last executing test programs:
1m11.882859163s ago: executing program 3 (id=12):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600))
r1 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c00000111209078a41414bb00"/42], 0x0)
sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='percpu_free_percpu\x00', r5}, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
close(r6)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000d80)=ANY=[@ANYBLOB="ac060000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x6ac}}, 0x0)
r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r8 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_opts(r8, 0x0, 0xd, &(0x7f0000000400)="0501000000edcb25a6bbe2584a756a64cf757239e3ad28e7affd40b5715a4f28ddf1f824a08ec639b5e59e102792559bf07e82a37dea40c99bc2200204e95e4f7712d8f91e4379388122ca3534b805d30e9b0c4863f4892cc769d00f678ee9baabdebf2cd6c1e1ad02057ce5c7e03cbc13220f980d4dd854887d400a94dccfd89937ff93d1a54b68c67f1a24e26fca1cd29e0fa179926f09f9b3e7040e164a475b706109bb22a64631a10a1bce8e2dae6f282ef81fc7c58040638bbb469b8245a5f07c461486eb52800235026a4da3a46032835dad6cbd8629a9c28174e5c8e2233a6b08ee1e58bc67992534bb6ddaf334", 0xf1)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000300)='batadv_slave_1\x00', 0x10)
sendmsg$inet(r8, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="08001eb3b0335d00", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x8000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}}, 0x0)
setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)
bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
57.145897362s ago: executing program 3 (id=12):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600))
r1 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c00000111209078a41414bb00"/42], 0x0)
sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='percpu_free_percpu\x00', r5}, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
close(r6)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000d80)=ANY=[@ANYBLOB="ac060000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x6ac}}, 0x0)
r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r8 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_opts(r8, 0x0, 0xd, &(0x7f0000000400)="0501000000edcb25a6bbe2584a756a64cf757239e3ad28e7affd40b5715a4f28ddf1f824a08ec639b5e59e102792559bf07e82a37dea40c99bc2200204e95e4f7712d8f91e4379388122ca3534b805d30e9b0c4863f4892cc769d00f678ee9baabdebf2cd6c1e1ad02057ce5c7e03cbc13220f980d4dd854887d400a94dccfd89937ff93d1a54b68c67f1a24e26fca1cd29e0fa179926f09f9b3e7040e164a475b706109bb22a64631a10a1bce8e2dae6f282ef81fc7c58040638bbb469b8245a5f07c461486eb52800235026a4da3a46032835dad6cbd8629a9c28174e5c8e2233a6b08ee1e58bc67992534bb6ddaf334", 0xf1)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000300)='batadv_slave_1\x00', 0x10)
sendmsg$inet(r8, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="08001eb3b0335d00", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x8000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}}, 0x0)
setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)
bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
44.410771971s ago: executing program 3 (id=12):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600))
r1 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c00000111209078a41414bb00"/42], 0x0)
sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='percpu_free_percpu\x00', r5}, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
close(r6)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000d80)=ANY=[@ANYBLOB="ac060000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x6ac}}, 0x0)
r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r8 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_opts(r8, 0x0, 0xd, &(0x7f0000000400)="0501000000edcb25a6bbe2584a756a64cf757239e3ad28e7affd40b5715a4f28ddf1f824a08ec639b5e59e102792559bf07e82a37dea40c99bc2200204e95e4f7712d8f91e4379388122ca3534b805d30e9b0c4863f4892cc769d00f678ee9baabdebf2cd6c1e1ad02057ce5c7e03cbc13220f980d4dd854887d400a94dccfd89937ff93d1a54b68c67f1a24e26fca1cd29e0fa179926f09f9b3e7040e164a475b706109bb22a64631a10a1bce8e2dae6f282ef81fc7c58040638bbb469b8245a5f07c461486eb52800235026a4da3a46032835dad6cbd8629a9c28174e5c8e2233a6b08ee1e58bc67992534bb6ddaf334", 0xf1)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000300)='batadv_slave_1\x00', 0x10)
sendmsg$inet(r8, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="08001eb3b0335d00", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x8000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}}, 0x0)
setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)
bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
33.705190019s ago: executing program 3 (id=12):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600))
r1 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c00000111209078a41414bb00"/42], 0x0)
sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='percpu_free_percpu\x00', r5}, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
close(r6)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000d80)=ANY=[@ANYBLOB="ac060000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="9006330080000000080211000001080211000000505050505050000000000002000000000000000000000406001f000000000602000825030000002a0100dde48aa886a4a88b61418ef437076c182468ef7658178361e2a3c8c51ebc8bc082fd5e89fc0882660b4a0d82263f205d52b65d91e9ff4a3a41116280d74b11b4905f7267ba2b7c5ecd7574ba5aaf56137bbeedec51c44b54ecea6d565a515de1e73f45767f859e475b892a57ccd449ab213a250b92f7a7b31c6f9363d5fa32a5b44da3bfafc61a7942c481ae483078d79a1d5a26cae35c29ab4fbd6620a2d09538389c2bd496fa101becbd3dcfb17382012b7fb0d6d006d110f0ca6c84d054642b541ed1207609167c2ff2b1ea9bc5ea468456c21b425b71449ce2daebba5dfe234707e071e4dd6cee1e56116310701474ef4a1b29b226517cf2a6e34de69ac54ccde44574cb86dc7dbe2feabaffa456a58e677594589df746faada7c996d306b6ceada82f52375c6704a28502037ffa9ba8919219e4f365cf6fc8f3cb8a1707430a8671287763f17a82dd0d8284c4283ac8b4b5c15135a405dda4aa7f57eae931f772507e5c62316a79a8fbf5c80508de9513cfa2a5d5a717337c6e9c0e87229d621261cde0780776919bd0e4c03e613b5468de36c97c41d34cdb3abd901e3e737bdcd2266e8e6fd46d57e1cb87e74747b2e5d31fac82af26d46954cfb88233c367a8fd320f88293d04db452818f64a3420d6e7641fc00301c0396e434e9b4a8a154f21b938116426ee46b796306a2fa1455b888c07a5c75af34dd5e86837ddcd7f2353f6c05b07f729d226108f041dabee8b197524c603f225ad5b55bf5b88354bc24ecaf9fc20eff4af361e40f392b1b2a29d49c3856c5189bef249193b23af2ea110306e87e41c273f388c0cee6704d7436d0abbb1e6298b45dcbb0a3a43fb4be81d777f6b22a4dcb2442fef43c68722e691e5216d7ef7356c945bd4dfb6f8acd066c1ec031532632fd34928149f45065cc65788feab1f1dfc1272b57569a86c8c47263fd45856adbede86563cfbfe3c5ecf84f88b7757d3622cd8090d86681038897d3d6caf710eab663239dd5b1b395ca4764254b963a8bb9cd251fa8a3352a5520c11c74d142559b1a5f69be7f63660ffae91e9c535a241c0873603eaf07cc2b11237bf02a66a447ccb0dde0bc83470f7b66f2121716c96a7bed835968388a8749ceea9601bd0fdddfffd59cb84faeaf5cd921bff109cf35b0fa40634b4ce1df9995572229aaebcb59e0b77145af62f018ffded32a36f2a3df6892cee1dc8c4ccd6f4429ad0e2be95f6f4a0fa6f302557f04f054f82a0628600a7d6f7365b802f3d97301d87e98601b82c9c92711c33a53178e0b93fad917813ca9f5df0b9d5c2c89f49a1a1c13bad7d2a1f69bec1eb2b3c3b7b012d16c97087336e4fbbbb32b662041f52c82b31e0e8a39a37b3de5e2455a02be0abbaee54d6bc903600000000edd3f08a4769f9fe0ea56269691b2193df5ea388d2b677ef18ac00a5b3bc523c8ac590abfc32ddbf9b79d93b4ca60e65371f0f1b3566834fe7957944cd93d8e37296be9f00dd0277ddd11ca5ef6e83fe41a700292908cfe9e9bd10284561380b29577522c7af8e748608fb43f820f374fc6799858df2f2f80b7de8a868779dafe3cf5f1f996346f54c7a84bd0b4f1cbcd9d396400623fc55008ec0bb73e5548ca2470b02e69f8ec18b9a6751b78a088727c059b3fe2e5aa277b80792ec8ad0c81af0f526a1191e2b40624839292178df43b585a0e15519b25a7995801e059b8e21ee0fd003c225675b3ea3a18bba894e9f20f1cbb97fdf17a1e2cbfa7487a9f12b8f7e5ccc75f0797607863541564ee1172d455c050d360e5554e0ddf5345a398ce624ff1097e1506a9d74cb623a88035bb3f4e3fef41bc3edfd40a2d4580df1ed9cba1f6f67b612efb18f5bf6eb350c6166590cb3eb17aed689a19d7ae6dad1a3d3d933378f38f922478e66b110aa19d5bda75c212e648fbf659fb93a75acd7a5223658deec7d2b5d223ab4793feac4082810c48fff2eec83db836c9c39e1f17b1457c83c27e6457c5172cdaaa556320c8b88cef37d998abf0b5e0727ab2af894570172d763f02600607b2edb3431e4eaed0ee2811677f6c45d332ff7b494df535179fbf1fa1fe60e47b279b85b0db1bb9dcb86a1cd9c7bb535d3a31bb87781438f1c09b0080c06bfab8fc74b7bec8bfc71dd50699173e638ac8d31a6543099cea8e306b40d068cb061cf1a376477c1766d26b83d3474c187d019fdda1a414308456df7c89379b3a7d3036b74a2af92aed8679c9a861fd0b19cbb97316737397730c993"], 0x6ac}}, 0x0)
r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r8 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_opts(r8, 0x0, 0xd, &(0x7f0000000400)="0501000000edcb25a6bbe2584a756a64cf757239e3ad28e7affd40b5715a4f28ddf1f824a08ec639b5e59e102792559bf07e82a37dea40c99bc2200204e95e4f7712d8f91e4379388122ca3534b805d30e9b0c4863f4892cc769d00f678ee9baabdebf2cd6c1e1ad02057ce5c7e03cbc13220f980d4dd854887d400a94dccfd89937ff93d1a54b68c67f1a24e26fca1cd29e0fa179926f09f9b3e7040e164a475b706109bb22a64631a10a1bce8e2dae6f282ef81fc7c58040638bbb469b8245a5f07c461486eb52800235026a4da3a46032835dad6cbd8629a9c28174e5c8e2233a6b08ee1e58bc67992534bb6ddaf334", 0xf1)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000300)='batadv_slave_1\x00', 0x10)
sendmsg$inet(r8, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="08001eb3b0335d00", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x8000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}}, 0x0)
setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)
bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
19.973779207s ago: executing program 3 (id=12):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600))
r1 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c00000111209078a41414bb00"/42], 0x0)
sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='percpu_free_percpu\x00', r5}, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
close(r6)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000d80)=ANY=[@ANYBLOB="ac060000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x6ac}}, 0x0)
r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r8 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_opts(r8, 0x0, 0xd, &(0x7f0000000400)="0501000000edcb25a6bbe2584a756a64cf757239e3ad28e7affd40b5715a4f28ddf1f824a08ec639b5e59e102792559bf07e82a37dea40c99bc2200204e95e4f7712d8f91e4379388122ca3534b805d30e9b0c4863f4892cc769d00f678ee9baabdebf2cd6c1e1ad02057ce5c7e03cbc13220f980d4dd854887d400a94dccfd89937ff93d1a54b68c67f1a24e26fca1cd29e0fa179926f09f9b3e7040e164a475b706109bb22a64631a10a1bce8e2dae6f282ef81fc7c58040638bbb469b8245a5f07c461486eb52800235026a4da3a46032835dad6cbd8629a9c28174e5c8e2233a6b08ee1e58bc67992534bb6ddaf334", 0xf1)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000300)='batadv_slave_1\x00', 0x10)
sendmsg$inet(r8, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="08001eb3b0335d00", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x8000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}}, 0x0)
setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)
bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
7.886304215s ago: executing program 3 (id=12):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600))
r1 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c00000111209078a41414bb00"/42], 0x0)
sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='percpu_free_percpu\x00', r5}, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
close(r6)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000d80)=ANY=[@ANYBLOB="ac060000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x6ac}}, 0x0)
r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r8 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_opts(r8, 0x0, 0xd, &(0x7f0000000400)="0501000000edcb25a6bbe2584a756a64cf757239e3ad28e7affd40b5715a4f28ddf1f824a08ec639b5e59e102792559bf07e82a37dea40c99bc2200204e95e4f7712d8f91e4379388122ca3534b805d30e9b0c4863f4892cc769d00f678ee9baabdebf2cd6c1e1ad02057ce5c7e03cbc13220f980d4dd854887d400a94dccfd89937ff93d1a54b68c67f1a24e26fca1cd29e0fa179926f09f9b3e7040e164a475b706109bb22a64631a10a1bce8e2dae6f282ef81fc7c58040638bbb469b8245a5f07c461486eb52800235026a4da3a46032835dad6cbd8629a9c28174e5c8e2233a6b08ee1e58bc67992534bb6ddaf334", 0xf1)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000300)='batadv_slave_1\x00', 0x10)
sendmsg$inet(r8, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="08001eb3b0335d00", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x8000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}}, 0x0)
setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)
bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
2.866692346s ago: executing program 1 (id=1428):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000180)=0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@bridge_getvlan={0x40, 0x72, 0x4, 0x70bd26, 0x25dfdbfb, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x481a9d1debb5c4fa}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0)
r6 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', <r7=>0x0})
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_add_memb(r8, 0x107, 0x18, &(0x7f0000000800)={r7, 0x1, 0x6, @local}, 0x10)
sendto$packet(r8, &(0x7f0000000380)="03031000000000000000d698a10e9fc9ec33516b0aecea94f6339538", 0x1c, 0x40d0, &(0x7f0000000000)={0x11, 0x6, r7, 0x1, 0x4, 0x6, @local}, 0x14)
connect$llc(r1, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x2, @dev}, 0x10)
sendfile(r1, r0, 0x0, 0xffefffff)
sendto$packet(r1, 0x0, 0x0, 0x4010, &(0x7f0000000380)={0x11, 0x1c, 0x0, 0x1, 0x84, 0x6, @link_local}, 0x14)
2.221653179s ago: executing program 1 (id=1435):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@getstats={0x1c, 0x5e, 0x1}, 0x1c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000006f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'})
vmsplice(r1, &(0x7f0000000880)=[{&(0x7f0000000080)="b9a24971a22514be8d6418fecb643e35e82b221cac2d3f2e52c9dc359d291792", 0x20}, {&(0x7f00000002c0)="c271e46e44dcd5ec74e4c404344962181a4e55ed4e4d636307167596fe9d09aedc91fd71474bac2e3e4f579e6c89267aa187f5762fbbd10bb9e9f14c94e369bb1c216e95fbc7936755e6f93827ae69f2145430c6a9f92aff6ef4849077b29daeee5d6e6e678103c0bba46d18cc6b7e3c2ed97fd8a4dd3d2a42360a2f77c1ce64f3b5d899e38d46603f95ff7523fdf40bf6b86950d71b0bd337e10906", 0x9c}, {&(0x7f00000000c0)="46f122863be2c1e32eb7f47722da043f85975b018e86deebbf9352103c951a7a374c85b8c6a7ddbaf1", 0x29}, {&(0x7f0000000500)="27bb7b68c5d5b0e0fec0b7d3f96be91c9b989cd7443f589d33724bad5101b7324bb29a8c437ed76a576d2bc678147f6099b46ba20c2b01234a81a129d1a5d4167ccc0962a8c7f20bcef412ceb1c106ecdac564839c1a0aae0c194d7cddde9df40a2d61c10d542e1967bd03d2f6f47d257c66aeefb06e81acca6e15308583d3217f8124a50f27a0be658c89816aae2520195b07c5ec0b21481d019d15564f88a90f4c21fdc0ae89fc60c1bab6f2c4664658c00e9923150835304c8833c2092815329c79079a067f11cf60f1dbab2838e1e265d299dd1bf0", 0xd7}, {&(0x7f0000000140)="c0a38e6f973113d9e5f3f871ad806b8fc544bfa802dbe8f4d64b6e88589e7068d0a396d8b7126530466bec2db9a8eeddd0a0bb699e00bfa1c71b82b061681195d80b7cc394a8f338ae97831adadad64111d32e5a1cce42191f0e429a13", 0x5d}, {&(0x7f0000000380)="b00b8ef6e6de86c4fe0e687c34d8272c680f5b6eadb615c7805d7a4ba47e2730c9373a7669b631d473843c3e637c50322e0c0941f69bc06e6b97a939764ac594fc3224bfd0b3c2a57e4033710a441eafdd5a0d5a6f4705448659ee723f", 0x5d}, {&(0x7f0000000600)}, {0x0}], 0x8, 0xa)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10)
setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x4, &(0x7f0000000000), 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, 0x1c)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r4, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0xcf)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}, "040022ebffff0200"}}}}}, 0x0)
2.07808744s ago: executing program 2 (id=1437):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x30, 0x6, 0x0, @local, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @mptcp=@ack={0x1e, 0x18, 0x1f, 0x4, "f74bc27a284bc50122c55405be3f2b2ef2c39b66"}]}}}}}}}}, 0x0)
1.915456866s ago: executing program 4 (id=1439):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x4008004)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="070000000000000000000800000008000200000000000c0099000300000002"], 0x28}}, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000000)=0x1314100, 0x4)
1.906801278s ago: executing program 2 (id=1440):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$sock(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="8e", 0x1}], 0x1}}], 0x1, 0x20000001)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x4008}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4000000}, 0x10, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0xe, 0x0, &(0x7f0000000100)="e4604f89ecdb33440008d480eb00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x6a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000343c0020010000000000000000000000000002fe8000000000000000000000000000aa330300000000000007080000000000000000070800000000000000000502", @ANYRES32=0x41424344], 0x0)
1.832168041s ago: executing program 2 (id=1441):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x7fffffff, 0x4)
ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000300", @ANYRES32=r3, @ANYBLOB="08001c00", @ANYRES32, @ANYBLOB], 0x24}}, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040))
unshare(0x22020600)
ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000000c0)={0x29})
write$bt_hci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01012008"], 0xc)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r4, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0xfea7)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0x2}, 0x6)
write$bt_hci(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="030000"], 0x7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', <r7=>0x0, 0x29, 0x81, 0xc1, 0x1, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x20, 0x2, 0x83b811b3}})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$binfmt_misc(r8, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x3, 0x8}, 0xc)
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000500000000000000000000000000003b0000000028cff1f4e81816c8de1da72a131e0d41d30bd8e91215f4f15d420bba928be854bcf24904527f9480525771f74deab8c6c7f7dd5880c39d3563a8a66b4bf40451432df196f54a1ed22f2aa7dd706c69d04c7911590000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x29f29898, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x38}, @map_fd={0x18, 0xa, 0x1, 0x0, r5}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4312, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x1, 0xc, 0x7, 0xb, 0x80, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0xa5, &(0x7f0000000380)=""/165, 0x40f00, 0x22, '\x00', r7, 0x9, r8, 0x8, &(0x7f0000000200)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x6, 0x9ce, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000540)=[r9, r10, r1, r11, r12], &(0x7f0000000640)=[{0x4, 0x1, 0xb, 0xb}], 0x10, 0x80000001, @void, @value}, 0x94)
1.815394631s ago: executing program 4 (id=1442):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b573818", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000004800)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/167, 0xa7}], 0x1}}], 0x1, 0x0, 0x0)
1.59880108s ago: executing program 4 (id=1443):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0)
ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000300", @ANYRES32=r3, @ANYBLOB="08001c00", @ANYRES32, @ANYBLOB], 0x24}}, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040))
unshare(0x22020600)
ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000000c0)={0x29})
write$bt_hci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01012008"], 0xc)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r4, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0xfea7)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0x2}, 0x6)
write$bt_hci(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="030000"], 0x7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', <r7=>0x0, 0x29, 0x81, 0xc1, 0x1, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x20, 0x2, 0x83b811b3}})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$binfmt_misc(r8, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x3, 0x8}, 0xc)
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000500000000000000000000000000003b0000000028cff1f4e81816c8de1da72a131e0d41d30bd8e91215f4f15d420bba928be854bcf24904527f9480525771f74deab8c6c7f7dd5880c39d3563a8a66b4bf40451432df196f54a1ed22f2aa7dd706c69d04c7911590000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x29f29898, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x38}, @map_fd={0x18, 0xa, 0x1, 0x0, r5}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4312, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x1, 0xc, 0x7, 0xb, 0x80, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0xa5, &(0x7f0000000380)=""/165, 0x40f00, 0x22, '\x00', r7, 0x9, r8, 0x8, &(0x7f0000000200)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x6, 0x9ce, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000540)=[r9, r10, r1, r11, r12], &(0x7f0000000640)=[{0x4, 0x1, 0xb, 0xb}], 0x10, 0x80000001, @void, @value}, 0x94)
1.597764355s ago: executing program 2 (id=1444):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xd8)
1.362371115s ago: executing program 2 (id=1445):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendto$inet(r1, &(0x7f00000016c0)="9c054b227b852c1b41ac15cd15fd2c4f", 0x10, 0xc890, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/144, 0x90}], 0x1}}], 0x1, 0x60, 0x0)
1.229681968s ago: executing program 4 (id=1447):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000cc0)={'tunl0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000040)='6', 0x1, 0x0, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
1.164370169s ago: executing program 2 (id=1448):
unshare(0x42000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0)
1.118079473s ago: executing program 1 (id=1449):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'wlan1\x00', &(0x7f0000000400)=@ethtool_gfeatures})
write$binfmt_script(r0, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth0_vlan\x00', 0x0})
1.035983312s ago: executing program 4 (id=1450):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/180, 0xb4}], 0x1}, 0x1000001}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f00000018c0)=""/4096, 0x1000}], 0x1}, 0x52f}], 0x2, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0)
876.485389ms ago: executing program 1 (id=1451):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$sock(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="8e", 0x1}], 0x1}}], 0x1, 0x20000001)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x4008}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b7020000267d957bbfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ce5f53cc7e04bc77b2fef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3a54ea9ee82cf14f3a4cc523ee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d335f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4000000}, 0x10, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0xe, 0x0, &(0x7f0000000100)="e4604f89ecdb33440008d480eb00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x6a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000343c0020010000000000000000000000000002fe8000000000000000000000000000aa330300000000000007080000000000000000070800000000000000000502", @ANYRES32=0x41424344], 0x0)
851.396419ms ago: executing program 0 (id=1452):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x4008004)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="070000000000000000000800000008000200000000000c0099000300000002"], 0x28}}, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000500)={'gre0\x00', 0x0})
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000000)=0x1314100, 0x4)
743.422779ms ago: executing program 1 (id=1453):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="aa1e216699066bda24668c703b141b5716e494772557fd2e57d5351d0ffb5b842539672118449cd5dec59f1b97d6f17cd96b62bae4a953e7e924533252813b211e67cad83cb149c234d9fbec631edac2f4462fe939964f265b6bafcca51ec91f63c7c1519ef115660eb46f1a110ee079a3922e09cb2bde0c35fe40b39b0a43cdb7864b8cb08097ff2b43029f9764452d3f3e4f2b73826d92ef4f", 0x9a}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x84}], 0x1, &(0x7f0000002f40)=""/244, 0xf4}, 0x0)
close(r1)
socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x32}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @link_local, 'geneve0\x00'}}, 0x1e)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000200), 0x0}, 0x20)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d80)={'wpan1\x00'})
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d080202000000fcfea4a1040015000600142603600e1208000f0000810401a80016040a00014003000000036010fab94dcf5c0460c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791823a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x31}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x92}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r8 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc)
setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x1, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11}}}}}, 0x0)
ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000100)=0x1)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000280)={'geneve0\x00'})
ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, 0x0)
634.522254ms ago: executing program 0 (id=1454):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4)
close(r1)
489.820355ms ago: executing program 0 (id=1455):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0)
354.193147ms ago: executing program 1 (id=1456):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000200)="10", 0x1}, {&(0x7f0000000740)="e3eb6d1f44487b4d09df3ec02ac9f26b48685284d94a41fcdd4f0db3ccb46ad8c00786402e28ef8ae054a6467d4f06", 0x2f}], 0x2)
recvmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/43, 0x2b}, {&(0x7f0000000240)=""/204, 0xcc}], 0x2}, 0x10}], 0x1, 0x11000, 0x0)
290.825394ms ago: executing program 0 (id=1457):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg(r0, 0x0, 0x4840)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000001900)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000700)="cd333c00", 0x4}], 0x1}}], 0x1, 0xc0c0)
162.565011ms ago: executing program 4 (id=1458):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)
131.4134ms ago: executing program 0 (id=1459):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f000000b680)={0x0, 0x0, 0x0}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r1, 0x0)
0s ago: executing program 0 (id=1460):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000240)={'#! ', './file0'}, 0xb)
recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000300)=""/209, 0xfec8}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x0, 0x0)
kernel console output (not intermixed with test programs):
: Releasing backup interface
[ 154.507472][ T5244] Bluetooth: hci5: command tx timeout
[ 154.516566][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 154.532534][ T63] bond0 (unregistering): (slave wlan1): Releasing backup interface
[ 154.544410][ T63] bond0 (unregistering): Released all slaves
[ 154.562144][ T63] bond1 (unregistering): Released all slaves
[ 154.729385][ T7914] team0: Port device bond0 removed
[ 154.796912][ T7914] team0: Port device bridge1 removed
[ 154.814996][ T7916] netlink: 28 bytes leftover after parsing attributes in process `syz.4.445'.
[ 154.842865][ T7917] netlink: 20 bytes leftover after parsing attributes in process `syz.4.445'.
[ 154.925668][ T7924] netlink: 'syz.2.446': attribute type 1 has an invalid length.
[ 154.933760][ T7924] netlink: 224 bytes leftover after parsing attributes in process `syz.2.446'.
[ 154.952309][ T7687] hsr_slave_0: entered promiscuous mode
[ 154.960897][ T7687] hsr_slave_1: entered promiscuous mode
[ 154.968601][ T7687] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 154.977313][ T7687] Cannot create hsr debugfs directory
[ 154.991103][ T63] ɶƣ0GC�!: left promiscuous mode
[ 155.273783][ T7926] netlink: 24 bytes leftover after parsing attributes in process `syz.2.447'.
[ 155.290671][ T7926] netlink: 24 bytes leftover after parsing attributes in process `syz.2.447'.
[ 156.283983][ T63] hsr_slave_0: left promiscuous mode
[ 156.355328][ T63] hsr_slave_1: left promiscuous mode
[ 156.369867][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 156.391998][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 156.410601][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 156.437415][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 156.465520][ T63] veth1_macvtap: left promiscuous mode
[ 156.471307][ T63] veth0_macvtap: left promiscuous mode
[ 156.484233][ T63] veth1_vlan: left promiscuous mode
[ 156.490105][ T63] veth0_vlan: left promiscuous mode
[ 156.754976][ T63] pimreg (unregistering): left allmulticast mode
[ 156.834961][ T7971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.454'.
[ 156.880108][ T7971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.454'.
[ 157.373689][ T63] team0 (unregistering): Port device team_slave_1 removed
[ 157.420289][ T63] team0 (unregistering): Port device team_slave_0 removed
[ 157.955714][ T7965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.453'.
[ 158.024407][ T7983] vlan2: entered allmulticast mode
[ 158.067634][ T7983] bridge0: port 1(vlan2) entered blocking state
[ 158.074046][ T7983] bridge0: port 1(vlan2) entered disabled state
[ 158.146407][ T7987] vlan2: entered promiscuous mode
[ 158.153098][ T7987] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 158.169684][ T7987] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[ 158.354755][ T7688] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 158.390606][ T7993] netlink: 28 bytes leftover after parsing attributes in process `syz.1.462'.
[ 158.391750][ T7991] No such timeout policy "syz0"
[ 158.411529][ T7688] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 158.494575][ T7688] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 158.505421][ T7688] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 158.591915][ T7991] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[ 158.622699][ T7991] gretap1: entered promiscuous mode
[ 158.630268][ T7991] gretap1: entered allmulticast mode
[ 158.642271][ T8000] netlink: 'syz.1.463': attribute type 21 has an invalid length.
[ 158.651674][ T8000] netlink: 'syz.1.463': attribute type 6 has an invalid length.
[ 158.660016][ T8000] netlink: 156 bytes leftover after parsing attributes in process `syz.1.463'.
[ 158.862699][ T8005] netlink: 48 bytes leftover after parsing attributes in process `syz.1.464'.
[ 158.891057][ T8005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.464'.
[ 158.934682][ T7688] 8021q: adding VLAN 0 to HW filter on device bond0
[ 159.038566][ T7688] 8021q: adding VLAN 0 to HW filter on device team0
[ 159.087037][ T1836] bridge0: port 1(bridge_slave_0) entered blocking state
[ 159.094261][ T1836] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 159.121418][ T7687] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 159.152123][ T7687] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 159.169151][ T81] bridge0: port 2(bridge_slave_1) entered blocking state
[ 159.176349][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 159.220095][ T7687] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 159.249115][ T7687] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 159.348537][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.465'.
[ 159.484884][ T8027] netlink: 'syz.4.467': attribute type 1 has an invalid length.
[ 159.660724][ T7687] 8021q: adding VLAN 0 to HW filter on device bond0
[ 159.806916][ T8039] GUP no longer grows the stack in syz.2.468 (8039): 20006000-20008000 (20005000)
[ 159.839281][ T8039] CPU: 0 UID: 0 PID: 8039 Comm: syz.2.468 Not tainted 6.11.0-rc6-syzkaller-01324-gf3b6129b7d25 #0
[ 159.849953][ T8039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 159.860040][ T8039] Call Trace:
[ 159.863339][ T8039] <TASK>
[ 159.866279][ T8039] dump_stack_lvl+0x241/0x360
[ 159.870984][ T8039] ? __pfx_dump_stack_lvl+0x10/0x10
[ 159.876199][ T8039] ? __pfx__printk+0x10/0x10
[ 159.880817][ T8039] ? find_vma+0xf9/0x170
[ 159.885093][ T8039] ? vma_is_secretmem+0xd/0x50
[ 159.889980][ T8039] ? check_vma_flags+0x531/0x5a0
[ 159.894949][ T8039] __get_user_pages+0x114d/0x16a0
[ 159.899997][ T8039] ? __pfx___get_user_pages+0x10/0x10
[ 159.905370][ T8039] ? __pfx_lock_acquire+0x10/0x10
[ 159.910492][ T8039] __gup_longterm_locked+0x3ba/0x17d0
[ 159.915881][ T8039] pin_user_pages+0x137/0x1f0
[ 159.920558][ T8039] ? __pfx_pin_user_pages+0x10/0x10
[ 159.925750][ T8039] ? __kmalloc_node_noprof+0x247/0x440
[ 159.931208][ T8039] xdp_umem_create+0x978/0xf30
[ 159.935977][ T8039] xsk_setsockopt+0x732/0x950
[ 159.940648][ T8039] ? __pfx_xsk_setsockopt+0x10/0x10
[ 159.945845][ T8039] ? aa_sock_opt_perm+0x79/0x120
[ 159.950804][ T8039] ? bpf_lsm_socket_setsockopt+0x9/0x10
[ 159.956345][ T8039] ? security_socket_setsockopt+0x87/0xb0
[ 159.962059][ T8039] ? __pfx_xsk_setsockopt+0x10/0x10
[ 159.967247][ T8039] do_sock_setsockopt+0x3af/0x720
[ 159.972275][ T8039] ? __pfx_do_sock_setsockopt+0x10/0x10
[ 159.977830][ T8039] __sys_setsockopt+0x1ae/0x250
[ 159.982676][ T8039] __x64_sys_setsockopt+0xb5/0xd0
[ 159.987705][ T8039] do_syscall_64+0xf3/0x230
[ 159.992288][ T8039] ? clear_bhb_loop+0x35/0x90
[ 159.996963][ T8039] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 160.002865][ T8039] RIP: 0033:0x7f9a0eb7def9
[ 160.007281][ T8039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 160.026879][ T8039] RSP: 002b:00007f9a0f9cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 160.035318][ T8039] RAX: ffffffffffffffda RBX: 00007f9a0ed36058 RCX: 00007f9a0eb7def9
[ 160.043297][ T8039] RDX: 0000000000000004 RSI: 000000000000011b RDI: 000000000000000a
[ 160.051268][ T8039] RBP: 00007f9a0ebf0b56 R08: 0000000000000020 R09: 0000000000000000
[ 160.059245][ T8039] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000
[ 160.067208][ T8039] R13: 0000000000000000 R14: 00007f9a0ed36058 R15: 00007ffe4dfad058
[ 160.075186][ T8039] </TASK>
[ 160.161512][ T7688] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 160.287421][ T8050] netlink: 'syz.1.470': attribute type 1 has an invalid length.
[ 160.346394][ T8050] bond4: entered promiscuous mode
[ 160.373648][ T8058] netlink: 28 bytes leftover after parsing attributes in process `syz.4.472'.
[ 160.399448][ T7688] veth0_vlan: entered promiscuous mode
[ 160.415350][ T8053] lo: entered promiscuous mode
[ 160.426125][ T8053] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 160.454972][ T8053] bond4: (slave lo): making interface the new active one
[ 160.464017][ T8053] bond4: (slave lo): Enslaving as an active interface with an up link
[ 160.489227][ T8060] smc: net device lo applied user defined pnetid SYZ2
[ 160.503445][ T8055] smc: net device lo erased user defined pnetid SYZ2
[ 160.532275][ T7688] veth1_vlan: entered promiscuous mode
[ 160.611418][ T7688] veth0_macvtap: entered promiscuous mode
[ 160.680083][ T7688] veth1_macvtap: entered promiscuous mode
[ 160.727866][ T8069] netlink: 'syz.1.473': attribute type 1 has an invalid length.
[ 160.728851][ T7688] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 160.795776][ T7688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 160.816845][ T7688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 160.848817][ T7688] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 160.883285][ T7688] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 160.917079][ T7688] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 160.925831][ T7688] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 160.961652][ T7688] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 161.094823][ T8083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.476'.
[ 161.127292][ T8083] netlink: 'syz.4.476': attribute type 20 has an invalid length.
[ 161.180374][ T8089] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 161.251578][ T3000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 161.275816][ T3000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 161.322517][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 161.334573][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 161.343079][ T8091] syzkaller0: refused to change device tx_queue_len
[ 161.983240][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 161.995056][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 162.004423][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 162.023612][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 162.033282][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 162.041962][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 162.094231][ T8106] netlink: 'syz.2.481': attribute type 1 has an invalid length.
[ 162.122183][ T8109] netlink: 'syz.1.483': attribute type 1 has an invalid length.
[ 162.168115][ T8109] bond5: entered promiscuous mode
[ 162.214014][ T8111] bond4: (slave lo): Releasing active interface
[ 162.234383][ T8111] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 162.270420][ T8111] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 162.301222][ T8111] bond5: (slave lo): making interface the new active one
[ 162.310143][ T8111] bond5: (slave lo): Enslaving as an active interface with an up link
[ 162.326849][ T8104] caif0 speed is unknown, defaulting to 1000
[ 162.473597][ T1836] bridge_slave_1: left allmulticast mode
[ 162.486809][ T1836] bridge_slave_1: left promiscuous mode
[ 162.495422][ T1836] bridge0: port 2(bridge_slave_1) entered disabled state
[ 162.514581][ T1836] bridge_slave_0: left allmulticast mode
[ 162.524374][ T1836] bridge_slave_0: left promiscuous mode
[ 162.541667][ T1836] bridge0: port 1(bridge_slave_0) entered disabled state
[ 162.621479][ T8120] Cannot find add_set index 32768 as target
[ 163.163615][ T1836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 163.175766][ T1836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 163.190361][ T1836] bond0 (unregistering): Released all slaves
[ 163.203718][ T8119] netlink: 'syz.1.486': attribute type 1 has an invalid length.
[ 163.225475][ T8119] bond6: entered promiscuous mode
[ 163.235028][ T8122] bond5: (slave lo): Releasing active interface
[ 163.243015][ T8122] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 163.256458][ T8122] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 163.279778][ T8122] bond6: (slave lo): making interface the new active one
[ 163.288343][ T8122] bond6: (slave lo): Enslaving as an active interface with an up link
[ 163.466714][ T8132] __nla_validate_parse: 1 callbacks suppressed
[ 163.466731][ T8132] netlink: 20 bytes leftover after parsing attributes in process `syz.4.488'.
[ 163.602230][ T8131] xt_hashlimit: Unknown mode mask EB0D38F6, kernel too old?
[ 163.704088][ T1836] hsr_slave_0: left promiscuous mode
[ 163.747263][ T1836] hsr_slave_1: left promiscuous mode
[ 163.797534][ T1836] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 163.833398][ T1836] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 164.112150][ T5244] Bluetooth: hci0: command tx timeout
[ 164.293187][ T1836] team0 (unregistering): Port device team_slave_1 removed
[ 164.344268][ T1836] team0 (unregistering): Port device team_slave_0 removed
[ 164.864180][ T8104] chnl_net:caif_netlink_parms(): no params data found
[ 165.088984][ T8104] bridge0: port 1(bridge_slave_0) entered blocking state
[ 165.117723][ T8104] bridge0: port 1(bridge_slave_0) entered disabled state
[ 165.127417][ T8104] bridge_slave_0: entered allmulticast mode
[ 165.134737][ T8104] bridge_slave_0: entered promiscuous mode
[ 165.183442][ T8104] bridge0: port 2(bridge_slave_1) entered blocking state
[ 165.207205][ T8104] bridge0: port 2(bridge_slave_1) entered disabled state
[ 165.214486][ T8104] bridge_slave_1: entered allmulticast mode
[ 165.248890][ T8104] bridge_slave_1: entered promiscuous mode
[ 165.325652][ T8192] netlink: 'syz.2.494': attribute type 1 has an invalid length.
[ 165.352829][ T8192] netlink: 224 bytes leftover after parsing attributes in process `syz.2.494'.
[ 165.444304][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'.
[ 165.474763][ T1836] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 165.496482][ T8178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.494'.
[ 165.621468][ T8189] netlink: 'syz.1.496': attribute type 10 has an invalid length.
[ 165.685738][ T8189] team0: Port device wlan1 added
[ 165.751088][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 165.761491][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 165.772223][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 165.784473][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 165.785259][ T1836] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 165.806572][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 165.832117][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 165.923547][ T8104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 165.969986][ T8104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 166.059512][ T8205] bridge_slave_0: default FDB implementation only supports local addresses
[ 166.075311][ T8200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.497'.
[ 166.120078][ T1836] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 166.146784][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.500'.
[ 166.187409][ T5244] Bluetooth: hci0: command tx timeout
[ 166.234986][ T1836] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 166.327944][ T8104] team0: Port device team_slave_0 added
[ 166.356491][ T8216] netlink: 16 bytes leftover after parsing attributes in process `syz.4.501'.
[ 166.392963][ T8104] team0: Port device team_slave_1 added
[ 166.431434][ T8216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.501'.
[ 166.455028][ T8201] caif0 speed is unknown, defaulting to 1000
[ 166.459084][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.501'.
[ 166.496133][ T8216] netlink: 24 bytes leftover after parsing attributes in process `syz.4.501'.
[ 166.527519][ T8104] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 166.547049][ T8104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 166.564869][ T5244] block nbd0: Receive control failed (result -107)
[ 166.579338][ T8104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 166.609295][ T8104] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 166.616275][ T8104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 166.667165][ T8104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 166.978531][ T8104] hsr_slave_0: entered promiscuous mode
[ 167.012142][ T8104] hsr_slave_1: entered promiscuous mode
[ 167.028058][ T8104] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 167.047271][ T8233] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[ 167.054045][ T8104] Cannot create hsr debugfs directory
[ 167.110963][ T1836] bridge_slave_1: left allmulticast mode
[ 167.132700][ T1836] bridge_slave_1: left promiscuous mode
[ 167.163478][ T1836] bridge0: port 2(bridge_slave_1) entered disabled state
[ 167.191404][ T1836] bridge_slave_0: left allmulticast mode
[ 167.207153][ T1836] bridge_slave_0: left promiscuous mode
[ 167.213025][ T1836] bridge0: port 1(bridge_slave_0) entered disabled state
[ 167.706494][ T1836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 167.722066][ T1836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 167.732899][ T1836] bond0 (unregistering): Released all slaves
[ 167.948179][ T5244] Bluetooth: hci3: command tx timeout
[ 168.242183][ T8268] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 168.267272][ T5244] Bluetooth: hci0: command tx timeout
[ 168.326068][ T8265] caif0 speed is unknown, defaulting to 1000
[ 168.647432][ T8276] __nla_validate_parse: 4 callbacks suppressed
[ 168.647450][ T8276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.514'.
[ 168.890624][ T1836] hsr_slave_0: left promiscuous mode
[ 168.907614][ T1836] hsr_slave_1: left promiscuous mode
[ 168.917978][ T1836] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 168.925412][ T1836] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 168.970909][ T1836] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 169.002398][ T1836] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 169.110376][ T1836] veth1_macvtap: left promiscuous mode
[ 169.115975][ T1836] veth0_macvtap: left promiscuous mode
[ 169.132844][ T1836] veth1_vlan: left promiscuous mode
[ 169.143726][ T1836] veth0_vlan: left promiscuous mode
[ 169.686027][ T1836] team0 (unregistering): Port device team_slave_1 removed
[ 169.728447][ T1836] team0 (unregistering): Port device team_slave_0 removed
[ 170.027282][ T5244] Bluetooth: hci3: command tx timeout
[ 170.174207][ T8287] netlink: 'syz.2.516': attribute type 1 has an invalid length.
[ 170.184154][ T8287] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[ 170.186666][ T8302] veth0_to_batadv: entered promiscuous mode
[ 170.210387][ T8302] veth0_to_batadv: entered allmulticast mode
[ 170.354543][ T5244] Bluetooth: hci0: command tx timeout
[ 170.366365][ T8311] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[ 170.395662][ T8311] SET target dimension over the limit!
[ 170.427738][ T8313] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.519'.
[ 170.493400][ T8201] chnl_net:caif_netlink_parms(): no params data found
[ 171.249312][ T8201] bridge0: port 1(bridge_slave_0) entered blocking state
[ 171.256495][ T8201] bridge0: port 1(bridge_slave_0) entered disabled state
[ 171.278194][ T8201] bridge_slave_0: entered allmulticast mode
[ 171.286596][ T8201] bridge_slave_0: entered promiscuous mode
[ 171.336328][ T8328] netlink: 'syz.4.521': attribute type 1 has an invalid length.
[ 171.341291][ T8104] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 171.363237][ T8333] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0
[ 171.375968][ T8328] netlink: 612 bytes leftover after parsing attributes in process `syz.4.521'.
[ 171.407375][ T8201] bridge0: port 2(bridge_slave_1) entered blocking state
[ 171.414546][ T8201] bridge0: port 2(bridge_slave_1) entered disabled state
[ 171.438136][ T8201] bridge_slave_1: entered allmulticast mode
[ 171.459237][ T8201] bridge_slave_1: entered promiscuous mode
[ 171.473996][ T8104] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 171.536667][ T8104] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 171.631017][ T8201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 171.671186][ T8201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 171.706813][ T8104] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 171.733352][ T8345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.523'.
[ 171.981502][ T8201] team0: Port device team_slave_0 added
[ 172.016744][ T8201] team0: Port device team_slave_1 added
[ 172.036136][ T8364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.525'.
[ 172.107305][ T5244] Bluetooth: hci3: command tx timeout
[ 172.219789][ T8201] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 172.226778][ T8201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 172.284857][ T8201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 172.370250][ T8376] netlink: 'syz.1.528': attribute type 1 has an invalid length.
[ 172.405976][ T8376] bond7: entered promiscuous mode
[ 172.412248][ T8201] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 172.419442][ T8201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 172.451753][ T8201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 172.468878][ T8379] bond6: (slave lo): Releasing active interface
[ 172.482596][ T8379] bond6: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 172.500158][ T8379] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 172.521768][ T8379] bond7: (slave lo): making interface the new active one
[ 172.537023][ T8379] bond7: (slave lo): Enslaving as an active interface with an up link
[ 172.546087][ T8373] caif0 speed is unknown, defaulting to 1000
[ 172.719915][ T8389] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.530'.
[ 172.796480][ T8201] hsr_slave_0: entered promiscuous mode
[ 172.820021][ T8201] hsr_slave_1: entered promiscuous mode
[ 173.110734][ T8104] 8021q: adding VLAN 0 to HW filter on device bond0
[ 173.129896][ T8397] netlink: 24 bytes leftover after parsing attributes in process `syz.2.531'.
[ 173.144762][ T8397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 173.285355][ T8397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 173.313926][ T8104] 8021q: adding VLAN 0 to HW filter on device team0
[ 173.625580][ T8407] caif0 speed is unknown, defaulting to 1000
[ 173.658849][ T63] bridge0: port 1(bridge_slave_0) entered blocking state
[ 173.666320][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 173.736090][ T1836] bridge0: port 2(bridge_slave_1) entered blocking state
[ 173.743302][ T1836] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 174.015746][ T8416] netlink: 'syz.4.534': attribute type 1 has an invalid length.
[ 174.024370][ T8416] netlink: 112848 bytes leftover after parsing attributes in process `syz.4.534'.
[ 174.066128][ T8416] netlink: 'syz.4.534': attribute type 1 has an invalid length.
[ 174.170343][ T8420] bond0: option miimon: invalid value (18446744073072082944)
[ 174.184426][ T8420] bond0: option miimon: allowed values 0 - 2147483647
[ 174.196012][ T5244] Bluetooth: hci3: command tx timeout
[ 174.677334][ T8104] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 174.694488][ T8201] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 174.760632][ T8201] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 174.796380][ T8201] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 174.802626][ T8435] ebtables: ebtables: counters copy to user failed while replacing table
[ 174.830796][ T8201] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 175.126628][ T8441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 175.142256][ T8104] veth0_vlan: entered promiscuous mode
[ 175.186474][ T8104] veth1_vlan: entered promiscuous mode
[ 175.249147][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'.
[ 175.266510][ T8441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 175.300604][ T8104] veth0_macvtap: entered promiscuous mode
[ 175.311872][ T8104] veth1_macvtap: entered promiscuous mode
[ 175.379724][ T8201] 8021q: adding VLAN 0 to HW filter on device bond0
[ 175.389063][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 175.461514][ T8201] 8021q: adding VLAN 0 to HW filter on device team0
[ 175.504100][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 175.511324][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 175.560514][ T8104] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 175.595661][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 175.602896][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 175.651702][ T8104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 175.678696][ T8104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 175.700979][ T8104] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 175.702669][ T8460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.538'.
[ 175.772007][ T8104] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 175.782415][ T8460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.538'.
[ 175.786924][ T8104] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 175.807357][ T8104] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 175.816949][ T8104] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 175.941933][ T8463] Bluetooth: MGMT ver 1.23
[ 176.073620][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 176.111561][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 176.185935][ T1836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 176.210041][ T1836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 176.427509][ T8473] netlink: 596 bytes leftover after parsing attributes in process `syz.2.539'.
[ 176.625554][ T8482] netlink: 'syz.2.539': attribute type 29 has an invalid length.
[ 176.696030][ T8487] netlink: 'syz.2.539': attribute type 29 has an invalid length.
[ 176.833878][ T8201] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 176.993883][ T8201] veth0_vlan: entered promiscuous mode
[ 177.052484][ T8513] netlink: 'syz.1.545': attribute type 13 has an invalid length.
[ 177.169960][ T8513] veth0_macvtap: left promiscuous mode
[ 177.278218][ T8515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.479'.
[ 177.322704][ T8525] netlink: 32 bytes leftover after parsing attributes in process `syz.2.547'.
[ 177.458348][ T8513] macvtap0: entered allmulticast mode
[ 177.496166][ T8513] macvtap0: refused to change device tx_queue_len
[ 177.562545][ T8201] veth1_vlan: entered promiscuous mode
[ 177.711246][ T8201] veth0_macvtap: entered promiscuous mode
[ 177.776345][ T8201] veth1_macvtap: entered promiscuous mode
[ 177.853397][ T8201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 177.903395][ T8201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 177.932163][ T8201] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 177.954395][ T5244] Bluetooth: hci3: command tx timeout
[ 177.992306][ T8201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 178.003549][ T8201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 178.014020][ T8201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 178.025692][ T8201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 178.064180][ T8201] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 178.175635][ T8201] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 178.196104][ T8201] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 178.221353][ T8201] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 178.241508][ T8201] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 178.477271][ T8559] bond7: (slave lo): Releasing active interface
[ 178.492806][ T8559] bond7: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 178.601479][ T8559] bond0: (slave bond_slave_0): Releasing backup interface
[ 178.679964][ T8559] bond0: (slave bond_slave_1): Releasing backup interface
[ 178.881857][ T8559] team0: Port device team_slave_0 removed
[ 179.012543][ T8559] team0: Port device team_slave_1 removed
[ 179.023034][ T8559] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 179.043463][ T8559] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 179.053948][ T8559] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 179.322422][ T8559] team0: Port device wlan1 removed
[ 179.391886][ T8559] team0: Port device bridge1 removed
[ 179.532275][ T8594] netlink: 32 bytes leftover after parsing attributes in process `syz.4.558'.
[ 179.534162][ T8562] team0: Port device wg2 added
[ 179.598634][ T8564] netlink: 20 bytes leftover after parsing attributes in process `syz.1.552'.
[ 179.678093][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 179.686122][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 179.786350][ T8567] caif0 speed is unknown, defaulting to 1000
[ 179.922238][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 179.957622][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 180.032767][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.561'.
[ 180.240116][ T8611] netlink: 'syz.0.561': attribute type 1 has an invalid length.
[ 180.264689][ T8611] netlink: 'syz.0.561': attribute type 2 has an invalid length.
[ 180.558761][ T8624] netlink: 172 bytes leftover after parsing attributes in process `syz.4.563'.
[ 180.591928][ T8627] bridge2: entered promiscuous mode
[ 180.626687][ T8627] bridge2: entered allmulticast mode
[ 180.670055][ T8627] team0: Port device bridge2 added
[ 180.744026][ T8632] netlink: 'syz.0.564': attribute type 10 has an invalid length.
[ 180.781471][ T8637] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT
[ 180.782219][ T8632] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 180.807291][ T8637] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[ 180.945086][ T81] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 180.976297][ T8640] bridge0: port 3(ip6gretap0) entered blocking state
[ 180.987702][ T8640] bridge0: port 3(ip6gretap0) entered disabled state
[ 180.994627][ T8640] ip6gretap0: entered allmulticast mode
[ 181.015850][ T8640] ip6gretap0: entered promiscuous mode
[ 181.038259][ T8640] bridge0: port 3(ip6gretap0) entered blocking state
[ 181.045120][ T8640] bridge0: port 3(ip6gretap0) entered forwarding state
[ 181.092903][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.566'.
[ 181.308289][ T4625] Bluetooth: hci1: command 0x0406 tx timeout
[ 181.308584][ T5242] Bluetooth: hci2: command 0x0406 tx timeout
[ 181.320933][ T81] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 181.472931][ T81] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 181.561705][ T81] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 181.747562][ T81] bridge_slave_1: left allmulticast mode
[ 181.753259][ T81] bridge_slave_1: left promiscuous mode
[ 181.765065][ T81] bridge0: port 2(bridge_slave_1) entered disabled state
[ 181.775400][ T81] bridge_slave_0: left allmulticast mode
[ 181.797279][ T81] bridge_slave_0: left promiscuous mode
[ 181.803664][ T81] bridge0: port 1(bridge_slave_0) entered disabled state
[ 182.431688][ T8699] netlink: 'syz.0.572': attribute type 5 has an invalid length.
[ 182.536242][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 182.559994][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 182.570557][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 182.581350][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 182.608143][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 182.616037][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 183.032371][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 183.053039][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 183.069900][ T81] bond0 (unregistering): Released all slaves
[ 183.404125][ T8728] netlink: 104 bytes leftover after parsing attributes in process `syz.1.577'.
[ 183.434789][ T8702] caif0 speed is unknown, defaulting to 1000
[ 183.496411][ T8727] 8021q: adding VLAN 0 to HW filter on device bond0
[ 183.525385][ T8727] team0: Port device bond0 added
[ 183.554662][ T8730] bridge5: entered promiscuous mode
[ 183.596678][ T8730] bridge5: entered allmulticast mode
[ 183.602769][ T8730] team0: Device bridge5 is of different type
[ 183.703221][ T8731] netlink: 36 bytes leftover after parsing attributes in process `syz.0.575'.
[ 183.791712][ T8733] netlink: 'syz.2.578': attribute type 10 has an invalid length.
[ 183.867513][ T8735] team0: Port device team_slave_0 removed
[ 183.887221][ T8735] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 183.934703][ T8740] bridge0: port 1(ip6gretap0) entered blocking state
[ 183.965968][ T8740] bridge0: port 1(ip6gretap0) entered disabled state
[ 183.989535][ T8740] ip6gretap0: entered allmulticast mode
[ 184.004832][ T8740] ip6gretap0: entered promiscuous mode
[ 184.184581][ T8753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.581'.
[ 184.416206][ T8778] netlink: 'syz.2.586': attribute type 1 has an invalid length.
[ 184.667822][ T5235] Bluetooth: hci3: command tx timeout
[ 184.964128][ T8818] netlink: 104 bytes leftover after parsing attributes in process `syz.2.590'.
[ 185.188039][ T8821] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.591'.
[ 185.312671][ T81] hsr_slave_0: left promiscuous mode
[ 185.329764][ T81] hsr_slave_1: left promiscuous mode
[ 185.364734][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 185.374209][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 185.389848][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 185.405599][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 185.440353][ T81] veth1_macvtap: left promiscuous mode
[ 185.446061][ T81] veth0_macvtap: left promiscuous mode
[ 185.453400][ T81] veth1_vlan: left promiscuous mode
[ 185.458987][ T81] veth0_vlan: left promiscuous mode
[ 185.990018][ T81] team0 (unregistering): Port device team_slave_1 removed
[ 186.036074][ T81] team0 (unregistering): Port device team_slave_0 removed
[ 186.462642][ T8829] netlink: 'syz.2.594': attribute type 1 has an invalid length.
[ 186.477701][ T8829] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[ 186.491665][ T8839] netlink: 36 bytes leftover after parsing attributes in process `syz.1.595'.
[ 186.758120][ T5235] Bluetooth: hci3: command tx timeout
[ 186.846835][ T8702] chnl_net:caif_netlink_parms(): no params data found
[ 186.962386][ T8859] netlink: 16 bytes leftover after parsing attributes in process `syz.0.597'.
[ 187.103749][ T8870] netlink: 'syz.2.602': attribute type 1 has an invalid length.
[ 187.134446][ T8870] netlink: 224 bytes leftover after parsing attributes in process `syz.2.602'.
[ 187.210540][ T8859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 187.356446][ T8859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 187.385382][ T8702] bridge0: port 1(bridge_slave_0) entered blocking state
[ 187.398801][ T8702] bridge0: port 1(bridge_slave_0) entered disabled state
[ 187.404436][ T8859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 187.411950][ T8702] bridge_slave_0: entered allmulticast mode
[ 187.433332][ T8702] bridge_slave_0: entered promiscuous mode
[ 187.457940][ T8887] netlink: 'syz.1.606': attribute type 1 has an invalid length.
[ 187.498679][ T8887] bond8: entered promiscuous mode
[ 187.520451][ T8892] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 187.570233][ T8892] bond8: (slave lo): making interface the new active one
[ 187.608473][ T8892] bond8: (slave lo): Enslaving as an active interface with an up link
[ 187.616964][ T8702] bridge0: port 2(bridge_slave_1) entered blocking state
[ 187.624782][ T8702] bridge0: port 2(bridge_slave_1) entered disabled state
[ 187.634960][ T8702] bridge_slave_1: entered allmulticast mode
[ 187.645446][ T8702] bridge_slave_1: entered promiscuous mode
[ 187.701174][ T8896] caif0 speed is unknown, defaulting to 1000
[ 187.737938][ T8702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 187.752610][ T8702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 187.824273][ T8899] netlink: 52 bytes leftover after parsing attributes in process `syz.1.608'.
[ 187.862585][ T8702] team0: Port device team_slave_0 added
[ 187.871914][ T8899] netlink: 52 bytes leftover after parsing attributes in process `syz.1.608'.
[ 187.875344][ T8901] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.609'.
[ 187.883883][ T8702] team0: Port device team_slave_1 added
[ 187.961775][ T8702] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 187.989832][ T8702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 188.040239][ T8702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 188.107587][ T8702] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 188.143850][ T8702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 188.183216][ T8702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 188.461921][ T8920] netlink: 14569 bytes leftover after parsing attributes in process `syz.1.614'.
[ 188.479435][ T8921] netlink: 'syz.0.615': attribute type 1 has an invalid length.
[ 188.503169][ T8921] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.615'.
[ 188.506962][ T8702] hsr_slave_0: entered promiscuous mode
[ 188.528243][ T8921] netlink: 'syz.0.615': attribute type 1 has an invalid length.
[ 188.529714][ T8702] hsr_slave_1: entered promiscuous mode
[ 188.835287][ T5235] Bluetooth: hci3: command tx timeout
[ 189.914183][ T8974] syz_tun: entered promiscuous mode
[ 189.921501][ T8974] batadv_slave_0: entered promiscuous mode
[ 189.928826][ T8979] xt_CT: No such helper "pptp"
[ 189.942880][ T8974] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[ 189.957203][ T8974] Cannot create hsr debugfs directory
[ 189.972925][ T8974] syz_tun: left promiscuous mode
[ 189.986349][ T8974] batadv_slave_0: left promiscuous mode
[ 190.047606][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.624'.
[ 190.069204][ T8984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.629'.
[ 190.085872][ T8984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.629'.
[ 190.118849][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.624'.
[ 190.341781][ T8992] netlink: 'syz.2.631': attribute type 1 has an invalid length.
[ 190.420563][ T8992] bond2: entered promiscuous mode
[ 190.426302][ T8993] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 190.449546][ T8993] bond2: (slave lo): making interface the new active one
[ 190.460751][ T8993] bond2: (slave lo): Enslaving as an active interface with an up link
[ 190.569044][ T9014] netlink: 104 bytes leftover after parsing attributes in process `syz.1.637'.
[ 190.676393][ T9017] netlink: 'syz.4.638': attribute type 3 has an invalid length.
[ 190.708717][ T9017] netlink: 224 bytes leftover after parsing attributes in process `syz.4.638'.
[ 190.880978][ T9024] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.641'.
[ 190.917785][ T5235] Bluetooth: hci3: command tx timeout
[ 191.235581][ T8702] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 191.271693][ T8702] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 191.320815][ T8702] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 191.372618][ T8702] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 191.485885][ T9057] netlink: 20 bytes leftover after parsing attributes in process `syz.4.649'.
[ 191.623650][ T9064] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.652'.
[ 191.698621][ T9065] caif0 speed is unknown, defaulting to 1000
[ 191.875719][ T9078] netlink: 'syz.1.655': attribute type 3 has an invalid length.
[ 191.876405][ T8702] 8021q: adding VLAN 0 to HW filter on device bond0
[ 191.907139][ T9078] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.655'.
[ 192.035110][ T8702] 8021q: adding VLAN 0 to HW filter on device team0
[ 192.110643][ T8801] bridge0: port 1(bridge_slave_0) entered blocking state
[ 192.117876][ T8801] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 192.219162][ T81] bridge0: port 2(bridge_slave_1) entered blocking state
[ 192.226352][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 192.663992][ T9100] bridge3: entered promiscuous mode
[ 192.691511][ T9100] bridge3: entered allmulticast mode
[ 192.711353][ T9100] team0: Port device bridge3 added
[ 192.725846][ T9104] netlink: 'syz.0.661': attribute type 10 has an invalid length.
[ 192.785550][ T9109] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 193.191960][ T8702] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 193.695684][ T8702] veth0_vlan: entered promiscuous mode
[ 193.741483][ T8702] veth1_vlan: entered promiscuous mode
[ 193.919995][ T8702] veth0_macvtap: entered promiscuous mode
[ 194.108515][ T8702] veth1_macvtap: entered promiscuous mode
[ 194.172142][ T8702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 194.197039][ T8702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 194.235808][ T8702] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 194.280643][ T8702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 194.291729][ T8702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 194.348600][ T8702] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 194.415386][ T9166] netlink: 'syz.2.677': attribute type 1 has an invalid length.
[ 194.507905][ T9166] bond3: entered promiscuous mode
[ 194.548709][ T9173] bond2: (slave lo): Releasing active interface
[ 194.601872][ T9173] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 194.641348][ T9173] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 194.686437][ T9173] bond3: (slave lo): making interface the new active one
[ 194.695518][ T9173] bond3: (slave lo): Enslaving as an active interface with an up link
[ 194.746121][ T8702] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 194.770645][ T8702] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 194.782873][ T8702] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 194.828054][ T8702] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 194.924523][ T9192] bridge5: entered promiscuous mode
[ 194.943388][ T9192] bridge5: entered allmulticast mode
[ 194.957585][ T9192] team0: Device bridge5 is of different type
[ 195.063934][ T9196] bridge0: entered promiscuous mode
[ 195.091962][ T9196] bridge0: entered allmulticast mode
[ 195.104636][ T9196] team0: Device bridge0 is of different type
[ 195.177650][ T9197] netlink: 'syz.2.684': attribute type 10 has an invalid length.
[ 195.202733][ T9199] netlink: 'syz.1.685': attribute type 10 has an invalid length.
[ 195.229192][ T9199] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 195.409378][ T9213] netlink: 'syz.1.689': attribute type 15 has an invalid length.
[ 195.497664][ T8808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 195.529748][ T8808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 195.601416][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 195.611346][ T9223] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode broadcast(3)
[ 195.631766][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 195.981562][ T9244] netlink: zone id is out of range
[ 195.986828][ T9244] netlink: zone id is out of range
[ 195.997483][ T9244] netlink: zone id is out of range
[ 196.011851][ T9244] netlink: zone id is out of range
[ 196.017566][ T9234] netlink: 'syz.1.694': attribute type 1 has an invalid length.
[ 196.020054][ T9244] netlink: zone id is out of range
[ 196.049889][ T9244] netlink: zone id is out of range
[ 196.066272][ T9234] bond9: entered promiscuous mode
[ 196.079412][ T9244] netlink: zone id is out of range
[ 196.084585][ T9244] netlink: zone id is out of range
[ 196.129837][ T9249] bridge0: entered promiscuous mode
[ 196.135097][ T9249] bridge0: entered allmulticast mode
[ 196.150667][ T9244] netlink: zone id is out of range
[ 196.155852][ T9244] netlink: del zone limit has 4 unknown bytes
[ 196.192585][ T9249] team0: Port device bridge0 added
[ 196.257680][ T9242] bond8: (slave lo): Releasing active interface
[ 196.295185][ T9242] bond8: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 196.318211][ T9242] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 196.354983][ T9242] bond9: (slave lo): making interface the new active one
[ 196.380236][ T9242] bond9: (slave lo): Enslaving as an active interface with an up link
[ 196.428231][ T9249] netlink: 'syz.4.698': attribute type 10 has an invalid length.
[ 196.454018][ T9259] bridge0: port 1(ip6gretap0) entered blocking state
[ 196.486957][ T9259] bridge0: port 1(ip6gretap0) entered disabled state
[ 196.542870][ T9259] ip6gretap0: entered allmulticast mode
[ 196.568534][ T9259] ip6gretap0: entered promiscuous mode
[ 196.574219][ T9266] __nla_validate_parse: 3 callbacks suppressed
[ 196.574235][ T9266] netlink: 48 bytes leftover after parsing attributes in process `syz.2.703'.
[ 196.609063][ T9259] bridge0: port 1(ip6gretap0) entered blocking state
[ 196.615902][ T9259] bridge0: port 1(ip6gretap0) entered listening state
[ 196.759147][ T9276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.706'.
[ 196.833246][ T9278] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.707'.
[ 196.922343][ T8799] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 197.110472][ T8799] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 197.305160][ T8799] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 197.413602][ T8799] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 197.557465][ T8799] bridge_slave_1: left allmulticast mode
[ 197.563159][ T8799] bridge_slave_1: left promiscuous mode
[ 197.578977][ T8799] bridge0: port 2(bridge_slave_1) entered disabled state
[ 197.592441][ T8799] bridge_slave_0: left allmulticast mode
[ 197.600581][ T8799] bridge_slave_0: left promiscuous mode
[ 197.606359][ T8799] bridge0: port 1(bridge_slave_0) entered disabled state
[ 198.074368][ T8799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 198.090266][ T8799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 198.101513][ T8799] bond0 (unregistering): Released all slaves
[ 198.999498][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 199.017296][ T5244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 199.025736][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 199.034188][ T5244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 199.048182][ T5244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 199.055536][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 199.084740][ T9365] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.723'.
[ 199.331290][ T9362] caif0 speed is unknown, defaulting to 1000
[ 199.831087][ T9392] netlink: 52 bytes leftover after parsing attributes in process `syz.1.730'.
[ 199.869164][ T8799] hsr_slave_0: left promiscuous mode
[ 199.920094][ T8799] hsr_slave_1: left promiscuous mode
[ 199.944348][ T8799] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 199.954506][ T8799] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 199.965007][ T8799] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 199.973407][ T8799] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 200.012495][ T8799] veth1_macvtap: left promiscuous mode
[ 200.021387][ T8799] veth0_macvtap: left promiscuous mode
[ 200.031651][ T8799] veth1_vlan: left promiscuous mode
[ 200.041616][ T8799] veth0_vlan: left promiscuous mode
[ 200.677559][ T8799] team0 (unregistering): Port device team_slave_1 removed
[ 200.729604][ T8799] team0 (unregistering): Port device team_slave_0 removed
[ 201.147452][ T5244] Bluetooth: hci3: command tx timeout
[ 201.416373][ T9405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.736'.
[ 201.434244][ T9403] bridge5: entered promiscuous mode
[ 201.477986][ T9403] bridge5: entered allmulticast mode
[ 201.502865][ T9403] team0: Device bridge5 is of different type
[ 201.590241][ T9415] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 201.818615][ T9412] netlink: 'syz.2.737': attribute type 10 has an invalid length.
[ 201.892300][ T9401] netlink: 'syz.0.735': attribute type 1 has an invalid length.
[ 202.084711][ T9362] chnl_net:caif_netlink_parms(): no params data found
[ 202.248714][ T9449] netlink: 52 bytes leftover after parsing attributes in process `syz.4.747'.
[ 202.522282][ T9362] bridge0: port 1(bridge_slave_0) entered blocking state
[ 202.556217][ T9362] bridge0: port 1(bridge_slave_0) entered disabled state
[ 202.584360][ T9362] bridge_slave_0: entered allmulticast mode
[ 202.595969][ T9362] bridge_slave_0: entered promiscuous mode
[ 202.633521][ T9471] bridge4: entered promiscuous mode
[ 202.677165][ T9471] bridge4: entered allmulticast mode
[ 202.684678][ T9471] team0: Port device bridge4 added
[ 202.760674][ T9362] bridge0: port 2(bridge_slave_1) entered blocking state
[ 202.793998][ T9362] bridge0: port 2(bridge_slave_1) entered disabled state
[ 202.824443][ T9362] bridge_slave_1: entered allmulticast mode
[ 202.855566][ T9362] bridge_slave_1: entered promiscuous mode
[ 202.885455][ T9478] netlink: 'syz.4.751': attribute type 10 has an invalid length.
[ 203.043155][ T9362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 203.094286][ T9362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 203.184715][ T9497] bridge5: entered promiscuous mode
[ 203.201521][ T9497] bridge5: entered allmulticast mode
[ 203.222808][ T9497] team0: Port device bridge5 added
[ 203.228454][ T5244] Bluetooth: hci3: command tx timeout
[ 203.315920][ T9362] team0: Port device team_slave_0 added
[ 203.333643][ T9500] netlink: 'syz.4.755': attribute type 10 has an invalid length.
[ 203.439714][ T9362] team0: Port device team_slave_1 added
[ 203.546693][ T9362] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 203.567208][ T9362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 203.593895][ T9362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 203.619484][ T9362] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 203.636688][ T9362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 203.689070][ T9362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 203.824918][ T9362] hsr_slave_0: entered promiscuous mode
[ 203.840847][ T9362] hsr_slave_1: entered promiscuous mode
[ 204.167639][ T9542] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.770'.
[ 204.585423][ T9561] netlink: 'syz.0.774': attribute type 1 has an invalid length.
[ 204.665865][ T9561] bond1: entered promiscuous mode
[ 204.723275][ T9563] lo: entered promiscuous mode
[ 204.748305][ T9563] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 204.797791][ T9563] bond1: (slave lo): making interface the new active one
[ 204.816791][ T9563] bond1: (slave lo): Enslaving as an active interface with an up link
[ 205.300181][ T9582] netlink: 'syz.1.780': attribute type 1 has an invalid length.
[ 205.317247][ T5244] Bluetooth: hci3: command tx timeout
[ 205.382574][ T9582] bond10: entered promiscuous mode
[ 205.435668][ T9588] bond9: (slave lo): Releasing active interface
[ 205.487166][ T9588] bond9: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 205.549017][ T9588] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 205.625918][ T9588] bond10: (slave lo): making interface the new active one
[ 205.651347][ T9588] bond10: (slave lo): Enslaving as an active interface with an up link
[ 205.688494][ T9591] bridge4: entered promiscuous mode
[ 205.717053][ T9591] bridge4: entered allmulticast mode
[ 205.739594][ T9591] team0: Port device bridge4 added
[ 205.748524][ T9594] netlink: 'syz.0.783': attribute type 10 has an invalid length.
[ 205.869267][ T9611] bridge6: entered promiscuous mode
[ 205.874528][ T9611] bridge6: entered allmulticast mode
[ 205.880373][ T9614] netlink: 28 bytes leftover after parsing attributes in process `syz.1.786'.
[ 205.913990][ T9611] team0: Port device bridge6 added
[ 206.025179][ T9619] netlink: 'syz.4.784': attribute type 10 has an invalid length.
[ 206.151709][ T9362] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 206.214774][ T9362] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 206.246665][ T9362] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 206.311644][ T9362] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 206.614960][ T9362] 8021q: adding VLAN 0 to HW filter on device bond0
[ 206.704763][ T9362] 8021q: adding VLAN 0 to HW filter on device team0
[ 206.751421][ T8804] bridge0: port 1(bridge_slave_0) entered blocking state
[ 206.758636][ T8804] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 206.849614][ T52] bridge0: port 2(bridge_slave_1) entered blocking state
[ 206.856797][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 207.058791][ T9674] bridge0: port 4(vlan0) entered blocking state
[ 207.086396][ T9674] bridge0: port 4(vlan0) entered disabled state
[ 207.104540][ T9674] vlan0: entered allmulticast mode
[ 207.133467][ T9674] veth0_vlan: entered allmulticast mode
[ 207.162075][ T9674] vlan0: entered promiscuous mode
[ 207.174202][ T9674] bridge0: port 4(vlan0) entered blocking state
[ 207.180667][ T9674] bridge0: port 4(vlan0) entered forwarding state
[ 207.205076][ T9674] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[ 207.264487][ T9679] vlan0: left allmulticast mode
[ 207.271134][ T9679] veth0_vlan: left allmulticast mode
[ 207.297308][ T9679] vlan0: left promiscuous mode
[ 207.303185][ T9679] bridge0: port 4(vlan0) entered disabled state
[ 207.389709][ T8804] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 207.392308][ T5244] Bluetooth: hci3: command tx timeout
[ 207.677204][ T9704] tipc: Started in network mode
[ 207.682243][ T9704] tipc: Node identity , cluster identity 4711
[ 207.753495][ T9710] netlink: 20 bytes leftover after parsing attributes in process `syz.1.812'.
[ 207.862875][ T9362] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 207.932905][ T9710] caif0 speed is unknown, defaulting to 1000
[ 208.036143][ T9362] veth0_vlan: entered promiscuous mode
[ 208.083514][ T9362] veth1_vlan: entered promiscuous mode
[ 208.236259][ T9362] veth0_macvtap: entered promiscuous mode
[ 208.295234][ T9362] veth1_macvtap: entered promiscuous mode
[ 208.360011][ T9362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 208.397723][ T9362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 208.441860][ T9362] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 208.477731][ T9362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 208.509543][ T9362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 208.562853][ T9362] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 208.640543][ T9362] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 208.673597][ T9362] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 208.693335][ T9362] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 208.711789][ T9362] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 209.209577][ T8799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 209.253822][ T8799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 209.361056][ T8804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 209.408048][ T8804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 209.558041][ T9785] bridge7: entered promiscuous mode
[ 209.563305][ T9785] bridge7: entered allmulticast mode
[ 209.614091][ T9785] team0: Port device bridge7 added
[ 209.636622][ T9789] netlink: 'syz.4.832': attribute type 10 has an invalid length.
[ 209.866120][ T9793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 210.044668][ T9806] netlink: 'syz.1.834': attribute type 1 has an invalid length.
[ 210.162592][ T9817] netlink: 'syz.4.836': attribute type 1 has an invalid length.
[ 210.349890][ T9817] bond4: entered promiscuous mode
[ 210.357922][ T9822] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 210.393809][ T9822] bond4: (slave lo): making interface the new active one
[ 210.408354][ T9822] bond4: (slave lo): Enslaving as an active interface with an up link
[ 210.525537][ T9831] tipc: Started in network mode
[ 210.533456][ T9831] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711
[ 210.557113][ T9831] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 210.589866][ T9835] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.841'.
[ 211.586603][ T8804] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 211.867248][ C1] bridge0: port 1(ip6gretap0) entered learning state
[ 212.628157][ T8804] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 212.798776][ T9900] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.866'.
[ 212.820897][ T9900] netlink: 183228 bytes leftover after parsing attributes in process `syz.0.866'.
[ 212.874151][ T8804] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 213.080740][ T8804] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 213.335003][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 213.352565][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 213.376946][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 213.389276][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 213.403293][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 213.411499][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 213.417313][ T9928] netlink: 52 bytes leftover after parsing attributes in process `syz.2.880'.
[ 213.430264][ T8804] bridge_slave_1: left allmulticast mode
[ 213.467732][ T8804] bridge_slave_1: left promiscuous mode
[ 213.487303][ T8804] bridge0: port 2(bridge_slave_1) entered disabled state
[ 213.519012][ T8804] bridge_slave_0: left allmulticast mode
[ 213.524711][ T8804] bridge_slave_0: left promiscuous mode
[ 213.555521][ T8804] bridge0: port 1(bridge_slave_0) entered disabled state
[ 214.035804][ T8804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 214.050933][ T8804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 214.062843][ T8804] bond0 (unregistering): Released all slaves
[ 214.098937][ T9939] netlink: 'syz.0.883': attribute type 1 has an invalid length.
[ 214.155660][ T9939] bond2: entered promiscuous mode
[ 214.234124][ T9941] bond1: (slave lo): Releasing active interface
[ 214.322489][ T9941] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 214.340054][ T9941] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 214.361966][ T9941] bond2: (slave lo): making interface the new active one
[ 214.371201][ T9941] bond2: (slave lo): Enslaving as an active interface with an up link
[ 214.489112][ T9950] netlink: 'syz.2.885': attribute type 1 has an invalid length.
[ 214.514915][ T9953] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[ 214.533064][ T9953] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[ 214.544479][ T9953] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[ 214.553608][ T9953] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[ 214.563324][ T9953] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[ 214.573116][ T9953] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[ 214.582615][ T9953] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[ 214.591935][ T9953] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[ 214.601348][ T9953] geneve2: entered promiscuous mode
[ 214.607192][ T9953] geneve2: entered allmulticast mode
[ 214.620563][ T9922] caif0 speed is unknown, defaulting to 1000
[ 214.898814][ T9966] netlink: 'syz.1.892': attribute type 1 has an invalid length.
[ 214.920533][ T9970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.893'.
[ 214.972597][ T9966] bond11: entered promiscuous mode
[ 215.195129][ T9966] bond10: (slave lo): Releasing active interface
[ 215.244814][ T9966] bond10: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 215.277398][ T9966] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 215.298421][ T9966] bond11: (slave lo): making interface the new active one
[ 215.307678][ T9966] bond11: (slave lo): Enslaving as an active interface with an up link
[ 215.386738][ T8804] hsr_slave_0: left promiscuous mode
[ 215.404309][ T8804] hsr_slave_1: left promiscuous mode
[ 215.438867][ T8804] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 215.446356][ T8804] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 215.463349][ T8804] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 215.474490][ T5244] Bluetooth: hci3: command tx timeout
[ 215.483240][ T8804] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 215.525359][ T8804] veth1_macvtap: left promiscuous mode
[ 215.531355][ T8804] veth0_macvtap: left promiscuous mode
[ 215.538028][ T8804] veth1_vlan: left promiscuous mode
[ 215.543564][ T8804] veth0_vlan: left promiscuous mode
[ 216.038791][ T8804] team0 (unregistering): Port device team_slave_1 removed
[ 216.092726][ T8804] team0 (unregistering): Port device team_slave_0 removed
[ 216.583749][ T9995] netlink: 'syz.0.900': attribute type 1 has an invalid length.
[ 216.640001][ T9995] bond3: entered promiscuous mode
[ 216.651144][ T9997] bond2: (slave lo): Releasing active interface
[ 216.660073][ T9997] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 216.670858][ T9997] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 216.686840][ T9997] bond3: (slave lo): making interface the new active one
[ 216.694963][ T9997] bond3: (slave lo): Enslaving as an active interface with an up link
[ 216.703370][T10001] tc_dump_action: action bad kind
[ 217.166555][ T9922] chnl_net:caif_netlink_parms(): no params data found
[ 217.206687][T10020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 217.405227][ T9922] bridge0: port 1(bridge_slave_0) entered blocking state
[ 217.418041][ T9922] bridge0: port 1(bridge_slave_0) entered disabled state
[ 217.425266][ T9922] bridge_slave_0: entered allmulticast mode
[ 217.432715][ T9922] bridge_slave_0: entered promiscuous mode
[ 217.447283][T10045] netlink: 'syz.1.915': attribute type 1 has an invalid length.
[ 217.486220][T10045] bond12: entered promiscuous mode
[ 217.492161][ T9922] bridge0: port 2(bridge_slave_1) entered blocking state
[ 217.499875][ T9922] bridge0: port 2(bridge_slave_1) entered disabled state
[ 217.507219][ T9922] bridge_slave_1: entered allmulticast mode
[ 217.514002][ T9922] bridge_slave_1: entered promiscuous mode
[ 217.523227][T10048] bond11: (slave lo): Releasing active interface
[ 217.532933][T10048] bond11: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 217.545752][T10048] bond12: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 217.558365][ T5244] Bluetooth: hci3: command tx timeout
[ 217.570521][T10048] bond12: (slave lo): making interface the new active one
[ 217.579567][T10048] bond12: (slave lo): Enslaving as an active interface with an up link
[ 217.696261][ T9922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 217.729235][ T9922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 217.843711][ T9922] team0: Port device team_slave_0 added
[ 217.859543][ T9922] team0: Port device team_slave_1 added
[ 217.961239][T10064] syz_tun: entered promiscuous mode
[ 217.969701][T10064] batadv_slave_0: entered promiscuous mode
[ 217.977752][T10064] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[ 217.985338][T10064] Cannot create hsr debugfs directory
[ 217.987155][T10068] netlink: 'syz.2.922': attribute type 1 has an invalid length.
[ 217.991108][T10064] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[ 218.003617][T10068] netlink: 224 bytes leftover after parsing attributes in process `syz.2.922'.
[ 218.062834][ T9922] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 218.083226][ T9922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 218.130765][ T9922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 218.160666][ T9922] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 218.173442][ T9922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 218.206813][ T9922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 218.303209][ T9922] hsr_slave_0: entered promiscuous mode
[ 218.318935][ T9922] hsr_slave_1: entered promiscuous mode
[ 218.325770][T10079] netlink: 'syz.2.926': attribute type 1 has an invalid length.
[ 218.359811][T10079] bond4: entered promiscuous mode
[ 218.404541][T10085] bond3: (slave lo): Releasing active interface
[ 218.412357][T10085] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 218.422826][T10085] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 218.446009][T10085] bond4: (slave lo): making interface the new active one
[ 218.454214][T10085] bond4: (slave lo): Enslaving as an active interface with an up link
[ 218.553597][T10092] netlink: 28 bytes leftover after parsing attributes in process `syz.2.930'.
[ 218.886315][T10103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.933'.
[ 218.948912][T10105] bridge5: entered promiscuous mode
[ 218.954161][T10105] bridge5: entered allmulticast mode
[ 218.965763][T10105] team0: Port device bridge5 added
[ 219.004347][T10105] netlink: 'syz.0.934': attribute type 10 has an invalid length.
[ 219.072636][T10109] netlink: 'syz.1.936': attribute type 1 has an invalid length.
[ 219.094274][T10109] bond13: entered promiscuous mode
[ 219.113392][T10109] bond12: (slave lo): Releasing active interface
[ 219.120638][T10109] bond12: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 219.133380][T10109] bond13: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 219.154214][T10109] bond13: (slave lo): making interface the new active one
[ 219.162904][T10109] bond13: (slave lo): Enslaving as an active interface with an up link
[ 219.273651][T10114] syz_tun: entered promiscuous mode
[ 219.280714][T10114] batadv_slave_0: entered promiscuous mode
[ 219.290274][T10114] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[ 219.298080][T10114] Cannot create hsr debugfs directory
[ 219.304980][T10114] syz_tun: left promiscuous mode
[ 219.318978][T10114] batadv_slave_0: left promiscuous mode
[ 219.372979][ T9922] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 219.394766][ T9922] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 219.416719][ T9922] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 219.436676][ T9922] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 219.630697][ T5244] Bluetooth: hci3: command tx timeout
[ 219.693236][ T9922] 8021q: adding VLAN 0 to HW filter on device bond0
[ 219.746196][ T9922] 8021q: adding VLAN 0 to HW filter on device team0
[ 219.777805][ T8804] bridge0: port 1(bridge_slave_0) entered blocking state
[ 219.785015][ T8804] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 219.822461][ T8804] bridge0: port 2(bridge_slave_1) entered blocking state
[ 219.829679][ T8804] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 219.979147][T10145] netlink: 'syz.0.949': attribute type 1 has an invalid length.
[ 220.049847][T10145] bond4: entered promiscuous mode
[ 220.067541][ T9922] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 220.104149][T10149] bond3: (slave lo): Releasing active interface
[ 220.111588][T10149] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 220.122696][T10149] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 220.142823][T10149] bond4: (slave lo): making interface the new active one
[ 220.152436][T10149] bond4: (slave lo): Enslaving as an active interface with an up link
[ 220.319619][T10159] bond4: (slave lo): Releasing active interface
[ 220.339534][T10159] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 220.359569][T10159] ip6gretap0: left allmulticast mode
[ 220.378035][T10159] ip6gretap0: left promiscuous mode
[ 220.390638][T10159] bridge0: port 3(ip6gretap0) entered disabled state
[ 220.464229][T10159] team0: Port device bond0 removed
[ 220.474206][T10159] bridge_slave_0: left allmulticast mode
[ 220.481386][T10159] bridge_slave_0: left promiscuous mode
[ 220.487387][T10159] bridge0: port 1(bridge_slave_0) entered disabled state
[ 220.501829][T10159] bridge_slave_1: left allmulticast mode
[ 220.508481][T10159] bridge_slave_1: left promiscuous mode
[ 220.514787][T10159] bridge0: port 2(bridge_slave_1) entered disabled state
[ 220.535637][T10159] bond0: (slave bond_slave_0): Releasing backup interface
[ 220.550743][T10159] bond0: (slave bond_slave_1): Releasing backup interface
[ 220.633428][T10159] team0: Port device team_slave_1 removed
[ 220.646725][T10159] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 220.654597][T10159] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 220.673446][T10159] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 220.694192][T10159] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 220.724184][T10159] bond0: (slave netdevsim0): Releasing backup interface
[ 220.770928][T10159] team0: Port device bridge2 removed
[ 220.798082][T10159] team0: Port device bridge3 removed
[ 220.818541][T10159] team0: Port device bridge4 removed
[ 220.833132][T10159] team0: Port device bridge5 removed
[ 220.862257][T10165] team0: Port device wg2 added
[ 220.874574][T10169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.953'.
[ 221.008464][T10170] caif0 speed is unknown, defaulting to 1000
[ 221.016330][ T9922] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 221.175790][ T9922] veth0_vlan: entered promiscuous mode
[ 221.215152][ T9922] veth1_vlan: entered promiscuous mode
[ 221.295558][ T9922] veth0_macvtap: entered promiscuous mode
[ 221.335869][ T9922] veth1_macvtap: entered promiscuous mode
[ 221.409377][ T9922] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 221.436689][ T9922] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 221.482964][ T9922] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 221.508230][ T9922] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 221.526625][ T9922] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 221.540139][ T9922] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 221.707704][ T5244] Bluetooth: hci3: command tx timeout
[ 221.779892][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 221.802412][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 221.811013][ T8801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 221.852905][ T8801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 222.364463][T10211] netlink: 'syz.2.968': attribute type 1 has an invalid length.
[ 222.413521][T10211] bond5: entered promiscuous mode
[ 222.461243][T10211] bond4: (slave lo): Releasing active interface
[ 222.476184][T10211] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 222.497946][T10211] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 222.541134][T10211] bond5: (slave lo): making interface the new active one
[ 222.569079][T10211] bond5: (slave lo): Enslaving as an active interface with an up link
[ 222.603961][T10216] bridge0: port 2(vlan0) entered blocking state
[ 222.617791][T10216] bridge0: port 2(vlan0) entered disabled state
[ 222.624358][T10216] vlan0: entered allmulticast mode
[ 222.633477][T10216] veth0_vlan: entered allmulticast mode
[ 222.644672][T10216] vlan0: entered promiscuous mode
[ 222.653556][T10216] bridge0: port 2(vlan0) entered blocking state
[ 222.660196][T10216] bridge0: port 2(vlan0) entered listening state
[ 222.676356][T10216] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[ 222.701956][T10217] vlan0: left allmulticast mode
[ 222.706885][T10217] veth0_vlan: left allmulticast mode
[ 222.727488][T10217] vlan0: left promiscuous mode
[ 222.746049][T10217] bridge0: port 2(vlan0) entered disabled state
[ 222.851443][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.972'.
[ 223.135421][T10241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.980'.
[ 223.744800][T10256] netlink: 'syz.4.986': attribute type 1 has an invalid length.
[ 224.305619][ T8804] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 225.324154][ T8804] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 225.393766][ T8804] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 225.446833][ T8804] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 225.533260][ T8804] bridge_slave_1: left allmulticast mode
[ 225.541283][ T8804] bridge_slave_1: left promiscuous mode
[ 225.547041][ T8804] bridge0: port 2(bridge_slave_1) entered disabled state
[ 225.555963][ T8804] bridge_slave_0: left allmulticast mode
[ 225.563469][ T8804] bridge_slave_0: left promiscuous mode
[ 225.569308][ T8804] bridge0: port 1(bridge_slave_0) entered disabled state
[ 225.690495][T10283] netlink: 52 bytes leftover after parsing attributes in process `syz.4.997'.
[ 225.854295][T10288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.999'.
[ 226.197150][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 226.213291][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 226.225205][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 226.234074][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 226.243269][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 226.256520][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 226.533706][ T8804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 226.549898][ T8804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 226.564385][ T8804] bond0 (unregistering): Released all slaves
[ 226.588433][T10284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 226.627448][T10313] netlink: 'syz.1.1007': attribute type 1 has an invalid length.
[ 226.792560][T10302] caif0 speed is unknown, defaulting to 1000
[ 227.061033][T10329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1013'.
[ 227.204507][T10331] bridge8: entered promiscuous mode
[ 227.220866][T10331] bridge8: entered allmulticast mode
[ 227.227240][ C1] bridge0: port 1(ip6gretap0) entered forwarding state
[ 227.234178][ C1] bridge0: topology change detected, propagating
[ 227.253416][T10331] team0: Port device bridge8 added
[ 227.328671][T10333] netlink: 'syz.4.1014': attribute type 10 has an invalid length.
[ 227.456157][ T8804] hsr_slave_0: left promiscuous mode
[ 227.469979][ T8804] hsr_slave_1: left promiscuous mode
[ 227.500493][ T8804] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 227.509242][T10343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1018'.
[ 227.512684][ T8804] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 227.537404][T10343] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1018'.
[ 227.553638][T10343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1018'.
[ 227.556773][ T8804] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 227.587109][ T8804] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 227.644339][ T8804] veth1_macvtap: left promiscuous mode
[ 227.668471][ T8804] veth0_macvtap: left promiscuous mode
[ 227.678665][ T8804] veth1_vlan: left promiscuous mode
[ 227.691114][ T8804] veth0_vlan: left promiscuous mode
[ 228.256547][ T8804] team0 (unregistering): Port device team_slave_1 removed
[ 228.308829][ T8804] team0 (unregistering): Port device team_slave_0 removed
[ 228.360165][ T5244] Bluetooth: hci3: command tx timeout
[ 228.798114][T10351] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1020'.
[ 229.002360][T10364] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1024'.
[ 229.134597][T10302] chnl_net:caif_netlink_parms(): no params data found
[ 229.293488][T10377] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1027'.
[ 229.335492][T10302] bridge0: port 1(bridge_slave_0) entered blocking state
[ 229.343137][T10302] bridge0: port 1(bridge_slave_0) entered disabled state
[ 229.351678][T10302] bridge_slave_0: entered allmulticast mode
[ 229.359356][T10302] bridge_slave_0: entered promiscuous mode
[ 229.368271][T10302] bridge0: port 2(bridge_slave_1) entered blocking state
[ 229.375539][T10302] bridge0: port 2(bridge_slave_1) entered disabled state
[ 229.384916][T10302] bridge_slave_1: entered allmulticast mode
[ 229.392545][T10302] bridge_slave_1: entered promiscuous mode
[ 229.433783][T10302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 229.446560][T10302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 229.531659][T10302] team0: Port device team_slave_0 added
[ 229.550704][T10302] team0: Port device team_slave_1 added
[ 229.623418][T10302] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 229.631763][T10302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 229.665243][T10302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 229.682861][T10302] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 229.693970][T10302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 229.738979][T10302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 229.854360][T10302] hsr_slave_0: entered promiscuous mode
[ 229.863426][T10302] hsr_slave_1: entered promiscuous mode
[ 230.052427][T10408] netlink: 'syz.1.1037': attribute type 29 has an invalid length.
[ 230.105830][T10408] netlink: 'syz.1.1037': attribute type 29 has an invalid length.
[ 230.173303][T10408] netlink: 'syz.1.1037': attribute type 29 has an invalid length.
[ 230.302033][T10419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1043'.
[ 230.312238][T10420] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 230.427627][ T5244] Bluetooth: hci3: command tx timeout
[ 230.530232][T10423] netlink: 'syz.0.1044': attribute type 1 has an invalid length.
[ 230.552083][T10423] bond5: entered promiscuous mode
[ 230.557624][T10427] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 230.573870][T10427] bond5: (slave lo): making interface the new active one
[ 230.582612][T10427] bond5: (slave lo): Enslaving as an active interface with an up link
[ 230.619643][T10302] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 230.641800][T10302] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 230.690473][T10302] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 230.745093][T10302] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 230.781946][T10438] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 230.790745][T10438] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 230.799167][T10438] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 230.807402][T10438] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 230.838674][T10436] syz_tun: entered promiscuous mode
[ 230.860518][T10436] batadv_slave_0: entered promiscuous mode
[ 230.868210][T10436] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[ 230.875784][T10436] Cannot create hsr debugfs directory
[ 230.896837][T10436] syz_tun: left promiscuous mode
[ 230.926602][T10436] batadv_slave_0: left promiscuous mode
[ 230.966943][T10448] bridge0: port 2(vlan0) entered blocking state
[ 230.973879][T10448] bridge0: port 2(vlan0) entered disabled state
[ 230.980795][T10448] vlan0: entered allmulticast mode
[ 230.986084][T10448] veth0_vlan: entered allmulticast mode
[ 230.993085][T10448] vlan0: entered promiscuous mode
[ 231.000530][T10448] bridge0: port 2(vlan0) entered blocking state
[ 231.007014][T10448] bridge0: port 2(vlan0) entered listening state
[ 231.014210][T10448] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[ 231.068911][T10451] vlan0: left allmulticast mode
[ 231.073814][T10451] veth0_vlan: left allmulticast mode
[ 231.094581][T10451] vlan0: left promiscuous mode
[ 231.100127][T10451] bridge0: port 2(vlan0) entered disabled state
[ 231.252756][T10302] 8021q: adding VLAN 0 to HW filter on device bond0
[ 231.289673][T10302] 8021q: adding VLAN 0 to HW filter on device team0
[ 231.332030][ T8799] bridge0: port 1(bridge_slave_0) entered blocking state
[ 231.339239][ T8799] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 231.369547][ T8804] bridge0: port 2(bridge_slave_1) entered blocking state
[ 231.376754][ T8804] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 231.496783][T10302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 231.789093][T10481] macvlan2: entered promiscuous mode
[ 231.794544][T10481] vlan0: entered promiscuous mode
[ 231.943493][T10302] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 232.042677][T10302] veth0_vlan: entered promiscuous mode
[ 232.070113][T10302] veth1_vlan: entered promiscuous mode
[ 232.119024][T10302] veth0_macvtap: entered promiscuous mode
[ 232.137960][T10302] veth1_macvtap: entered promiscuous mode
[ 232.169154][T10302] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 232.196815][T10302] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 232.227650][T10302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 232.236391][T10302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 232.258565][T10302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 232.268068][T10302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 232.287426][T10503] netlink: 'syz.1.1078': attribute type 1 has an invalid length.
[ 232.313591][T10503] bond14: entered promiscuous mode
[ 232.350726][T10503] bond13: (slave lo): Releasing active interface
[ 232.362875][T10503] bond13: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 232.376234][T10503] bond14: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 232.406533][T10503] bond14: (slave lo): making interface the new active one
[ 232.424589][T10503] bond14: (slave lo): Enslaving as an active interface with an up link
[ 232.507300][ T5244] Bluetooth: hci3: command tx timeout
[ 232.523936][ T8799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 232.547259][ T8799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 232.591624][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 232.604260][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 234.265338][T10561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 234.644471][T10584] caif0 speed is unknown, defaulting to 1000
[ 235.111201][ T8801] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 235.139373][T10599] bridge0: port 1(vlan0) entered blocking state
[ 235.148905][T10599] bridge0: port 1(vlan0) entered disabled state
[ 235.163285][T10599] vlan0: entered allmulticast mode
[ 235.168815][T10599] veth0_vlan: entered allmulticast mode
[ 235.176307][T10599] vlan0: entered promiscuous mode
[ 235.189465][T10599] bridge0: port 1(vlan0) entered blocking state
[ 235.195883][T10599] bridge0: port 1(vlan0) entered forwarding state
[ 235.222589][T10599] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[ 235.297189][T10600] vlan0: left allmulticast mode
[ 235.302219][T10600] veth0_vlan: left allmulticast mode
[ 235.314298][T10600] vlan0: left promiscuous mode
[ 235.320490][T10600] bridge0: port 1(vlan0) entered disabled state
[ 236.818048][T10621] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1124'.
[ 237.062870][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 237.074341][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 237.082659][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 237.091889][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 237.099841][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 237.114155][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 237.176043][ T8801] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 237.204948][T10633] bridge0: port 2(vlan0) entered blocking state
[ 237.229764][T10633] bridge0: port 2(vlan0) entered disabled state
[ 237.238656][T10633] vlan0: entered allmulticast mode
[ 237.259400][T10633] veth0_vlan: entered allmulticast mode
[ 237.266838][T10633] vlan0: left allmulticast mode
[ 237.291085][T10633] veth0_vlan: left allmulticast mode
[ 237.313750][T10638] vlan1: entered promiscuous mode
[ 237.412197][ T8801] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 237.448767][T10630] vlan1: left promiscuous mode
[ 237.620070][ T8801] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 237.704205][T10629] caif0 speed is unknown, defaulting to 1000
[ 237.793866][T10658] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1135'.
[ 237.937654][ T8801] bridge_slave_1: left allmulticast mode
[ 237.943362][ T8801] bridge_slave_1: left promiscuous mode
[ 237.970466][ T8801] bridge0: port 2(bridge_slave_1) entered disabled state
[ 238.000538][ T8801] bridge_slave_0: left allmulticast mode
[ 238.016480][ T8801] bridge_slave_0: left promiscuous mode
[ 238.025965][ T8801] bridge0: port 1(bridge_slave_0) entered disabled state
[ 238.519319][ T8801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 238.531476][ T8801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 238.543026][ T8801] bond0 (unregistering): Released all slaves
[ 238.942320][T10687] syz_tun: entered promiscuous mode
[ 238.970144][T10687] batadv_slave_0: entered promiscuous mode
[ 238.989181][T10687] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[ 238.997798][T10687] Cannot create hsr debugfs directory
[ 239.012824][T10687] syz_tun: left promiscuous mode
[ 239.036161][T10687] batadv_slave_0: left promiscuous mode
[ 239.159196][T10686] bridge0: entered promiscuous mode
[ 239.164472][T10686] bridge0: entered allmulticast mode
[ 239.180791][T10686] team0: Device bridge0 is of different type
[ 239.228067][ T5235] Bluetooth: hci3: command tx timeout
[ 239.273302][T10692] netlink: 'syz.1.1144': attribute type 10 has an invalid length.
[ 239.387228][ T8799] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 239.587570][T10629] chnl_net:caif_netlink_parms(): no params data found
[ 239.656598][ T8801] hsr_slave_0: left promiscuous mode
[ 239.682706][ T8801] hsr_slave_1: left promiscuous mode
[ 239.692366][ T8801] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 239.699971][ T8801] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 239.708390][ T8801] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 239.715803][ T8801] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 239.736166][ T8801] veth1_macvtap: left promiscuous mode
[ 239.743242][ T8801] veth0_macvtap: left promiscuous mode
[ 239.757508][ T8801] veth1_vlan: left promiscuous mode
[ 239.762879][ T8801] veth0_vlan: left promiscuous mode
[ 240.345341][ T8801] team0 (unregistering): Port device team_slave_1 removed
[ 240.394517][ T8801] team0 (unregistering): Port device team_slave_0 removed
[ 241.038036][T10742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1157'.
[ 241.265684][T10629] bridge0: port 1(bridge_slave_0) entered blocking state
[ 241.288696][T10629] bridge0: port 1(bridge_slave_0) entered disabled state
[ 241.316346][T10629] bridge_slave_0: entered allmulticast mode
[ 241.317727][ T5235] Bluetooth: hci3: command tx timeout
[ 241.337459][T10629] bridge_slave_0: entered promiscuous mode
[ 241.421911][T10629] bridge0: port 2(bridge_slave_1) entered blocking state
[ 241.467269][T10629] bridge0: port 2(bridge_slave_1) entered disabled state
[ 241.474650][T10629] bridge_slave_1: entered allmulticast mode
[ 241.495181][T10629] bridge_slave_1: entered promiscuous mode
[ 241.565469][T10629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 241.595330][T10766] netlink: 'syz.0.1165': attribute type 2 has an invalid length.
[ 241.603558][T10767] netlink: 'syz.2.1164': attribute type 1 has an invalid length.
[ 241.644857][T10767] bond6: entered promiscuous mode
[ 241.656719][T10629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 241.686649][T10773] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1167'.
[ 241.696540][T10771] bond5: (slave lo): Releasing active interface
[ 241.704874][T10771] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 241.715507][T10771] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 241.733045][T10771] bond6: (slave lo): making interface the new active one
[ 241.741106][T10771] bond6: (slave lo): Enslaving as an active interface with an up link
[ 241.812218][T10629] team0: Port device team_slave_0 added
[ 241.980312][T10629] team0: Port device team_slave_1 added
[ 242.008953][T10784] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1169'.
[ 242.063188][T10629] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 242.071055][T10629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 242.098100][T10629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 242.112627][T10629] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 242.126048][T10629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 242.155983][T10629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 242.168043][T10786] netlink: 'syz.0.1171': attribute type 1 has an invalid length.
[ 242.252631][T10786] bond6: entered promiscuous mode
[ 242.392357][T10787] bond5: (slave lo): Releasing active interface
[ 242.406322][T10787] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 242.433642][T10787] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 242.457257][T10787] bond6: (slave lo): making interface the new active one
[ 242.465820][T10787] bond6: (slave lo): Enslaving as an active interface with an up link
[ 242.486609][T10789] bridge0: entered promiscuous mode
[ 242.492027][T10789] bridge0: entered allmulticast mode
[ 242.504058][T10789] team0: Device bridge0 is of different type
[ 242.634421][T10629] hsr_slave_0: entered promiscuous mode
[ 242.651698][T10629] hsr_slave_1: entered promiscuous mode
[ 242.907412][T10819] netlink: 'syz.2.1180': attribute type 1 has an invalid length.
[ 242.957703][T10819] bond7: entered promiscuous mode
[ 242.984659][T10825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1182'.
[ 243.010191][T10819] bond6: (slave lo): Releasing active interface
[ 243.020006][T10819] bond6: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 243.030845][T10819] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 243.048662][T10819] bond7: (slave lo): making interface the new active one
[ 243.058850][T10819] bond7: (slave lo): Enslaving as an active interface with an up link
[ 243.387393][ T5235] Bluetooth: hci3: command tx timeout
[ 243.432784][T10845] netlink: 'syz.0.1191': attribute type 1 has an invalid length.
[ 243.447542][T10845] netlink: 'syz.0.1191': attribute type 2 has an invalid length.
[ 243.544737][T10850] bridge9: entered promiscuous mode
[ 243.555097][T10850] bridge9: entered allmulticast mode
[ 243.568054][T10850] team0: Port device bridge9 added
[ 243.579617][T10850] netlink: 'syz.4.1194': attribute type 10 has an invalid length.
[ 243.672877][T10629] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 243.700352][T10629] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 243.721921][T10629] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 243.750270][T10629] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 243.764371][T10858] netlink: 'syz.4.1196': attribute type 1 has an invalid length.
[ 243.800868][T10858] bond5: entered promiscuous mode
[ 243.822269][T10862] bond4: (slave lo): Releasing active interface
[ 243.837682][T10862] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 243.852211][T10862] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 243.894147][T10862] bond5: (slave lo): making interface the new active one
[ 243.915860][T10862] bond5: (slave lo): Enslaving as an active interface with an up link
[ 244.056632][T10874] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1202'.
[ 244.159733][T10629] 8021q: adding VLAN 0 to HW filter on device bond0
[ 244.205484][T10629] 8021q: adding VLAN 0 to HW filter on device team0
[ 244.219142][ T8799] bridge0: port 1(bridge_slave_0) entered blocking state
[ 244.226287][ T8799] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 244.262651][ T8808] bridge0: port 2(bridge_slave_1) entered blocking state
[ 244.269898][ T8808] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 244.720883][T10629] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 244.845719][T10907] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1214'.
[ 244.858495][T10629] veth0_vlan: entered promiscuous mode
[ 244.866683][T10907] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1214'.
[ 244.897837][T10629] veth1_vlan: entered promiscuous mode
[ 244.978385][T10629] veth0_macvtap: entered promiscuous mode
[ 245.019699][T10629] veth1_macvtap: entered promiscuous mode
[ 245.047930][T10916] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 245.078582][T10917] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1219'.
[ 245.163393][T10629] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 245.200306][T10921] bridge6: entered promiscuous mode
[ 245.217530][T10921] bridge6: entered allmulticast mode
[ 245.223241][T10921] team0: Device bridge6 is of different type
[ 245.265420][T10927] Bluetooth: MGMT ver 1.23
[ 245.275198][T10927] Bluetooth: hci3: unsupported parameter 64512
[ 245.287468][T10927] Bluetooth: hci3: invalid length 0, exp 2 for type 1
[ 245.333074][T10629] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 245.353833][T10924] netlink: 'syz.0.1221': attribute type 10 has an invalid length.
[ 245.369641][T10924] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 245.424619][T10936] bridge5: entered promiscuous mode
[ 245.431119][T10936] bridge5: entered allmulticast mode
[ 245.436673][T10936] team0: Device bridge5 is of different type
[ 245.467225][ T5235] Bluetooth: hci3: command tx timeout
[ 245.516526][T10629] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 245.526855][T10629] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 245.537370][T10629] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 245.546208][T10629] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 245.563189][T10921] bridge0: port 1(ip6gretap0) entered blocking state
[ 245.570800][T10921] bridge0: port 1(ip6gretap0) entered disabled state
[ 245.580985][T10921] ip6gretap0: entered allmulticast mode
[ 245.587843][T10921] ip6gretap0: entered promiscuous mode
[ 245.594336][T10921] bridge0: port 1(ip6gretap0) entered blocking state
[ 245.601118][T10921] bridge0: port 1(ip6gretap0) entered forwarding state
[ 245.872162][T10950] netlink: 'syz.0.1230': attribute type 1 has an invalid length.
[ 245.951500][T10950] bond7: entered promiscuous mode
[ 245.970884][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 245.987594][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 246.021615][T10956] bond6: (slave lo): Releasing active interface
[ 246.035559][T10956] bond6: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 246.045899][T10956] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 246.064530][T10956] bond7: (slave lo): making interface the new active one
[ 246.072612][T10956] bond7: (slave lo): Enslaving as an active interface with an up link
[ 246.184597][ T8804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 246.217964][ T8804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 246.569779][T10977] bridge0: entered promiscuous mode
[ 246.575069][T10977] bridge0: entered allmulticast mode
[ 246.582884][T10977] team0: Device bridge0 is of different type
[ 246.644041][T10980] netlink: 'syz.1.1238': attribute type 10 has an invalid length.
[ 246.793209][T10986] bridge10: entered promiscuous mode
[ 246.801398][T10986] bridge10: entered allmulticast mode
[ 246.812619][T10986] team0: Port device bridge10 added
[ 246.826666][T10986] netlink: 'syz.4.1241': attribute type 10 has an invalid length.
[ 247.183438][T11002] bridge0: port 2(vlan0) entered blocking state
[ 247.190507][T11002] bridge0: port 2(vlan0) entered disabled state
[ 247.202123][T11002] vlan0: entered allmulticast mode
[ 247.211145][T11002] vlan0: entered promiscuous mode
[ 247.224128][T11002] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[ 247.256060][T11002] vlan0: left allmulticast mode
[ 247.261498][T11002] vlan0: left promiscuous mode
[ 247.266931][T11002] bridge0: port 2(vlan0) entered disabled state
[ 247.539278][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1255'.
[ 247.549086][T11024] bM1�Nu����30�: renamed from lo (while UP)
[ 247.564603][T11024] bM1�Nu����30�: entered allmulticast mode
[ 247.654214][T11030] bridge5: entered promiscuous mode
[ 247.659913][T11030] bridge5: entered allmulticast mode
[ 247.665290][T11030] team0: Device bridge5 is of different type
[ 247.719650][T11032] netlink: 'syz.2.1257': attribute type 10 has an invalid length.
[ 247.867299][ T5244] Bluetooth: hci4: command 0x0405 tx timeout
[ 248.209267][T11048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1265'.
[ 248.218813][T11048] tipc: Started in network mode
[ 248.223788][T11048] tipc: Node identity 00005f20000000006e, cluster identity 8
[ 248.404305][T11055] IPVS: length: 38 != 24
[ 248.653599][T11071] bridge5: entered promiscuous mode
[ 248.683813][T11071] bridge5: entered allmulticast mode
[ 248.714549][T11071] team0: Device bridge5 is of different type
[ 248.860863][ T8804] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 249.730235][ T8804] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 249.814473][ T8804] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 249.853684][ T8804] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 249.913033][ T8804] bridge_slave_1: left allmulticast mode
[ 249.920862][ T8804] bridge_slave_1: left promiscuous mode
[ 249.927012][ T8804] bridge0: port 2(bridge_slave_1) entered disabled state
[ 249.936151][ T8804] bridge_slave_0: left allmulticast mode
[ 249.941972][ T8804] bridge_slave_0: left promiscuous mode
[ 249.948125][ T8804] bridge0: port 1(bridge_slave_0) entered disabled state
[ 250.785802][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 250.796133][ T5244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 250.804264][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 250.813210][ T5244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 250.821073][ T5244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 250.830174][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 250.871713][ T8804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 250.886936][ T8804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 250.901876][ T8804] bond0 (unregistering): Released all slaves
[ 250.944541][T11083] caif0 speed is unknown, defaulting to 1000
[ 251.384609][T11095] caif0 speed is unknown, defaulting to 1000
[ 251.384745][T11108] netlink: 'syz.1.1284': attribute type 1 has an invalid length.
[ 251.462583][T11108] bond15: entered promiscuous mode
[ 251.489748][T11112] bond14: (slave lo): Releasing active interface
[ 251.510531][T11112] bond14: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 251.522847][T11112] bond15: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 251.542837][T11112] bond15: (slave lo): making interface the new active one
[ 251.551961][T11112] bond15: (slave lo): Enslaving as an active interface with an up link
[ 251.928104][ T8804] hsr_slave_0: left promiscuous mode
[ 251.935081][ T8804] hsr_slave_1: left promiscuous mode
[ 251.953519][ T8804] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 251.967104][ T8804] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 251.975220][T11128] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1291'.
[ 251.985866][ T8804] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 251.993610][ T8804] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 252.014768][ T8804] veth1_macvtap: left promiscuous mode
[ 252.020546][ T8804] veth0_macvtap: left promiscuous mode
[ 252.026638][ T8804] veth1_vlan: left promiscuous mode
[ 252.032357][ T8804] veth0_vlan: left promiscuous mode
[ 252.541296][ T8804] team0 (unregistering): Port device team_slave_1 removed
[ 252.593085][ T8804] team0 (unregistering): Port device team_slave_0 removed
[ 252.922298][ T5235] Bluetooth: hci3: command tx timeout
[ 253.577364][T11095] chnl_net:caif_netlink_parms(): no params data found
[ 253.875164][T11095] bridge0: port 1(bridge_slave_0) entered blocking state
[ 253.906770][T11095] bridge0: port 1(bridge_slave_0) entered disabled state
[ 253.916456][T11095] bridge_slave_0: entered allmulticast mode
[ 253.935478][T11095] bridge_slave_0: entered promiscuous mode
[ 253.954316][T11095] bridge0: port 2(bridge_slave_1) entered blocking state
[ 253.966516][T11158] dccp_invalid_packet: P.CsCov 15 exceeds packet length 256
[ 253.973766][T11095] bridge0: port 2(bridge_slave_1) entered disabled state
[ 253.981799][T11095] bridge_slave_1: entered allmulticast mode
[ 254.009112][T11095] bridge_slave_1: entered promiscuous mode
[ 254.034391][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1305'.
[ 254.093407][T11171] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1307'.
[ 254.172669][T11173] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1308'.
[ 254.211148][T11095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 254.243098][T11095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 254.390704][T11095] team0: Port device team_slave_0 added
[ 254.418397][T11095] team0: Port device team_slave_1 added
[ 254.492824][T11095] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 254.519750][T11095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 254.551152][T11095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 254.565958][T11095] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 254.573105][T11095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 254.603485][T11095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 254.675599][T11200] bridge0: entered promiscuous mode
[ 254.690367][T11200] bridge0: entered allmulticast mode
[ 254.701941][T11200] team0: Device bridge0 is of different type
[ 254.772244][T11204] netlink: 'syz.1.1318': attribute type 10 has an invalid length.
[ 254.819646][T11095] hsr_slave_0: entered promiscuous mode
[ 254.830611][T11095] hsr_slave_1: entered promiscuous mode
[ 254.973536][T11210] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1320'.
[ 254.987219][ T5235] Bluetooth: hci3: command tx timeout
[ 255.014323][T11212] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1321'.
[ 255.177606][T11215] netlink: 'syz.1.1322': attribute type 1 has an invalid length.
[ 255.205590][T11215] bond16: entered promiscuous mode
[ 255.219952][T11215] bond15: (slave lo): Releasing active interface
[ 255.228480][T11215] bond15: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 255.240889][T11215] bond16: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 255.259886][T11215] bond16: (slave lo): making interface the new active one
[ 255.268914][T11215] bond16: (slave lo): Enslaving as an active interface with an up link
[ 255.592391][T11095] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 255.644597][T11095] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 255.679218][T11231] netlink: 'syz.4.1328': attribute type 1 has an invalid length.
[ 255.722530][T11231] bond6: entered promiscuous mode
[ 255.737865][T11095] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 255.750257][T11095] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 255.774451][T11236] bond5: (slave lo): Releasing active interface
[ 255.782196][T11236] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 255.795438][T11236] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 255.815182][T11236] bond6: (slave lo): making interface the new active one
[ 255.842551][T11236] bond6: (slave lo): Enslaving as an active interface with an up link
[ 256.031662][T11245] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1332'.
[ 256.071413][T11246] bridge6: entered promiscuous mode
[ 256.076714][T11246] bridge6: entered allmulticast mode
[ 256.168346][T11246] netlink: 'syz.0.1331': attribute type 10 has an invalid length.
[ 256.223260][T11095] 8021q: adding VLAN 0 to HW filter on device bond0
[ 256.281076][T11095] 8021q: adding VLAN 0 to HW filter on device team0
[ 256.305504][ T81] bridge0: port 1(bridge_slave_0) entered blocking state
[ 256.312704][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 256.425988][ T8799] bridge0: port 2(bridge_slave_1) entered blocking state
[ 256.433219][ T8799] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 256.525979][T11095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 256.948763][T11280] bridge7: entered promiscuous mode
[ 256.954029][T11280] bridge7: entered allmulticast mode
[ 256.980842][T11280] netlink: 'syz.0.1347': attribute type 10 has an invalid length.
[ 257.040885][T11095] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 257.067226][ T5235] Bluetooth: hci3: command tx timeout
[ 257.172642][T11292] syzkaller0: tun_chr_ioctl cmd 2147767506
[ 257.274750][T11095] veth0_vlan: entered promiscuous mode
[ 257.343085][T11095] veth1_vlan: entered promiscuous mode
[ 257.445022][T11095] veth0_macvtap: entered promiscuous mode
[ 257.483756][T11095] veth1_macvtap: entered promiscuous mode
[ 257.525876][T11305] netlink: 'syz.2.1355': attribute type 1 has an invalid length.
[ 257.571165][T11305] bond8: entered promiscuous mode
[ 257.579679][T11095] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 257.616312][T11095] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 257.635250][T11310] syzkaller1: entered promiscuous mode
[ 257.654733][T11310] syzkaller1: entered allmulticast mode
[ 257.696445][T11095] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 257.727459][T11095] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 257.747027][T11095] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 257.755748][T11095] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 257.837584][T11323] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1362'.
[ 257.849355][T11318] bridge8: entered promiscuous mode
[ 257.854580][T11318] bridge8: entered allmulticast mode
[ 257.883347][T11321] netlink: 'syz.0.1360': attribute type 10 has an invalid length.
[ 258.096028][ T8799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 258.111801][ T8799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 258.181875][ T8801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 258.207629][ T8801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 258.793018][T11354] netlink: 'syz.2.1372': attribute type 1 has an invalid length.
[ 258.816194][T11354] bond9: entered promiscuous mode
[ 259.545878][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1384'.
[ 259.567734][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1384'.
[ 259.674672][T11389] netlink: 'syz.4.1385': attribute type 1 has an invalid length.
[ 259.713380][T11389] bond7: entered promiscuous mode
[ 259.741143][T11389] bond6: (slave lo): Releasing active interface
[ 259.753948][T11389] bond6: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 259.766765][T11389] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 259.793140][T11389] bond7: (slave lo): making interface the new active one
[ 259.808290][T11389] bond7: (slave lo): Enslaving as an active interface with an up link
[ 260.041194][T11400] netlink: 'syz.1.1390': attribute type 1 has an invalid length.
[ 260.062747][T11400] bond17: entered promiscuous mode
[ 260.083459][T11400] bond16: (slave lo): Releasing active interface
[ 260.100103][T11400] bond16: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 260.116266][T11400] bond17: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 260.159596][T11400] bond17: (slave lo): making interface the new active one
[ 260.177446][T11400] bond17: (slave lo): Enslaving as an active interface with an up link
[ 260.995596][ T8801] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 262.046155][ T8801] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 262.128048][ T8801] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 262.194091][ T8801] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 262.284660][ T8801] bridge_slave_1: left allmulticast mode
[ 262.292501][ T8801] bridge_slave_1: left promiscuous mode
[ 262.298332][ T8801] bridge0: port 2(bridge_slave_1) entered disabled state
[ 262.309177][ T8801] bridge_slave_0: left allmulticast mode
[ 262.314839][ T8801] bridge_slave_0: left promiscuous mode
[ 262.320582][ T8801] bridge0: port 1(bridge_slave_0) entered disabled state
[ 262.590999][T11442] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1400'.
[ 262.908912][ T8801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 262.943279][ T8801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 262.957444][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 262.971670][ T5244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 262.974020][ T8801] bond0 (unregistering): Released all slaves
[ 262.985162][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 262.997976][ T5244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 263.009609][ T5244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 263.019564][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 263.226640][T11457] caif0 speed is unknown, defaulting to 1000
[ 263.475596][T11474] bridge9: entered promiscuous mode
[ 263.482851][T11474] bridge9: entered allmulticast mode
[ 263.488647][T11474] team0: Device bridge9 is of different type
[ 263.807719][T11481] netlink: 'syz.4.1412': attribute type 1 has an invalid length.
[ 263.841275][ T8801] hsr_slave_0: left promiscuous mode
[ 263.848125][ T8801] hsr_slave_1: left promiscuous mode
[ 263.856162][ T8801] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 263.864289][ T8801] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 263.875666][ T8801] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 263.893234][ T8801] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 263.932844][ T8801] veth1_macvtap: left promiscuous mode
[ 263.942229][ T8801] veth0_macvtap: left promiscuous mode
[ 263.950174][ T8801] veth1_vlan: left promiscuous mode
[ 263.955887][ T8801] veth0_vlan: left promiscuous mode
[ 264.472845][ T8801] team0 (unregistering): Port device team_slave_1 removed
[ 264.552531][ T8801] team0 (unregistering): Port device team_slave_0 removed
[ 264.553499][T11496] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1417'.
[ 265.156111][ T5244] Bluetooth: hci3: command tx timeout
[ 265.280951][T11511] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1419'.
[ 265.303112][T11457] chnl_net:caif_netlink_parms(): no params data found
[ 265.573049][T11457] bridge0: port 1(bridge_slave_0) entered blocking state
[ 265.582272][T11457] bridge0: port 1(bridge_slave_0) entered disabled state
[ 265.589670][T11457] bridge_slave_0: entered allmulticast mode
[ 265.597653][T11457] bridge_slave_0: entered promiscuous mode
[ 265.610690][T11457] bridge0: port 2(bridge_slave_1) entered blocking state
[ 265.618164][T11457] bridge0: port 2(bridge_slave_1) entered disabled state
[ 265.625481][T11457] bridge_slave_1: entered allmulticast mode
[ 265.633078][T11457] bridge_slave_1: entered promiscuous mode
[ 265.704353][T11457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 265.727213][T11457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 265.855521][T11457] team0: Port device team_slave_0 added
[ 265.896845][T11457] team0: Port device team_slave_1 added
[ 266.012094][T11457] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 266.027298][T11457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 266.076780][T11457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 266.106356][T11457] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 266.136036][T11457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 266.164987][T11457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 266.306386][T11550] bridge5: entered promiscuous mode
[ 266.324759][T11550] bridge5: entered allmulticast mode
[ 266.354264][T11457] hsr_slave_0: entered promiscuous mode
[ 266.383430][T11457] hsr_slave_1: entered promiscuous mode
[ 266.413577][T11550] netlink: 'syz.2.1432': attribute type 10 has an invalid length.
[ 266.624136][T11561] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[ 267.193100][T11457] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 267.220431][T11457] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 267.228078][ T5244] Bluetooth: hci3: command tx timeout
[ 267.255078][T11457] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 267.282280][T11457] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 267.393587][T11600] netlink: 'syz.0.1446': attribute type 1 has an invalid length.
[ 267.440654][T11600] bond8: entered promiscuous mode
[ 267.487460][T11603] caif0 speed is unknown, defaulting to 1000
[ 267.559546][T11600] bond7: (slave lo): Releasing active interface
[ 267.566845][T11600] bond7: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 267.596617][T11600] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 267.650414][T11600] bond8: (slave lo): making interface the new active one
[ 267.668294][T11600] bond8: (slave lo): Enslaving as an active interface with an up link
[ 267.734260][T11457] 8021q: adding VLAN 0 to HW filter on device bond0
[ 267.775748][T11457] 8021q: adding VLAN 0 to HW filter on device team0
[ 267.825501][ T8801] bridge0: port 1(bridge_slave_0) entered blocking state
[ 267.832712][ T8801] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 267.880559][ T8804] bridge0: port 2(bridge_slave_1) entered blocking state
[ 267.887777][ T8804] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 267.995930][T11457] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 268.303544][T11457] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 268.425932][T11457] veth0_vlan: entered promiscuous mode
[ 268.466258][T11457] veth1_vlan: entered promiscuous mode
[ 268.533639][T11457] veth0_macvtap: entered promiscuous mode
[ 268.546155][T11457] veth1_macvtap: entered promiscuous mode
[ 268.591416][T11457] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 268.623030][ C0] ------------[ cut here ]------------
[ 268.629008][ C0] WARNING: CPU: 0 PID: 11639 at net/hsr/hsr_forward.c:602 hsr_fill_frame_info+0x3da/0x570
[ 268.639055][ C0] Modules linked in:
[ 268.642999][ C0] CPU: 0 UID: 0 PID: 11639 Comm: syz.4.1458 Not tainted 6.11.0-rc6-syzkaller-01324-gf3b6129b7d25 #0
[ 268.653922][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 268.664052][ C0] RIP: 0010:hsr_fill_frame_info+0x3da/0x570
[ 268.670023][ C0] Code: 00 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 25 51 f8 f5 90 0f 0b 90 e9 09 ff ff ff e8 17 51 f8 f5 90 <0f> 0b 90 eb 93 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a3 fc ff ff 48
[ 268.689724][ C0] RSP: 0018:ffffc90000007278 EFLAGS: 00010246
[ 268.695829][ C0] RAX: ffffffff8b9b3b99 RBX: 0000000000000000 RCX: ffff88806ab81e00
[ 268.703882][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[ 268.711941][ C0] RBP: ffff8880471f6cc0 R08: ffffffff8b9b39e9 R09: 0000000000000000
[ 268.719991][ C0] R10: ffffc900000073c8 R11: fffff52000000e7b R12: dffffc0000000000
[ 268.728044][ C0] R13: 000000000000dd86 R14: ffff888027bb8620 R15: ffffc900000073c0
[ 268.736060][ C0] FS: 00007f04447ba6c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000
[ 268.745066][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 268.751705][ C0] CR2: 0000000020010000 CR3: 00000000649cc000 CR4: 00000000003506f0
[ 268.759836][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 268.767884][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 268.775887][ C0] Call Trace:
[ 268.779232][ C0] <IRQ>
[ 268.782098][ C0] ? __warn+0x163/0x4e0
[ 268.786288][ C0] ? hsr_fill_frame_info+0x3da/0x570
[ 268.791646][ C0] ? report_bug+0x2b3/0x500
[ 268.796171][ C0] ? hsr_fill_frame_info+0x3da/0x570
[ 268.801542][ C0] ? handle_bug+0x3e/0x70
[ 268.805904][ C0] ? exc_invalid_op+0x1a/0x50
[ 268.810647][ C0] ? asm_exc_invalid_op+0x1a/0x20
[ 268.815711][ C0] ? hsr_fill_frame_info+0x229/0x570
[ 268.821071][ C0] ? hsr_fill_frame_info+0x3d9/0x570
[ 268.826387][ C0] ? hsr_fill_frame_info+0x3da/0x570
[ 268.831741][ C0] ? hsr_fill_frame_info+0x3d9/0x570
[ 268.837106][ C0] hsr_forward_skb+0x847/0x2b60
[ 268.842015][ C0] ? hsr_forward_skb+0xaf/0x2b60
[ 268.847033][ C0] ? __pfx_hsr_forward_skb+0x10/0x10
[ 268.852364][ C0] ? skb_push+0x97/0x100
[ 268.856647][ C0] hsr_handle_frame+0x51b/0x7d0
[ 268.861591][ C0] ? __pfx_hsr_handle_frame+0x10/0x10
[ 268.867033][ C0] __netif_receive_skb_core+0x13e8/0x4570
[ 268.872789][ C0] ? rcu_is_watching+0x15/0xb0
[ 268.877632][ C0] ? __enqueue_entity+0x271/0x500
[ 268.882694][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 268.888832][ C0] ? validate_chain+0x11e/0x5900
[ 268.893796][ C0] ? mark_lock+0x9a/0x350
[ 268.898557][ C0] ? mark_lock+0x9a/0x350
[ 268.902931][ C0] ? __lock_acquire+0x137a/0x2040
[ 268.908038][ C0] __netif_receive_skb_list_core+0x2b1/0x980
[ 268.914053][ C0] ? mark_lock+0x9a/0x350
[ 268.918481][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10
[ 268.925033][ C0] ? netif_receive_skb_list_internal+0x4e8/0xe30
[ 268.931449][ C0] netif_receive_skb_list_internal+0xa51/0xe30
[ 268.937704][ C0] ? netif_receive_skb_list_internal+0x4e8/0xe30
[ 268.944073][ C0] ? dev_gro_receive+0x108f/0x24b0
[ 268.949274][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[ 268.956018][ C0] napi_complete_done+0x310/0x8e0
[ 268.961126][ C0] ? __pfx_napi_complete_done+0x10/0x10
[ 268.966676][ C0] ? rcu_is_watching+0x15/0xb0
[ 268.971508][ C0] ? napi_gro_receive+0x6f3/0xc90
[ 268.976574][ C0] gro_cell_poll+0x19a/0x1c0
[ 268.981244][ C0] __napi_poll+0xcb/0x490
[ 268.985614][ C0] net_rx_action+0x89b/0x1240
[ 268.990394][ C0] ? __pfx_net_rx_action+0x10/0x10
[ 268.995547][ C0] ? sched_clock+0x4a/0x70
[ 269.000063][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 269.006443][ C0] handle_softirqs+0x2c4/0x970
[ 269.011296][ C0] ? do_softirq+0x11b/0x1e0
[ 269.015841][ C0] ? __pfx_handle_softirqs+0x10/0x10
[ 269.021225][ C0] do_softirq+0x11b/0x1e0
[ 269.025591][ C0] </IRQ>
[ 269.028587][ C0] <TASK>
[ 269.031538][ C0] ? __pfx_do_softirq+0x10/0x10
[ 269.036419][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10
[ 269.042140][ C0] ? rcu_is_watching+0x15/0xb0
[ 269.046981][ C0] __local_bh_enable_ip+0x1bb/0x200
[ 269.052205][ C0] ? napi_gro_frags+0x9c9/0x12a0
[ 269.057208][ C0] ? tun_get_user+0x2a78/0x4720
[ 269.062083][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10
[ 269.067876][ C0] ? tun_get_user+0x2a78/0x4720
[ 269.072750][ C0] tun_get_user+0x2d63/0x4720
[ 269.077503][ C0] ? tun_get_user+0x2a78/0x4720
[ 269.082416][ C0] ? __lock_acquire+0x137a/0x2040
[ 269.087567][ C0] ? __pfx_tun_get_user+0x10/0x10
[ 269.092654][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 269.098189][ C0] ? tun_get+0x1e/0x2f0
[ 269.102377][ C0] ? __pfx_lock_release+0x10/0x10
[ 269.107526][ C0] ? tun_get+0x1e/0x2f0
[ 269.111706][ C0] ? tun_get+0x27d/0x2f0
[ 269.115979][ C0] tun_chr_write_iter+0x113/0x1f0
[ 269.121092][ C0] vfs_write+0xa72/0xc90
[ 269.125379][ C0] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 269.131009][ C0] ? __pfx_vfs_write+0x10/0x10
[ 269.135798][ C0] ? do_futex+0x33b/0x560
[ 269.140227][ C0] ksys_write+0x1a0/0x2c0
[ 269.144679][ C0] ? __pfx_ksys_write+0x10/0x10
[ 269.149606][ C0] ? do_syscall_64+0x100/0x230
[ 269.154585][ C0] ? do_syscall_64+0xb6/0x230
[ 269.159354][ C0] do_syscall_64+0xf3/0x230
[ 269.163910][ C0] ? clear_bhb_loop+0x35/0x90
[ 269.168676][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 269.174609][ C0] RIP: 0033:0x7f044397def9
[ 269.179101][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 269.198878][ C0] RSP: 002b:00007f04447ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 269.207361][ C0] RAX: ffffffffffffffda RBX: 00007f0443b35f80 RCX: 00007f044397def9
[ 269.215358][ C0] RDX: 000000000000fdef RSI: 0000000020000440 RDI: 0000000000000004
[ 269.223392][ C0] RBP: 00007f04439f0b56 R08: 0000000000000000 R09: 0000000000000000
[ 269.231428][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 269.239459][ C0] R13: 0000000000000000 R14: 00007f0443b35f80 R15: 00007ffcc3c676a8
[ 269.247527][ C0] </TASK>
[ 269.250560][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 269.257839][ C0] CPU: 0 UID: 0 PID: 11639 Comm: syz.4.1458 Not tainted 6.11.0-rc6-syzkaller-01324-gf3b6129b7d25 #0
[ 269.268604][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 269.278647][ C0] Call Trace:
[ 269.281945][ C0] <IRQ>
[ 269.284788][ C0] dump_stack_lvl+0x241/0x360
[ 269.289477][ C0] ? __pfx_dump_stack_lvl+0x10/0x10
[ 269.294663][ C0] ? __pfx__printk+0x10/0x10
[ 269.299259][ C0] ? _printk+0xd5/0x120
[ 269.303433][ C0] ? vscnprintf+0x5d/0x90
[ 269.307773][ C0] panic+0x349/0x860
[ 269.311696][ C0] ? __warn+0x172/0x4e0
[ 269.315871][ C0] ? __pfx_panic+0x10/0x10
[ 269.320283][ C0] ? show_trace_log_lvl+0x4e6/0x520
[ 269.325492][ C0] __warn+0x346/0x4e0
[ 269.329465][ C0] ? hsr_fill_frame_info+0x3da/0x570
[ 269.334758][ C0] report_bug+0x2b3/0x500
[ 269.339096][ C0] ? hsr_fill_frame_info+0x3da/0x570
[ 269.344371][ C0] handle_bug+0x3e/0x70
[ 269.348515][ C0] exc_invalid_op+0x1a/0x50
[ 269.353006][ C0] asm_exc_invalid_op+0x1a/0x20
[ 269.357862][ C0] RIP: 0010:hsr_fill_frame_info+0x3da/0x570
[ 269.363786][ C0] Code: 00 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 25 51 f8 f5 90 0f 0b 90 e9 09 ff ff ff e8 17 51 f8 f5 90 <0f> 0b 90 eb 93 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a3 fc ff ff 48
[ 269.383412][ C0] RSP: 0018:ffffc90000007278 EFLAGS: 00010246
[ 269.389491][ C0] RAX: ffffffff8b9b3b99 RBX: 0000000000000000 RCX: ffff88806ab81e00
[ 269.397454][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[ 269.405419][ C0] RBP: ffff8880471f6cc0 R08: ffffffff8b9b39e9 R09: 0000000000000000
[ 269.413385][ C0] R10: ffffc900000073c8 R11: fffff52000000e7b R12: dffffc0000000000
[ 269.421366][ C0] R13: 000000000000dd86 R14: ffff888027bb8620 R15: ffffc900000073c0
[ 269.429341][ C0] ? hsr_fill_frame_info+0x229/0x570
[ 269.434622][ C0] ? hsr_fill_frame_info+0x3d9/0x570
[ 269.439905][ C0] ? hsr_fill_frame_info+0x3d9/0x570
[ 269.445185][ C0] hsr_forward_skb+0x847/0x2b60
[ 269.450044][ C0] ? hsr_forward_skb+0xaf/0x2b60
[ 269.454972][ C0] ? __pfx_hsr_forward_skb+0x10/0x10
[ 269.460259][ C0] ? skb_push+0x97/0x100
[ 269.464501][ C0] hsr_handle_frame+0x51b/0x7d0
[ 269.469348][ C0] ? __pfx_hsr_handle_frame+0x10/0x10
[ 269.474710][ C0] __netif_receive_skb_core+0x13e8/0x4570
[ 269.480430][ C0] ? rcu_is_watching+0x15/0xb0
[ 269.485195][ C0] ? __enqueue_entity+0x271/0x500
[ 269.490216][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 269.496284][ C0] ? validate_chain+0x11e/0x5900
[ 269.501210][ C0] ? mark_lock+0x9a/0x350
[ 269.505537][ C0] ? mark_lock+0x9a/0x350
[ 269.509866][ C0] ? __lock_acquire+0x137a/0x2040
[ 269.514899][ C0] __netif_receive_skb_list_core+0x2b1/0x980
[ 269.520877][ C0] ? mark_lock+0x9a/0x350
[ 269.525211][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10
[ 269.531717][ C0] ? netif_receive_skb_list_internal+0x4e8/0xe30
[ 269.538040][ C0] netif_receive_skb_list_internal+0xa51/0xe30
[ 269.544192][ C0] ? netif_receive_skb_list_internal+0x4e8/0xe30
[ 269.550512][ C0] ? dev_gro_receive+0x108f/0x24b0
[ 269.555623][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[ 269.562314][ C0] napi_complete_done+0x310/0x8e0
[ 269.567342][ C0] ? __pfx_napi_complete_done+0x10/0x10
[ 269.572886][ C0] ? rcu_is_watching+0x15/0xb0
[ 269.577648][ C0] ? napi_gro_receive+0x6f3/0xc90
[ 269.582669][ C0] gro_cell_poll+0x19a/0x1c0
[ 269.587255][ C0] __napi_poll+0xcb/0x490
[ 269.591583][ C0] net_rx_action+0x89b/0x1240
[ 269.596279][ C0] ? __pfx_net_rx_action+0x10/0x10
[ 269.601383][ C0] ? sched_clock+0x4a/0x70
[ 269.605804][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 269.612134][ C0] handle_softirqs+0x2c4/0x970
[ 269.616902][ C0] ? do_softirq+0x11b/0x1e0
[ 269.621406][ C0] ? __pfx_handle_softirqs+0x10/0x10
[ 269.626688][ C0] do_softirq+0x11b/0x1e0
[ 269.631011][ C0] </IRQ>
[ 269.633930][ C0] <TASK>
[ 269.636851][ C0] ? __pfx_do_softirq+0x10/0x10
[ 269.641695][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10
[ 269.647326][ C0] ? rcu_is_watching+0x15/0xb0
[ 269.652084][ C0] __local_bh_enable_ip+0x1bb/0x200
[ 269.657274][ C0] ? napi_gro_frags+0x9c9/0x12a0
[ 269.662200][ C0] ? tun_get_user+0x2a78/0x4720
[ 269.667041][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10
[ 269.672762][ C0] ? tun_get_user+0x2a78/0x4720
[ 269.677689][ C0] tun_get_user+0x2d63/0x4720
[ 269.682354][ C0] ? tun_get_user+0x2a78/0x4720
[ 269.687202][ C0] ? __lock_acquire+0x137a/0x2040
[ 269.692230][ C0] ? __pfx_tun_get_user+0x10/0x10
[ 269.697263][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 269.702714][ C0] ? tun_get+0x1e/0x2f0
[ 269.706867][ C0] ? __pfx_lock_release+0x10/0x10
[ 269.712071][ C0] ? tun_get+0x1e/0x2f0
[ 269.716213][ C0] ? tun_get+0x27d/0x2f0
[ 269.720473][ C0] tun_chr_write_iter+0x113/0x1f0
[ 269.725489][ C0] vfs_write+0xa72/0xc90
[ 269.729726][ C0] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 269.735266][ C0] ? __pfx_vfs_write+0x10/0x10
[ 269.740014][ C0] ? do_futex+0x33b/0x560
[ 269.744350][ C0] ksys_write+0x1a0/0x2c0
[ 269.748679][ C0] ? __pfx_ksys_write+0x10/0x10
[ 269.753517][ C0] ? do_syscall_64+0x100/0x230
[ 269.758276][ C0] ? do_syscall_64+0xb6/0x230
[ 269.762943][ C0] do_syscall_64+0xf3/0x230
[ 269.767437][ C0] ? clear_bhb_loop+0x35/0x90
[ 269.772116][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 269.778001][ C0] RIP: 0033:0x7f044397def9
[ 269.782407][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 269.801998][ C0] RSP: 002b:00007f04447ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 269.810404][ C0] RAX: ffffffffffffffda RBX: 00007f0443b35f80 RCX: 00007f044397def9
[ 269.818364][ C0] RDX: 000000000000fdef RSI: 0000000020000440 RDI: 0000000000000004
[ 269.826323][ C0] RBP: 00007f04439f0b56 R08: 0000000000000000 R09: 0000000000000000
[ 269.834292][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 269.842248][ C0] R13: 0000000000000000 R14: 00007f0443b35f80 R15: 00007ffcc3c676a8
[ 269.850221][ C0] </TASK>
[ 269.853332][ C0] Kernel Offset: disabled
[ 269.857643][ C0] Rebooting in 86400 seconds..