Deprecated]: syz.2.2014 (pid 15969) Use of int in max_burst socket option deprecated.
[  371.291016][T15969] Use struct sctp_assoc_value instead
[  371.305532][T15700] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  371.325231][T15700] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  371.335595][T15700] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  371.344717][T15700] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  371.354203][ T5840] Bluetooth: hci3: command tx timeout
[  371.398660][T15973] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.2014'.
[  371.430574][T15769] 8021q: adding VLAN 0 to HW filter on device batadv0
[  371.441493][T15973] openvswitch: netlink: Unexpected mask (mask=4, allowed=10048)
[  371.601607][T15769] veth0_vlan: entered promiscuous mode
[  371.620025][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  371.632160][T15824] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.644375][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  371.664614][T15824] 8021q: adding VLAN 0 to HW filter on device team0
[  371.699479][ T4789] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.706699][ T4789] bridge0: port 1(bridge_slave_0) entered forwarding state
[  371.734147][T15769] veth1_vlan: entered promiscuous mode
[  371.762084][ T2896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  371.766272][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.777127][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  371.788080][ T2896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  371.899143][T15769] veth0_macvtap: entered promiscuous mode
[  371.936306][T15769] veth1_macvtap: entered promiscuous mode
[  371.980155][T15769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.008005][T15769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.025852][T15769] batman_adv: batadv0: Interface activated: batadv_slave_0
[  372.047142][T15769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  372.059277][T15769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.074022][T15769] batman_adv: batadv0: Interface activated: batadv_slave_1
[  372.221847][T15769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  372.231561][T15769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  372.247345][T15769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  372.256580][T15769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  372.277524][T15998] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2019'.
[  372.292880][T16000] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2020'.
[  372.305622][T15998] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2019'.
[  372.315962][T15998] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2019'.
[  372.330107][T15998] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2019'.
[  372.340006][T15998] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2019'.
[  372.349411][T15998] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2019'.
[  372.358956][T15998] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2019'.
[  372.373926][T15998] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  372.545346][ T2896] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.565683][T15824] 8021q: adding VLAN 0 to HW filter on device batadv0
[  372.672225][ T2896] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.720600][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.747929][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.786287][ T2896] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.829761][ T7633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.841913][ T7633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.887780][ T2896] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.969512][T15824] veth0_vlan: entered promiscuous mode
[  372.989927][T15824] veth1_vlan: entered promiscuous mode
[  373.035554][T15824] veth0_macvtap: entered promiscuous mode
[  373.044961][T15824] veth1_macvtap: entered promiscuous mode
[  373.108229][T15824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  373.119489][T15824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.129618][T15824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  373.140338][T15824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.151615][T15824] batman_adv: batadv0: Interface activated: batadv_slave_0
[  373.212004][T15824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.229005][T15824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.239157][T15824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.249753][T15824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.260733][T15824] batman_adv: batadv0: Interface activated: batadv_slave_1
[  373.288517][ T2896] bridge_slave_1: left allmulticast mode
[  373.294660][ T2896] bridge_slave_1: left promiscuous mode
[  373.300358][ T2896] bridge0: port 2(bridge_slave_1) entered disabled state
[  373.310448][ T2896] bridge_slave_0: left allmulticast mode
[  373.316818][ T2896] bridge_slave_0: left promiscuous mode
[  373.322504][ T2896] bridge0: port 1(bridge_slave_0) entered disabled state
[  373.788298][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  373.814708][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  373.823447][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  373.831946][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  373.842002][ T5851] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  373.849588][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  373.872493][ T2896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  373.885904][ T2896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  373.896586][ T2896] bond0 (unregistering): Released all slaves
[  373.923729][T15824] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.932472][T15824] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.941710][T15824] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.950663][T15824] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.998516][T16014] bridee_slave_0 speed is unknown, defaulting to 1000
[  374.197488][  T307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.218802][  T307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.274859][ T2896] hsr_slave_0: left promiscuous mode
[  374.284128][ T2896] hsr_slave_1: left promiscuous mode
[  374.289864][ T2896] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  374.301347][ T2896] batman_adv: batadv0: Removing interface: batadv_slave_0
[  374.310147][ T2896] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  374.318079][ T2896] batman_adv: batadv0: Removing interface: batadv_slave_1
[  374.338833][ T2896] veth1_macvtap: left promiscuous mode
[  374.344648][ T2896] veth0_macvtap: left promiscuous mode
[  374.350195][ T2896] veth1_vlan: left promiscuous mode
[  374.355616][ T2896] veth0_vlan: left promiscuous mode
[  374.755510][ T2896] team0 (unregistering): Port device team_slave_1 removed
[  374.800665][ T2896] team0 (unregistering): Port device team_slave_0 removed
[  375.377466][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  375.397659][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  375.417396][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  375.428308][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  375.436529][ T5853] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  375.444220][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  375.455682][T16014] chnl_net:caif_netlink_parms(): no params data found
[  375.485916][ T4789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.537757][ T4789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.639942][T16035] bridee_slave_0 speed is unknown, defaulting to 1000
[  375.850803][T16014] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.859449][T16014] bridge0: port 1(bridge_slave_0) entered disabled state
[  375.878185][T16014] bridge_slave_0: entered allmulticast mode
[  375.891170][T16014] bridge_slave_0: entered promiscuous mode
[  375.913031][ T5840] Bluetooth: hci1: command tx timeout
[  375.928030][T16014] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.940718][T16014] bridge0: port 2(bridge_slave_1) entered disabled state
[  375.948625][T16014] bridge_slave_1: entered allmulticast mode
[  375.961177][T16014] bridge_slave_1: entered promiscuous mode
[  376.021596][T16014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  376.071165][T16014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  376.301425][ T2896] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.331306][T16014] team0: Port device team_slave_0 added
[  376.341972][T16069] __nla_validate_parse: 13 callbacks suppressed
[  376.341991][T16069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2030'.
[  376.371789][T16014] team0: Port device team_slave_1 added
[  376.457480][ T2896] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.473486][ T5840] Bluetooth: hci4: command 0x0406 tx timeout
[  376.579393][T16014] batman_adv: batadv0: Adding interface: batadv_slave_0
[  376.593677][T16014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  376.620058][T16014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  376.657931][ T2896] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.687030][T16014] batman_adv: batadv0: Adding interface: batadv_slave_1
[  376.698665][T16014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  376.725066][T16014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  376.736247][T16052] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  376.774339][ T2896] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.826739][T16014] hsr_slave_0: entered promiscuous mode
[  376.843495][T16014] hsr_slave_1: entered promiscuous mode
[  376.849744][T16014] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  376.861545][T16014] Cannot create hsr debugfs directory
[  376.899443][T16035] chnl_net:caif_netlink_parms(): no params data found
[  377.121328][ T2896] bridge_slave_1: left allmulticast mode
[  377.132029][ T2896] bridge_slave_1: left promiscuous mode
[  377.139797][ T2896] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.149047][ T2896] bridge_slave_0: left allmulticast mode
[  377.155183][ T2896] bridge_slave_0: left promiscuous mode
[  377.160936][ T2896] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.515732][ T5851] Bluetooth: hci2: command tx timeout
[  377.590874][ T2896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  377.602245][ T2896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  377.612793][ T2896] bond0 (unregistering): Released all slaves
[  377.621739][T16035] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.629121][T16035] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.636843][T16035] bridge_slave_0: entered allmulticast mode
[  377.643608][T16035] bridge_slave_0: entered promiscuous mode
[  377.697854][T16035] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.713245][T16035] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.721699][T16035] bridge_slave_1: entered allmulticast mode
[  377.743683][T16035] bridge_slave_1: entered promiscuous mode
[  377.855458][T16035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  377.926307][T16035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  377.998002][ T5851] Bluetooth: hci1: command tx timeout
[  378.017271][T16035] team0: Port device team_slave_0 added
[  378.060234][T16035] team0: Port device team_slave_1 added
[  378.078388][ T2896] hsr_slave_0: left promiscuous mode
[  378.088251][ T2896] hsr_slave_1: left promiscuous mode
[  378.097677][ T2896] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  378.107688][ T2896] batman_adv: batadv0: Removing interface: batadv_slave_0
[  378.119188][ T2896] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  378.129135][ T2896] batman_adv: batadv0: Removing interface: batadv_slave_1
[  378.154772][ T2896] veth1_macvtap: left promiscuous mode
[  378.160345][ T2896] veth0_macvtap: left promiscuous mode
[  378.166074][ T2896] veth1_vlan: left promiscuous mode
[  378.171322][ T2896] veth0_vlan: left promiscuous mode
[  378.561964][ T2896] team0 (unregistering): Port device team_slave_1 removed
[  378.668432][ T2896] team0 (unregistering): Port device team_slave_0 removed
[  378.845627][T16130] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2033'.
[  378.997622][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  379.025389][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  379.036224][T16138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2035'.
[  379.046279][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  379.059536][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  379.068334][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  379.074584][T16136] sctp: [Deprecated]: syz.3.2035 (pid 16136) Use of struct sctp_assoc_value in delayed_ack socket option.
[  379.074584][T16136] Use struct sctp_sack_info instead
[  379.098196][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  379.517132][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  379.536592][T16035] batman_adv: batadv0: Adding interface: batadv_slave_0
[  379.561594][T16035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  379.594226][T16035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  379.596428][ T5851] Bluetooth: hci2: command tx timeout
[  379.629765][T16035] batman_adv: batadv0: Adding interface: batadv_slave_1
[  379.668832][T16035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  379.696194][T16035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  379.756767][T16135] bridee_slave_0 speed is unknown, defaulting to 1000
[  379.795131][T16035] hsr_slave_0: entered promiscuous mode
[  379.801817][T16035] hsr_slave_1: entered promiscuous mode
[  379.813765][T16035] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  379.830658][T16035] Cannot create hsr debugfs directory
[  379.910563][T16151] netlink: 'syz.3.2038': attribute type 1 has an invalid length.
[  379.942506][T16153] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2037'.
[  379.990940][T16151] 8021q: adding VLAN 0 to HW filter on device bond12
[  380.074605][ T5851] Bluetooth: hci1: command tx timeout
[  380.084302][T16154] bond12: (slave bridge4): making interface the new active one
[  380.113027][T16154] bond12: (slave bridge4): Enslaving as an active interface with an up link
[  380.452204][T16014] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  380.506270][ T2896] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.537097][T16183] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2041'.
[  380.549538][T16183] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2041'.
[  380.619803][T16014] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  380.652185][T16014] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  380.729724][ T2896] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.750042][T16014] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  380.776043][T16135] chnl_net:caif_netlink_parms(): no params data found
[  380.830137][ T2896] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.934881][ T2896] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.101378][T16135] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.127579][T16135] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.164184][T16135] bridge_slave_0: entered allmulticast mode
[  381.186120][T16135] bridge_slave_0: entered promiscuous mode
[  381.192739][ T5840] Bluetooth: hci3: command tx timeout
[  381.210597][T16214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2043'.
[  381.276849][T16135] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.291774][T16135] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.299386][T16135] bridge_slave_1: entered allmulticast mode
[  381.312385][T16135] bridge_slave_1: entered promiscuous mode
[  381.478654][T16135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  381.576681][T16135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  381.610260][ T2896] bridge_slave_1: left allmulticast mode
[  381.616336][ T2896] bridge_slave_1: left promiscuous mode
[  381.622077][ T2896] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.639951][ T2896] bridge_slave_0: left allmulticast mode
[  381.646423][ T2896] bridge_slave_0: left promiscuous mode
[  381.652190][ T2896] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.673501][ T5840] Bluetooth: hci2: command tx timeout
[  382.079532][ T2896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  382.090231][ T2896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  382.100394][ T2896] bond0 (unregistering): Released all slaves
[  382.153063][ T5840] Bluetooth: hci1: command tx timeout
[  382.248687][T16035] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  382.289485][T16035] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  382.344239][T16135] team0: Port device team_slave_0 added
[  382.359946][T16135] team0: Port device team_slave_1 added
[  382.392484][T16240] netlink: 'syz.3.2052': attribute type 39 has an invalid length.
[  382.406237][T16241] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2051'.
[  382.417422][T16035] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  382.496237][T16035] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  382.542241][T16135] batman_adv: batadv0: Adding interface: batadv_slave_0
[  382.555387][T16135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  382.586001][T16135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  382.600860][T16135] batman_adv: batadv0: Adding interface: batadv_slave_1
[  382.607995][T16135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  382.634116][T16135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  382.737392][T16014] 8021q: adding VLAN 0 to HW filter on device bond0
[  382.761119][T16135] hsr_slave_0: entered promiscuous mode
[  382.768391][T16135] hsr_slave_1: entered promiscuous mode
[  382.781274][T16135] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  382.789500][T16135] Cannot create hsr debugfs directory
[  382.810394][ T2896] hsr_slave_0: left promiscuous mode
[  382.816660][ T2896] hsr_slave_1: left promiscuous mode
[  382.822394][ T2896] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  382.830890][ T2896] batman_adv: batadv0: Removing interface: batadv_slave_0
[  382.839130][ T2896] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  382.847958][ T2896] batman_adv: batadv0: Removing interface: batadv_slave_1
[  382.872292][ T2896] veth1_macvtap: left promiscuous mode
[  382.878812][ T2896] veth0_macvtap: left promiscuous mode
[  382.884559][ T2896] veth1_vlan: left promiscuous mode
[  382.889889][ T2896] veth0_vlan: left promiscuous mode
[  383.272756][ T5840] Bluetooth: hci3: command 0x041b tx timeout
[  383.325208][ T2896] team0 (unregistering): Port device team_slave_1 removed
[  383.376573][ T2896] team0 (unregistering): Port device team_slave_0 removed
[  383.755587][ T5840] Bluetooth: hci2: command tx timeout
[  383.943599][T16014] 8021q: adding VLAN 0 to HW filter on device team0
[  384.007872][ T7642] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.015033][ T7642] bridge0: port 1(bridge_slave_0) entered forwarding state
[  384.043931][ T7642] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.051096][ T7642] bridge0: port 2(bridge_slave_1) entered forwarding state
[  384.256237][T16281] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2059'.
[  384.409919][T16035] 8021q: adding VLAN 0 to HW filter on device bond0
[  384.491067][T16287] netlink: 'syz.3.2061': attribute type 4 has an invalid length.
[  384.499398][T16287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2061'.
[  384.552278][T16035] 8021q: adding VLAN 0 to HW filter on device team0
[  384.592260][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.599450][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  384.660595][  T307] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.667790][  T307] bridge0: port 2(bridge_slave_1) entered forwarding state
[  384.744517][T16295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2063'.
[  384.802163][T16295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2063'.
[  384.871699][T16035] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  384.912809][T16035] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  385.005356][T16014] 8021q: adding VLAN 0 to HW filter on device batadv0
[  385.111643][T16135] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  385.140807][T16135] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  385.187272][T16135] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  385.219692][T16135] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  385.286127][T16014] veth0_vlan: entered promiscuous mode
[  385.310961][T16328] ip6gre2: entered allmulticast mode
[  385.353215][ T5840] Bluetooth: hci3: command 0x041b tx timeout
[  385.363898][T16014] veth1_vlan: entered promiscuous mode
[  385.391838][T16035] 8021q: adding VLAN 0 to HW filter on device batadv0
[  385.545571][T16014] veth0_macvtap: entered promiscuous mode
[  385.640937][T16014] veth1_macvtap: entered promiscuous mode
[  385.678593][T16035] veth0_vlan: entered promiscuous mode
[  385.700006][T16342] netlink: 'syz.3.2070': attribute type 1 has an invalid length.
[  385.701027][T16135] 8021q: adding VLAN 0 to HW filter on device bond0
[  385.742743][T16342] netlink: 'syz.3.2070': attribute type 1 has an invalid length.
[  385.750878][T16035] veth1_vlan: entered promiscuous mode
[  385.808558][T16014] batman_adv: batadv0: Interface activated: batadv_slave_0
[  385.839662][T16014] batman_adv: batadv0: Interface activated: batadv_slave_1
[  385.865143][T16135] 8021q: adding VLAN 0 to HW filter on device team0
[  385.889106][T16014] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  385.904879][T16014] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  385.917716][T16014] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  385.937826][T16014] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.003945][ T4789] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.011116][ T4789] bridge0: port 1(bridge_slave_0) entered forwarding state
[  386.076603][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.083772][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state
[  386.191011][T16035] veth0_macvtap: entered promiscuous mode
[  386.297395][T16035] veth1_macvtap: entered promiscuous mode
[  386.347130][T16373] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2074'.
[  386.431659][T16035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  386.482626][T16035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.512456][T16035] batman_adv: batadv0: Interface activated: batadv_slave_0
[  386.551985][ T4789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.572204][T16035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  386.573126][T16385] xt_nfacct: accounting object `syz1' does not exists
[  386.605083][ T4789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.612800][T16035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.648301][T16035] batman_adv: batadv0: Interface activated: batadv_slave_1
[  386.677994][T16035] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.708237][T16035] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.726972][T16035] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.741690][T16035] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.849316][  T307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.885467][  T307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.912077][T16135] 8021q: adding VLAN 0 to HW filter on device batadv0
[  387.184081][  T307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.191955][  T307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.350215][ T2896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.399133][ T2896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.443378][ T5840] Bluetooth: hci3: command 0x041b tx timeout
[  387.545209][T16135] veth0_vlan: entered promiscuous mode
[  387.581724][T16135] veth1_vlan: entered promiscuous mode
[  387.654574][T16135] veth0_macvtap: entered promiscuous mode
[  387.661276][T16435] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2084'.
[  387.681743][T16135] veth1_macvtap: entered promiscuous mode
[  387.866289][T16135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.879882][T16135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.890641][T16135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.912710][T16135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.933814][T16135] batman_adv: batadv0: Interface activated: batadv_slave_0
[  388.047420][ T7646] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.188990][ T7646] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.224646][T16135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.258454][T16135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.282716][T16135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.304271][T16135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.323746][T16135] batman_adv: batadv0: Interface activated: batadv_slave_1
[  388.364336][T16135] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  388.393444][T16135] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  388.402195][T16135] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  388.422614][T16135] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  388.484645][ T7646] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.604273][ T7646] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.725847][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  388.741874][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  388.757705][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  388.778257][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  388.787809][ T5851] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  388.798980][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  388.832920][ T2896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  388.841254][ T2896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  388.915865][T16464] bridee_slave_0 speed is unknown, defaulting to 1000
[  388.922911][ T7646] bridge_slave_1: left allmulticast mode
[  388.928578][ T7646] bridge_slave_1: left promiscuous mode
[  388.940786][ T7646] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.965312][ T7646] bridge_slave_0: left allmulticast mode
[  388.970993][ T7646] bridge_slave_0: left promiscuous mode
[  388.981447][ T7646] bridge0: port 1(bridge_slave_0) entered disabled state
[  389.308351][ T7646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  389.318994][ T7646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  389.329178][ T7646] bond0 (unregistering): Released all slaves
[  389.359260][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.376585][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.515058][ T5840] Bluetooth: hci3: command 0x041b tx timeout
[  389.523936][T16135] ==================================================================
[  389.532026][T16135] BUG: KASAN: slab-use-after-free in sco_conn_put+0xad/0x210
[  389.539416][T16135] Write of size 8 at addr ffff888033c085a0 by task syz-executor/16135
[  389.547553][T16135] 
[  389.549880][T16135] CPU: 0 UID: 0 PID: 16135 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0
[  389.549896][T16135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  389.549908][T16135] Call Trace:
[  389.549915][T16135]  <TASK>
[  389.549922][T16135]  dump_stack_lvl+0x241/0x360
[  389.549941][T16135]  ? __pfx_dump_stack_lvl+0x10/0x10
[  389.549955][T16135]  ? __pfx__printk+0x10/0x10
[  389.549968][T16135]  ? _printk+0xd5/0x120
[  389.549980][T16135]  ? __virt_addr_valid+0x183/0x530
[  389.549993][T16135]  ? __virt_addr_valid+0x183/0x530
[  389.550005][T16135]  print_report+0x16e/0x5b0
[  389.550021][T16135]  ? __virt_addr_valid+0x183/0x530
[  389.550033][T16135]  ? __virt_addr_valid+0x183/0x530
[  389.550044][T16135]  ? __virt_addr_valid+0x45f/0x530
[  389.550055][T16135]  ? __phys_addr+0xba/0x170
[  389.550073][T16135]  ? sco_conn_put+0xad/0x210
[  389.550092][T16135]  kasan_report+0x143/0x180
[  389.550107][T16135]  ? sco_conn_put+0xad/0x210
[  389.550122][T16135]  sco_conn_put+0xad/0x210
[  389.550135][T16135]  ? __pfx_sco_disconn_cfm+0x10/0x10
[  389.550149][T16135]  hci_conn_hash_flush+0x1be/0x350
[  389.550169][T16135]  ? __pfx_hci_conn_hash_flush+0x10/0x10
[  389.550186][T16135]  ? drain_workqueue+0x2d3/0x3a0
[  389.550203][T16135]  ? hci_discovery_set_state+0x57/0x180
[  389.550219][T16135]  hci_dev_close_sync+0xa8b/0x1260
[  389.550237][T16135]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  389.550251][T16135]  ? rcu_is_watching+0x15/0xb0
[  389.550267][T16135]  hci_unregister_dev+0x20b/0x510
[  389.550281][T16135]  vhci_release+0x80/0xd0
[  389.550297][T16135]  ? __pfx_vhci_release+0x10/0x10
[  389.550312][T16135]  __fput+0x3e9/0x9f0
[  389.550333][T16135]  task_work_run+0x24f/0x310
[  389.550349][T16135]  ? __pfx_task_work_run+0x10/0x10
[  389.550361][T16135]  ? do_exit+0xa25/0x28e0
[  389.550379][T16135]  ? do_exit+0xa25/0x28e0
[  389.550395][T16135]  do_exit+0xa2a/0x28e0
[  389.550414][T16135]  ? __pfx_do_exit+0x10/0x10
[  389.550429][T16135]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  389.550449][T16135]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  389.550468][T16135]  ? _raw_spin_unlock_irq+0x23/0x50
[  389.550481][T16135]  ? lockdep_hardirqs_on+0x99/0x150
[  389.550497][T16135]  do_group_exit+0x207/0x2c0
[  389.550515][T16135]  __x64_sys_exit_group+0x3f/0x40
[  389.550532][T16135]  x64_sys_call+0x26a8/0x26b0
[  389.550546][T16135]  do_syscall_64+0xf3/0x230
[  389.550562][T16135]  ? clear_bhb_loop+0x35/0x90
[  389.550580][T16135]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.550597][T16135] RIP: 0033:0x7fee8db8d0a9
[  389.550612][T16135] Code: Unable to access opcode bytes at 0x7fee8db8d07f.
[  389.550618][T16135] RSP: 002b:00007fff45812cc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  389.550636][T16135] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fee8db8d0a9
[  389.550645][T16135] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  389.550653][T16135] RBP: 00007fee8dbed8d0 R08: 00007fff45810a67 R09: 0000000000000003
[  389.550663][T16135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  389.550671][T16135] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007fff45812e80
[  389.550685][T16135]  </TASK>
[  389.550690][T16135] 
[  389.851980][T16135] Allocated by task 16165:
[  389.856395][T16135]  kasan_save_track+0x3f/0x80
[  389.861081][T16135]  __kasan_kmalloc+0x98/0xb0
[  389.865671][T16135]  __kmalloc_noprof+0x285/0x4c0
[  389.870509][T16135]  sk_prot_alloc+0xe0/0x210
[  389.874999][T16135]  sk_alloc+0x38/0x370
[  389.879057][T16135]  bt_sock_alloc+0x3c/0x340
[  389.883544][T16135]  sco_sock_create+0xbb/0x390
[  389.888202][T16135]  bt_sock_create+0x161/0x230
[  389.892862][T16135]  __sock_create+0x4c0/0xa30
[  389.897437][T16135]  __sys_socket+0x150/0x3c0
[  389.901924][T16135]  __x64_sys_socket+0x7a/0x90
[  389.906586][T16135]  do_syscall_64+0xf3/0x230
[  389.911073][T16135]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.916955][T16135] 
[  389.919282][T16135] Freed by task 16165:
[  389.923330][T16135]  kasan_save_track+0x3f/0x80
[  389.927995][T16135]  kasan_save_free_info+0x40/0x50
[  389.933015][T16135]  __kasan_slab_free+0x59/0x70
[  389.937763][T16135]  kfree+0x196/0x430
[  389.941645][T16135]  __sk_destruct+0x479/0x5f0
[  389.946221][T16135]  sco_sock_release+0x25e/0x320
[  389.951061][T16135]  sock_close+0xbc/0x240
[  389.955290][T16135]  __fput+0x3e9/0x9f0
[  389.959257][T16135]  task_work_run+0x24f/0x310
[  389.963833][T16135]  get_signal+0x15d1/0x1720
[  389.968321][T16135]  arch_do_signal_or_restart+0x96/0x860
[  389.973851][T16135]  syscall_exit_to_user_mode+0xce/0x340
[  389.979383][T16135]  do_syscall_64+0x100/0x230
[  389.983958][T16135]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.989840][T16135] 
[  389.992146][T16135] The buggy address belongs to the object at ffff888033c08000
[  389.992146][T16135]  which belongs to the cache kmalloc-2k of size 2048
[  390.006184][T16135] The buggy address is located 1440 bytes inside of
[  390.006184][T16135]  freed 2048-byte region [ffff888033c08000, ffff888033c08800)
[  390.020139][T16135] 
[  390.022445][T16135] The buggy address belongs to the physical page:
[  390.028837][T16135] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888033c0d000 pfn:0x33c08
[  390.038890][T16135] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  390.047370][T16135] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  390.055854][T16135] page_type: f5(slab)
[  390.059818][T16135] raw: 00fff00000000240 ffff88801b042000 ffffea00014ade10 ffffea000151da10
[  390.068402][T16135] raw: ffff888033c0d000 0000000000080005 00000000f5000000 0000000000000000
[  390.076977][T16135] head: 00fff00000000240 ffff88801b042000 ffffea00014ade10 ffffea000151da10
[  390.085641][T16135] head: ffff888033c0d000 0000000000080005 00000000f5000000 0000000000000000
[  390.094297][T16135] head: 00fff00000000003 ffffea0000cf0201 ffffffffffffffff 0000000000000000
[  390.102950][T16135] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  390.111609][T16135] page dumped because: kasan: bad access detected
[  390.118019][T16135] page_owner tracks the page as allocated
[  390.123714][T16135] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7633, tgid 7633 (kworker/u8:11), ts 268308832580, free_ts 268247033860
[  390.145321][T16135]  post_alloc_hook+0x1f4/0x240
[  390.150075][T16135]  get_page_from_freelist+0x365c/0x37a0
[  390.155605][T16135]  __alloc_frozen_pages_noprof+0x292/0x710
[  390.161392][T16135]  alloc_pages_mpol+0x311/0x660
[  390.166230][T16135]  allocate_slab+0x8f/0x3a0
[  390.170718][T16135]  ___slab_alloc+0xc27/0x14a0
[  390.175387][T16135]  __slab_alloc+0x58/0xa0
[  390.179708][T16135]  __kmalloc_node_track_caller_noprof+0x2e9/0x4c0
[  390.186121][T16135]  kmalloc_reserve+0x111/0x2a0
[  390.190870][T16135]  __alloc_skb+0x1f3/0x440
[  390.195276][T16135]  rtmsg_ifinfo_build_skb+0x84/0x260
[  390.200548][T16135]  unregister_netdevice_many_notify+0x10c3/0x1f10
[  390.206946][T16135]  default_device_exit_batch+0x7ff/0x880
[  390.212568][T16135]  cleanup_net+0x8ad/0xd60
[  390.216975][T16135]  process_scheduled_works+0xabe/0x18e0
[  390.222504][T16135]  worker_thread+0x870/0xd30
[  390.227085][T16135] page last free pid 7633 tgid 7633 stack trace:
[  390.233393][T16135]  free_frozen_pages+0xe0d/0x10e0
[  390.238406][T16135]  __put_partials+0x160/0x1c0
[  390.243071][T16135]  put_cpu_partial+0x17c/0x250
[  390.247819][T16135]  __slab_free+0x290/0x380
[  390.252216][T16135]  qlist_free_all+0x9a/0x140
[  390.256789][T16135]  kasan_quarantine_reduce+0x14f/0x170
[  390.262241][T16135]  __kasan_slab_alloc+0x23/0x80
[  390.267076][T16135]  kmem_cache_alloc_node_noprof+0x1d9/0x380
[  390.272969][T16135]  __alloc_skb+0x1c3/0x440
[  390.277374][T16135]  inet6_ifmcaddr_notify+0x14b/0x2a0
[  390.282649][T16135]  __ipv6_dev_mc_dec+0x2ec/0x370
[  390.287580][T16135]  ipv6_mc_destroy_dev+0x33b/0x580
[  390.292679][T16135]  addrconf_ifdown+0x1619/0x1b00
[  390.297603][T16135]  addrconf_notify+0x3cb/0x1020
[  390.302438][T16135]  notifier_call_chain+0x1a5/0x3f0
[  390.307536][T16135]  unregister_netdevice_many_notify+0x102f/0x1f10
[  390.313939][T16135] 
[  390.316252][T16135] Memory state around the buggy address:
[  390.321859][T16135]  ffff888033c08480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  390.329907][T16135]  ffff888033c08500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  390.337950][T16135] >ffff888033c08580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  390.345995][T16135]                                ^
[  390.351087][T16135]  ffff888033c08600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  390.359127][T16135]  ffff888033c08680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  390.367169][T16135] ==================================================================
[  390.401395][T16135] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  390.408638][T16135] CPU: 0 UID: 0 PID: 16135 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0
[  390.419587][T16135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  390.429660][T16135] Call Trace:
[  390.432956][T16135]  <TASK>
[  390.435894][T16135]  dump_stack_lvl+0x241/0x360
[  390.440578][T16135]  ? __pfx_dump_stack_lvl+0x10/0x10
[  390.445767][T16135]  ? __pfx__printk+0x10/0x10
[  390.450339][T16135]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  390.456309][T16135]  ? vscnprintf+0x5d/0x90
[  390.460625][T16135]  panic+0x349/0x880
[  390.464506][T16135]  ? check_panic_on_warn+0x21/0xb0
[  390.469605][T16135]  ? __pfx_panic+0x10/0x10
[  390.474012][T16135]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[  390.479985][T16135]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  390.486306][T16135]  check_panic_on_warn+0x86/0xb0
[  390.491240][T16135]  ? sco_conn_put+0xad/0x210
[  390.495815][T16135]  end_report+0x77/0x160
[  390.500046][T16135]  kasan_report+0x154/0x180
[  390.504539][T16135]  ? sco_conn_put+0xad/0x210
[  390.509117][T16135]  sco_conn_put+0xad/0x210
[  390.513518][T16135]  ? __pfx_sco_disconn_cfm+0x10/0x10
[  390.518789][T16135]  hci_conn_hash_flush+0x1be/0x350
[  390.523894][T16135]  ? __pfx_hci_conn_hash_flush+0x10/0x10
[  390.529517][T16135]  ? drain_workqueue+0x2d3/0x3a0
[  390.534446][T16135]  ? hci_discovery_set_state+0x57/0x180
[  390.539990][T16135]  hci_dev_close_sync+0xa8b/0x1260
[  390.545094][T16135]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  390.550627][T16135]  ? rcu_is_watching+0x15/0xb0
[  390.555382][T16135]  hci_unregister_dev+0x20b/0x510
[  390.560397][T16135]  vhci_release+0x80/0xd0
[  390.564718][T16135]  ? __pfx_vhci_release+0x10/0x10
[  390.569731][T16135]  __fput+0x3e9/0x9f0
[  390.573706][T16135]  task_work_run+0x24f/0x310
[  390.578284][T16135]  ? __pfx_task_work_run+0x10/0x10
[  390.583382][T16135]  ? do_exit+0xa25/0x28e0
[  390.587703][T16135]  ? do_exit+0xa25/0x28e0
[  390.592020][T16135]  do_exit+0xa2a/0x28e0
[  390.596164][T16135]  ? __pfx_do_exit+0x10/0x10
[  390.600740][T16135]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  390.606709][T16135]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  390.613029][T16135]  ? _raw_spin_unlock_irq+0x23/0x50
[  390.618213][T16135]  ? lockdep_hardirqs_on+0x99/0x150
[  390.623410][T16135]  do_group_exit+0x207/0x2c0
[  390.628001][T16135]  __x64_sys_exit_group+0x3f/0x40
[  390.633018][T16135]  x64_sys_call+0x26a8/0x26b0
[  390.637682][T16135]  do_syscall_64+0xf3/0x230
[  390.642175][T16135]  ? clear_bhb_loop+0x35/0x90
[  390.646850][T16135]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.652735][T16135] RIP: 0033:0x7fee8db8d0a9
[  390.657132][T16135] Code: Unable to access opcode bytes at 0x7fee8db8d07f.
[  390.664129][T16135] RSP: 002b:00007fff45812cc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  390.672534][T16135] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fee8db8d0a9
[  390.680501][T16135] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  390.688462][T16135] RBP: 00007fee8dbed8d0 R08: 00007fff45810a67 R09: 0000000000000003
[  390.696421][T16135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  390.704379][T16135] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007fff45812e80
[  390.712351][T16135]  </TASK>
[  390.715634][T16135] Kernel Offset: disabled
[  390.719943][T16135] Rebooting in 86400 seconds..