last executing test programs:

1m47.012620301s ago: executing program 1 (id=1925):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x29, 0xd331901ad520fcb4, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0)
recvmmsg$unix(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000001140)=@ethtool_modinfo={0x42, 0x6, 0xfffffff9}})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xf0a}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000002000010000000002000000000000b1d2bca5682ae5af82001a0000000c000c"], 0x28}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904021d006a04000000e8fe55a1180015000600142603600e120900040000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

1m32.503920562s ago: executing program 2 (id=2287):
r0 = socket$kcm(0x10, 0x7, 0x10) (async)
r1 = socket$inet6(0xa, 0x6, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a540000d90200000100000480240001800b000100736f636b65740000140002800800023f00000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x10) (async)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) (async)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x130, 0xffffff80, 0x178, 0x0, 0x178, 0x2b0, 0x258, 0x230, 0x2b0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0xf8, 0x130, 0x340, {0x1e0002a8, 0x7203000000000000}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@pkttype={{0x28}, {0x7, 0x2}}]}, @common=@inet=@SET3={0x38}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'nr0\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [], 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x1, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000000)={0x40}, 0x4) (async)
listen(r3, 0x401)
sendto$inet6(r3, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async)
write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x88ca}, @val={0x3, 0x3, 0x7, 0x7fff, 0x2, 0x8}, @ipv4=@udp={{0x10, 0x4, 0x1, 0x2e, 0x104, 0x68, 0x0, 0xbc, 0x11, 0x0, @local, @remote, {[@timestamp_addr={0x44, 0x1c, 0x8e, 0x1, 0xa, [{@multicast1, 0x401}, {@private=0xa010101, 0x6}, {@multicast1, 0xf}]}, @generic={0x44, 0xd, "f5f8c7a7da7c218f719c9c"}]}}, {0x4e22, 0x4e24, 0xc4, 0x0, @opaque="f85dca0ac171ea6c22ea3ea28341048c3ada75a310ab3191edc84726dc008b5f21890f8119e325fb0ddf9d9a85c4da14105f973f32a1af64be5dcbb31677d1dae0e9b87304f894bc0e3e0d8e202433caf85369b0341b327f44507c664e72c51c25f64acb644285c2925566225f31aa553a0a333d4592b0b3cbe45637b41113f2c818756667359a9147969a7ecb3d99e5a04b022dbc88027ca7739189d72a6fe696963e7dfc9aec9beec72428baef3be78e423f369a654675642f28f9"}}}, 0x112)

1m31.437792987s ago: executing program 1 (id=1925):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x29, 0xd331901ad520fcb4, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0)
recvmmsg$unix(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000001140)=@ethtool_modinfo={0x42, 0x6, 0xfffffff9}})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xf0a}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000002000010000000002000000000000b1d2bca5682ae5af82001a0000000c000c"], 0x28}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904021d006a04000000e8fe55a1180015000600142603600e120900040000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

1m30.124918914s ago: executing program 4 (id=1273):
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc800}, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000000)) (async)
getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0)
bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async)
bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x48212b8952c3affd, 0x70bd2a, 0xffffffff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7d}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c045}, 0x0)

1m18.169634348s ago: executing program 0 (id=2754):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8}]}}}]}, 0x3c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1015}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x220}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x0) (async)
r4 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x20044020}, 0x400c804) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @handle=@pci={{0x8}, {0x11}}]}, 0x3c}}, 0x480d0) (async)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x30, 0x0, &(0x7f00000000c0)) (async)
sendmsg$nl_crypto(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)

1m18.036417734s ago: executing program 0 (id=2755):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r2, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_COMPAT_NAME={0xd, 0x1, 'threaded\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {}, {0x5, 0xffe0}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x1c}}}, 0x24}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001", 0x21)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETLINK(r5, 0x400454cd, 0x10e)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r6, 0x0, 0xd0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='afs_sent_data\x00', r8}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

1m15.066652064s ago: executing program 2 (id=2287):
r0 = socket$kcm(0x10, 0x7, 0x10) (async)
r1 = socket$inet6(0xa, 0x6, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a540000d90200000100000480240001800b000100736f636b65740000140002800800023f00000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x10) (async)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) (async)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x130, 0xffffff80, 0x178, 0x0, 0x178, 0x2b0, 0x258, 0x230, 0x2b0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0xf8, 0x130, 0x340, {0x1e0002a8, 0x7203000000000000}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@pkttype={{0x28}, {0x7, 0x2}}]}, @common=@inet=@SET3={0x38}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'nr0\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [], 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x1, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000000)={0x40}, 0x4) (async)
listen(r3, 0x401)
sendto$inet6(r3, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async)
write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x88ca}, @val={0x3, 0x3, 0x7, 0x7fff, 0x2, 0x8}, @ipv4=@udp={{0x10, 0x4, 0x1, 0x2e, 0x104, 0x68, 0x0, 0xbc, 0x11, 0x0, @local, @remote, {[@timestamp_addr={0x44, 0x1c, 0x8e, 0x1, 0xa, [{@multicast1, 0x401}, {@private=0xa010101, 0x6}, {@multicast1, 0xf}]}, @generic={0x44, 0xd, "f5f8c7a7da7c218f719c9c"}]}}, {0x4e22, 0x4e24, 0xc4, 0x0, @opaque="f85dca0ac171ea6c22ea3ea28341048c3ada75a310ab3191edc84726dc008b5f21890f8119e325fb0ddf9d9a85c4da14105f973f32a1af64be5dcbb31677d1dae0e9b87304f894bc0e3e0d8e202433caf85369b0341b327f44507c664e72c51c25f64acb644285c2925566225f31aa553a0a333d4592b0b3cbe45637b41113f2c818756667359a9147969a7ecb3d99e5a04b022dbc88027ca7739189d72a6fe696963e7dfc9aec9beec72428baef3be78e423f369a654675642f28f9"}}}, 0x112)

1m13.916870483s ago: executing program 4 (id=1273):
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc800}, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000000)) (async)
getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0)
bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async)
bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x48212b8952c3affd, 0x70bd2a, 0xffffffff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7d}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c045}, 0x0)

1m10.294922495s ago: executing program 1 (id=1925):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x29, 0xd331901ad520fcb4, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0)
recvmmsg$unix(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000001140)=@ethtool_modinfo={0x42, 0x6, 0xfffffff9}})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xf0a}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000002000010000000002000000000000b1d2bca5682ae5af82001a0000000c000c"], 0x28}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904021d006a04000000e8fe55a1180015000600142603600e120900040000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

1m5.595315237s ago: executing program 0 (id=2755):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r2, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_COMPAT_NAME={0xd, 0x1, 'threaded\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {}, {0x5, 0xffe0}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x1c}}}, 0x24}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001", 0x21)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETLINK(r5, 0x400454cd, 0x10e)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r6, 0x0, 0xd0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='afs_sent_data\x00', r8}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

56.560758177s ago: executing program 2 (id=2287):
r0 = socket$kcm(0x10, 0x7, 0x10) (async)
r1 = socket$inet6(0xa, 0x6, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a540000d90200000100000480240001800b000100736f636b65740000140002800800023f00000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x10) (async)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) (async)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x130, 0xffffff80, 0x178, 0x0, 0x178, 0x2b0, 0x258, 0x230, 0x2b0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0xf8, 0x130, 0x340, {0x1e0002a8, 0x7203000000000000}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@pkttype={{0x28}, {0x7, 0x2}}]}, @common=@inet=@SET3={0x38}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'nr0\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [], 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x1, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000000)={0x40}, 0x4) (async)
listen(r3, 0x401)
sendto$inet6(r3, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async)
write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x88ca}, @val={0x3, 0x3, 0x7, 0x7fff, 0x2, 0x8}, @ipv4=@udp={{0x10, 0x4, 0x1, 0x2e, 0x104, 0x68, 0x0, 0xbc, 0x11, 0x0, @local, @remote, {[@timestamp_addr={0x44, 0x1c, 0x8e, 0x1, 0xa, [{@multicast1, 0x401}, {@private=0xa010101, 0x6}, {@multicast1, 0xf}]}, @generic={0x44, 0xd, "f5f8c7a7da7c218f719c9c"}]}}, {0x4e22, 0x4e24, 0xc4, 0x0, @opaque="f85dca0ac171ea6c22ea3ea28341048c3ada75a310ab3191edc84726dc008b5f21890f8119e325fb0ddf9d9a85c4da14105f973f32a1af64be5dcbb31677d1dae0e9b87304f894bc0e3e0d8e202433caf85369b0341b327f44507c664e72c51c25f64acb644285c2925566225f31aa553a0a333d4592b0b3cbe45637b41113f2c818756667359a9147969a7ecb3d99e5a04b022dbc88027ca7739189d72a6fe696963e7dfc9aec9beec72428baef3be78e423f369a654675642f28f9"}}}, 0x112)

53.971049136s ago: executing program 4 (id=1273):
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc800}, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000000)) (async)
getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0)
bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async)
bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x48212b8952c3affd, 0x70bd2a, 0xffffffff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7d}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c045}, 0x0)

51.760563917s ago: executing program 1 (id=1925):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x29, 0xd331901ad520fcb4, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0)
recvmmsg$unix(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000001140)=@ethtool_modinfo={0x42, 0x6, 0xfffffff9}})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xf0a}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000002000010000000002000000000000b1d2bca5682ae5af82001a0000000c000c"], 0x28}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904021d006a04000000e8fe55a1180015000600142603600e120900040000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

50.052931323s ago: executing program 0 (id=2755):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r2, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_COMPAT_NAME={0xd, 0x1, 'threaded\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {}, {0x5, 0xffe0}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x1c}}}, 0x24}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001", 0x21)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETLINK(r5, 0x400454cd, 0x10e)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r6, 0x0, 0xd0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='afs_sent_data\x00', r8}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

38.818952541s ago: executing program 2 (id=2287):
r0 = socket$kcm(0x10, 0x7, 0x10) (async)
r1 = socket$inet6(0xa, 0x6, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a540000d90200000100000480240001800b000100736f636b65740000140002800800023f00000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x10) (async)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) (async)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x130, 0xffffff80, 0x178, 0x0, 0x178, 0x2b0, 0x258, 0x230, 0x2b0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0xf8, 0x130, 0x340, {0x1e0002a8, 0x7203000000000000}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@pkttype={{0x28}, {0x7, 0x2}}]}, @common=@inet=@SET3={0x38}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'nr0\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [], 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x1, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000000)={0x40}, 0x4) (async)
listen(r3, 0x401)
sendto$inet6(r3, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async)
write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x88ca}, @val={0x3, 0x3, 0x7, 0x7fff, 0x2, 0x8}, @ipv4=@udp={{0x10, 0x4, 0x1, 0x2e, 0x104, 0x68, 0x0, 0xbc, 0x11, 0x0, @local, @remote, {[@timestamp_addr={0x44, 0x1c, 0x8e, 0x1, 0xa, [{@multicast1, 0x401}, {@private=0xa010101, 0x6}, {@multicast1, 0xf}]}, @generic={0x44, 0xd, "f5f8c7a7da7c218f719c9c"}]}}, {0x4e22, 0x4e24, 0xc4, 0x0, @opaque="f85dca0ac171ea6c22ea3ea28341048c3ada75a310ab3191edc84726dc008b5f21890f8119e325fb0ddf9d9a85c4da14105f973f32a1af64be5dcbb31677d1dae0e9b87304f894bc0e3e0d8e202433caf85369b0341b327f44507c664e72c51c25f64acb644285c2925566225f31aa553a0a333d4592b0b3cbe45637b41113f2c818756667359a9147969a7ecb3d99e5a04b022dbc88027ca7739189d72a6fe696963e7dfc9aec9beec72428baef3be78e423f369a654675642f28f9"}}}, 0x112)

34.320412047s ago: executing program 4 (id=1273):
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc800}, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000000)) (async)
getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0)
bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async)
bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x48212b8952c3affd, 0x70bd2a, 0xffffffff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7d}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c045}, 0x0)

34.308569311s ago: executing program 1 (id=1925):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x29, 0xd331901ad520fcb4, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0)
recvmmsg$unix(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000001140)=@ethtool_modinfo={0x42, 0x6, 0xfffffff9}})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xf0a}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000002000010000000002000000000000b1d2bca5682ae5af82001a0000000c000c"], 0x28}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904021d006a04000000e8fe55a1180015000600142603600e120900040000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

33.44460144s ago: executing program 0 (id=2755):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r2, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_COMPAT_NAME={0xd, 0x1, 'threaded\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {}, {0x5, 0xffe0}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x1c}}}, 0x24}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001", 0x21)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETLINK(r5, 0x400454cd, 0x10e)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r6, 0x0, 0xd0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='afs_sent_data\x00', r8}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

20.055124776s ago: executing program 2 (id=2287):
r0 = socket$kcm(0x10, 0x7, 0x10) (async)
r1 = socket$inet6(0xa, 0x6, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a540000d90200000100000480240001800b000100736f636b65740000140002800800023f00000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x10) (async)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) (async)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x130, 0xffffff80, 0x178, 0x0, 0x178, 0x2b0, 0x258, 0x230, 0x2b0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0xf8, 0x130, 0x340, {0x1e0002a8, 0x7203000000000000}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@pkttype={{0x28}, {0x7, 0x2}}]}, @common=@inet=@SET3={0x38}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'nr0\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [], 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x1, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000000)={0x40}, 0x4) (async)
listen(r3, 0x401)
sendto$inet6(r3, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async)
write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x88ca}, @val={0x3, 0x3, 0x7, 0x7fff, 0x2, 0x8}, @ipv4=@udp={{0x10, 0x4, 0x1, 0x2e, 0x104, 0x68, 0x0, 0xbc, 0x11, 0x0, @local, @remote, {[@timestamp_addr={0x44, 0x1c, 0x8e, 0x1, 0xa, [{@multicast1, 0x401}, {@private=0xa010101, 0x6}, {@multicast1, 0xf}]}, @generic={0x44, 0xd, "f5f8c7a7da7c218f719c9c"}]}}, {0x4e22, 0x4e24, 0xc4, 0x0, @opaque="f85dca0ac171ea6c22ea3ea28341048c3ada75a310ab3191edc84726dc008b5f21890f8119e325fb0ddf9d9a85c4da14105f973f32a1af64be5dcbb31677d1dae0e9b87304f894bc0e3e0d8e202433caf85369b0341b327f44507c664e72c51c25f64acb644285c2925566225f31aa553a0a333d4592b0b3cbe45637b41113f2c818756667359a9147969a7ecb3d99e5a04b022dbc88027ca7739189d72a6fe696963e7dfc9aec9beec72428baef3be78e423f369a654675642f28f9"}}}, 0x112)

17.802135827s ago: executing program 4 (id=1273):
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc800}, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000000)) (async)
getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0)
bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async)
bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x48212b8952c3affd, 0x70bd2a, 0xffffffff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7d}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c045}, 0x0)

15.631440239s ago: executing program 0 (id=2755):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r2, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_COMPAT_NAME={0xd, 0x1, 'threaded\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {}, {0x5, 0xffe0}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x1c}}}, 0x24}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001", 0x21)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETLINK(r5, 0x400454cd, 0x10e)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r6, 0x0, 0xd0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='afs_sent_data\x00', r8}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

14.831451562s ago: executing program 1 (id=1925):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x29, 0xd331901ad520fcb4, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0)
recvmmsg$unix(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000001140)=@ethtool_modinfo={0x42, 0x6, 0xfffffff9}})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xf0a}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000002000010000000002000000000000b1d2bca5682ae5af82001a0000000c000c"], 0x28}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904021d006a04000000e8fe55a1180015000600142603600e120900040000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

2.341293105s ago: executing program 3 (id=2911):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2)

2.170283764s ago: executing program 3 (id=2912):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000080)={0x3b, @loopback, 0x4e24, 0x4, 'wlc\x00', 0x2, 0x7, 0x59}, 0x2c)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x26}}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000300)={<r2=>0xffffffffffffffff, 0x6, 0x2, 0x3})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x3, &(0x7f0000000340)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x79, 0x10, 0x28, 0x8000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f00000000c0)=""/211, 0x0, 0x2, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0xfffffffe}, 0x12, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.98478002s ago: executing program 3 (id=2913):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) (async)

1.7745186s ago: executing program 3 (id=2914):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x14, r2, 0x31f, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000002140)={'wg2\x00', <r4=>0x0})
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@RTM_GETMDB={0x18, 0x56, 0x7033cc9f131490dd, 0x70bd2b, 0x25dfdbfe, {0x7, r4}}, 0x18}}, 0x0)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x11c, r6, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x54, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a2d2514}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x578cd06d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b958a79}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d899ad0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26305a72}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}]}, {0x4}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x48, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b1ad271}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10000ea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c4a96e1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7828cf70}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000081)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r7 = socket(0x10, 0x803, 0x0)
sendto(r7, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000000fc0)=""/4096, 0x564}, {&(0x7f0000000400)=""/106, 0x14}, {&(0x7f0000000740)=""/73, 0x60}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x2, &(0x7f0000003700)={0x77359400})
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r7, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x30, r8, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x804)
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000001c0)="48000000140081fb7059ff00000004000aff0f030000038130216266c808222e40d6ee11000000006fabca1b4e7d06a6bd7cf750375ed08a562ad6e74703c48f93b82a0200000046", 0x48}], 0x1}, 0x10004000)
recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/197, 0xc5}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000002b80)=""/4108, 0x100c}, {&(0x7f0000000100)=""/74, 0x4a}, {&(0x7f00000005c0)=""/273, 0x111}], 0x5}, 0x80000000}], 0x4, 0x20, 0x0)

1.531562395s ago: executing program 2 (id=2287):
r0 = socket$kcm(0x10, 0x7, 0x10) (async)
r1 = socket$inet6(0xa, 0x6, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a540000d90200000100000480240001800b000100736f636b65740000140002800800023f00000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x10) (async)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) (async)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x130, 0xffffff80, 0x178, 0x0, 0x178, 0x2b0, 0x258, 0x230, 0x2b0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0xf8, 0x130, 0x340, {0x1e0002a8, 0x7203000000000000}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@pkttype={{0x28}, {0x7, 0x2}}]}, @common=@inet=@SET3={0x38}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'nr0\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [], 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x1, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000000)={0x40}, 0x4) (async)
listen(r3, 0x401)
sendto$inet6(r3, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async)
write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x88ca}, @val={0x3, 0x3, 0x7, 0x7fff, 0x2, 0x8}, @ipv4=@udp={{0x10, 0x4, 0x1, 0x2e, 0x104, 0x68, 0x0, 0xbc, 0x11, 0x0, @local, @remote, {[@timestamp_addr={0x44, 0x1c, 0x8e, 0x1, 0xa, [{@multicast1, 0x401}, {@private=0xa010101, 0x6}, {@multicast1, 0xf}]}, @generic={0x44, 0xd, "f5f8c7a7da7c218f719c9c"}]}}, {0x4e22, 0x4e24, 0xc4, 0x0, @opaque="f85dca0ac171ea6c22ea3ea28341048c3ada75a310ab3191edc84726dc008b5f21890f8119e325fb0ddf9d9a85c4da14105f973f32a1af64be5dcbb31677d1dae0e9b87304f894bc0e3e0d8e202433caf85369b0341b327f44507c664e72c51c25f64acb644285c2925566225f31aa553a0a333d4592b0b3cbe45637b41113f2c818756667359a9147969a7ecb3d99e5a04b022dbc88027ca7739189d72a6fe696963e7dfc9aec9beec72428baef3be78e423f369a654675642f28f9"}}}, 0x112)

1.488275142s ago: executing program 3 (id=2915):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000900030073797a32"], 0x80}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4)
sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="100000000000000000000060070000005c000000000000000000000007"], 0x70}}], 0x1, 0x24c)

626.477µs ago: executing program 3 (id=2916):
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000300)=ANY=[@ANYBLOB="00000200aaaaaa"])
close(r6)
socket(0x400000000010, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000008000a0000000000060002000000000014001f000000000000000000000000000000000008001700"], 0x58}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @target={{0xb}, @void}}]}], {0x14, 0x10}}, 0x9c}}, 0x0)

0s ago: executing program 4 (id=1273):
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc800}, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000000)) (async)
getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0)
bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async)
bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x48212b8952c3affd, 0x70bd2a, 0xffffffff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7d}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c045}, 0x0)

kernel console output (not intermixed with test programs):

29][T15622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.341316][T15622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  408.363439][T15622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.383883][T15622] batman_adv: batadv0: Interface activated: batadv_slave_0
[  408.423298][ T5853] Bluetooth: hci2: command tx timeout
[  408.440482][T15622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.457548][T15622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.468445][T15622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.479703][T15622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.490600][T15622] batman_adv: batadv0: Interface activated: batadv_slave_1
[  408.540846][T15622] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  408.563210][T15622] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  408.571967][T15622] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  408.593283][T15622] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  408.692156][T15837] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  408.706394][T15837] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  408.717551][T15837] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  408.762817][T15837] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  409.001167][ T7707] hsr_slave_0: left promiscuous mode
[  409.008586][ T7707] hsr_slave_1: left promiscuous mode
[  409.015165][ T7707] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  409.024958][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_0
[  409.064375][ T7707] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  409.071868][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_1
[  409.135139][ T7707] veth1_macvtap: left promiscuous mode
[  409.140706][ T7707] veth0_macvtap: left promiscuous mode
[  409.150255][T15897] netlink: 'syz.3.2768': attribute type 10 has an invalid length.
[  409.163073][ T7707] veth1_vlan: left promiscuous mode
[  409.168410][ T7707] veth0_vlan: left promiscuous mode
[  409.414462][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  409.435285][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  409.445255][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  409.455912][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  409.464722][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  409.472072][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  409.789154][ T7707] team0 (unregistering): Port device team_slave_1 removed
[  409.832393][ T7707] team0 (unregistering): Port device team_slave_0 removed
[  410.105652][ T5853] Bluetooth: hci0: command tx timeout
[  410.270982][T15896] 
: (slave wlan1): Releasing backup interface
[  410.309166][T15897] 
: (slave wlan1): Enslaving as an active interface with an up link
[  410.368735][ T7700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.368763][ T7700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  410.481357][ T6032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.508763][ T5853] Bluetooth: hci2: command tx timeout
[  410.518746][ T6032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  410.596337][T15837] 8021q: adding VLAN 0 to HW filter on device bond0
[  410.666359][T15837] 8021q: adding VLAN 0 to HW filter on device team0
[  410.699968][T15891] chnl_net:caif_netlink_parms(): no params data found
[  410.818358][T15909] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2770'.
[  410.849162][T14408] hid (null): unknown global tag 0xe
[  410.924049][ T7700] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.931185][ T7700] bridge0: port 1(bridge_slave_0) entered forwarding state
[  410.954390][ T7700] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.961465][ T7700] bridge0: port 2(bridge_slave_1) entered forwarding state
[  411.010113][T15837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  411.043648][T15837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  411.087511][T15916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2771'.
[  411.183314][T15891] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.225757][T15891] bridge0: port 1(bridge_slave_0) entered disabled state
[  411.233404][T15891] bridge_slave_0: entered allmulticast mode
[  411.240573][T15891] bridge_slave_0: entered promiscuous mode
[  411.274451][T15891] bridge0: port 2(bridge_slave_1) entered blocking state
[  411.281584][T15891] bridge0: port 2(bridge_slave_1) entered disabled state
[  411.303064][T15891] bridge_slave_1: entered allmulticast mode
[  411.310313][T15891] bridge_slave_1: entered promiscuous mode
[  411.450599][T15891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  411.485229][T15891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  411.543864][ T5853] Bluetooth: hci4: command tx timeout
[  411.575828][ T7707] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.657996][T15891] team0: Port device team_slave_0 added
[  411.734661][ T7707] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.751937][T15891] team0: Port device team_slave_1 added
[  411.839235][T15891] batman_adv: batadv0: Adding interface: batadv_slave_0
[  411.846538][T15891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  411.873052][T15891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  411.897256][T15891] batman_adv: batadv0: Adding interface: batadv_slave_1
[  411.904507][T15891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  411.931959][T15891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  411.954553][T15837] 8021q: adding VLAN 0 to HW filter on device batadv0
[  411.967079][T15900] chnl_net:caif_netlink_parms(): no params data found
[  412.007952][ T7707] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.162739][ T7707] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.183080][ T5853] Bluetooth: hci0: command tx timeout
[  412.201393][T15891] hsr_slave_0: entered promiscuous mode
[  412.218162][T15891] hsr_slave_1: entered promiscuous mode
[  412.242244][T15837] veth0_vlan: entered promiscuous mode
[  412.259385][T15837] veth1_vlan: entered promiscuous mode
[  412.271030][T14408] hid-generic 0005:046D:0A0F.0003: unknown global tag 0xe
[  412.282120][T14408] hid-generic 0005:046D:0A0F.0003: item 0 2 1 14 parsing failed
[  412.291804][T14408] hid-generic 0005:046D:0A0F.0003: probe with driver hid-generic failed with error -22
[  412.363906][T15900] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.371256][T15900] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.378826][T15900] bridge_slave_0: entered allmulticast mode
[  412.388160][T15900] bridge_slave_0: entered promiscuous mode
[  412.397152][T15900] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.404435][T15900] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.411652][T15900] bridge_slave_1: entered allmulticast mode
[  412.419348][T15900] bridge_slave_1: entered promiscuous mode
[  412.464439][T15837] veth0_macvtap: entered promiscuous mode
[  412.494587][T15900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  412.519350][T15900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  412.545500][T15837] veth1_macvtap: entered promiscuous mode
[  412.583496][ T5853] Bluetooth: hci2: command tx timeout
[  412.605705][T15900] team0: Port device team_slave_0 added
[  412.650685][ T7707] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.672027][T15837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  412.683854][T15837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  412.694247][T15837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  412.705303][T15837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  412.716602][T15837] batman_adv: batadv0: Interface activated: batadv_slave_0
[  412.727798][T15837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  412.762942][T15837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  412.782889][T15837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  412.803271][T15837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  412.824692][T15837] batman_adv: batadv0: Interface activated: batadv_slave_1
[  412.846490][T15900] team0: Port device team_slave_1 added
[  412.961504][ T7707] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.053681][T15837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  413.062436][T15837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  413.082768][T15837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  413.091504][T15837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  413.123415][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  413.134126][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  413.142623][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  413.159675][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  413.169748][ T5837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  413.178732][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  413.194553][T15900] batman_adv: batadv0: Adding interface: batadv_slave_0
[  413.202904][T15900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  413.242561][T15900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  413.256353][T15900] batman_adv: batadv0: Adding interface: batadv_slave_1
[  413.263745][T15900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  413.289904][T15900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  413.332425][ T7707] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.428432][ T7707] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.518750][T15900] hsr_slave_0: entered promiscuous mode
[  413.538104][T15900] hsr_slave_1: entered promiscuous mode
[  413.554647][T15900] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  413.565562][T15900] Cannot create hsr debugfs directory
[  413.623069][ T5837] Bluetooth: hci4: command tx timeout
[  413.804240][ T7707] bridge_slave_1: left allmulticast mode
[  413.810171][ T7707] bridge_slave_1: left promiscuous mode
[  413.816535][ T7707] bridge0: port 2(bridge_slave_1) entered disabled state
[  413.831556][ T7707] bridge_slave_0: left allmulticast mode
[  413.837795][ T7707] bridge_slave_0: left promiscuous mode
[  413.844161][ T7707] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.861669][ T7707] bridge_slave_1: left allmulticast mode
[  413.868324][ T7707] bridge_slave_1: left promiscuous mode
[  413.885359][ T7707] bridge0: port 2(bridge_slave_1) entered disabled state
[  413.905926][ T7707] bridge_slave_0: left allmulticast mode
[  413.916636][ T7707] bridge_slave_0: left promiscuous mode
[  413.929126][ T7707] bridge0: port 1(bridge_slave_0) entered disabled state
[  414.262933][ T5837] Bluetooth: hci0: command tx timeout
[  414.655239][ T7707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  414.667029][ T7707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  414.679735][ T7707] bond0 (unregistering): Released all slaves
[  414.818244][ T7707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  414.829899][ T7707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  414.840178][ T7707] bond0 (unregistering): Released all slaves
[  414.986790][ T7703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.003330][ T7703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.185359][T15891] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  415.223056][ T5837] Bluetooth: hci1: command tx timeout
[  415.257762][T15955] netlink: 'syz.3.2778': attribute type 2 has an invalid length.
[  415.268243][ T7701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.288187][ T7701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.296453][T15955] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2778'.
[  415.306289][T15891] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  415.390148][T15891] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  415.443961][T15891] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  415.471365][T15958] 
: (slave wlan1): Releasing backup interface
[  415.510529][T15960] netlink: 'syz.3.2779': attribute type 10 has an invalid length.
[  415.612292][T15960] 
: (slave wlan1): Enslaving as an active interface with an up link
[  415.703859][ T5837] Bluetooth: hci4: command tx timeout
[  415.843877][T15962] 8021q: VLANs not supported on vxcan1
[  415.893050][T15934] chnl_net:caif_netlink_parms(): no params data found
[  416.246203][T15934] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.283265][T15934] bridge0: port 1(bridge_slave_0) entered disabled state
[  416.290552][T15934] bridge_slave_0: entered allmulticast mode
[  416.350468][ T5837] Bluetooth: hci0: command tx timeout
[  416.391116][T15934] bridge_slave_0: entered promiscuous mode
[  416.423059][T15934] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.441163][T15934] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.448729][T15934] bridge_slave_1: entered allmulticast mode
[  416.464145][T15934] bridge_slave_1: entered promiscuous mode
[  416.651079][T15934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  416.671524][T15900] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  416.757735][ T7707] hsr_slave_0: left promiscuous mode
[  416.783680][ T7707] hsr_slave_1: left promiscuous mode
[  416.803316][ T7707] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  416.810784][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_0
[  416.826502][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  416.836416][ T7707] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  416.846938][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  416.846948][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_1
[  416.862546][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  416.872091][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  416.879755][ T5853] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  416.887132][ T7707] hsr_slave_0: left promiscuous mode
[  416.892792][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  416.899849][ T7707] hsr_slave_1: left promiscuous mode
[  416.917993][ T7707] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  416.930324][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_0
[  416.941605][ T7707] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  416.949609][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_1
[  417.001356][ T7707] veth1_macvtap: left promiscuous mode
[  417.007166][ T7707] veth0_macvtap: left promiscuous mode
[  417.015567][ T7707] veth1_vlan: left promiscuous mode
[  417.022984][ T7707] veth0_vlan: left promiscuous mode
[  417.028991][ T7707] veth1_macvtap: left promiscuous mode
[  417.034935][ T7707] veth0_macvtap: left promiscuous mode
[  417.040495][ T7707] veth1_vlan: left promiscuous mode
[  417.047828][ T7707] veth0_vlan: left promiscuous mode
[  417.303119][ T5837] Bluetooth: hci1: command tx timeout
[  417.562483][ T7707] team0 (unregistering): Port device team_slave_1 removed
[  417.604553][ T7707] team0 (unregistering): Port device team_slave_0 removed
[  417.783060][ T5837] Bluetooth: hci4: command tx timeout
[  418.443303][ T7707] team0 (unregistering): Port device team_slave_1 removed
[  418.487433][ T7707] team0 (unregistering): Port device team_slave_0 removed
[  418.915568][T15934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  418.936137][T15900] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  418.982978][ T5837] Bluetooth: hci2: command tx timeout
[  419.033197][T15934] team0: Port device team_slave_0 added
[  419.039577][T15900] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  419.097169][T15891] 8021q: adding VLAN 0 to HW filter on device bond0
[  419.117321][T15934] team0: Port device team_slave_1 added
[  419.152407][T15900] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  419.276026][T15891] 8021q: adding VLAN 0 to HW filter on device team0
[  419.278723][T15987] SET target dimension over the limit!
[  419.304855][T15934] batman_adv: batadv0: Adding interface: batadv_slave_0
[  419.322953][T15934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  419.365454][T15934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  419.391616][ T5837] Bluetooth: hci1: command tx timeout
[  419.404847][T15934] batman_adv: batadv0: Adding interface: batadv_slave_1
[  419.411813][T15934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  419.444490][T15934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  419.496046][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.503251][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  419.566663][ T7700] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.573841][ T7700] bridge0: port 2(bridge_slave_1) entered forwarding state
[  419.654673][T15934] hsr_slave_0: entered promiscuous mode
[  419.661218][T15934] hsr_slave_1: entered promiscuous mode
[  419.670880][T15934] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  419.678766][T15934] Cannot create hsr debugfs directory
[  420.076895][T15978] chnl_net:caif_netlink_parms(): no params data found
[  420.256177][ T7707] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.310433][T15891] 8021q: adding VLAN 0 to HW filter on device batadv0
[  420.362044][T15900] 8021q: adding VLAN 0 to HW filter on device bond0
[  420.402403][ T7707] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.524385][ T7707] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.543678][T15978] bridge0: port 1(bridge_slave_0) entered blocking state
[  420.550859][T15978] bridge0: port 1(bridge_slave_0) entered disabled state
[  420.558537][T15978] bridge_slave_0: entered allmulticast mode
[  420.566470][T16018] netlink: 'syz.3.2790': attribute type 10 has an invalid length.
[  420.567305][T15978] bridge_slave_0: entered promiscuous mode
[  420.582589][T15978] bridge0: port 2(bridge_slave_1) entered blocking state
[  420.591034][T15978] bridge0: port 2(bridge_slave_1) entered disabled state
[  420.606632][T15978] bridge_slave_1: entered allmulticast mode
[  420.617041][T15978] bridge_slave_1: entered promiscuous mode
[  420.635423][T16017] 
: (slave wlan1): Releasing backup interface
[  420.658239][T15900] 8021q: adding VLAN 0 to HW filter on device team0
[  420.672199][T16018] 
: (slave wlan1): Enslaving as an active interface with an up link
[  420.707170][ T7707] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.761814][T15978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  420.795456][ T5903] bridge0: port 1(bridge_slave_0) entered blocking state
[  420.802562][ T5903] bridge0: port 1(bridge_slave_0) entered forwarding state
[  420.833795][T15978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  420.885502][T15978] team0: Port device team_slave_0 added
[  420.925231][T15891] veth0_vlan: entered promiscuous mode
[  420.933045][T15978] team0: Port device team_slave_1 added
[  420.950836][T15891] veth1_vlan: entered promiscuous mode
[  420.988016][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  420.995392][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  421.036603][T15978] batman_adv: batadv0: Adding interface: batadv_slave_0
[  421.044292][T15978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  421.071354][ T5837] Bluetooth: hci2: command tx timeout
[  421.082407][T15978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  421.095738][T15978] batman_adv: batadv0: Adding interface: batadv_slave_1
[  421.102958][T15978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  421.129804][T15978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  421.282044][T15934] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  421.318260][T15978] hsr_slave_0: entered promiscuous mode
[  421.325218][T15978] hsr_slave_1: entered promiscuous mode
[  421.332199][T15978] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  421.340365][T15978] Cannot create hsr debugfs directory
[  421.348007][ T7707] bridge_slave_1: left allmulticast mode
[  421.365912][ T7707] bridge_slave_1: left promiscuous mode
[  421.371724][ T7707] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.394033][ T7707] bridge_slave_0: left allmulticast mode
[  421.399739][ T7707] bridge_slave_0: left promiscuous mode
[  421.407169][ T7707] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.482738][ T5837] Bluetooth: hci1: command tx timeout
[  421.829711][ T7707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  421.841129][ T7707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  421.852445][ T7707] bond0 (unregistering): Released all slaves
[  421.863985][T15934] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  421.875842][T15934] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  421.929089][T15891] veth0_macvtap: entered promiscuous mode
[  421.936399][T15934] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  422.007575][T15891] veth1_macvtap: entered promiscuous mode
[  422.191697][T15891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  422.211444][T15891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.222546][T15891] batman_adv: batadv0: Interface activated: batadv_slave_0
[  422.357658][T15891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  422.379663][T15891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.425521][T15891] batman_adv: batadv0: Interface activated: batadv_slave_1
[  422.553229][T15891] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  422.562102][T15891] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  422.591788][T15891] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  422.614209][T15891] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  422.711117][ T7707] hsr_slave_0: left promiscuous mode
[  422.721897][ T7707] hsr_slave_1: left promiscuous mode
[  422.732005][ T7707] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  422.748852][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_0
[  422.763452][ T7707] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  422.771209][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_1
[  422.839472][ T7707] veth1_macvtap: left promiscuous mode
[  422.855910][ T7707] veth0_macvtap: left promiscuous mode
[  422.861567][ T7707] veth1_vlan: left promiscuous mode
[  422.875719][ T7707] veth0_vlan: left promiscuous mode
[  423.153113][ T5837] Bluetooth: hci2: command tx timeout
[  423.411774][ T7707] team0 (unregistering): Port device team_slave_1 removed
[  423.452341][ T7707] team0 (unregistering): Port device team_slave_0 removed
[  424.032544][T15900] 8021q: adding VLAN 0 to HW filter on device batadv0
[  424.122365][T15934] 8021q: adding VLAN 0 to HW filter on device bond0
[  424.165245][ T7701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.202986][ T7701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.238693][T15934] 8021q: adding VLAN 0 to HW filter on device team0
[  424.280754][ T7700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.303581][ T7700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.343586][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.350736][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  424.371268][ T6032] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.378507][ T6032] bridge0: port 2(bridge_slave_1) entered forwarding state
[  424.544187][T15978] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  424.566837][T15978] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  424.612681][T15978] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  424.625787][T15978] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  424.711900][T15934] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  424.723546][T15934] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  424.798909][T15900] veth0_vlan: entered promiscuous mode
[  424.825534][T15900] veth1_vlan: entered promiscuous mode
[  425.007834][ T5903] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.133505][ T5903] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.160778][T15934] 8021q: adding VLAN 0 to HW filter on device batadv0
[  425.179538][T15900] veth0_macvtap: entered promiscuous mode
[  425.195544][T15900] veth1_macvtap: entered promiscuous mode
[  425.222985][ T5837] Bluetooth: hci2: command tx timeout
[  425.241794][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  425.255165][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.266708][T15900] batman_adv: batadv0: Interface activated: batadv_slave_0
[  425.283220][T15978] 8021q: adding VLAN 0 to HW filter on device bond0
[  425.294947][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  425.309164][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.320427][T15900] batman_adv: batadv0: Interface activated: batadv_slave_1
[  425.358921][ T5903] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.379747][T15934] veth0_vlan: entered promiscuous mode
[  425.391492][T15900] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  425.400679][T15900] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  425.410969][T15900] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  425.419829][T15900] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  425.434070][T15978] 8021q: adding VLAN 0 to HW filter on device team0
[  425.451852][T15934] veth1_vlan: entered promiscuous mode
[  425.490949][ T5903] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.515944][ T7703] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.523163][ T7703] bridge0: port 1(bridge_slave_0) entered forwarding state
[  425.554147][ T7703] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.561245][ T7703] bridge0: port 2(bridge_slave_1) entered forwarding state
[  425.606885][T15934] veth0_macvtap: entered promiscuous mode
[  425.635099][T15934] veth1_macvtap: entered promiscuous mode
[  425.773798][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  425.781745][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  425.804050][T15934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  425.815072][T15934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.825340][T15934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  425.837539][T15934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.848768][T15934] batman_adv: batadv0: Interface activated: batadv_slave_0
[  425.861493][ T5903] bridge_slave_1: left allmulticast mode
[  425.868507][ T5903] bridge_slave_1: left promiscuous mode
[  425.883218][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.895094][ T5903] bridge_slave_0: left allmulticast mode
[  425.900779][ T5903] bridge_slave_0: left promiscuous mode
[  425.906706][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.393381][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  426.406948][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  426.415756][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  426.426679][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  426.442942][ T5853] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  426.460218][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  426.570551][ T5903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  426.581415][ T5903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  426.592174][ T5903] bond0 (unregistering): Released all slaves
[  426.705601][T15934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  426.732971][T15934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.754391][T15934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  426.776099][T15934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.808543][T15934] batman_adv: batadv0: Interface activated: batadv_slave_1
[  426.821763][T15934] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  426.831298][T15934] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  426.840370][T15934] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  426.849188][T15934] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  426.868751][T16089] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  426.983863][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.991749][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  427.144056][T16093] netlink: 'syz.3.2801': attribute type 10 has an invalid length.
[  427.184674][T16091] 
: (slave wlan1): Releasing backup interface
[  427.257825][T15978] 8021q: adding VLAN 0 to HW filter on device batadv0
[  427.277022][T16093] 
: (slave wlan1): Enslaving as an active interface with an up link
[  427.393310][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  427.407807][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  427.781323][ T5903] hsr_slave_0: left promiscuous mode
[  427.801281][ T5903] hsr_slave_1: left promiscuous mode
[  427.807552][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  427.816038][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_0
[  427.830800][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  427.838862][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_1
[  427.882565][ T5903] veth1_macvtap: left promiscuous mode
[  427.888507][ T5903] veth0_macvtap: left promiscuous mode
[  427.894753][ T5903] veth1_vlan: left promiscuous mode
[  427.900198][ T5903] veth0_vlan: left promiscuous mode
[  428.350618][ T5903] team0 (unregistering): Port device team_slave_1 removed
[  428.396595][ T5903] team0 (unregistering): Port device team_slave_0 removed
[  428.515722][ T5837] Bluetooth: hci0: command tx timeout
[  428.835874][ T7701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.852232][ T7701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.856701][T15978] veth0_vlan: entered promiscuous mode
[  428.937877][T15978] veth1_vlan: entered promiscuous mode
[  429.204492][T16078] chnl_net:caif_netlink_parms(): no params data found
[  429.229466][T15978] veth0_macvtap: entered promiscuous mode
[  429.348264][T15978] veth1_macvtap: entered promiscuous mode
[  429.471575][T15978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.482396][T15978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.494455][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  429.503501][T15978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.505010][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  429.523664][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  429.534108][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  429.534644][T15978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.552579][ T5853] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  429.553242][T15978] batman_adv: batadv0: Interface activated: batadv_slave_0
[  429.570655][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  429.596260][T16078] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.603846][T16078] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.611093][T16078] bridge_slave_0: entered allmulticast mode
[  429.618575][T16078] bridge_slave_0: entered promiscuous mode
[  429.682596][T16078] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.703088][T16078] bridge0: port 2(bridge_slave_1) entered disabled state
[  429.710373][T16078] bridge_slave_1: entered allmulticast mode
[  429.725162][T16078] bridge_slave_1: entered promiscuous mode
[  429.845735][T16078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  429.874417][T15978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.892900][T15978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.912753][T15978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.942747][T15978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.957503][T15978] batman_adv: batadv0: Interface activated: batadv_slave_1
[  429.977591][T16078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  430.040947][T15978] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  430.055478][T15978] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  430.077647][T15978] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  430.092992][T15978] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  430.200288][ T5903] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.236805][T16078] team0: Port device team_slave_0 added
[  430.255963][T16078] team0: Port device team_slave_1 added
[  430.346677][ T5903] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.364093][T16078] batman_adv: batadv0: Adding interface: batadv_slave_0
[  430.377683][T16078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  430.405804][T16078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  430.418508][T16078] batman_adv: batadv0: Adding interface: batadv_slave_1
[  430.425886][T16078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  430.452944][T16078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  430.487188][ T5903] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.570599][ T5903] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.585662][ T5837] Bluetooth: hci0: command tx timeout
[  430.708002][ T7703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.719985][T16078] hsr_slave_0: entered promiscuous mode
[  430.726500][T16078] hsr_slave_1: entered promiscuous mode
[  430.735100][ T7703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.845192][ T7700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.876252][ T7700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  431.000332][ T5903] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.142202][ T5903] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.227752][ T5903] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.245563][T16105] chnl_net:caif_netlink_parms(): no params data found
[  431.390865][ T5903] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.582155][T16105] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.592843][T16105] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.610779][T16105] bridge_slave_0: entered allmulticast mode
[  431.621982][T16105] bridge_slave_0: entered promiscuous mode
[  431.628223][ T5837] Bluetooth: hci1: command tx timeout
[  431.643629][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  431.654246][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  431.666857][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  431.668742][T16105] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.697491][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  431.698946][T16105] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.713251][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  431.721125][T16105] bridge_slave_1: entered allmulticast mode
[  431.728185][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  431.748901][T16105] bridge_slave_1: entered promiscuous mode
[  431.848952][T16105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  431.924421][T16105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  432.068578][T16105] team0: Port device team_slave_0 added
[  432.113554][T16125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2804'.
[  432.125146][ T5903] bridge_slave_1: left allmulticast mode
[  432.130831][ T5903] bridge_slave_1: left promiscuous mode
[  432.147156][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.181476][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  432.192656][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  432.202092][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  432.211036][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  432.219115][ T5903] bridge_slave_0: left allmulticast mode
[  432.225079][ T5903] bridge_slave_0: left promiscuous mode
[  432.231157][ T5853] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  432.238914][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  432.246533][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.273983][ T5903] bridge_slave_1: left allmulticast mode
[  432.279679][ T5903] bridge_slave_1: left promiscuous mode
[  432.285951][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.296274][ T5903] bridge_slave_0: left allmulticast mode
[  432.301954][ T5903] bridge_slave_0: left promiscuous mode
[  432.308535][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.666471][ T5837] Bluetooth: hci0: command tx timeout
[  432.890034][ T5903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  432.900714][ T5903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  432.924292][ T5903] bond0 (unregistering): Released all slaves
[  433.050243][ T5903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  433.061640][ T5903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  433.072915][ T5903] bond0 (unregistering): Released all slaves
[  433.087124][T16105] team0: Port device team_slave_1 added
[  433.323191][T16078] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  433.333943][T16078] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  433.369120][T16105] batman_adv: batadv0: Adding interface: batadv_slave_0
[  433.377293][T16105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  433.411694][T16105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  433.436278][T16105] batman_adv: batadv0: Adding interface: batadv_slave_1
[  433.444670][T16105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  433.471490][T16105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  433.509215][T16078] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  433.520074][T16078] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  433.713142][ T5837] Bluetooth: hci1: command tx timeout
[  433.762403][T16105] hsr_slave_0: entered promiscuous mode
[  433.768842][T16105] hsr_slave_1: entered promiscuous mode
[  433.775687][T16105] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  433.783725][T16105] Cannot create hsr debugfs directory
[  433.791206][ T5837] Bluetooth: hci2: command tx timeout
[  434.096589][T16120] chnl_net:caif_netlink_parms(): no params data found
[  434.314746][T16078] 8021q: adding VLAN 0 to HW filter on device bond0
[  434.355071][ T5837] Bluetooth: hci4: command tx timeout
[  434.408955][T16163] 
: (slave wlan1): Releasing backup interface
[  434.443348][T16165] netlink: 'syz.3.2812': attribute type 10 has an invalid length.
[  434.581446][T16078] 8021q: adding VLAN 0 to HW filter on device team0
[  434.703634][T16165] 
: (slave wlan1): Enslaving as an active interface with an up link
[  434.743663][ T5837] Bluetooth: hci0: command tx timeout
[  434.777823][ T6032] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.784988][ T6032] bridge0: port 1(bridge_slave_0) entered forwarding state
[  434.813702][T16120] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.820854][T16120] bridge0: port 1(bridge_slave_0) entered disabled state
[  434.842416][T16120] bridge_slave_0: entered allmulticast mode
[  434.883959][T16120] bridge_slave_0: entered promiscuous mode
[  434.907291][T16120] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.924532][T16170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2813'.
[  434.933932][T16120] bridge0: port 2(bridge_slave_1) entered disabled state
[  434.941191][T16120] bridge_slave_1: entered allmulticast mode
[  434.948461][T16120] bridge_slave_1: entered promiscuous mode
[  434.972596][T16126] chnl_net:caif_netlink_parms(): no params data found
[  434.994185][ T5903] hsr_slave_0: left promiscuous mode
[  435.007955][ T5903] hsr_slave_1: left promiscuous mode
[  435.014939][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  435.022387][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_0
[  435.034456][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  435.042019][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_1
[  435.067339][ T5903] hsr_slave_0: left promiscuous mode
[  435.083721][ T5903] hsr_slave_1: left promiscuous mode
[  435.089499][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  435.097191][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_0
[  435.105335][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  435.112918][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_1
[  435.156258][ T5903] veth1_macvtap: left promiscuous mode
[  435.161855][ T5903] veth0_macvtap: left promiscuous mode
[  435.167860][ T5903] veth1_vlan: left promiscuous mode
[  435.173332][ T5903] veth0_vlan: left promiscuous mode
[  435.179752][ T5903] veth1_macvtap: left promiscuous mode
[  435.185403][ T5903] veth0_macvtap: left promiscuous mode
[  435.191022][ T5903] veth1_vlan: left promiscuous mode
[  435.196385][ T5903] veth0_vlan: left promiscuous mode
[  435.737396][ T5903] team0 (unregistering): Port device team_slave_1 removed
[  435.782944][ T5837] Bluetooth: hci1: command tx timeout
[  435.783127][ T5903] team0 (unregistering): Port device team_slave_0 removed
[  435.863113][ T5837] Bluetooth: hci2: command tx timeout
[  436.433995][ T5837] Bluetooth: hci4: command tx timeout
[  436.551545][ T5903] team0 (unregistering): Port device team_slave_1 removed
[  436.602325][ T5903] team0 (unregistering): Port device team_slave_0 removed
[  437.050559][ T7707] bridge0: port 2(bridge_slave_1) entered blocking state
[  437.057698][ T7707] bridge0: port 2(bridge_slave_1) entered forwarding state
[  437.088223][T16120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  437.165070][T16120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  437.277301][T16120] team0: Port device team_slave_0 added
[  437.339492][T16120] team0: Port device team_slave_1 added
[  437.472212][T16078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  437.485953][T16120] batman_adv: batadv0: Adding interface: batadv_slave_0
[  437.502430][T16120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  437.529563][T16120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  437.550262][T16126] bridge0: port 1(bridge_slave_0) entered blocking state
[  437.565365][T16126] bridge0: port 1(bridge_slave_0) entered disabled state
[  437.572594][T16126] bridge_slave_0: entered allmulticast mode
[  437.583680][T16126] bridge_slave_0: entered promiscuous mode
[  437.602322][T16120] batman_adv: batadv0: Adding interface: batadv_slave_1
[  437.609635][T16120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  437.636992][T16120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  437.654074][T16126] bridge0: port 2(bridge_slave_1) entered blocking state
[  437.661268][T16126] bridge0: port 2(bridge_slave_1) entered disabled state
[  437.685634][T16126] bridge_slave_1: entered allmulticast mode
[  437.693348][T16126] bridge_slave_1: entered promiscuous mode
[  437.781994][T16126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  437.796690][T16126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  437.873823][ T5837] Bluetooth: hci1: command tx timeout
[  437.894431][T16120] hsr_slave_0: entered promiscuous mode
[  437.900846][T16120] hsr_slave_1: entered promiscuous mode
[  437.908068][T16120] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  437.919828][T16120] Cannot create hsr debugfs directory
[  437.944327][ T5837] Bluetooth: hci2: command tx timeout
[  438.067583][T16126] team0: Port device team_slave_0 added
[  438.119121][T16078] 8021q: adding VLAN 0 to HW filter on device batadv0
[  438.178576][T16193] sctp: [Deprecated]: syz.3.2818 (pid 16193) Use of struct sctp_assoc_value in delayed_ack socket option.
[  438.178576][T16193] Use struct sctp_sack_info instead
[  438.190443][T16126] team0: Port device team_slave_1 added
[  438.284087][T16126] batman_adv: batadv0: Adding interface: batadv_slave_0
[  438.291112][T16126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  438.317671][T16126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  438.360227][T16126] batman_adv: batadv0: Adding interface: batadv_slave_1
[  438.374421][T16126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  438.402859][T16126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  438.441704][T16105] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  438.468794][T16105] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  438.503350][ T5837] Bluetooth: hci4: command tx timeout
[  438.531323][T16198] netlink: 'syz.3.2820': attribute type 1 has an invalid length.
[  438.551074][ T5903] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.599909][T16078] veth0_vlan: entered promiscuous mode
[  438.609737][T16105] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  438.637675][T16198] 8021q: adding VLAN 0 to HW filter on device bond0
[  438.737354][ T5903] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.758428][T16105] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  438.822309][T16126] hsr_slave_0: entered promiscuous mode
[  438.847323][T16126] hsr_slave_1: entered promiscuous mode
[  438.861994][T16126] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  438.873538][T16126] Cannot create hsr debugfs directory
[  438.903593][ T5903] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.998974][ T5903] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.043773][T16078] veth1_vlan: entered promiscuous mode
[  439.145087][T16208] 
: (slave wlan1): Releasing backup interface
[  439.208117][T16208] netlink: 'syz.3.2823': attribute type 10 has an invalid length.
[  439.248089][T16078] veth0_macvtap: entered promiscuous mode
[  439.272568][T16208] 
: (slave wlan1): Enslaving as an active interface with an up link
[  439.343010][T16078] veth1_macvtap: entered promiscuous mode
[  439.409701][ T5903] bridge_slave_1: left allmulticast mode
[  439.416278][ T5903] bridge_slave_1: left promiscuous mode
[  439.422002][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.433661][ T5903] bridge_slave_0: left allmulticast mode
[  439.439341][ T5903] bridge_slave_0: left promiscuous mode
[  439.446044][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.528685][T16213] netlink: 'syz.3.2824': attribute type 39 has an invalid length.
[  439.799137][ T5903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  439.811330][ T5903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  439.821732][ T5903] bond0 (unregistering): Released all slaves
[  439.832264][T16120] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  439.849219][T16120] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  439.941248][T16120] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  439.956108][T16120] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  439.970500][T16078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  439.981984][T16078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.993855][T16078] batman_adv: batadv0: Interface activated: batadv_slave_0
[  440.038568][ T5837] Bluetooth: hci2: command tx timeout
[  440.048132][T16078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  440.060346][T16078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.071655][T16078] batman_adv: batadv0: Interface activated: batadv_slave_1
[  440.085040][T16105] 8021q: adding VLAN 0 to HW filter on device bond0
[  440.108709][T16078] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  440.118063][T16078] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  440.127557][T16078] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  440.138998][T16078] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  440.234978][T16105] 8021q: adding VLAN 0 to HW filter on device team0
[  440.361393][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.368576][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  440.392084][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.399352][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  440.573708][T16220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2826'.
[  440.593349][ T5837] Bluetooth: hci4: command tx timeout
[  440.707201][T16126] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  440.726766][ T5903] hsr_slave_0: left promiscuous mode
[  440.737315][ T5903] hsr_slave_1: left promiscuous mode
[  440.743268][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  440.750693][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_0
[  440.759720][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  440.768035][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_1
[  440.792753][ T5903] veth1_macvtap: left promiscuous mode
[  440.798450][ T5903] veth0_macvtap: left promiscuous mode
[  440.804859][ T5903] veth1_vlan: left promiscuous mode
[  440.810185][ T5903] veth0_vlan: left promiscuous mode
[  441.271612][ T5903] team0 (unregistering): Port device team_slave_1 removed
[  441.330540][ T5903] team0 (unregistering): Port device team_slave_0 removed
[  441.807269][ T7707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  441.832925][ T7707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  441.841577][T16126] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  441.866282][T16126] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  441.884848][T16126] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  441.905907][T16120] 8021q: adding VLAN 0 to HW filter on device bond0
[  441.974516][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  441.976693][T16120] 8021q: adding VLAN 0 to HW filter on device team0
[  441.982373][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  442.028784][ T7707] bridge0: port 1(bridge_slave_0) entered blocking state
[  442.035957][ T7707] bridge0: port 1(bridge_slave_0) entered forwarding state
[  442.086118][ T7707] bridge0: port 2(bridge_slave_1) entered blocking state
[  442.093300][ T7707] bridge0: port 2(bridge_slave_1) entered forwarding state
[  442.180694][T16235] batadv_slave_0: entered promiscuous mode
[  442.187639][T16235] batadv_slave_0: entered allmulticast mode
[  442.406602][T16126] 8021q: adding VLAN 0 to HW filter on device bond0
[  442.419630][T16105] 8021q: adding VLAN 0 to HW filter on device batadv0
[  442.505553][T16126] 8021q: adding VLAN 0 to HW filter on device team0
[  442.710003][ T5903] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.745135][ T6032] bridge0: port 1(bridge_slave_0) entered blocking state
[  442.752320][ T6032] bridge0: port 1(bridge_slave_0) entered forwarding state
[  442.835423][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  442.842659][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  442.907449][ T5903] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.972520][T16126] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  442.999247][T16126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  443.048308][ T5903] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.075278][T16120] 8021q: adding VLAN 0 to HW filter on device batadv0
[  443.126504][ T5903] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.193341][T16105] veth0_vlan: entered promiscuous mode
[  443.269039][T16105] veth1_vlan: entered promiscuous mode
[  443.285239][T16120] veth0_vlan: entered promiscuous mode
[  443.307203][T16126] 8021q: adding VLAN 0 to HW filter on device batadv0
[  443.325433][ T5903] bridge_slave_1: left allmulticast mode
[  443.331212][ T5903] bridge_slave_1: left promiscuous mode
[  443.337483][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state
[  443.346972][ T5903] bridge_slave_0: left allmulticast mode
[  443.352647][ T5903] bridge_slave_0: left promiscuous mode
[  443.359534][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.699895][ T5903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  443.712439][ T5903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  443.728480][ T5903] bond0 (unregistering): Released all slaves
[  443.759473][T16120] veth1_vlan: entered promiscuous mode
[  443.832122][T16105] veth0_macvtap: entered promiscuous mode
[  443.861879][T16120] veth0_macvtap: entered promiscuous mode
[  443.947140][T16120] veth1_macvtap: entered promiscuous mode
[  443.964454][T16105] veth1_macvtap: entered promiscuous mode
[  443.974284][T16126] veth0_vlan: entered promiscuous mode
[  443.999030][T16260] netlink: 'syz.3.2831': attribute type 3 has an invalid length.
[  444.131911][T16105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  444.150717][T16262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2832'.
[  444.161126][T16105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  444.182608][T16105] batman_adv: batadv0: Interface activated: batadv_slave_0
[  444.216526][T16120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  444.237297][T16120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  444.247414][T16120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  444.257925][T16120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  444.271752][T16120] batman_adv: batadv0: Interface activated: batadv_slave_0
[  444.288423][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  444.298082][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  444.306745][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  444.315377][T16126] veth1_vlan: entered promiscuous mode
[  444.325874][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  444.327716][T16105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  444.362962][ T5853] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  444.367741][T16105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  444.380470][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  444.388541][T16105] batman_adv: batadv0: Interface activated: batadv_slave_1
[  444.438997][T16105] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  444.447863][T16105] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  444.459867][T16105] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  444.470083][T16105] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  444.479670][T16267] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  444.504051][T16120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  444.522999][T16120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  444.562748][T16120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  444.582735][T16120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  444.600009][T16120] batman_adv: batadv0: Interface activated: batadv_slave_1
[  444.666819][T16120] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  444.692237][T16120] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  444.711535][T16120] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  444.721479][T16120] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  444.736668][T16270] netlink: 'syz.3.2834': attribute type 10 has an invalid length.
[  444.763297][T16269] 
: (slave wlan1): Releasing backup interface
[  444.820591][ T5903] hsr_slave_0: left promiscuous mode
[  444.826947][ T5903] hsr_slave_1: left promiscuous mode
[  444.832656][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  444.841928][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_0
[  444.851877][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  444.859896][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_1
[  444.886712][ T5903] veth1_macvtap: left promiscuous mode
[  444.892307][ T5903] veth0_macvtap: left promiscuous mode
[  444.898055][ T5903] veth1_vlan: left promiscuous mode
[  444.903602][ T5903] veth0_vlan: left promiscuous mode
[  445.341150][ T5903] team0 (unregistering): Port device team_slave_1 removed
[  445.389944][ T5903] team0 (unregistering): Port device team_slave_0 removed
[  445.818581][T16270] 
: (slave wlan1): Enslaving as an active interface with an up link
[  446.028450][T16273] 8021q: adding VLAN 0 to HW filter on device bond0
[  446.037202][T16273] team0: Port device bond0 added
[  446.054971][T16273] bridge0: port 1(team0) entered blocking state
[  446.061298][T16273] bridge0: port 1(team0) entered disabled state
[  446.080141][T16273] team0: entered allmulticast mode
[  446.094336][T16273] bond0: entered allmulticast mode
[  446.100645][T16273] team0: entered promiscuous mode
[  446.121354][T16273] bond0: entered promiscuous mode
[  446.136354][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  446.144439][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  446.165118][T16126] veth0_macvtap: entered promiscuous mode
[  446.182157][T16126] veth1_macvtap: entered promiscuous mode
[  446.270164][ T7703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  446.301573][ T7703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  446.310930][T16126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  446.325256][T16126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  446.335709][T16126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  446.346941][T16126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  446.358338][T16126] batman_adv: batadv0: Interface activated: batadv_slave_0
[  446.360120][T16278] SET target dimension over the limit!
[  446.408462][T16126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  446.431650][T16126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  446.451947][T16126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  446.463284][T16126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  446.483723][T16126] batman_adv: batadv0: Interface activated: batadv_slave_1
[  446.512950][ T5853] Bluetooth: hci0: command tx timeout
[  446.526091][ T7700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  446.540424][T16126] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  446.541836][ T7700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  446.549509][T16126] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  446.565864][T16126] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  446.574662][T16126] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  446.599618][ T7701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  446.649232][ T7701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  446.808841][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  446.830520][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  447.011351][ T5903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  447.042279][ T5903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  447.196005][ T7701] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.434610][ T7701] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.467640][T16264] chnl_net:caif_netlink_parms(): no params data found
[  447.538988][ T7701] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.633975][ T7701] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.659612][T16264] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.667110][T16264] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.674600][T16264] bridge_slave_0: entered allmulticast mode
[  447.682139][T16264] bridge_slave_0: entered promiscuous mode
[  447.702012][T16264] bridge0: port 2(bridge_slave_1) entered blocking state
[  447.710495][T16264] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.718013][T16264] bridge_slave_1: entered allmulticast mode
[  447.725285][T16264] bridge_slave_1: entered promiscuous mode
[  447.823741][T16264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  447.857073][T16264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  447.966639][T16264] team0: Port device team_slave_0 added
[  447.986337][T16264] team0: Port device team_slave_1 added
[  448.052076][ T7701] bridge_slave_1: left allmulticast mode
[  448.063185][ T7701] bridge_slave_1: left promiscuous mode
[  448.068935][ T7701] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.095719][ T7701] bridge_slave_0: left allmulticast mode
[  448.101408][ T7701] bridge_slave_0: left promiscuous mode
[  448.123134][ T7701] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.339999][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  448.356365][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  448.366923][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  448.408321][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  448.418381][ T5837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  448.431457][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  448.583139][ T5853] Bluetooth: hci0: command tx timeout
[  448.678358][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  448.689369][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  448.698020][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  448.706377][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  448.724156][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  448.752992][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  448.819476][ T7701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  448.836418][ T7701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  448.850364][ T7701] bond0 (unregistering): Released all slaves
[  448.862010][T16264] batman_adv: batadv0: Adding interface: batadv_slave_0
[  448.869307][T16264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  448.896206][T16264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  448.931161][T16264] batman_adv: batadv0: Adding interface: batadv_slave_1
[  448.939310][T16264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  448.986696][T16264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  449.155357][T16264] hsr_slave_0: entered promiscuous mode
[  449.170071][T16264] hsr_slave_1: entered promiscuous mode
[  449.876658][ T7701] hsr_slave_0: left promiscuous mode
[  449.904510][ T7701] hsr_slave_1: left promiscuous mode
[  449.910573][ T7701] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  449.914820][T16307] sctp: [Deprecated]: syz.3.2841 (pid 16307) Use of int in maxseg socket option.
[  449.914820][T16307] Use struct sctp_assoc_value instead
[  449.933371][ T7701] batman_adv: batadv0: Removing interface: batadv_slave_0
[  450.003509][ T7701] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  450.010982][ T7701] batman_adv: batadv0: Removing interface: batadv_slave_1
[  450.084791][ T7701] veth1_macvtap: left promiscuous mode
[  450.090383][ T7701] veth0_macvtap: left promiscuous mode
[  450.107723][ T7701] veth1_vlan: left promiscuous mode
[  450.122861][ T7701] veth0_vlan: left promiscuous mode
[  450.232155][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  450.263956][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  450.274175][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  450.284316][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  450.295366][ T5853] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  450.302927][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  450.508100][ T5853] Bluetooth: hci1: command tx timeout
[  450.678197][ T5853] Bluetooth: hci0: command tx timeout
[  450.829316][ T7701] team0 (unregistering): Port device team_slave_1 removed
[  450.838484][ T5853] Bluetooth: hci2: command tx timeout
[  450.887011][ T7701] team0 (unregistering): Port device team_slave_0 removed
[  451.415779][T16298] chnl_net:caif_netlink_parms(): no params data found
[  451.667238][T16264] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  451.725464][T16301] chnl_net:caif_netlink_parms(): no params data found
[  451.788563][T16264] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  451.892907][T16264] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  451.915405][T16298] bridge0: port 1(bridge_slave_0) entered blocking state
[  451.928106][T16298] bridge0: port 1(bridge_slave_0) entered disabled state
[  451.935969][T16298] bridge_slave_0: entered allmulticast mode
[  451.943479][T16298] bridge_slave_0: entered promiscuous mode
[  451.985875][T16264] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  452.008983][T16298] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.033033][T16298] bridge0: port 2(bridge_slave_1) entered disabled state
[  452.040331][T16298] bridge_slave_1: entered allmulticast mode
[  452.082235][T16298] bridge_slave_1: entered promiscuous mode
[  452.115208][T16348] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2850'.
[  452.163635][T16348] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  452.174303][T16348] gretap1: entered promiscuous mode
[  452.179756][T16348] gretap1: entered allmulticast mode
[  452.198533][T16298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  452.229974][T16301] bridge0: port 1(bridge_slave_0) entered blocking state
[  452.248578][T16301] bridge0: port 1(bridge_slave_0) entered disabled state
[  452.262440][T16301] bridge_slave_0: entered allmulticast mode
[  452.270750][T16301] bridge_slave_0: entered promiscuous mode
[  452.299753][T16298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  452.343266][ T5853] Bluetooth: hci4: command tx timeout
[  452.354963][T16298] team0: Port device team_slave_0 added
[  452.361917][T16301] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.378015][T16301] bridge0: port 2(bridge_slave_1) entered disabled state
[  452.388826][T16301] bridge_slave_1: entered allmulticast mode
[  452.395985][T16301] bridge_slave_1: entered promiscuous mode
[  452.440388][T16301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  452.452296][T16301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  452.471365][T16298] team0: Port device team_slave_1 added
[  452.583888][ T5853] Bluetooth: hci1: command tx timeout
[  452.603351][ T7701] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.635420][T16301] team0: Port device team_slave_0 added
[  452.649615][T16298] batman_adv: batadv0: Adding interface: batadv_slave_0
[  452.663748][T16298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  452.690306][T16298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  452.711042][T16298] batman_adv: batadv0: Adding interface: batadv_slave_1
[  452.718641][T16298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  452.745174][ T5853] Bluetooth: hci0: command tx timeout
[  452.759083][T16298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  452.778980][T16301] team0: Port device team_slave_1 added
[  452.824886][ T7701] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.921235][ T5853] Bluetooth: hci2: command tx timeout
[  452.929317][ T7701] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.952265][T16301] batman_adv: batadv0: Adding interface: batadv_slave_0
[  452.959880][T16301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  452.987184][T16301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  453.032577][T16298] hsr_slave_0: entered promiscuous mode
[  453.054788][T16298] hsr_slave_1: entered promiscuous mode
[  453.060898][T16298] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  453.070551][T16298] Cannot create hsr debugfs directory
[  453.078668][T16301] batman_adv: batadv0: Adding interface: batadv_slave_1
[  453.086685][T16301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  453.123789][T16301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  453.164836][ T7701] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.220204][T16264] 8021q: adding VLAN 0 to HW filter on device bond0
[  453.363467][T16301] hsr_slave_0: entered promiscuous mode
[  453.369661][T16301] hsr_slave_1: entered promiscuous mode
[  453.376707][T16301] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  453.385598][T16301] Cannot create hsr debugfs directory
[  453.492386][T16315] chnl_net:caif_netlink_parms(): no params data found
[  453.544491][T16375] Bluetooth: MGMT ver 1.23
[  453.555942][T16264] 8021q: adding VLAN 0 to HW filter on device team0
[  453.693992][ T5903] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.701141][ T5903] bridge0: port 1(bridge_slave_0) entered forwarding state
[  453.756635][ T7701] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.807787][ T5903] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.814944][ T5903] bridge0: port 2(bridge_slave_1) entered forwarding state
[  453.857234][ T7701] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.908949][T16315] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.919154][T16315] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.928338][T16315] bridge_slave_0: entered allmulticast mode
[  453.936022][T16315] bridge_slave_0: entered promiscuous mode
[  453.970704][ T7701] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.984499][T16315] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.991856][T16315] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.000831][T16315] bridge_slave_1: entered allmulticast mode
[  454.008746][T16315] bridge_slave_1: entered promiscuous mode
[  454.094483][ T7701] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.132018][T16315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  454.148090][T16315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  454.216682][T16315] team0: Port device team_slave_0 added
[  454.237494][T16315] team0: Port device team_slave_1 added
[  454.324875][T16315] batman_adv: batadv0: Adding interface: batadv_slave_0
[  454.331869][T16315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  454.369488][T16315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  454.423297][ T5853] Bluetooth: hci4: command tx timeout
[  454.437480][T16315] batman_adv: batadv0: Adding interface: batadv_slave_1
[  454.451102][T16315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  454.478328][T16315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  454.623894][ T7701] bridge_slave_1: left allmulticast mode
[  454.629622][ T7701] bridge_slave_1: left promiscuous mode
[  454.653161][ T7701] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.661783][ T7701] bridge_slave_0: left allmulticast mode
[  454.668640][ T5853] Bluetooth: hci1: command tx timeout
[  454.675662][ T7701] bridge_slave_0: left promiscuous mode
[  454.681468][ T7701] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.699361][ T7701] bridge_slave_1: left allmulticast mode
[  454.705319][ T7701] bridge_slave_1: left promiscuous mode
[  454.711019][ T7701] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.723105][ T7701] bridge_slave_0: left allmulticast mode
[  454.728796][ T7701] bridge_slave_0: left promiscuous mode
[  454.735512][ T7701] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.989210][ T5853] Bluetooth: hci2: command tx timeout
[  455.378610][ T7701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  455.389851][ T7701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  455.401004][ T7701] bond0 (unregistering): Released all slaves
[  455.536050][ T7701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  455.548134][ T7701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  455.558757][ T7701] bond0 (unregistering): Released all slaves
[  455.574241][T16315] hsr_slave_0: entered promiscuous mode
[  455.580944][T16315] hsr_slave_1: entered promiscuous mode
[  455.598232][T16315] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  455.619597][T16315] Cannot create hsr debugfs directory
[  455.703502][T16298] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  455.834294][T16298] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  455.854294][T16298] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  455.978023][T16394] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2862'.
[  456.009259][T16298] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  456.215050][T16264] 8021q: adding VLAN 0 to HW filter on device batadv0
[  456.421119][T16400] team0: left allmulticast mode
[  456.438841][T16400] bond0: left allmulticast mode
[  456.452262][T16400] team0: left promiscuous mode
[  456.462331][T16400] bond0: left promiscuous mode
[  456.479701][T16400] bridge0: port 1(team0) entered disabled state
[  456.504430][T16400] 
: (slave wlan1): Releasing backup interface
[  456.513409][ T5853] Bluetooth: hci4: command tx timeout
[  456.551525][T16400] team0: Port device bond0 removed
[  456.705204][T16404] syzkaller1: entered promiscuous mode
[  456.711266][T16404] syzkaller1: entered allmulticast mode
[  456.752977][ T5853] Bluetooth: hci1: command tx timeout
[  456.764492][T16406] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  456.824684][T16301] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  456.852462][T16301] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  456.935579][T16298] 8021q: adding VLAN 0 to HW filter on device bond0
[  456.995064][T16301] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  457.016382][T16301] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  457.073182][ T5853] Bluetooth: hci2: command tx timeout
[  457.122165][T16264] veth0_vlan: entered promiscuous mode
[  457.212625][T16298] 8021q: adding VLAN 0 to HW filter on device team0
[  457.238747][ T7700] bridge0: port 1(bridge_slave_0) entered blocking state
[  457.245992][ T7700] bridge0: port 1(bridge_slave_0) entered forwarding state
[  457.283353][ T7701] hsr_slave_0: left promiscuous mode
[  457.294499][ T7701] hsr_slave_1: left promiscuous mode
[  457.300237][ T7701] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  457.343720][ T7701] batman_adv: batadv0: Removing interface: batadv_slave_0
[  457.355505][ T7701] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  457.363213][ T7701] batman_adv: batadv0: Removing interface: batadv_slave_1
[  457.392860][ T7701] hsr_slave_0: left promiscuous mode
[  457.409369][ T7701] hsr_slave_1: left promiscuous mode
[  457.419620][ T7701] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  457.437344][ T7701] batman_adv: batadv0: Removing interface: batadv_slave_0
[  457.456507][ T7701] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  457.464575][ T7701] batman_adv: batadv0: Removing interface: batadv_slave_1
[  457.515952][T14414] hid-multitouch 0005:0457:0009.0004: unknown main item tag 0x0
[  457.521004][ T7701] veth1_macvtap: left promiscuous mode
[  457.530837][ T7701] veth0_macvtap: left promiscuous mode
[  457.536868][ T7701] veth1_vlan: left promiscuous mode
[  457.536895][T14414] hid-multitouch 0005:0457:0009.0004: hidraw0: BLUETOOTH HID v0.0d Device [syz1] on aa:aa:aa:aa:aa:aa
[  457.542164][ T7701] veth0_vlan: left promiscuous mode
[  457.570461][ T7701] veth1_macvtap: left promiscuous mode
[  457.576173][ T7701] veth0_macvtap: left promiscuous mode
[  457.582114][ T7701] veth1_vlan: left promiscuous mode
[  457.587558][ T7701] veth0_vlan: left promiscuous mode
[  458.170970][ T7701] team0 (unregistering): Port device team_slave_1 removed
[  458.221413][ T7701] team0 (unregistering): Port device team_slave_0 removed
[  458.593150][ T5853] Bluetooth: hci4: command tx timeout
[  459.044188][ T7701] team0 (unregistering): Port device team_slave_1 removed
[  459.098639][ T7701] team0 (unregistering): Port device team_slave_0 removed
[  459.543189][T16264] veth1_vlan: entered promiscuous mode
[  459.572517][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  459.579748][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  459.798177][T16264] veth0_macvtap: entered promiscuous mode
[  459.871277][T16264] veth1_macvtap: entered promiscuous mode
[  459.913191][T16301] 8021q: adding VLAN 0 to HW filter on device bond0
[  459.978615][T16264] batman_adv: batadv0: Interface activated: batadv_slave_0
[  460.014239][T16264] batman_adv: batadv0: Interface activated: batadv_slave_1
[  460.053444][T16315] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  460.074373][T16315] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  460.116275][T16264] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  460.126022][T16264] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  460.137296][T16264] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  460.147675][T16264] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  460.178189][T16301] 8021q: adding VLAN 0 to HW filter on device team0
[  460.213850][T16315] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  460.233516][T16315] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  460.281938][ T5903] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.289140][ T5903] bridge0: port 1(bridge_slave_0) entered forwarding state
[  460.368664][T16298] 8021q: adding VLAN 0 to HW filter on device batadv0
[  460.415938][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.423129][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  460.636379][T16301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  460.684743][ T7703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  460.692623][ T7703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  460.758098][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  460.784255][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  460.856056][T16315] 8021q: adding VLAN 0 to HW filter on device bond0
[  460.914185][T16315] 8021q: adding VLAN 0 to HW filter on device team0
[  460.946435][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.953642][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  461.005532][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  461.012755][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  461.191057][T16315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  461.231963][T16298] veth0_vlan: entered promiscuous mode
[  461.259542][T16298] veth1_vlan: entered promiscuous mode
[  461.269250][T16301] 8021q: adding VLAN 0 to HW filter on device batadv0
[  461.419942][   T68] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.491931][T16298] veth0_macvtap: entered promiscuous mode
[  461.648579][   T68] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.681918][T16298] veth1_macvtap: entered promiscuous mode
[  461.731251][   T68] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.755198][T16315] 8021q: adding VLAN 0 to HW filter on device batadv0
[  461.796432][T16298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  461.820004][T16298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.833200][T16298] batman_adv: batadv0: Interface activated: batadv_slave_0
[  461.843974][T16298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  461.854580][T16298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.867133][T16298] batman_adv: batadv0: Interface activated: batadv_slave_1
[  461.876483][T16301] veth0_vlan: entered promiscuous mode
[  461.905123][   T68] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.930375][T16298] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  461.939618][T16298] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  461.950155][T16298] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  461.959275][T16298] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  461.983973][T16301] veth1_vlan: entered promiscuous mode
[  462.068385][T16315] veth0_vlan: entered promiscuous mode
[  462.122573][T16301] veth0_macvtap: entered promiscuous mode
[  462.135901][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  462.148537][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  462.164233][   T68] bridge_slave_1: left allmulticast mode
[  462.169914][   T68] bridge_slave_1: left promiscuous mode
[  462.175927][   T68] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.186854][   T68] bridge_slave_0: left allmulticast mode
[  462.193017][   T68] bridge_slave_0: left promiscuous mode
[  462.200537][   T68] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.592315][   T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  462.605374][   T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  462.615961][   T68] bond0 (unregistering): Released all slaves
[  462.632476][T16301] veth1_macvtap: entered promiscuous mode
[  462.668140][ T5903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  462.670114][T16315] veth1_vlan: entered promiscuous mode
[  462.681726][ T5903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  462.793099][T16301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  462.823130][T16301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  462.842811][T16301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  462.872732][T16301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  462.891449][T16301] batman_adv: batadv0: Interface activated: batadv_slave_0
[  462.941988][T16315] veth0_macvtap: entered promiscuous mode
[  462.996047][T16301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  463.033110][T16301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.053071][T16301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  463.080627][T16301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.103336][T16301] batman_adv: batadv0: Interface activated: batadv_slave_1
[  463.124495][T16315] veth1_macvtap: entered promiscuous mode
[  463.245297][T16301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  463.273162][T16301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  463.293097][T16301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  463.306420][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  463.312184][T16301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  463.326461][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  463.337230][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  463.347623][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  463.364968][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  463.374214][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  463.419163][T16486] netlink: 'syz.3.2880': attribute type 3 has an invalid length.
[  463.445191][T16487] netlink: 'syz.3.2880': attribute type 3 has an invalid length.
[  463.498690][T16315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  463.520663][T16315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.563020][T16315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  463.582886][T16315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.601411][T16315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  463.620330][T16315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.660908][T16315] batman_adv: batadv0: Interface activated: batadv_slave_0
[  463.778154][T16315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  463.842760][T16315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.852649][T16315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  463.866500][T16315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.878223][T16315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  463.889436][T16315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.901253][T16315] batman_adv: batadv0: Interface activated: batadv_slave_1
[  463.956305][T16315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  463.968348][T16315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  463.979153][T16315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  463.989195][T16315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  464.009790][   T68] hsr_slave_0: left promiscuous mode
[  464.025624][   T68] hsr_slave_1: left promiscuous mode
[  464.031653][   T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  464.042869][   T68] batman_adv: batadv0: Removing interface: batadv_slave_0
[  464.050652][   T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  464.058432][   T68] batman_adv: batadv0: Removing interface: batadv_slave_1
[  464.089165][   T68] veth1_macvtap: left promiscuous mode
[  464.095348][   T68] veth0_macvtap: left promiscuous mode
[  464.100918][   T68] veth1_vlan: left promiscuous mode
[  464.107107][   T68] veth0_vlan: left promiscuous mode
[  464.557551][   T68] team0 (unregistering): Port device team_slave_1 removed
[  464.601367][   T68] team0 (unregistering): Port device team_slave_0 removed
[  465.093666][ T5903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.101534][ T5903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.255910][ T7701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.264415][ T7701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.396074][ T7701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.428700][ T7701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.463771][ T5853] Bluetooth: hci0: command tx timeout
[  465.606976][ T7701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.641188][ T7701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.739243][T16483] chnl_net:caif_netlink_parms(): no params data found
[  465.806009][T16498] netlink: 'syz.3.2883': attribute type 4 has an invalid length.
[  465.873124][T16500] netlink: 'syz.3.2883': attribute type 4 has an invalid length.
[  465.941398][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  465.951676][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  465.961411][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  465.972363][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  465.992790][ T5837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  466.000825][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  466.086332][   T68] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.097384][T16500] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2883'.
[  466.265301][   T68] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.320923][T16498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2883'.
[  466.618543][   T68] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.738532][ T6032] smc: removing ib device syz2
[  466.748536][T16483] bridge0: port 1(bridge_slave_0) entered blocking state
[  466.777637][T16483] bridge0: port 1(bridge_slave_0) entered disabled state
[  466.818388][T16483] bridge_slave_0: entered allmulticast mode
[  466.835481][T16483] bridge_slave_0: entered promiscuous mode
[  466.940086][   T68] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.974011][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  466.986528][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  466.993371][T16483] bridge0: port 2(bridge_slave_1) entered blocking state
[  467.003513][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  467.010717][T16483] bridge0: port 2(bridge_slave_1) entered disabled state
[  467.019121][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  467.022574][T16483] bridge_slave_1: entered allmulticast mode
[  467.033637][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  467.044437][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  467.067552][T16483] bridge_slave_1: entered promiscuous mode
[  467.212352][T16483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  467.325115][T16483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  467.482138][T16483] team0: Port device team_slave_0 added
[  467.501769][T16483] team0: Port device team_slave_1 added
[  467.543305][ T5853] Bluetooth: hci0: command tx timeout
[  467.693838][   T68] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.830560][   T68] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.891885][T16483] batman_adv: batadv0: Adding interface: batadv_slave_0
[  467.913001][T16483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  467.951749][T16483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  468.016021][   T68] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.027640][ T5853] Bluetooth: hci1: command tx timeout
[  468.035701][T16483] batman_adv: batadv0: Adding interface: batadv_slave_1
[  468.042862][T16483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  468.069207][T16483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  468.159256][   T68] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.257216][T16483] hsr_slave_0: entered promiscuous mode
[  468.284112][T16483] hsr_slave_1: entered promiscuous mode
[  468.348463][T16501] chnl_net:caif_netlink_parms(): no params data found
[  468.404064][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  468.413718][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  468.423101][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  468.444055][T16523] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  468.452127][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  468.465649][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  468.475319][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  468.629258][T16526] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2885'.
[  468.712235][   T68] bridge_slave_1: left allmulticast mode
[  468.722895][   T68] bridge_slave_1: left promiscuous mode
[  468.728679][   T68] bridge0: port 2(bridge_slave_1) entered disabled state
[  468.755336][   T68] bridge_slave_0: left allmulticast mode
[  468.761051][   T68] bridge_slave_0: left promiscuous mode
[  468.767111][T16530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2885'.
[  468.776492][   T68] bridge0: port 1(bridge_slave_0) entered disabled state
[  468.786893][   T68] bridge_slave_1: left allmulticast mode
[  468.792586][   T68] bridge_slave_1: left promiscuous mode
[  468.799013][   T68] bridge0: port 2(bridge_slave_1) entered disabled state
[  468.808249][   T68] bridge_slave_0: left allmulticast mode
[  468.815429][   T68] bridge_slave_0: left promiscuous mode
[  468.821179][   T68] bridge0: port 1(bridge_slave_0) entered disabled state
[  469.149667][ T5853] Bluetooth: hci2: command tx timeout
[  469.467206][   T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  469.478719][   T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  469.489324][   T68] bond0 (unregistering): Released all slaves
[  469.620158][   T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  469.623341][ T5853] Bluetooth: hci0: command tx timeout
[  469.638797][   T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  469.649301][   T68] bond0 (unregistering): Released all slaves
[  469.660622][T16501] bridge0: port 1(bridge_slave_0) entered blocking state
[  469.669378][T16501] bridge0: port 1(bridge_slave_0) entered disabled state
[  469.676873][T16501] bridge_slave_0: entered allmulticast mode
[  469.684076][T16501] bridge_slave_0: entered promiscuous mode
[  469.691327][T16501] bridge0: port 2(bridge_slave_1) entered blocking state
[  469.698563][T16501] bridge0: port 2(bridge_slave_1) entered disabled state
[  469.706257][T16501] bridge_slave_1: entered allmulticast mode
[  469.713661][T16501] bridge_slave_1: entered promiscuous mode
[  470.015826][T16513] chnl_net:caif_netlink_parms(): no params data found
[  470.039255][T16501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  470.065056][T16501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  470.103488][ T5853] Bluetooth: hci1: command tx timeout
[  470.224229][T16542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2889'.
[  470.267361][T16501] team0: Port device team_slave_0 added
[  470.411605][T16501] team0: Port device team_slave_1 added
[  470.509114][ T5853] Bluetooth: hci4: command tx timeout
[  470.537086][T16550] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  470.599568][T16501] batman_adv: batadv0: Adding interface: batadv_slave_0
[  470.607451][T16501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  470.635836][T16501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  470.662247][T16513] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.670335][T16513] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.678768][T16513] bridge_slave_0: entered allmulticast mode
[  470.691705][T16513] bridge_slave_0: entered promiscuous mode
[  470.711910][T16550] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  470.730913][T16501] batman_adv: batadv0: Adding interface: batadv_slave_1
[  470.738596][T16501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  470.765738][T16501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  470.781391][T16513] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.789146][T16513] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.801271][T16513] bridge_slave_1: entered allmulticast mode
[  470.809012][T16513] bridge_slave_1: entered promiscuous mode
[  470.866258][T16550] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  471.126300][T16550] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  471.150298][T16513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  471.190010][   T68] hsr_slave_0: left promiscuous mode
[  471.198203][   T68] hsr_slave_1: left promiscuous mode
[  471.205005][   T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  471.212460][   T68] batman_adv: batadv0: Removing interface: batadv_slave_0
[  471.222533][   T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  471.223693][ T5853] Bluetooth: hci2: command tx timeout
[  471.242147][   T68] batman_adv: batadv0: Removing interface: batadv_slave_1
[  471.255199][   T68] hsr_slave_0: left promiscuous mode
[  471.260976][   T68] hsr_slave_1: left promiscuous mode
[  471.267529][   T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  471.275156][   T68] batman_adv: batadv0: Removing interface: batadv_slave_0
[  471.284178][   T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  471.291619][   T68] batman_adv: batadv0: Removing interface: batadv_slave_1
[  471.346294][   T68] veth1_macvtap: left promiscuous mode
[  471.351837][   T68] veth0_macvtap: left promiscuous mode
[  471.357798][   T68] veth1_vlan: left promiscuous mode
[  471.363855][   T68] veth0_vlan: left promiscuous mode
[  471.370105][   T68] veth1_macvtap: left promiscuous mode
[  471.375957][   T68] veth0_macvtap: left promiscuous mode
[  471.381606][   T68] veth1_vlan: left promiscuous mode
[  471.387270][   T68] veth0_vlan: left promiscuous mode
[  471.702830][ T5853] Bluetooth: hci0: command tx timeout
[  471.959167][   T68] team0 (unregistering): Port device team_slave_1 removed
[  472.014842][   T68] team0 (unregistering): Port device team_slave_0 removed
[  472.186481][ T5853] Bluetooth: hci1: command tx timeout
[  472.583063][ T5853] Bluetooth: hci4: command tx timeout
[  472.921615][   T68] team0 (unregistering): Port device team_slave_1 removed
[  472.973130][   T68] team0 (unregistering): Port device team_slave_0 removed
[  473.303119][ T5853] Bluetooth: hci2: command tx timeout
[  473.492263][T16513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  473.559274][T16501] hsr_slave_0: entered promiscuous mode
[  473.567346][T16501] hsr_slave_1: entered promiscuous mode
[  473.573727][T16501] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  473.581325][T16501] Cannot create hsr debugfs directory
[  473.602607][T16520] chnl_net:caif_netlink_parms(): no params data found
[  473.649958][T16513] team0: Port device team_slave_0 added
[  473.679437][T16483] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  473.709207][T16513] team0: Port device team_slave_1 added
[  473.720314][T16550] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20002 - 0
[  473.735533][T16550] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20002 - 0
[  473.774743][T16483] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  473.843871][T16550] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20002 - 0
[  473.888040][T16483] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  473.899003][T16513] batman_adv: batadv0: Adding interface: batadv_slave_0
[  473.906740][T16513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  473.933080][T16513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  473.946355][T16513] batman_adv: batadv0: Adding interface: batadv_slave_1
[  473.953693][T16513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  473.980362][T16513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  474.005166][T16550] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20002 - 0
[  474.019581][T16520] bridge0: port 1(bridge_slave_0) entered blocking state
[  474.028102][T16520] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.035817][T16520] bridge_slave_0: entered allmulticast mode
[  474.043902][T16520] bridge_slave_0: entered promiscuous mode
[  474.056917][T16483] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  474.124214][T16520] bridge0: port 2(bridge_slave_1) entered blocking state
[  474.131365][T16520] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.139625][T16520] bridge_slave_1: entered allmulticast mode
[  474.149118][T16520] bridge_slave_1: entered promiscuous mode
[  474.230492][T16513] hsr_slave_0: entered promiscuous mode
[  474.265749][T16513] hsr_slave_1: entered promiscuous mode
[  474.269790][T16561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2892'.
[  474.272198][T16513] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  474.288530][ T5853] Bluetooth: hci1: command tx timeout
[  474.289477][T16513] Cannot create hsr debugfs directory
[  474.319401][T16520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  474.390877][T16561] bond14: entered promiscuous mode
[  474.406182][T16561] 8021q: adding VLAN 0 to HW filter on device bond14
[  474.418167][T16520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  474.452073][T16562] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2892'.
[  474.511064][T16520] team0: Port device team_slave_0 added
[  474.596291][T16520] team0: Port device team_slave_1 added
[  474.663201][ T5853] Bluetooth: hci4: command tx timeout
[  474.796577][   T68] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.831954][T16520] batman_adv: batadv0: Adding interface: batadv_slave_0
[  474.851634][T16520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  474.903051][T16520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  474.915950][T16520] batman_adv: batadv0: Adding interface: batadv_slave_1
[  474.923550][T16520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  474.950133][T16520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  474.996283][   T68] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.098879][T16520] hsr_slave_0: entered promiscuous mode
[  475.105418][T16520] hsr_slave_1: entered promiscuous mode
[  475.111561][T16520] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  475.119992][T16520] Cannot create hsr debugfs directory
[  475.149534][   T68] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.245268][   T68] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.282483][T16483] 8021q: adding VLAN 0 to HW filter on device bond0
[  475.382998][ T5853] Bluetooth: hci2: command tx timeout
[  475.413726][T16483] 8021q: adding VLAN 0 to HW filter on device team0
[  475.459423][T16585] netlink: 'syz.3.2898': attribute type 11 has an invalid length.
[  475.483737][ T7701] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.490855][ T7701] bridge0: port 1(bridge_slave_0) entered forwarding state
[  475.505036][ T7701] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.512154][ T7701] bridge0: port 2(bridge_slave_1) entered forwarding state
[  475.549899][T16585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2898'.
[  475.561537][T16586] netlink: 'syz.3.2898': attribute type 11 has an invalid length.
[  475.615773][T16501] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  475.655291][   T68] bridge_slave_1: left allmulticast mode
[  475.660963][   T68] bridge_slave_1: left promiscuous mode
[  475.672454][   T68] bridge0: port 2(bridge_slave_1) entered disabled state
[  475.694192][   T68] bridge_slave_0: left allmulticast mode
[  475.699997][   T68] bridge_slave_0: left promiscuous mode
[  475.707573][   T68] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.107564][   T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  476.119450][   T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  476.130136][   T68] bond0 (unregistering): Released all slaves
[  476.165273][T16501] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  476.224055][T16501] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  476.248922][T16501] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  476.602310][T16501] 8021q: adding VLAN 0 to HW filter on device bond0
[  476.720196][T16483] 8021q: adding VLAN 0 to HW filter on device batadv0
[  476.739316][T16501] 8021q: adding VLAN 0 to HW filter on device team0
[  476.743026][ T5853] Bluetooth: hci4: command tx timeout
[  476.766212][   T68] hsr_slave_0: left promiscuous mode
[  476.772245][   T68] hsr_slave_1: left promiscuous mode
[  476.794883][   T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  476.802399][   T68] batman_adv: batadv0: Removing interface: batadv_slave_0
[  476.810940][   T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  476.819141][   T68] batman_adv: batadv0: Removing interface: batadv_slave_1
[  476.846735][   T68] veth1_macvtap: left promiscuous mode
[  476.852304][   T68] veth0_macvtap: left promiscuous mode
[  476.858307][   T68] veth1_vlan: left promiscuous mode
[  476.863756][   T68] veth0_vlan: left promiscuous mode
[  477.498169][   T68] team0 (unregistering): Port device team_slave_1 removed
[  477.549538][   T68] team0 (unregistering): Port device team_slave_0 removed
[  478.226260][ T7700] bridge0: port 1(bridge_slave_0) entered blocking state
[  478.233469][ T7700] bridge0: port 1(bridge_slave_0) entered forwarding state
[  478.277084][ T7700] bridge0: port 2(bridge_slave_1) entered blocking state
[  478.284273][ T7700] bridge0: port 2(bridge_slave_1) entered forwarding state
[  478.319033][T16483] veth0_vlan: entered promiscuous mode
[  478.410153][T16483] veth1_vlan: entered promiscuous mode
[  478.524474][T16483] veth0_macvtap: entered promiscuous mode
[  478.548253][T16483] veth1_macvtap: entered promiscuous mode
[  478.608416][T16483] batman_adv: batadv0: Interface activated: batadv_slave_0
[  478.645323][T16483] batman_adv: batadv0: Interface activated: batadv_slave_1
[  478.693479][T16483] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  478.706006][T16483] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  478.715631][T16483] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  478.725302][T16483] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  478.882051][T16520] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  478.906268][T16520] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  478.930627][T16520] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  478.947801][T16520] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  478.969079][T16501] 8021q: adding VLAN 0 to HW filter on device batadv0
[  479.119636][ T6032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  479.143520][ T6032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  479.238888][T16513] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  479.261422][T16513] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  479.286766][T16513] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  479.305823][ T5903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  479.315786][T16513] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  479.333634][ T5903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  479.429043][T16643] netlink: 'syz.3.2913': attribute type 3 has an invalid length.
[  479.450079][T16520] 8021q: adding VLAN 0 to HW filter on device bond0
[  479.457503][T16643] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2913'.
[  479.495118][T16646] netlink: 'syz.3.2913': attribute type 3 has an invalid length.
[  479.518482][T16646] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2913'.
[  479.532631][T16520] 8021q: adding VLAN 0 to HW filter on device team0
[  479.558262][T16501] veth0_vlan: entered promiscuous mode
[  479.595621][ T7701] bridge0: port 1(bridge_slave_0) entered blocking state
[  479.602789][ T7701] bridge0: port 1(bridge_slave_0) entered forwarding state
[  479.640425][ T5903] bridge0: port 2(bridge_slave_1) entered blocking state
[  479.647610][ T5903] bridge0: port 2(bridge_slave_1) entered forwarding state
[  479.714378][T16501] veth1_vlan: entered promiscuous mode
[  479.729595][T16513] 8021q: adding VLAN 0 to HW filter on device bond0
[  479.787563][T16513] 8021q: adding VLAN 0 to HW filter on device team0
[  479.818169][T16501] veth0_macvtap: entered promiscuous mode
[  479.832360][ T7701] bridge0: port 1(bridge_slave_0) entered blocking state
[  479.839544][ T7701] bridge0: port 1(bridge_slave_0) entered forwarding state
[  479.874810][ T6032] bridge0: port 2(bridge_slave_1) entered blocking state
[  479.881954][ T6032] bridge0: port 2(bridge_slave_1) entered forwarding state
[  479.978265][   T68] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.018355][T16501] veth1_macvtap: entered promiscuous mode
[  480.055081][T16513] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  480.113192][T16513] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  480.174774][   T68] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.287250][   T68] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.334460][T16501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  480.363303][T16501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.380237][T16501] batman_adv: batadv0: Interface activated: batadv_slave_0
[  480.404738][T16501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  480.419886][T16501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.431780][T16501] batman_adv: batadv0: Interface activated: batadv_slave_1
[  480.447240][T16520] 8021q: adding VLAN 0 to HW filter on device batadv0
[  480.468867][T16501] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  480.485299][T16501] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  480.498006][T16501] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  480.507788][T16501] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  480.528450][T16513] 8021q: adding VLAN 0 to HW filter on device batadv0
[  480.611217][   T68] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.653052][ T7701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.658455][T16520] veth0_vlan: entered promiscuous mode
[  480.660903][ T7701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.715493][T16520] veth1_vlan: entered promiscuous mode
[  480.744689][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.752562][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.766557][T16513] veth0_vlan: entered promiscuous mode
[  480.789341][T16513] veth1_vlan: entered promiscuous mode
[  480.838018][T16513] veth0_macvtap: entered promiscuous mode
[  480.878529][T16513] veth1_macvtap: entered promiscuous mode
[  480.977319][T16520] veth0_macvtap: entered promiscuous mode
[  481.002039][T16520] veth1_macvtap: entered promiscuous mode
[  481.010859][   T68] bridge_slave_1: left allmulticast mode
[  481.020883][   T68] bridge_slave_1: left promiscuous mode
[  481.027127][   T68] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.037442][   T68] bridge_slave_0: left allmulticast mode
[  481.043581][   T68] bridge_slave_0: left promiscuous mode
[  481.049250][   T68] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.680679][   T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  481.689793][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  481.699654][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  481.708786][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  481.711414][   T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  481.721387][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  481.732376][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  481.739970][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  481.752021][   T68] bond0 (unregistering): Released all slaves
[  481.770799][T16513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  481.782827][T16513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.794317][T16513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  481.804899][T16513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.816572][T16513] batman_adv: batadv0: Interface activated: batadv_slave_0
[  481.835980][T16665] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  481.850175][T16666] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  481.857920][T16666] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  481.870251][T16663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2916'.
[  481.911216][T16671] tipc: Resetting bearer <eth:syzkaller0>
[  481.919390][T16671] ------------[ cut here ]------------
[  481.925153][T16671] Invalid VIF (ffff88802af429d0) magic 0x0, 08:02:11:00:00:01, 3/0
[  481.933722][T16671] WARNING: CPU: 1 PID: 16671 at drivers/net/wireless/virtual/mac80211_hwsim.c:237 mac80211_hwsim_tx+0x1b73/0x23c0
[  481.945794][T16671] Modules linked in:
[  481.949723][T16671] CPU: 1 UID: 0 PID: 16671 Comm: syz.3.2916 Not tainted 6.14.0-rc7-syzkaller-00183-g70facbf978ac #0
[  481.960548][T16671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  481.970704][T16671] RIP: 0010:mac80211_hwsim_tx+0x1b73/0x23c0
[  481.976667][T16671] Code: 28 84 c0 0f 85 06 08 00 00 45 0f b6 8e 61 04 00 00 48 c7 c7 60 eb ca 8c 4c 89 f6 44 89 e2 48 89 e9 41 89 d8 e8 ce 3e 3c fa 90 <0f> 0b 90 90 e9 65 f2 ff ff e8 7f 83 7c fa 90 0f 0b 90 e9 d1 f2 ff
[  481.996366][T16671] RSP: 0018:ffffc90003836bb0 EFLAGS: 00010246
[  482.002478][T16671] RAX: 428fe2e9be873e00 RBX: 0000000000000003 RCX: 0000000000080000
[  482.010526][T16671] RDX: ffffc90016019000 RSI: 000000000000896e RDI: 000000000000896f
[  482.018581][T16671] RBP: ffff88802af42e2a R08: ffffffff81819e52 R09: fffffbfff1d3a69c
[  482.026664][T16671] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: 0000000000000000
[  482.034695][T16671] R13: dffffc0000000000 R14: ffff88802af429d0 R15: 0000000000000000
[  482.042750][T16671] FS:  00007fd02450f6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  482.051724][T16671] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  482.058385][T16671] CR2: 00007f812ac10218 CR3: 000000004bd56000 CR4: 00000000003526f0
[  482.066417][T16671] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  482.074458][T16671] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  482.082455][T16671] Call Trace:
[  482.085798][T16671]  <TASK>
[  482.088753][T16671]  ? __warn+0x165/0x4d0
[  482.092985][T16671]  ? mac80211_hwsim_tx+0x1b73/0x23c0
[  482.098303][T16671]  ? report_bug+0x2b3/0x500
[  482.102874][T16671]  ? mac80211_hwsim_tx+0x1b73/0x23c0
[  482.108192][T16671]  ? handle_bug+0x60/0x90
[  482.112529][T16671]  ? exc_invalid_op+0x1a/0x50
[  482.117274][T16671]  ? asm_exc_invalid_op+0x1a/0x20
[  482.122381][T16671]  ? __warn_printk+0x292/0x360
[  482.127256][T16671]  ? mac80211_hwsim_tx+0x1b73/0x23c0
[  482.132624][T16671]  ieee80211_handle_wake_tx_queue+0x1ae/0x2d0
[  482.138824][T16671]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[  482.145514][T16671]  ? ieee80211_queue_skb+0x18b6/0x24b0
[  482.151011][T16671]  ? do_raw_spin_unlock+0x13c/0x8b0
[  482.156328][T16671]  ieee80211_queue_skb+0x1ae9/0x24b0
[  482.161666][T16671]  ieee80211_tx+0x2c4/0x470
[  482.166253][T16671]  ? __pfx_ieee80211_tx+0x10/0x10
[  482.171346][T16671]  ? ieee80211_xmit+0x30f/0x3f0
[  482.176270][T16671]  __ieee80211_subif_start_xmit+0xe65/0x15a0
[  482.182297][T16671]  ? __ieee80211_subif_start_xmit+0x300/0x15a0
[  482.188492][T16671]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  482.194954][T16671]  ? __lock_acquire+0x1397/0x2100
[  482.200005][T16671]  ieee80211_subif_start_xmit+0xde/0x4d0
[  482.205704][T16671]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  482.211971][T16671]  ? __pfx_lock_acquire+0x10/0x10
[  482.217053][T16671]  dev_hard_start_xmit+0x27a/0x7d0
[  482.222212][T16671]  __dev_queue_xmit+0x1b73/0x3f50
[  482.227290][T16671]  ? __dev_queue_xmit+0x2f4/0x3f50
[  482.232428][T16671]  ? tipc_net+0x45/0x270
[  482.236722][T16671]  ? __pfx___dev_queue_xmit+0x10/0x10
[  482.242125][T16671]  ? tipc_net+0x45/0x270
[  482.246433][T16671]  ? tipc_net+0x207/0x270
[  482.250795][T16671]  ? tipc_crypto_xmit+0x1e8/0x22b0
[  482.256034][T16671]  ? __asan_memcpy+0x40/0x70
[  482.260662][T16671]  ? eth_header+0x11c/0x1f0
[  482.265260][T16671]  ? __pfx_eth_header+0x10/0x10
[  482.270165][T16671]  tipc_l2_send_msg+0x321/0x3f0
[  482.275108][T16671]  tipc_bearer_xmit_skb+0x2f5/0x460
[  482.280353][T16671]  ? tipc_bearer_xmit_skb+0xcd/0x460
[  482.285755][T16671]  ? __pfx_tipc_bearer_xmit_skb+0x10/0x10
[  482.291542][T16671]  tipc_disc_reset+0x29d/0x3b0
[  482.296361][T16671]  ? __pfx_tipc_disc_reset+0x10/0x10
[  482.301667][T16671]  ? tipc_node_delete_links+0x56/0x220
[  482.307175][T16671]  tipc_l2_device_event+0x548/0x750
[  482.312392][T16671]  notifier_call_chain+0x1a5/0x3f0
[  482.317549][T16671]  dev_set_mtu_ext+0x4e5/0x710
[  482.322320][T16671]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  482.328691][T16671]  ? __pfx_dev_set_mtu_ext+0x10/0x10
[  482.334041][T16671]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  482.339967][T16671]  ? lockdep_hardirqs_on+0x99/0x150
[  482.345232][T16671]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  482.351163][T16671]  ? rcu_is_watching+0x15/0xb0
[  482.355996][T16671]  dev_set_mtu+0xba/0x1b0
[  482.360348][T16671]  ? __mutex_lock+0x602/0x1010
[  482.365184][T16671]  ? __pfx_dev_set_mtu+0x10/0x10
[  482.370156][T16671]  ? full_name_hash+0x93/0xe0
[  482.374901][T16671]  ? __dev_get_by_name+0xe1/0x130
[  482.379965][T16671]  ? dev_ifsioc+0x938/0xc30
[  482.384623][T16671]  dev_ioctl+0x819/0x1380
[  482.388989][T16671]  sock_do_ioctl+0x240/0x460
[  482.393660][T16671]  ? __pfx_sock_do_ioctl+0x10/0x10
[  482.398843][T16671]  sock_ioctl+0x5c7/0x8d0
[  482.403237][T16671]  ? __pfx_sock_ioctl+0x10/0x10
[  482.408130][T16671]  ? __fget_files+0x2a/0x410
[  482.412814][T16671]  ? __fget_files+0x2a/0x410
[  482.417470][T16671]  ? __pfx_sock_ioctl+0x10/0x10
[  482.422353][T16671]  __se_sys_ioctl+0xf5/0x170
[  482.427022][T16671]  do_syscall_64+0xf3/0x230
[  482.431568][T16671]  ? clear_bhb_loop+0x35/0x90
[  482.436317][T16671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.442262][T16671] RIP: 0033:0x7fd02378d169
[  482.446758][T16671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  482.466429][T16671] RSP: 002b:00007fd02450f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  482.474904][T16671] RAX: ffffffffffffffda RBX: 00007fd0239a64e0 RCX: 00007fd02378d169
[  482.482985][T16671] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000007
[  482.490981][T16671] RBP: 00007fd02380e2a0 R08: 0000000000000000 R09: 0000000000000000
[  482.499009][T16671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  482.507058][T16671] R13: 0000000000000000 R14: 00007fd0239a64e0 R15: 00007ffd724fc4c8
[  482.515148][T16671]  </TASK>
[  482.518213][T16671] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  482.525513][T16671] CPU: 1 UID: 0 PID: 16671 Comm: syz.3.2916 Not tainted 6.14.0-rc7-syzkaller-00183-g70facbf978ac #0
[  482.536312][T16671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  482.546492][T16671] Call Trace:
[  482.549791][T16671]  <TASK>
[  482.552777][T16671]  dump_stack_lvl+0x241/0x360
[  482.557511][T16671]  ? __pfx_dump_stack_lvl+0x10/0x10
[  482.562747][T16671]  ? __pfx__printk+0x10/0x10
[  482.567394][T16671]  ? vscnprintf+0x5d/0x90
[  482.571755][T16671]  panic+0x349/0x880
[  482.575672][T16671]  ? __warn+0x174/0x4d0
[  482.579886][T16671]  ? __pfx_panic+0x10/0x10
[  482.584352][T16671]  __warn+0x344/0x4d0
[  482.588369][T16671]  ? mac80211_hwsim_tx+0x1b73/0x23c0
[  482.593705][T16671]  report_bug+0x2b3/0x500
[  482.598079][T16671]  ? mac80211_hwsim_tx+0x1b73/0x23c0
[  482.603405][T16671]  handle_bug+0x60/0x90
[  482.607600][T16671]  exc_invalid_op+0x1a/0x50
[  482.612142][T16671]  asm_exc_invalid_op+0x1a/0x20
[  482.617026][T16671] RIP: 0010:mac80211_hwsim_tx+0x1b73/0x23c0
[  482.622957][T16671] Code: 28 84 c0 0f 85 06 08 00 00 45 0f b6 8e 61 04 00 00 48 c7 c7 60 eb ca 8c 4c 89 f6 44 89 e2 48 89 e9 41 89 d8 e8 ce 3e 3c fa 90 <0f> 0b 90 90 e9 65 f2 ff ff e8 7f 83 7c fa 90 0f 0b 90 e9 d1 f2 ff
[  482.642600][T16671] RSP: 0018:ffffc90003836bb0 EFLAGS: 00010246
[  482.648696][T16671] RAX: 428fe2e9be873e00 RBX: 0000000000000003 RCX: 0000000000080000
[  482.656681][T16671] RDX: ffffc90016019000 RSI: 000000000000896e RDI: 000000000000896f
[  482.664662][T16671] RBP: ffff88802af42e2a R08: ffffffff81819e52 R09: fffffbfff1d3a69c
[  482.672648][T16671] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: 0000000000000000
[  482.680640][T16671] R13: dffffc0000000000 R14: ffff88802af429d0 R15: 0000000000000000
[  482.688633][T16671]  ? __warn_printk+0x292/0x360
[  482.693452][T16671]  ieee80211_handle_wake_tx_queue+0x1ae/0x2d0
[  482.699551][T16671]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[  482.706181][T16671]  ? ieee80211_queue_skb+0x18b6/0x24b0
[  482.711680][T16671]  ? do_raw_spin_unlock+0x13c/0x8b0
[  482.716918][T16671]  ieee80211_queue_skb+0x1ae9/0x24b0
[  482.722250][T16671]  ieee80211_tx+0x2c4/0x470
[  482.726775][T16671]  ? __pfx_ieee80211_tx+0x10/0x10
[  482.731843][T16671]  ? ieee80211_xmit+0x30f/0x3f0
[  482.736716][T16671]  __ieee80211_subif_start_xmit+0xe65/0x15a0
[  482.742728][T16671]  ? __ieee80211_subif_start_xmit+0x300/0x15a0
[  482.748899][T16671]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  482.755328][T16671]  ? __lock_acquire+0x1397/0x2100
[  482.760387][T16671]  ieee80211_subif_start_xmit+0xde/0x4d0
[  482.766036][T16671]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  482.772302][T16671]  ? __pfx_lock_acquire+0x10/0x10
[  482.777359][T16671]  dev_hard_start_xmit+0x27a/0x7d0
[  482.782497][T16671]  __dev_queue_xmit+0x1b73/0x3f50
[  482.787548][T16671]  ? __dev_queue_xmit+0x2f4/0x3f50
[  482.792677][T16671]  ? tipc_net+0x45/0x270
[  482.796943][T16671]  ? __pfx___dev_queue_xmit+0x10/0x10
[  482.802339][T16671]  ? tipc_net+0x45/0x270
[  482.806611][T16671]  ? tipc_net+0x207/0x270
[  482.810949][T16671]  ? tipc_crypto_xmit+0x1e8/0x22b0
[  482.816091][T16671]  ? __asan_memcpy+0x40/0x70
[  482.820691][T16671]  ? eth_header+0x11c/0x1f0
[  482.825207][T16671]  ? __pfx_eth_header+0x10/0x10
[  482.830071][T16671]  tipc_l2_send_msg+0x321/0x3f0
[  482.834936][T16671]  tipc_bearer_xmit_skb+0x2f5/0x460
[  482.840145][T16671]  ? tipc_bearer_xmit_skb+0xcd/0x460
[  482.845450][T16671]  ? __pfx_tipc_bearer_xmit_skb+0x10/0x10
[  482.851203][T16671]  tipc_disc_reset+0x29d/0x3b0
[  482.855995][T16671]  ? __pfx_tipc_disc_reset+0x10/0x10
[  482.861305][T16671]  ? tipc_node_delete_links+0x56/0x220
[  482.866791][T16671]  tipc_l2_device_event+0x548/0x750
[  482.872013][T16671]  notifier_call_chain+0x1a5/0x3f0
[  482.877151][T16671]  dev_set_mtu_ext+0x4e5/0x710
[  482.881928][T16671]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  482.888282][T16671]  ? __pfx_dev_set_mtu_ext+0x10/0x10
[  482.893577][T16671]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  482.899487][T16671]  ? lockdep_hardirqs_on+0x99/0x150
[  482.904703][T16671]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  482.910613][T16671]  ? rcu_is_watching+0x15/0xb0
[  482.915397][T16671]  dev_set_mtu+0xba/0x1b0
[  482.919735][T16671]  ? __mutex_lock+0x602/0x1010
[  482.924517][T16671]  ? __pfx_dev_set_mtu+0x10/0x10
[  482.929470][T16671]  ? full_name_hash+0x93/0xe0
[  482.934171][T16671]  ? __dev_get_by_name+0xe1/0x130
[  482.939214][T16671]  ? dev_ifsioc+0x938/0xc30
[  482.943737][T16671]  dev_ioctl+0x819/0x1380
[  482.948082][T16671]  sock_do_ioctl+0x240/0x460
[  482.952698][T16671]  ? __pfx_sock_do_ioctl+0x10/0x10
[  482.957850][T16671]  sock_ioctl+0x5c7/0x8d0
[  482.962196][T16671]  ? __pfx_sock_ioctl+0x10/0x10
[  482.967058][T16671]  ? __fget_files+0x2a/0x410
[  482.971682][T16671]  ? __fget_files+0x2a/0x410
[  482.976294][T16671]  ? __pfx_sock_ioctl+0x10/0x10
[  482.981159][T16671]  __se_sys_ioctl+0xf5/0x170
[  482.985762][T16671]  do_syscall_64+0xf3/0x230
[  482.990286][T16671]  ? clear_bhb_loop+0x35/0x90
[  482.994990][T16671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.000901][T16671] RIP: 0033:0x7fd02378d169
[  483.005325][T16671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  483.024947][T16671] RSP: 002b:00007fd02450f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  483.033385][T16671] RAX: ffffffffffffffda RBX: 00007fd0239a64e0 RCX: 00007fd02378d169
[  483.041363][T16671] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000007
[  483.049344][T16671] RBP: 00007fd02380e2a0 R08: 0000000000000000 R09: 0000000000000000
[  483.057326][T16671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  483.065310][T16671] R13: 0000000000000000 R14: 00007fd0239a64e0 R15: 00007ffd724fc4c8
[  483.073318][T16671]  </TASK>
[  483.076672][T16671] Kernel Offset: disabled
[  483.081129][T16671] Rebooting in 86400 seconds..