last executing test programs:

4.007269444s ago: executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c010380400000800800034000000002340002803000028008000180fffffffd0900020073797a310000000008000340000000000800034000f4ffff070003"], 0x1ec}}, 0x0)

3.927339614s ago: executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x301)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'})

3.725116476s ago: executing program 4:
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r2=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r2}, &(0x7f0000000100)=0xc)

3.629161578s ago: executing program 4:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000300)=""/192, &(0x7f0000000140)=0xc0)

3.478620142s ago: executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
write(r1, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02150000e578a6ed5bb9c26ed697944d4b06c19897", 0x29)

3.364030101s ago: executing program 4:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x7})

3.305445722s ago: executing program 0:
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57)
sendmsg$alg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@iv={0x18}, @op={0x18, 0x114}], 0x30}, 0x0)

3.181958113s ago: executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r0, &(0x7f00000000c0)="3f051a000300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

3.177772638s ago: executing program 0:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x4)

3.105089308s ago: executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000300)=""/192, &(0x7f0000000140)=0xc0)

3.060786611s ago: executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x30, 0x107, 0x0, 0x0, {0x7, 0x7c}}, 0x14}}, 0x0)

3.011833616s ago: executing program 0:
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@ifindex, 0xffffffffffffffff, 0xc, 0x8, 0xffffffffffffffff, @prog_fd}, 0x20)

2.975771476s ago: executing program 2:
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f0ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2.915702171s ago: executing program 0:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @rand_addr, 0x5}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "296fbf320123cdfd", "33ac29b6f7ad0fb489c650e0074050f5", "06657c5e", "203b20fb672ecdf7"}, 0x28)

2.820742928s ago: executing program 2:
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000100000d0a000000000000000000000000000000010000050000000081701aa8"], &(0x7f0000000f40)=""/4089, 0x46, 0xff9, 0x1}, 0x20)

2.600284976s ago: executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, r2}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x30}}, 0x0)

2.468032014s ago: executing program 2:
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c"], 0xfdef)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef)

2.229974744s ago: executing program 3:
syz_emit_ethernet(0x50, &(0x7f0000002080)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x1a, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x0, 0x0, 'Qh'}, {}]}}}}}}, 0x0)

2.062757176s ago: executing program 3:
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r2=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r2}, &(0x7f0000000100)=0xc)

1.929592155s ago: executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14, 0x10}}, 0x80}}, 0x0)

1.889854621s ago: executing program 0:
unshare(0x68060200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x1010, 0xffffffffffffffff, 0x4000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff)
bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10)
listen(0xffffffffffffffff, 0x3)
writev(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff)
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x82, 0x0, &(0x7f0000001180))

1.664688772s ago: executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="8252", 0x2}, {&(0x7f0000000140)="06", 0x1}], 0x2}}], 0x1, 0x6400c000)
sendto$inet6(r0, &(0x7f0000000300), 0x2, 0x0, 0x0, 0xfffffffffffffdfd)

1.570896477s ago: executing program 3:
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a888e", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1.440786102s ago: executing program 3:
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}})
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x2404c7fc, &(0x7f00000028c0)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004801)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x48, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x5}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x48}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11}}}}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl(r5, 0x5, &(0x7f0000000480)="167a2d5df6887de8ae5115d1182549206c51dd3ec50af2282a6eef7249c57f09562fe17f7a52536fb017f6205714856f2aaec2e9408cea61c4d41d6d4fd66418a069decf728c8a12d9c2e78715445f89ffe9c48a4a736081c09da4d3503719fbb4608d9a2b59f080ed183d19eb5c5d7643b670a507896481b16aa9d983ad1309255183a7733b923b2c77fc169cc9ed1f78632badd77be54fcfbcafed21616e7d478f701d202845b4b8c0f28a144ec1")
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000300)={{0x0, @dev={0xac, 0x14, 0x14, 0x24}, 0x4e21, 0x4, 'sed\x00', 0x2, 0xf18, 0xe}, {@rand_addr=0x64010102, 0x4e24, 0x3, 0xffff, 0x9, 0x4}}, 0x44)
socket$inet(0x2, 0x2, 0x9)

1.033786136s ago: executing program 1:
socket$inet6(0xa, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
close(0xffffffffffffffff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x38)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0xfffe, 0x0, @private1, 0xffffffff}, 0xf)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1)
syz_80211_inject_frame(0x0, 0x0, 0x0)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file0', [{0x20, '.'}, {0x20, '\\'}, {0x20, '^-)%'}, {0x20, '\x00'}, {}, {0x20, '\x00'}, {0x20, '.^\xe1\xcd\xd1\xba._\xdaU\x1e\x06\x83\xf8\xff\x12\xc4\x0f\xed\xcb\x02y@?\xe30\xd0%u\xb0\xf5\xcd|\xb9<\xab\xe4\xeb\xfe\xdd\x1d\v\xed\xb0\xc2\x8f@\xc7M\x8d\xcf\x11\xee\xc0~\x14BUE\xb3\x06\x05r\xf1\xd9:D\v&\x85z\x80\xef\xd8\xfa]+\xf9\xc1\xcf\xaf\x12\\\\\xbcxj\xe1\xc7\xfeu\xd2\x83\xb9i\x15\xa1\xd7\xdc\xa6\xc2\x86\xa1E\x8e\xe1\xe7\xd8\xdc\n\xb7U\xdd{\xa3=O\xa0\x9e\xe6\xc0\xf0d\xaf\x1f\xde}?\xccU\xce\xe6|6\x14\x1d$dJ\xf2)e\xe7\r\xa3\x87\x10\xd8r\xfb\xa3\xf3&\n\xe3\xb2\xf0\x97+\xc2\x8d%\xd8\x01\xa7I9[w'}], 0xa, "11b2e4a2b4d8acda1690bef7b87d08685a30f9b205ed3e164ad8ae7566c83968f6f8b9f1a464fa1f08f0c3e827c5d07c541664ba573112a0ec6d882429d168feb714f25bef461e6c75e95f96bf11f5c2b119bad6f3fb86bf4f33e2e0322621d0"}, 0x123)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmmsg$inet(r4, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20005000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, r6, 0x1}, 0x14}}, 0x0)

193.083305ms ago: executing program 1:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
sendto$rxrpc(r0, 0x0, 0x11, 0x0, &(0x7f0000006100)=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24)

145.058394ms ago: executing program 1:
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@ifindex, 0xffffffffffffffff, 0x17, 0x0, 0x0, @prog_id}, 0x20)

110.611227ms ago: executing program 1:
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0xfdef, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32)
close(r2)

62.13445ms ago: executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)

0s ago: executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00010000000000002c0012800b00010062726964676500001c000280060017"], 0x4c}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.164' (ED25519) to the list of known hosts.
2024/06/04 20:07:16 fuzzer started
2024/06/04 20:07:16 dialing manager at 10.128.0.169:30018
[   65.350647][ T5086] cgroup: Unknown subsys name 'net'
[   65.503153][ T5086] cgroup: Unknown subsys name 'rlimit'
2024/06/04 20:07:18 starting 5 executor processes
[   66.667677][ T5087] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   67.829967][ T5121] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   67.839797][ T5121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   67.851325][ T5121] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   67.861186][ T5121] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   67.862244][ T5123] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   67.876124][ T5122] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   67.878409][ T5123] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   67.892674][ T5121] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   67.892678][ T5123] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   67.900948][ T5123] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   67.910475][ T5121] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   67.918240][ T5123] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   67.923117][ T5122] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   67.930013][ T5123] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   67.938188][ T5122] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   67.945841][ T5123] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   67.952756][ T5121] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   67.959798][ T5123] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   67.965746][ T5122] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   67.973889][ T5123] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   67.982873][ T5121] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   67.988899][ T5123] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   67.995645][ T5121] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   68.002642][ T5123] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   68.017098][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   68.025004][ T5121] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   68.032950][ T5121] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   68.040933][ T5121] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   68.051835][ T5117] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   68.061488][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   68.619282][ T5107] chnl_net:caif_netlink_parms(): no params data found
[   68.650274][ T5108] chnl_net:caif_netlink_parms(): no params data found
[   68.686532][ T5106] chnl_net:caif_netlink_parms(): no params data found
[   68.734063][ T5109] chnl_net:caif_netlink_parms(): no params data found
[   68.922893][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.930228][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.939016][ T5108] bridge_slave_0: entered allmulticast mode
[   68.946067][ T5108] bridge_slave_0: entered promiscuous mode
[   68.954377][ T5119] chnl_net:caif_netlink_parms(): no params data found
[   68.965562][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.972809][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.980110][ T5108] bridge_slave_1: entered allmulticast mode
[   68.987760][ T5108] bridge_slave_1: entered promiscuous mode
[   68.995737][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.003003][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.010167][ T5107] bridge_slave_0: entered allmulticast mode
[   69.017319][ T5107] bridge_slave_0: entered promiscuous mode
[   69.066577][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.074063][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.081615][ T5107] bridge_slave_1: entered allmulticast mode
[   69.089179][ T5107] bridge_slave_1: entered promiscuous mode
[   69.119100][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.170535][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.215634][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.222952][ T5106] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.230283][ T5106] bridge_slave_0: entered allmulticast mode
[   69.237808][ T5106] bridge_slave_0: entered promiscuous mode
[   69.245849][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.253355][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.260654][ T5109] bridge_slave_0: entered allmulticast mode
[   69.267604][ T5109] bridge_slave_0: entered promiscuous mode
[   69.290192][ T5107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.300306][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.307621][ T5106] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.314941][ T5106] bridge_slave_1: entered allmulticast mode
[   69.323103][ T5106] bridge_slave_1: entered promiscuous mode
[   69.329847][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.337187][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.345105][ T5109] bridge_slave_1: entered allmulticast mode
[   69.351942][ T5109] bridge_slave_1: entered promiscuous mode
[   69.381789][ T5108] team0: Port device team_slave_0 added
[   69.390717][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.445553][ T5108] team0: Port device team_slave_1 added
[   69.505546][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.513547][ T5119] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.521560][ T5119] bridge_slave_0: entered allmulticast mode
[   69.528381][ T5119] bridge_slave_0: entered promiscuous mode
[   69.547425][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.555048][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.581802][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.596547][ T5107] team0: Port device team_slave_0 added
[   69.605692][ T5107] team0: Port device team_slave_1 added
[   69.614510][ T5106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.626868][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.646138][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.653384][ T5119] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.660549][ T5119] bridge_slave_1: entered allmulticast mode
[   69.668704][ T5119] bridge_slave_1: entered promiscuous mode
[   69.676098][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.683519][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.709628][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.738073][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.759915][ T5106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.812426][ T5109] team0: Port device team_slave_0 added
[   69.849805][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.857310][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.885329][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.898758][ T5109] team0: Port device team_slave_1 added
[   69.919080][ T5119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.931998][ T5119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.950709][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.958562][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.984742][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.011436][ T5106] team0: Port device team_slave_0 added
[   70.042701][ T5108] hsr_slave_0: entered promiscuous mode
[   70.049159][ T5108] hsr_slave_1: entered promiscuous mode
[   70.086839][ T5106] team0: Port device team_slave_1 added
[   70.093030][   T53] Bluetooth: hci4: command tx timeout
[   70.097343][ T5118] Bluetooth: hci0: command tx timeout
[   70.098638][ T5113] Bluetooth: hci3: command tx timeout
[   70.105075][ T5118] Bluetooth: hci2: command tx timeout
[   70.110536][ T5113] Bluetooth: hci1: command tx timeout
[   70.135430][ T5119] team0: Port device team_slave_0 added
[   70.150305][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.157987][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.187577][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.213542][ T5119] team0: Port device team_slave_1 added
[   70.220074][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.227664][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.253819][ T5106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.287569][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.294706][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.321985][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.353771][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.360977][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.387533][ T5106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.433721][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.440713][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.467884][ T5119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.494892][ T5107] hsr_slave_0: entered promiscuous mode
[   70.502236][ T5107] hsr_slave_1: entered promiscuous mode
[   70.508787][ T5107] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.516757][ T5107] Cannot create hsr debugfs directory
[   70.540671][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.547984][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.574454][ T5119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.606566][ T5106] hsr_slave_0: entered promiscuous mode
[   70.613475][ T5106] hsr_slave_1: entered promiscuous mode
[   70.619621][ T5106] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.627319][ T5106] Cannot create hsr debugfs directory
[   70.736594][ T5119] hsr_slave_0: entered promiscuous mode
[   70.743133][ T5119] hsr_slave_1: entered promiscuous mode
[   70.749151][ T5119] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.756825][ T5119] Cannot create hsr debugfs directory
[   70.770650][ T5109] hsr_slave_0: entered promiscuous mode
[   70.777884][ T5109] hsr_slave_1: entered promiscuous mode
[   70.784230][ T5109] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.792162][ T5109] Cannot create hsr debugfs directory
[   71.185742][ T5108] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.203840][ T5108] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.223848][ T5108] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.245773][ T5108] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.298547][ T5106] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   71.310489][ T5106] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   71.338396][ T5106] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   71.348925][ T5106] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.408963][ T5107] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   71.419512][ T5107] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   71.431466][ T5107] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   71.459264][ T5107] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   71.532967][ T5119] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   71.552223][ T5119] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   71.597964][ T5119] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   71.610033][ T5119] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   71.685516][ T5109] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.696072][ T5109] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.708862][ T5109] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.728821][ T5109] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.868358][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.881568][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.923903][ T5108] 8021q: adding VLAN 0 to HW filter on device team0
[   71.955851][ T5107] 8021q: adding VLAN 0 to HW filter on device team0
[   71.983617][ T5106] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.019207][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.026699][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.038480][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.045802][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.077340][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.084630][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.097801][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.105114][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.129357][ T5106] 8021q: adding VLAN 0 to HW filter on device team0
[   72.170616][ T5119] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.180004][ T5113] Bluetooth: hci4: command tx timeout
[   72.180067][ T5113] Bluetooth: hci2: command tx timeout
[   72.180098][ T5113] Bluetooth: hci3: command tx timeout
[   72.180129][ T5113] Bluetooth: hci0: command tx timeout
[   72.181040][ T5113] Bluetooth: hci1: command tx timeout
[   72.203406][ T5119] 8021q: adding VLAN 0 to HW filter on device team0
[   72.222596][ T1247] ieee802154 phy0 wpan0: encryption failed: -22
[   72.229428][ T1247] ieee802154 phy1 wpan1: encryption failed: -22
[   72.252432][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.259766][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.275417][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.282748][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.326556][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.333791][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.359839][ T5108] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.375871][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.393248][ T5156] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.400351][ T5156] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.480038][ T5107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.517857][ T5109] 8021q: adding VLAN 0 to HW filter on device team0
[   72.616851][ T5106] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   72.636105][ T5106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.654324][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.661567][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.709818][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.717047][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.890652][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.016074][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.048016][ T5108] veth0_vlan: entered promiscuous mode
[   73.079584][ T5108] veth1_vlan: entered promiscuous mode
[   73.179245][ T5106] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.265049][ T5119] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.364942][ T5108] veth0_macvtap: entered promiscuous mode
[   73.409947][ T5106] veth0_vlan: entered promiscuous mode
[   73.452961][ T5108] veth1_macvtap: entered promiscuous mode
[   73.463933][ T5106] veth1_vlan: entered promiscuous mode
[   73.481333][ T5119] veth0_vlan: entered promiscuous mode
[   73.489526][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.544468][ T5106] veth0_macvtap: entered promiscuous mode
[   73.557901][ T5106] veth1_macvtap: entered promiscuous mode
[   73.585233][ T5119] veth1_vlan: entered promiscuous mode
[   73.613364][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.657122][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.671258][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.682359][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.702053][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.713621][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.724586][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.736080][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.749391][ T5106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.759562][ T5106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.768738][ T5106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.778663][ T5106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.806044][ T5108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.819481][ T5108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.829256][ T5108] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.838468][ T5108] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.854854][ T5107] veth0_vlan: entered promiscuous mode
[   73.890701][ T5109] veth0_vlan: entered promiscuous mode
[   73.912177][ T5107] veth1_vlan: entered promiscuous mode
[   73.956821][ T5119] veth0_macvtap: entered promiscuous mode
[   73.987817][ T5119] veth1_macvtap: entered promiscuous mode
[   74.012093][ T5109] veth1_vlan: entered promiscuous mode
[   74.112103][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.123198][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.133661][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.146123][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.159062][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.170586][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.184260][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.231354][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.239250][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.240372][ T5109] veth0_macvtap: entered promiscuous mode
[   74.262667][ T5113] Bluetooth: hci1: command tx timeout
[   74.262692][   T53] Bluetooth: hci0: command tx timeout
[   74.268242][ T5113] Bluetooth: hci3: command tx timeout
[   74.273838][ T5118] Bluetooth: hci2: command tx timeout
[   74.279456][ T5113] Bluetooth: hci4: command tx timeout
[   74.300583][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.308104][ T5109] veth1_macvtap: entered promiscuous mode
[   74.315664][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.322550][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.338637][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.348890][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.359628][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.373182][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.406073][ T5107] veth0_macvtap: entered promiscuous mode
[   74.444122][ T5119] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.455542][ T5119] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.464598][ T5119] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.474157][ T5119] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.499534][ T5107] veth1_macvtap: entered promiscuous mode
[   74.509893][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.526937][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.537122][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.550687][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.573646][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.585905][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.593943][ T5190] net_ratelimit: 2 callbacks suppressed
[   74.593963][ T5190] dccp_invalid_packet: P.Data Offset(0) too small
[   74.596153][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.618983][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.638669][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.702042][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.716381][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.727488][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.738882][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.749445][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.760337][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.773841][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.838038][ T5109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.848027][ T5109] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.863151][ T5109] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.872141][ T5109] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.890526][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.918444][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.935792][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.950255][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.964903][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.978550][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.005054][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.026144][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.039259][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.127495][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.143635][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.153678][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.165196][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.185050][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.196461][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.230893][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.249418][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.268515][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.305513][ T2451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.335305][ T2451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.379902][ T5107] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.413359][ T5107] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.429118][ T5107] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.448135][ T5107] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.556465][ T5214] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[   75.606144][ T5111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.629273][ T5111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.831921][ T5158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.839808][ T5158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.921099][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.929151][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.050171][ T5161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.075264][ T5161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.217541][ T5158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.261729][ T5158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.331792][ T5113] Bluetooth: hci4: command tx timeout
[   76.332529][ T5118] Bluetooth: hci2: command tx timeout
[   76.337231][ T5113] Bluetooth: hci0: command tx timeout
[   76.343702][   T53] Bluetooth: hci3: command tx timeout
[   76.350395][ T5113] Bluetooth: hci1: command tx timeout
[   76.476174][ T5246] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.960568][ T5264] tap0: tun_chr_ioctl cmd 2147767521
[   77.595378][ T5291] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further
[   78.173706][ T5316] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.1'.
[   78.915565][ T5352] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.2'.
[   79.071754][ T5359] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   79.313695][ T5367] netlink: 'syz-executor.1': attribute type 30 has an invalid length.
[   79.866637][ T5395] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[   79.892795][ T5395] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[   79.944054][ T5398] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[   79.981906][ T5398] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[   80.017470][ T5398] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[   80.051770][ T5406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   80.085941][ T5398] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[   80.136861][ T5398] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[   80.166778][ T5406] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[   80.191852][ T5406] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.222950][ T5406] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.275275][ T5406] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   80.547364][ T5424] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   80.670458][ T5424] syz_tun: entered promiscuous mode
[   80.711354][ T5424] macvlan2: entered promiscuous mode
[   81.035371][ T5440] __nla_validate_parse: 14 callbacks suppressed
[   81.035393][ T5440] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'.
[   81.291580][ T5448] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.1'.
[   81.651643][ T5465] netlink: zone id is out of range
[   81.670721][ T5465] netlink: zone id is out of range
[   81.732629][ T5465] netlink: zone id is out of range
[   81.738405][ T5465] netlink: zone id is out of range
[   81.808610][ T5465] netlink: set zone limit has 4 unknown bytes
[   81.998718][ T5478] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[   82.039916][ T5481] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'.
[   82.426647][  T784] cfg80211: failed to load regulatory.db
[   82.458438][ T5500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   82.589393][ T5500] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[   83.989364][ T5559] netlink: zone id is out of range
[   84.032983][ T5559] netlink: zone id is out of range
[   84.063141][ T5559] netlink: zone id is out of range
[   84.419660][ T5571] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'.
[   85.471754][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   85.486138][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   85.496852][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   85.506102][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   85.522990][ T5118] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   85.530566][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   85.620235][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.623115][ T5113] Bluetooth: hci3: command tx timeout
[   87.953632][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.047905][ T5604] netlink: 'syz-executor.2': attribute type 9 has an invalid length.
[   88.074471][ T5604] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[   88.152582][ T5612] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[   88.241800][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.615180][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.466364][   T12] bridge_slave_1: left allmulticast mode
[   89.487543][   T12] bridge_slave_1: left promiscuous mode
[   89.523145][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.598959][   T12] bridge_slave_0: left allmulticast mode
[   89.627594][   T12] bridge_slave_0: left promiscuous mode
[   89.647969][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.691229][ T5113] Bluetooth: hci3: command tx timeout
[   90.452131][ T5663] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[   90.876836][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   90.933032][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   90.997937][   T12] bond0 (unregistering): Released all slaves
[   91.049749][ T5593] chnl_net:caif_netlink_parms(): no params data found
[   91.773089][ T5113] Bluetooth: hci3: command tx timeout
[   92.032608][ T5700] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[   92.091587][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.098765][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.144495][ T5593] bridge_slave_0: entered allmulticast mode
[   92.166379][ T5593] bridge_slave_0: entered promiscuous mode
[   92.380567][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.405092][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.441868][ T5593] bridge_slave_1: entered allmulticast mode
[   92.492183][ T5593] bridge_slave_1: entered promiscuous mode
[   92.624387][   T12] hsr_slave_0: left promiscuous mode
[   92.710235][   T12] hsr_slave_1: left promiscuous mode
[   92.771209][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.810891][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.884109][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.909280][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.985751][   T12] veth1_macvtap: left promiscuous mode
[   92.997261][   T12] veth0_macvtap: left promiscuous mode
[   93.008034][   T12] veth1_vlan: left promiscuous mode
[   93.017902][   T12] veth0_vlan: left promiscuous mode
[   93.423882][ T5735] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[   93.852535][ T5113] Bluetooth: hci3: command tx timeout
[   94.053765][   T12] team0 (unregistering): Port device team_slave_1 removed
[   94.138234][   T12] team0 (unregistering): Port device team_slave_0 removed
[   95.025987][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.093512][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.315985][ T5593] team0: Port device team_slave_0 added
[   95.351645][ T5593] team0: Port device team_slave_1 added
[   95.580630][ T5768] net_ratelimit: 2 callbacks suppressed
[   95.580652][ T5768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   95.657755][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.713147][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.810823][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.864549][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.894490][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.978213][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.038614][ T5784] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[   96.064021][ T5784] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   96.576273][ T5593] hsr_slave_0: entered promiscuous mode
[   96.624431][ T5593] hsr_slave_1: entered promiscuous mode
[   96.688630][ T5593] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.712693][ T5593] Cannot create hsr debugfs directory
[   98.243066][ T5875] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[   98.265195][ T5875] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[   98.289009][ T5875] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.3'.
[   98.415224][ T5593] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   98.422974][ T5885] xt_CT: You must specify a L4 protocol and not use inversions on it
[   98.448141][ T5593] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   98.453148][ T5886] xt_addrtype: ipv6 BLACKHOLE matching not supported
[   98.500138][ T5593] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   98.582310][ T5889] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[   98.651073][ T5593] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   98.935127][ T5904] netlink: 'syz-executor.2': attribute type 6 has an invalid length.
[   99.034754][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.134797][ T5593] 8021q: adding VLAN 0 to HW filter on device team0
[   99.193087][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.200285][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.233395][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.240649][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.403215][ T5593] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   99.823875][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.872479][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[   99.905957][ T5940] netlink: 'syz-executor.2': attribute type 15 has an invalid length.
[  100.092928][ T5593] veth0_vlan: entered promiscuous mode
[  100.155232][ T5593] veth1_vlan: entered promiscuous mode
[  100.285442][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  100.365585][ T5593] veth0_macvtap: entered promiscuous mode
[  100.408923][ T5593] veth1_macvtap: entered promiscuous mode
[  100.486991][ T5969] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  100.530095][ T5969] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  100.561270][ T5969] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.1'.
[  100.627323][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.680645][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.708100][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.724104][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.738465][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.753370][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.807850][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.889529][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.953481][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.988526][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.012199][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.024720][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.035921][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.054260][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.067820][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.093236][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.269701][ T5593] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.317543][ T5593] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.346312][ T5593] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.356972][ T5593] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.385000][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  101.848754][ T6033] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  101.924211][ T1051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.949378][ T1051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.126370][ T1051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.170467][ T1051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.919575][ T6125] syz_tun: entered promiscuous mode
[  104.038035][ T6125] syz_tun: left promiscuous mode
[  104.145884][ T6139] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  104.773462][   T29] audit: type=1804 audit(1717531676.221:2): pid=6160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2908119054/syzkaller.hRa7AL/87/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0
[  104.923866][ T6175] No such timeout policy "syz0"
[  105.562400][ T6213] openvswitch: netlink: Unknown nsh attribute 0
[  105.627365][ T6216] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  105.666990][ T6216] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  105.855559][ T6224] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  105.872283][ T6224] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  105.887732][ T6222] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  105.968619][ T6222] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'.
[  105.988531][ T6222] gretap0: entered promiscuous mode
[  109.606943][ T6235] Bluetooth: MGMT ver 1.22
[  109.616455][ T6234] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de
[  110.390455][ T6271] bridge0: port 3(team0) entered blocking state
[  110.431043][ T6271] bridge0: port 3(team0) entered disabled state
[  110.468298][ T6271] team0: entered allmulticast mode
[  110.508052][ T6271] team_slave_0: entered allmulticast mode
[  110.538962][ T6271] team_slave_1: entered allmulticast mode
[  110.614754][ T6271] team0: entered promiscuous mode
[  110.628277][ T6271] team_slave_0: entered promiscuous mode
[  110.643540][ T6271] team_slave_1: entered promiscuous mode
[  110.689933][ T6271] bridge0: port 3(team0) entered blocking state
[  110.697515][ T6271] bridge0: port 3(team0) entered forwarding state
[  110.766581][ T6283] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  110.808905][ T6283] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  111.733217][ T6330] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  111.776101][ T6330] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  111.796897][ T6326] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  111.933463][ T6326] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'.
[  112.022309][ T6326] gretap0: entered promiscuous mode
[  112.097020][ T6339] pimreg: entered allmulticast mode
[  112.125447][ T6345] pimreg: left allmulticast mode
[  113.494305][ T6386] sch_fq: defrate 0 ignored.
[  113.520605][ T6388] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  113.552119][ T6388] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  113.604022][ T6382] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  113.682327][ T6382] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'.
[  114.992295][ T6426] pimreg: entered allmulticast mode
[  115.054648][ T6426] pimreg: left allmulticast mode
[  116.139674][ T6458] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  116.308098][ T6458] bond1: entered promiscuous mode
[  116.338786][ T6463] bond0: (slave bond_slave_0): Releasing backup interface
[  116.434900][ T6463] bond1: (slave bond_slave_0): making interface the new active one
[  116.486959][ T6463] bond_slave_0: entered promiscuous mode
[  116.507486][ T6463] bond1: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.546791][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  116.607769][ T6458] bond1 (unregistering): (slave bond_slave_0): Releasing active interface
[  116.640419][ T6458] bond_slave_0: left promiscuous mode
[  116.661624][ T6458] bond1 (unregistering): Released all slaves
[  117.247410][ T6499] sch_fq: defrate 0 ignored.
[  118.477532][ T6528] sch_fq: defrate 0 ignored.
[  118.798118][ T6545] tipc: Started in network mode
[  118.803800][ T6545] tipc: Node identity ac1414aa, cluster identity 4711
[  118.819132][ T6545] tipc: Enabled bearer <udp:syz2>, priority 10
[  118.833679][ T6545] tipc: Disabling bearer <udp:syz2>
[  119.329793][ T6572] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  119.471577][ T6577] netlink: 'syz-executor.3': attribute type 64 has an invalid length.
[  119.489208][ T6577] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  119.717902][ T6588] Driver unsupported XDP return value 0 on prog  (id 126) dev N/A, expect packet loss!
[  119.986631][ T6597] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  120.596022][ T6626] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'.
[  121.068584][ T6633] netlink: 'syz-executor.1': attribute type 64 has an invalid length.
[  121.094209][ T6633] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  121.958729][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  122.419481][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  122.550282][ T4543] udevd[4543]: worker [5504] terminated by signal 33 (Unknown signal 33)
[  122.577851][ T4543] udevd[4543]: worker [5504] failed while handling '/devices/virtual/block/loop1'
[  123.035395][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  123.201776][ T6720] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  123.455600][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  123.693614][ T6737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  123.705104][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  123.748671][ T6753] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  123.759120][ T6753] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  123.768726][ T6753] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  123.777754][ T6753] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  123.792374][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  123.795460][ T6753] vxlan0: entered promiscuous mode
[  123.826085][ T6755] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.835304][ T6755] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.947291][ T6760] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  124.054726][ T6765] syzkaller0: entered allmulticast mode
[  124.351356][ T6777] IPVS: length: 192 != 8
[  124.821553][ T6792] syzkaller0: entered allmulticast mode
[  124.840433][ T6803] IPVS: length: 192 != 8
[  125.045449][   T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.111236][ T6805] bond0: entered promiscuous mode
[  125.254471][   T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.438067][   T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.572615][   T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.956879][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  125.981111][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  125.992906][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  126.031179][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  126.051984][ T5118] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  126.063498][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  126.735020][ T6874] IPVS: set_ctl: invalid protocol: 0 172.20.20.36:20001
[  127.166028][ T6877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.118169][ T6891] netlink: 'syz-executor.1': attribute type 23 has an invalid length.
[  128.127254][   T46] ------------[ cut here ]------------
[  128.133476][   T46] refcount_t: addition on 0; use-after-free.
[  128.145950][   T46] WARNING: CPU: 1 PID: 46 at lib/refcount.c:25 refcount_warn_saturate+0x13a/0x1d0
[  128.155364][   T46] Modules linked in:
[  128.160274][   T46] CPU: 1 PID: 46 Comm: kworker/u8:3 Not tainted 6.10.0-rc1-syzkaller-00260-g2b438c5774cc #0
[  128.171335][ T5113] Bluetooth: hci0: command tx timeout
[  128.178028][   T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  128.188491][   T46] Workqueue: netns cleanup_net
[  128.193390][   T46] RIP: 0010:refcount_warn_saturate+0x13a/0x1d0
[  128.199594][   T46] Code: 80 9f 1f 8c e8 a7 f1 a8 fc 90 0f 0b 90 90 eb b9 e8 0b c3 e6 fc c6 05 a8 6e e8 0a 01 90 48 c7 c7 e0 9f 1f 8c e8 87 f1 a8 fc 90 <0f> 0b 90 90 eb 99 e8 eb c2 e6 fc c6 05 89 6e e8 0a 01 90 48 c7 c7
[  128.219347][   T46] RSP: 0018:ffffc90000b673a0 EFLAGS: 00010246
[  128.225681][   T46] RAX: aeacbc3fb5d60300 RBX: ffff88801829263c RCX: ffff88801b2a9e00
[  128.233690][ T6891] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  128.243677][   T46] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  128.251774][   T46] RBP: 0000000000000002 R08: ffffffff815847a2 R09: 1ffff110172a519a
2024/06/04 20:08:19 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  128.261714][   T46] R10: dffffc0000000000 R11: ffffed10172a519b R12: ffffffffffffffff
[  128.269757][   T46] R13: ffff88807e1ed000 R14: ffff88801829263c R15: dffffc0000000000
[  128.278482][   T46] FS:  0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[  128.287568][   T46] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  128.294335][   T46] CR2: 00007f7820726ff8 CR3: 000000001e5ca000 CR4: 00000000003506f0
[  128.302429][   T46] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  128.310440][   T46] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  128.318594][   T46] Call Trace:
[  128.322276][   T46]  <TASK>
[  128.325232][   T46]  ? __warn+0x163/0x4e0
[  128.329418][   T46]  ? refcount_warn_saturate+0x13a/0x1d0
[  128.335300][   T46]  ? report_bug+0x2b3/0x500
[  128.339937][   T46]  ? refcount_warn_saturate+0x13a/0x1d0
[  128.345673][   T46]  ? handle_bug+0x3e/0x70
[  128.350048][   T46]  ? exc_invalid_op+0x1a/0x50
[  128.354918][   T46]  ? asm_exc_invalid_op+0x1a/0x20
[  128.359993][   T46]  ? __warn_printk+0x292/0x360
[  128.365629][   T46]  ? refcount_warn_saturate+0x13a/0x1d0
[  128.372318][   T46]  nsim_fib_event_nb+0xee9/0x10b0
[  128.377414][   T46]  call_fib_notifier+0x42/0x70
[  128.382278][   T46]  fib_notify+0x445/0x780
[  128.386666][   T46]  ? __pfx_fib_notify+0x10/0x10
[  128.391627][   T46]  register_fib_notifier+0x182/0x370
[  128.396999][   T46]  ? register_fib_notifier+0x63/0x370
[  128.402505][   T46]  ? __pfx_nsim_fib_dump_inconsistent+0x10/0x10
[  128.408804][   T46]  nsim_fib_create+0x902/0xa70
[  128.413782][   T46]  ? __pfx_nsim_fib_create+0x10/0x10
[  128.419126][   T46]  nsim_dev_reload_up+0x3d1/0x8e0
[  128.424248][   T46]  ? lockdep_hardirqs_on+0x99/0x150
[  128.429506][   T46]  ? __pfx_nsim_dev_reload_up+0x10/0x10
[  128.435174][   T46]  ? __pfx___sanitizer_cov_trace_pc+0x10/0x10
[  128.441388][   T46]  devlink_reload+0x478/0x870
[  128.446125][   T46]  ? __pfx_devlink_reload+0x10/0x10
[  128.451468][   T46]  devlink_pernet_pre_exit+0x1f3/0x440
[  128.457083][   T46]  ? __pfx_devlink_pernet_pre_exit+0x10/0x10
[  128.463625][   T46]  ? class_remove_file_ns+0x121/0x160
[  128.469067][   T46]  cleanup_net+0x615/0xcc0
[  128.474447][   T46]  ? __pfx_cleanup_net+0x10/0x10
[  128.479468][   T46]  ? process_scheduled_works+0x945/0x1830
[  128.485646][   T46]  process_scheduled_works+0xa2c/0x1830
[  128.491820][   T46]  ? __pfx_process_scheduled_works+0x10/0x10
[  128.497959][   T46]  ? assign_work+0x364/0x3d0
[  128.502917][   T46]  worker_thread+0x86d/0xd70
[  128.507569][   T46]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  128.513585][   T46]  ? __kthread_parkme+0x169/0x1d0
[  128.518658][   T46]  ? __pfx_worker_thread+0x10/0x10
[  128.523889][   T46]  kthread+0x2f0/0x390
[  128.527999][   T46]  ? __pfx_worker_thread+0x10/0x10
[  128.533190][   T46]  ? __pfx_kthread+0x10/0x10
[  128.537825][   T46]  ret_from_fork+0x4b/0x80
[  128.542341][   T46]  ? __pfx_kthread+0x10/0x10
[  128.546968][   T46]  ret_from_fork_asm+0x1a/0x30
[  128.551872][   T46]  </TASK>
[  128.554923][   T46] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  128.562225][   T46] CPU: 1 PID: 46 Comm: kworker/u8:3 Not tainted 6.10.0-rc1-syzkaller-00260-g2b438c5774cc #0
[  128.572315][   T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  128.582396][   T46] Workqueue: netns cleanup_net
[  128.587180][   T46] Call Trace:
[  128.590455][   T46]  <TASK>
[  128.593383][   T46]  dump_stack_lvl+0x241/0x360
[  128.598063][   T46]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.603255][   T46]  ? __pfx__printk+0x10/0x10
[  128.607846][   T46]  ? vscnprintf+0x5d/0x90
[  128.612173][   T46]  panic+0x349/0x860
[  128.616065][   T46]  ? __warn+0x172/0x4e0
[  128.620217][   T46]  ? __pfx_panic+0x10/0x10
[  128.624637][   T46]  ? ret_from_fork_asm+0x1a/0x30
[  128.629583][   T46]  __warn+0x346/0x4e0
[  128.633567][   T46]  ? refcount_warn_saturate+0x13a/0x1d0
[  128.639113][   T46]  report_bug+0x2b3/0x500
[  128.643440][   T46]  ? refcount_warn_saturate+0x13a/0x1d0
[  128.648994][   T46]  handle_bug+0x3e/0x70
[  128.653159][   T46]  exc_invalid_op+0x1a/0x50
[  128.657665][   T46]  asm_exc_invalid_op+0x1a/0x20
[  128.662518][   T46] RIP: 0010:refcount_warn_saturate+0x13a/0x1d0
[  128.668677][   T46] Code: 80 9f 1f 8c e8 a7 f1 a8 fc 90 0f 0b 90 90 eb b9 e8 0b c3 e6 fc c6 05 a8 6e e8 0a 01 90 48 c7 c7 e0 9f 1f 8c e8 87 f1 a8 fc 90 <0f> 0b 90 90 eb 99 e8 eb c2 e6 fc c6 05 89 6e e8 0a 01 90 48 c7 c7
[  128.688287][   T46] RSP: 0018:ffffc90000b673a0 EFLAGS: 00010246
[  128.694359][   T46] RAX: aeacbc3fb5d60300 RBX: ffff88801829263c RCX: ffff88801b2a9e00
[  128.702335][   T46] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  128.710298][   T46] RBP: 0000000000000002 R08: ffffffff815847a2 R09: 1ffff110172a519a
[  128.718262][   T46] R10: dffffc0000000000 R11: ffffed10172a519b R12: ffffffffffffffff
[  128.726236][   T46] R13: ffff88807e1ed000 R14: ffff88801829263c R15: dffffc0000000000
[  128.734214][   T46]  ? __warn_printk+0x292/0x360
[  128.738998][   T46]  nsim_fib_event_nb+0xee9/0x10b0
[  128.744030][   T46]  call_fib_notifier+0x42/0x70
[  128.748797][   T46]  fib_notify+0x445/0x780
[  128.753132][   T46]  ? __pfx_fib_notify+0x10/0x10
[  128.758081][   T46]  register_fib_notifier+0x182/0x370
[  128.763361][   T46]  ? register_fib_notifier+0x63/0x370
[  128.768735][   T46]  ? __pfx_nsim_fib_dump_inconsistent+0x10/0x10
[  128.774988][   T46]  nsim_fib_create+0x902/0xa70
[  128.779773][   T46]  ? __pfx_nsim_fib_create+0x10/0x10
[  128.785106][   T46]  nsim_dev_reload_up+0x3d1/0x8e0
[  128.790149][   T46]  ? lockdep_hardirqs_on+0x99/0x150
[  128.795468][   T46]  ? __pfx_nsim_dev_reload_up+0x10/0x10
[  128.801030][   T46]  ? __pfx___sanitizer_cov_trace_pc+0x10/0x10
[  128.807100][   T46]  devlink_reload+0x478/0x870
[  128.811779][   T46]  ? __pfx_devlink_reload+0x10/0x10
[  128.816986][   T46]  devlink_pernet_pre_exit+0x1f3/0x440
[  128.822472][   T46]  ? __pfx_devlink_pernet_pre_exit+0x10/0x10
[  128.828467][   T46]  ? class_remove_file_ns+0x121/0x160
[  128.833841][   T46]  cleanup_net+0x615/0xcc0
[  128.838260][   T46]  ? __pfx_cleanup_net+0x10/0x10
[  128.843204][   T46]  ? process_scheduled_works+0x945/0x1830
[  128.848917][   T46]  process_scheduled_works+0xa2c/0x1830
[  128.854484][   T46]  ? __pfx_process_scheduled_works+0x10/0x10
[  128.861248][   T46]  ? assign_work+0x364/0x3d0
[  128.865836][   T46]  worker_thread+0x86d/0xd70
[  128.870427][   T46]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  128.876323][   T46]  ? __kthread_parkme+0x169/0x1d0
[  128.881353][   T46]  ? __pfx_worker_thread+0x10/0x10
[  128.886463][   T46]  kthread+0x2f0/0x390
[  128.890538][   T46]  ? __pfx_worker_thread+0x10/0x10
[  128.895644][   T46]  ? __pfx_kthread+0x10/0x10
[  128.900228][   T46]  ret_from_fork+0x4b/0x80
[  128.904643][   T46]  ? __pfx_kthread+0x10/0x10
[  128.909234][   T46]  ret_from_fork_asm+0x1a/0x30
[  128.914020][   T46]  </TASK>
[  128.917305][   T46] Kernel Offset: disabled
[  128.921702][   T46] Rebooting in 86400 seconds..