last executing test programs:

14m1.110012132s ago: executing program 0 (id=213):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)

14m0.639200855s ago: executing program 3 (id=217):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10)
r4 = socket$inet(0x2, 0x1, 0x0)
listen(r4, 0x0)

14m0.638647994s ago: executing program 0 (id=219):
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {0x0, 0x1, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x7, 0x3, {"79802785f0b003a3f2e20a113485d67e"}, 0xfffffffffffffffb, 0xa8}}}, 0xa0)

13m59.359800998s ago: executing program 0 (id=222):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x2, 0xc, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af87f00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095415901e35a25313895ae00f267c04e6ab070bf9fb5a42b984cca9293e5c16aab51a1a1d562d4908e9e1c003356695b11f184209ff8a4ce8ac53a114801ab84c17928107f79c0f2a31f0dd5aa32ceee4524f0f61bb4919c4c9ce05ac6bf04dd409d7d8cc6e262554d64ec9caac5641b0fdf4c844ab88a9f52c93e5a3aaad6c755ac6afa2ab7862710b6d39824bab02e9743b409ae405e2ecc50f0b82a385bffe157cd0321abb011909f1a3c4817"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, 0x0, 0x4040000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4084004}, 0x10000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}], {0x14}}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
recvmmsg(r2, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002160, 0x0)

13m59.333120892s ago: executing program 3 (id=223):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)

13m58.985915272s ago: executing program 3 (id=226):
socket$packet(0x11, 0xa, 0x300)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

13m58.289820158s ago: executing program 0 (id=228):
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000"], 0xf8}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'})

13m57.386836615s ago: executing program 0 (id=232):
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {0x0, 0x1, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x7, 0x3, {"79802785f0b003a3f2e20a113485d67e"}, 0xfffffffffffffffb, 0xa8}}}, 0xa0)

13m57.264684161s ago: executing program 3 (id=234):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)

13m57.094046136s ago: executing program 0 (id=235):
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00')
r0 = socket(0x1d, 0x6, 0x7)
recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x42, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
sendmsg$nl_route(r2, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x100, 0x2, 0x6, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000014)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x2, 0x0, @private1, @private1={0xfc, 0x1, '\x00', 0x8}}}}}}}}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r4, 0x0, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r5, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x8}, 'port0\x00', 0x24, 0x1b1878, 0x4, 0x2, 0x3e4, 0x800, 0x4, 0x0, 0x4, 0x3})
close(r5)

13m56.987404528s ago: executing program 3 (id=237):
r0 = openat(0xffffffffffffff9c, 0x0, 0xa0142, 0x0)
preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000100)=""/145, 0x91}], 0x1, 0xb, 0x10000cb)

13m56.744696536s ago: executing program 3 (id=239):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)

13m41.647423354s ago: executing program 32 (id=235):
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00')
r0 = socket(0x1d, 0x6, 0x7)
recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x42, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
sendmsg$nl_route(r2, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x100, 0x2, 0x6, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000014)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x2, 0x0, @private1, @private1={0xfc, 0x1, '\x00', 0x8}}}}}}}}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r4, 0x0, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r5, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x8}, 'port0\x00', 0x24, 0x1b1878, 0x4, 0x2, 0x3e4, 0x800, 0x4, 0x0, 0x4, 0x3})
close(r5)

13m41.584729725s ago: executing program 33 (id=239):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)

9m57.92804925s ago: executing program 6 (id=1379):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0)

9m56.599708136s ago: executing program 6 (id=1386):
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'})
mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
r2 = open(0x0, 0x145142, 0x0)
writev(r2, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x80000, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c)

9m54.766424885s ago: executing program 6 (id=1393):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18)
bind$bt_hci(r0, &(0x7f0000000200)={0x27}, 0x6)

9m52.6097385s ago: executing program 6 (id=1405):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3)
fcntl$setsig(r2, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8)
dup2(r2, r3)
fcntl$setown(r2, 0x8, r1)
tkill(r1, 0x13)

9m45.956996224s ago: executing program 6 (id=1422):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0)

9m44.378005606s ago: executing program 6 (id=1428):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x497, &(0x7f0000000600)={0x0, 0x4661, 0x800, 0x5, 0x20e}, &(0x7f0000000540)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1})
io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0x0)

9m43.306085613s ago: executing program 5 (id=1433):
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, r1, 0x1, 0x8070bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x80)

9m40.851977236s ago: executing program 5 (id=1445):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r3, 0x0, 0x3}, 0x18)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r1, 0x301, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x1, 0x4}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x1000004}}}}}, 0x30}}, 0x44)

9m40.388496846s ago: executing program 5 (id=1446):
r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0xa401)
ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x9)

9m40.219276781s ago: executing program 5 (id=1448):
r0 = socket(0x10, 0x3, 0x9)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x3fa, 0x400, 0x70bd26, 0x25dfdbff, {0x1, 0x0, 0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

9m39.854144786s ago: executing program 5 (id=1452):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'b', ' *:* ', 'm\x00'}, 0x8)
socket$key(0xf, 0x3, 0x2)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, 0x0, &(0x7f0000000000))

9m37.951305219s ago: executing program 5 (id=1457):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2317632edba6444, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wg1\x00', <r2=>0x0})
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@fwd={0xe}, @struct={0x3, 0x2, 0x0, 0x4, 0x0, 0x3, [{0xc, 0x5, 0x6}, {0x10, 0x4, 0xf5}]}]}, {0x0, [0x2e, 0x5f, 0x8fb7091974a4d9e4, 0x0, 0x2e, 0x0]}}, &(0x7f0000000840)=""/202, 0x50, 0xca, 0x0, 0x7, 0x10000}, 0x28)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/kernel/kexec_crash_size', 0x80201, 0x1)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x80101)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000e40)={<r5=>0xffffffffffffffff, 0xa, 0x5, 0x6})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_tracing={0x1a, 0x19, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa5e}}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x10}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7c1}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x1}]}, &(0x7f00000003c0)='GPL\x00', 0x23c, 0x33, &(0x7f0000000d80)=""/51, 0x41100, 0x24, '\x00', r2, 0x1a, r3, 0x8, &(0x7f0000000dc0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000e00)={0x2, 0xd, 0x2849, 0x6}, 0x10, 0x1218a, r5, 0x5, 0x0, &(0x7f0000000e80)=[{0x1, 0x2, 0x10, 0x9}, {0x1, 0x2, 0xb, 0xc}, {0x5, 0x3, 0x2, 0xc}, {0x4, 0x2, 0x7, 0xb}, {0x1, 0x3, 0xd, 0xb}], 0x10, 0x3}, 0x94)
setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x13)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c044)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x3404c813}, 0x240008c4)

9m29.263234226s ago: executing program 34 (id=1428):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x497, &(0x7f0000000600)={0x0, 0x4661, 0x800, 0x5, 0x20e}, &(0x7f0000000540)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1})
io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0x0)

9m22.738724467s ago: executing program 35 (id=1457):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2317632edba6444, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wg1\x00', <r2=>0x0})
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@fwd={0xe}, @struct={0x3, 0x2, 0x0, 0x4, 0x0, 0x3, [{0xc, 0x5, 0x6}, {0x10, 0x4, 0xf5}]}]}, {0x0, [0x2e, 0x5f, 0x8fb7091974a4d9e4, 0x0, 0x2e, 0x0]}}, &(0x7f0000000840)=""/202, 0x50, 0xca, 0x0, 0x7, 0x10000}, 0x28)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/kernel/kexec_crash_size', 0x80201, 0x1)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x80101)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000e40)={<r5=>0xffffffffffffffff, 0xa, 0x5, 0x6})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_tracing={0x1a, 0x19, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa5e}}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x10}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7c1}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x1}]}, &(0x7f00000003c0)='GPL\x00', 0x23c, 0x33, &(0x7f0000000d80)=""/51, 0x41100, 0x24, '\x00', r2, 0x1a, r3, 0x8, &(0x7f0000000dc0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000e00)={0x2, 0xd, 0x2849, 0x6}, 0x10, 0x1218a, r5, 0x5, 0x0, &(0x7f0000000e80)=[{0x1, 0x2, 0x10, 0x9}, {0x1, 0x2, 0xb, 0xc}, {0x5, 0x3, 0x2, 0xc}, {0x4, 0x2, 0x7, 0xb}, {0x1, 0x3, 0xd, 0xb}], 0x10, 0x3}, 0x94)
setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x13)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c044)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x3404c813}, 0x240008c4)

7m55.95405497s ago: executing program 1 (id=1714):
fallocate(0xffffffffffffffff, 0x0, 0x3, 0x8800000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xbffffffffffffffb}, 0x18)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2)

7m55.25411229s ago: executing program 1 (id=1720):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001c000000180001801400020074756e6c30"], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000)

7m54.977669649s ago: executing program 1 (id=1721):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f00000086c0)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x81, @mcast1, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)="b4f33d", 0x3}], 0x1}}], 0x2, 0x8000)

7m54.757671449s ago: executing program 1 (id=1722):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10)
listen(r1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0)
close(r2)
accept4(r1, 0x0, 0x0, 0x80800)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180300"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
syz_clone3(&(0x7f0000000700)={0x20000000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58)
pipe2$9p(&(0x7f00000000c0), 0x6c00)
r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockopt$llc_int(r4, 0x10c, 0x5, &(0x7f0000000200), &(0x7f00000003c0)=0xfffffffffffffe77)

7m54.560031538s ago: executing program 1 (id=1724):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x400c0)

7m54.418013611s ago: executing program 1 (id=1725):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48b81, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0xe}, {&(0x7f0000000300)="f5155f6d2c26f104ad4f38b22888393da846bf2b4ec06af9", 0x18}], 0x2)

7m39.160316545s ago: executing program 36 (id=1725):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48b81, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0xe}, {&(0x7f0000000300)="f5155f6d2c26f104ad4f38b22888393da846bf2b4ec06af9", 0x18}], 0x2)

35.700267396s ago: executing program 4 (id=2708):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe, &(0x7f0000000180)=[@cr0={0x0, 0x20000010}], 0x1)
close_range(r3, 0xffffffffffffffff, 0x0)

33.650506568s ago: executing program 4 (id=2714):
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)

32.418764718s ago: executing program 4 (id=2716):
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
io_setup(0x7, &(0x7f00000000c0)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000001c0)=[0x0])

32.003782479s ago: executing program 4 (id=2721):
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x71, 0x0, [{0x5, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x1, 0x6, "7f36c525"}]}]}}}}}}}, 0x0)

31.626021514s ago: executing program 4 (id=2723):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000"], 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xd, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

30.543463495s ago: executing program 4 (id=2728):
socket$unix(0x1, 0x2, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x10f801)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7f, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

12.672920047s ago: executing program 2 (id=2850):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

12.397138745s ago: executing program 2 (id=2855):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)

10.57799263s ago: executing program 8 (id=2866):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

5.211328343s ago: executing program 2 (id=2885):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0)
socket(0xa, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="16", 0x1}], 0x1)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4.812405808s ago: executing program 8 (id=2889):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32], 0x20}}, 0x0)

4.797356111s ago: executing program 9 (id=2890):
socket$unix(0x1, 0x2, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x10f801)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4.236921186s ago: executing program 8 (id=2892):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYRESDEC], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x84)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0, 0x0, 0x54}, 0x4040884)
write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc)

4.190084062s ago: executing program 7 (id=2893):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0xc00)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)=@x86={0x0, 0xe, 0x3, 0x0, 0x1, 0x4, 0xee, 0x5e, 0x3, 0x4, 0x2, 0x0, 0x0, 0x72, 0x7, 0x7, 0x4, 0x5, 0x5, '\x00', 0x5, 0x7})

3.901455798s ago: executing program 8 (id=2894):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)

2.6578148s ago: executing program 8 (id=2895):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @empty}, 0x61, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4004})
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)

2.590998455s ago: executing program 9 (id=2896):
open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="15000000"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x8}}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="b8000000000000e3f3e6b68d64c8223f554d1c8b00e7ac687f6254a9c38d"], 0xb8)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c, 0x5, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x162)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
truncate(&(0x7f0000000200)='./file0\x00', 0x6)

2.490460044s ago: executing program 7 (id=2897):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x17, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000008000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000030000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x364}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.344335345s ago: executing program 2 (id=2898):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x32, 0x0, 0x9}, 0x28)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getpeername$packet(r1, &(0x7f0000000a80)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000ac0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000bc0)={'syztnl2\x00', &(0x7f0000000b00)={'erspan0\x00', <r4=>0x0, 0x40, 0x20, 0xe10, 0x1, {{0x1a, 0x4, 0x0, 0x6, 0x68, 0x67, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010101, @empty, {[@cipso={0x86, 0x51, 0x0, [{0x3, 0x9, 'Okm\\Ycn'}, {0x1, 0x3, "91"}, {0x5, 0x7, "75840261f1"}, {0x0, 0x8, "979a9bbd8ca1"}, {0x6, 0xd, "67a95385983073c65bb869"}, {0x6, 0xf, "d5c32d938336b7ca1269f80250"}, {0x5, 0x7, "922ff19de9"}, {0x2, 0xb, "b8b82801b5f34c31b1"}, {0x0, 0x2}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000c40)={'ip_vti0\x00', &(0x7f0000000c00)={'sit0\x00', <r5=>0x0, 0x80, 0x78c1, 0x1, 0x8, {{0x6, 0x4, 0x2, 0x4, 0x18, 0x68, 0x0, 0x2, 0x2f, 0x0, @private=0xa010100, @multicast1, {[@noop]}}}}})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c80)={0x1d0, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6d79e39d6d4d9949}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4040084}, 0x8800)
sendmsg$netlink(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="240000002d0008002dbd7000ffdbdf250d000d002d262c5c3e2f5d7d0000000004001a80"], 0x24}], 0x1, 0x0, 0x0, 0x20004880}, 0xc000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x103480)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r8}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140))
socket$inet6_sctp(0xa, 0x1, 0x84)
close_range(r6, 0xffffffffffffffff, 0x400000000000000)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r9, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804)

2.249149745s ago: executing program 9 (id=2899):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)

2.182204389s ago: executing program 7 (id=2900):
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3)
acct(&(0x7f00000000c0)='./file1\x00')

1.997584257s ago: executing program 9 (id=2901):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32], 0x20}}, 0x0)

1.950965529s ago: executing program 2 (id=2902):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.937869627s ago: executing program 7 (id=2903):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[], 0x50)
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/udplite\x00')
mount$9p_fd(0x0, &(0x7f0000000680)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.549430367s ago: executing program 8 (id=2904):
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xa0002011})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x1}]}]}, {0x0, [0x5f, 0x3]}}, &(0x7f0000002cc0)=""/4104, 0x30, 0x1008, 0x1}, 0x28)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48000, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10001, 0x36, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.548802201s ago: executing program 2 (id=2905):
socket$unix(0x1, 0x2, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x10f801)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.490627017s ago: executing program 7 (id=2906):
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)

1.308748338s ago: executing program 9 (id=2907):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x1, [<r2=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={r2, 0x4d1f, 0x20, 0x400, 0x8}, 0x0)

154.226699ms ago: executing program 7 (id=2908):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000180)="5cc9b33e0af3f1f0a926ea5af86bb4fcaeffe974929d516677a7dbaa17cbe176c6c44d68926bd4f64a3fa654395d0d73adc7561f2175f6281dee42be80cca092c9fc9ec58e2dd847df71ea19e8a3d4d135d5c3d48578044c26b8db1206ee3022252926ccc5d11ced2629900ec57d", 0x6e, 0x4000, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x352}], 0x1}}], 0x1, 0x40)
sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)

0s ago: executing program 9 (id=2909):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10)
sendto$inet6(r0, &(0x7f00000009c0)='\\', 0x1, 0x20000081, &(0x7f000005ffe4)={0xa, 0x4e23, 0x57bc3377, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x84, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x1}, 0xe)
recvmmsg(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000000c0)=""/104, 0x68}, {0x0}, {0x0}], 0x3}, 0x80}], 0x1, 0x92, 0x0)

kernel console output (not intermixed with test programs):

terface
[  595.270006][ T6337] bond0 (unregistering): Released all slaves
[  595.577033][ T6337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  595.666703][ T6337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  595.730175][ T6337] bond0 (unregistering): Released all slaves
[  597.596513][ T6337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  597.666426][ T6337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  597.725405][ T6337] bond0 (unregistering): Released all slaves
[  597.892165][T10897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1764'.
[  597.961743][ T5901] syz0: Port: 1 Link DOWN
[  598.141711][ T6313] bridge0: port 1(bridge_slave_0) entered blocking state
[  598.142020][ T6313] bridge0: port 1(bridge_slave_0) entered forwarding state
[  598.387816][ T6313] bridge0: port 2(bridge_slave_1) entered blocking state
[  598.388057][ T6313] bridge0: port 2(bridge_slave_1) entered forwarding state
[  598.478204][T10765] 8021q: adding VLAN 0 to HW filter on device bond0
[  598.567800][T10765] 8021q: adding VLAN 0 to HW filter on device team0
[  598.605846][ T6313] bridge0: port 1(bridge_slave_0) entered blocking state
[  598.606055][ T6313] bridge0: port 1(bridge_slave_0) entered forwarding state
[  598.639858][ T6316] bridge0: port 2(bridge_slave_1) entered blocking state
[  598.640638][ T6316] bridge0: port 2(bridge_slave_1) entered forwarding state
[  599.000416][ T6337] tipc: Left network mode
[  600.420178][T10922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1771'.
[  600.539802][T10762] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  600.712852][T10762] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  600.788835][T10762] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  600.890028][T10762] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  601.077749][T10735] 8021q: adding VLAN 0 to HW filter on device batadv0
[  601.290611][T10765] 8021q: adding VLAN 0 to HW filter on device batadv0
[  601.468790][T10768] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  601.583360][T10768] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  601.669255][T10768] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  602.040953][T10768] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  602.892137][ T5957] hid_parser_main: 6 callbacks suppressed
[  602.892202][ T5957] hid-generic 0000:0000:0000.0002: unknown main item tag 0x7
[  602.892235][ T5957] hid-generic 0000:0000:0000.0002: unknown main item tag 0x6
[  602.892262][ T5957] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  602.892289][ T5957] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  602.892316][ T5957] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  602.892343][ T5957] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  602.892371][ T5957] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  602.892398][ T5957] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  602.892425][ T5957] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  602.892452][ T5957] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  602.942278][ T5957] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  603.127353][T10765] veth0_vlan: entered promiscuous mode
[  603.268541][ T6337] hsr_slave_0: left promiscuous mode
[  603.310931][ T6337] hsr_slave_1: left promiscuous mode
[  603.312738][ T6337] batman_adv: batadv0: Removing interface: batadv_slave_0
[  603.371897][ T6337] batman_adv: batadv0: Removing interface: batadv_slave_1
[  603.565519][ T6337] hsr_slave_0: left promiscuous mode
[  603.615515][ T6337] hsr_slave_1: left promiscuous mode
[  603.616585][ T6337] batman_adv: batadv0: Removing interface: batadv_slave_0
[  603.666305][ T6337] batman_adv: batadv0: Removing interface: batadv_slave_1
[  603.804105][T10960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1779'.
[  603.845608][ T6337] hsr_slave_0: left promiscuous mode
[  603.885641][ T6337] hsr_slave_1: left promiscuous mode
[  603.886727][ T6337] batman_adv: batadv0: Removing interface: batadv_slave_0
[  603.909165][ T6337] batman_adv: batadv0: Removing interface: batadv_slave_1
[  604.078910][ T6337] hsr_slave_0: left promiscuous mode
[  604.105416][ T6337] hsr_slave_1: left promiscuous mode
[  604.106464][ T6337] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  604.106496][ T6337] batman_adv: batadv0: Removing interface: batadv_slave_0
[  604.146796][ T6337] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  604.146832][ T6337] batman_adv: batadv0: Removing interface: batadv_slave_1
[  604.196705][ T6337] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  604.196741][ T6337] batman_adv: batadv0: Removing interface: virt_wifi0
[  604.342910][ T6337] veth1_macvtap: left promiscuous mode
[  604.343043][ T6337] veth0_macvtap: left promiscuous mode
[  605.456922][ T6337] team0 (unregistering): Port device team_slave_1 removed
[  605.596291][ T6337] team0 (unregistering): Port device team_slave_0 removed
[  607.036314][ T6337] team0 (unregistering): Port device team_slave_1 removed
[  607.207323][ T6337] team0 (unregistering): Port device team_slave_0 removed
[  608.706210][ T6337] team0 (unregistering): Port device team_slave_1 removed
[  608.866216][ T6337] team0 (unregistering): Port device team_slave_0 removed
[  610.302649][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  610.315654][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  610.320918][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  610.349314][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  610.350381][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  611.557074][ T6337] team0 (unregistering): Port device team_slave_1 removed
[  611.844881][ T6337] team0 (unregistering): Port device C removed
[  612.310869][ T6311] smc: removing ib device syz0
[  612.416397][ T5857] Bluetooth: hci1: command tx timeout
[  613.622983][ T6337] team0 (unregistering): Port device dummy0 removed
[  614.506927][ T5857] Bluetooth: hci1: command tx timeout
[  614.979433][T10765] veth1_vlan: entered promiscuous mode
[  616.209160][T10762] 8021q: adding VLAN 0 to HW filter on device bond0
[  616.575751][ T5857] Bluetooth: hci1: command tx timeout
[  616.698063][T10765] veth0_macvtap: entered promiscuous mode
[  616.783411][T10762] 8021q: adding VLAN 0 to HW filter on device team0
[  616.955841][T10765] veth1_macvtap: entered promiscuous mode
[  617.424783][ T6350] bridge0: port 1(bridge_slave_0) entered blocking state
[  617.425091][ T6350] bridge0: port 1(bridge_slave_0) entered forwarding state
[  617.630011][T10768] 8021q: adding VLAN 0 to HW filter on device bond0
[  617.664131][ T6313] bridge0: port 2(bridge_slave_1) entered blocking state
[  617.664349][ T6313] bridge0: port 2(bridge_slave_1) entered forwarding state
[  617.863756][T10765] batman_adv: batadv0: Interface activated: batadv_slave_0
[  617.941154][T10962] chnl_net:caif_netlink_parms(): no params data found
[  617.958106][T10765] batman_adv: batadv0: Interface activated: batadv_slave_1
[  618.039568][T10768] 8021q: adding VLAN 0 to HW filter on device team0
[  618.257942][ T6350] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  618.271221][ T6350] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  618.291316][ T6350] bridge0: port 1(bridge_slave_0) entered blocking state
[  618.291561][ T6350] bridge0: port 1(bridge_slave_0) entered forwarding state
[  618.311670][ T6331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  618.321899][ T6331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  618.382434][ T6331] bridge0: port 2(bridge_slave_1) entered blocking state
[  618.382668][ T6331] bridge0: port 2(bridge_slave_1) entered forwarding state
[  618.665723][ T5857] Bluetooth: hci1: command tx timeout
[  618.703004][T10962] bridge0: port 1(bridge_slave_0) entered blocking state
[  618.703598][T10962] bridge0: port 1(bridge_slave_0) entered disabled state
[  618.703862][T10962] bridge_slave_0: entered allmulticast mode
[  618.730034][T10962] bridge_slave_0: entered promiscuous mode
[  618.743384][T10962] bridge0: port 2(bridge_slave_1) entered blocking state
[  618.743534][T10962] bridge0: port 2(bridge_slave_1) entered disabled state
[  618.743799][T10962] bridge_slave_1: entered allmulticast mode
[  618.795789][T10962] bridge_slave_1: entered promiscuous mode
[  619.411985][T10962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  620.367139][   T44] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  620.460096][T10962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  620.557939][   T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  620.557969][   T44] usb 5-1: config 0 has no interfaces?
[  620.558014][   T44] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  620.558040][   T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  620.602218][   T44] usb 5-1: config 0 descriptor??
[  621.105361][T10962] team0: Port device team_slave_0 added
[  621.109037][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  621.113421][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  621.114644][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  621.131008][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  621.138220][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  621.174261][T10962] team0: Port device team_slave_1 added
[  621.546071][ T6350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  621.546096][ T6350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  621.823661][T10962] batman_adv: batadv0: Adding interface: batadv_slave_0
[  621.823681][T10962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  621.823710][T10962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  621.911932][T10962] batman_adv: batadv0: Adding interface: batadv_slave_1
[  621.911946][T10962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  621.911968][T10962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  622.102826][ T6347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  622.102860][ T6347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  622.251444][   T10] usb 5-1: USB disconnect, device number 2
[  622.575858][T10962] hsr_slave_0: entered promiscuous mode
[  622.579647][T10962] hsr_slave_1: entered promiscuous mode
[  622.839249][T10999] netlink: 340 bytes leftover after parsing attributes in process `syz.2.1518'.
[  623.215552][ T5852] Bluetooth: hci0: command tx timeout
[  625.057233][T10768] 8021q: adding VLAN 0 to HW filter on device batadv0
[  625.310815][ T5852] Bluetooth: hci0: command tx timeout
[  625.514384][T10991] chnl_net:caif_netlink_parms(): no params data found
[  626.392530][T11061] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1810'.
[  627.389443][ T5852] Bluetooth: hci0: command tx timeout
[  627.446336][   T38] kauditd_printk_skb: 4 callbacks suppressed
[  627.446356][   T38] audit: type=1326 audit(1758000824.486:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11067 comm="syz.4.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa758fceba9 code=0x7ffc0000
[  627.446663][   T38] audit: type=1326 audit(1758000824.486:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11067 comm="syz.4.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa758fceba9 code=0x7ffc0000
[  627.447232][   T38] audit: type=1326 audit(1758000824.486:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11067 comm="syz.4.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa758fceba9 code=0x7ffc0000
[  627.449406][   T38] audit: type=1326 audit(1758000824.486:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11067 comm="syz.4.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa758fceba9 code=0x7ffc0000
[  627.449767][   T38] audit: type=1326 audit(1758000824.486:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11067 comm="syz.4.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa758fceba9 code=0x7ffc0000
[  627.450524][   T38] audit: type=1326 audit(1758000824.486:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11067 comm="syz.4.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa758fceba9 code=0x7ffc0000
[  627.451154][   T38] audit: type=1326 audit(1758000824.486:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11067 comm="syz.4.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fa758fceba9 code=0x7ffc0000
[  627.524619][   T38] audit: type=1326 audit(1758000824.556:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11067 comm="syz.4.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa758fceba9 code=0x7ffc0000
[  627.524691][   T38] audit: type=1326 audit(1758000824.556:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11067 comm="syz.4.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa758fceba9 code=0x7ffc0000
[  628.804868][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  628.818198][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  628.825768][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  628.830080][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  628.832734][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  629.461326][ T5852] Bluetooth: hci0: command tx timeout
[  629.514236][T10991] bridge0: port 1(bridge_slave_0) entered blocking state
[  629.514390][T10991] bridge0: port 1(bridge_slave_0) entered disabled state
[  629.514678][T10991] bridge_slave_0: entered allmulticast mode
[  629.518567][T10991] bridge_slave_0: entered promiscuous mode
[  629.528408][T10991] bridge0: port 2(bridge_slave_1) entered blocking state
[  629.528627][T10991] bridge0: port 2(bridge_slave_1) entered disabled state
[  629.528926][T10991] bridge_slave_1: entered allmulticast mode
[  629.539748][T10991] bridge_slave_1: entered promiscuous mode
[  629.705564][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  629.705651][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  629.969296][T10991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  630.162960][T10991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  630.239083][ T6337] bridge_slave_1: left allmulticast mode
[  630.239182][ T6337] bridge_slave_1: left promiscuous mode
[  630.239460][ T6337] bridge0: port 2(bridge_slave_1) entered disabled state
[  630.351851][ T6337] bridge_slave_0: left allmulticast mode
[  630.351887][ T6337] bridge_slave_0: left promiscuous mode
[  630.352185][ T6337] bridge0: port 1(bridge_slave_0) entered disabled state
[  630.489014][ T6337] bridge_slave_1: left allmulticast mode
[  630.489052][ T6337] bridge_slave_1: left promiscuous mode
[  630.489349][ T6337] bridge0: port 2(bridge_slave_1) entered disabled state
[  630.599916][ T6337] bridge_slave_0: left allmulticast mode
[  630.599955][ T6337] bridge_slave_0: left promiscuous mode
[  630.603021][ T6337] bridge0: port 1(bridge_slave_0) entered disabled state
[  630.896166][ T5852] Bluetooth: hci2: command tx timeout
[  632.989748][ T5852] Bluetooth: hci2: command tx timeout
[  633.068043][ T6337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  633.130407][ T6337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  633.157099][ T6337] bond0 (unregistering): Released all slaves
[  634.886336][ T6337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  634.956284][ T6337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  634.992037][ T6337] bond0 (unregistering): Released all slaves
[  635.055987][ T5852] Bluetooth: hci2: command tx timeout
[  635.219362][T11114] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[  635.219412][T11114] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[  635.219445][T11114] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  635.691595][T10991] team0: Port device team_slave_0 added
[  635.751069][T10991] team0: Port device team_slave_1 added
[  636.261497][T10991] batman_adv: batadv0: Adding interface: batadv_slave_0
[  636.261517][T10991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  636.261545][T10991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  636.516920][ T6337] hsr_slave_0: left promiscuous mode
[  636.565552][ T6337] hsr_slave_1: left promiscuous mode
[  636.566728][ T6337] batman_adv: batadv0: Removing interface: batadv_slave_0
[  636.588830][ T6337] batman_adv: batadv0: Removing interface: batadv_slave_1
[  636.746246][ T6337] hsr_slave_0: left promiscuous mode
[  636.785585][ T6337] hsr_slave_1: left promiscuous mode
[  636.788466][ T6337] batman_adv: batadv0: Removing interface: batadv_slave_0
[  636.809479][ T6337] batman_adv: batadv0: Removing interface: batadv_slave_1
[  637.135491][ T5852] Bluetooth: hci2: command tx timeout
[  638.466350][ T6337] team0 (unregistering): Port device team_slave_1 removed
[  638.696223][ T6337] team0 (unregistering): Port device team_slave_0 removed
[  642.506287][ T6337] team0 (unregistering): Port device team_slave_1 removed
[  642.776306][ T6337] team0 (unregistering): Port device team_slave_0 removed
[  645.290728][T10962] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  645.323128][T10991] batman_adv: batadv0: Adding interface: batadv_slave_1
[  645.323148][T10991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  645.323179][T10991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  645.412392][T10962] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  645.585922][T10962] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  645.679828][T10962] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  646.251017][T10991] hsr_slave_0: entered promiscuous mode
[  646.252840][T10991] hsr_slave_1: entered promiscuous mode
[  646.253847][T10991] debugfs: 'hsr0' already exists in 'hsr'
[  646.253875][T10991] Cannot create hsr debugfs directory
[  647.080689][T11193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1846'.
[  647.557969][T11083] chnl_net:caif_netlink_parms(): no params data found
[  648.558187][T11214] pimreg: entered allmulticast mode
[  648.560319][T11215] pimreg: left allmulticast mode
[  648.888189][T11083] bridge0: port 1(bridge_slave_0) entered blocking state
[  648.888460][T11083] bridge0: port 1(bridge_slave_0) entered disabled state
[  648.888748][T11083] bridge_slave_0: entered allmulticast mode
[  648.896358][T11083] bridge_slave_0: entered promiscuous mode
[  648.990338][T11083] bridge0: port 2(bridge_slave_1) entered blocking state
[  648.990497][T11083] bridge0: port 2(bridge_slave_1) entered disabled state
[  648.990784][T11083] bridge_slave_1: entered allmulticast mode
[  648.993850][T11083] bridge_slave_1: entered promiscuous mode
[  650.692970][T11083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  650.901874][T11083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  651.364549][T11083] team0: Port device team_slave_0 added
[  651.479023][T11083] team0: Port device team_slave_1 added
[  652.200883][T11083] batman_adv: batadv0: Adding interface: batadv_slave_0
[  652.200903][T11083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  652.200934][T11083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  652.262328][T11083] batman_adv: batadv0: Adding interface: batadv_slave_1
[  652.262347][T11083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  652.262377][T11083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  653.113923][T11083] hsr_slave_0: entered promiscuous mode
[  653.114947][T11083] hsr_slave_1: entered promiscuous mode
[  653.133309][T11083] debugfs: 'hsr0' already exists in 'hsr'
[  653.133332][T11083] Cannot create hsr debugfs directory
[  653.696911][T10962] 8021q: adding VLAN 0 to HW filter on device bond0
[  654.171278][T10991] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  654.324666][T10991] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  654.703424][T10991] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  654.785642][T10991] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  655.107897][T10962] 8021q: adding VLAN 0 to HW filter on device team0
[  655.274710][T11268] netlink: 'syz.2.1869': attribute type 10 has an invalid length.
[  655.291571][T11268] team0: Port device dummy0 added
[  655.456912][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state
[  655.457142][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state
[  655.616386][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state
[  655.616647][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state
[  655.752508][ T6337] bridge_slave_1: left allmulticast mode
[  655.752544][ T6337] bridge_slave_1: left promiscuous mode
[  655.752828][ T6337] bridge0: port 2(bridge_slave_1) entered disabled state
[  655.829966][ T6337] bridge_slave_0: left allmulticast mode
[  655.830003][ T6337] bridge_slave_0: left promiscuous mode
[  655.830286][ T6337] bridge0: port 1(bridge_slave_0) entered disabled state
[  658.632516][ T6337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  658.757917][ T6337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  658.803632][ T6337] bond0 (unregistering): Released all slaves
[  659.741068][ T6337] hsr_slave_0: left promiscuous mode
[  660.625783][ T6337] hsr_slave_1: left promiscuous mode
[  660.626825][ T6337] batman_adv: batadv0: Removing interface: batadv_slave_0
[  660.649325][ T6337] batman_adv: batadv0: Removing interface: batadv_slave_1
[  661.689493][ T6337] team0 (unregistering): Port device team_slave_1 removed
[  661.936313][ T6337] team0 (unregistering): Port device team_slave_0 removed
[  664.401996][T11321] netlink: 'syz.4.1880': attribute type 10 has an invalid length.
[  664.959871][T11325] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  665.392956][T10991] 8021q: adding VLAN 0 to HW filter on device bond0
[  665.944293][T10991] 8021q: adding VLAN 0 to HW filter on device team0
[  666.046714][T11335] tipc: Started in network mode
[  666.046749][T11335] tipc: Node identity fafdea2470f1, cluster identity 4711
[  666.046993][T11335] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  666.079492][T11336] syzkaller0: entered promiscuous mode
[  666.079526][T11336] syzkaller0: entered allmulticast mode
[  666.131007][ T6331] bridge0: port 1(bridge_slave_0) entered blocking state
[  666.131246][ T6331] bridge0: port 1(bridge_slave_0) entered forwarding state
[  666.134083][T11083] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  666.189536][T11335] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) !
[  666.298330][T11083] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  666.399103][T11339] tipc: Resetting bearer <eth:syzkaller0>
[  666.428646][T11083] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  666.471567][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state
[  666.471747][ T6333] bridge0: port 2(bridge_slave_1) entered forwarding state
[  666.515826][T11334] tipc: Resetting bearer <eth:syzkaller0>
[  666.681431][T11334] tipc: Disabling bearer <eth:syzkaller0>
[  666.802704][T11083] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  666.918368][T11346] serio: Serial port ptm0
[  667.063228][T10962] 8021q: adding VLAN 0 to HW filter on device batadv0
[  667.262192][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1888'.
[  667.262220][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1888'.
[  667.705038][T11083] 8021q: adding VLAN 0 to HW filter on device bond0
[  667.862543][T11083] 8021q: adding VLAN 0 to HW filter on device team0
[  667.922469][ T6316] bridge0: port 1(bridge_slave_0) entered blocking state
[  667.922703][ T6316] bridge0: port 1(bridge_slave_0) entered forwarding state
[  667.984764][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state
[  667.984953][ T6333] bridge0: port 2(bridge_slave_1) entered forwarding state
[  668.048258][T10962] veth0_vlan: entered promiscuous mode
[  668.086683][T10991] 8021q: adding VLAN 0 to HW filter on device batadv0
[  668.120519][T10962] veth1_vlan: entered promiscuous mode
[  668.468151][T10962] veth0_macvtap: entered promiscuous mode
[  668.510702][T10962] veth1_macvtap: entered promiscuous mode
[  668.623130][T10962] batman_adv: batadv0: Interface activated: batadv_slave_0
[  668.663800][T10962] batman_adv: batadv0: Interface activated: batadv_slave_1
[  668.711003][ T6353] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  668.715632][ T6353] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  668.730963][ T6353] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  668.749209][ T6353] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  669.716560][T11402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  669.919006][ T6333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  669.919029][ T6333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  669.983712][T11405] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  669.983756][T11405] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.289845][T11405] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  670.289895][T11405] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.550078][T11405] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  670.550118][T11405] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.648631][T11083] 8021q: adding VLAN 0 to HW filter on device batadv0
[  670.754321][T11405] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  670.754362][T11405] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.877199][T10991] veth0_vlan: entered promiscuous mode
[  671.001011][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  671.006757][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  671.017660][T10991] veth1_vlan: entered promiscuous mode
[  671.033782][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  671.076489][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  671.078864][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  671.459930][T11424] syzkaller1: entered promiscuous mode
[  671.459963][T11424] syzkaller1: entered allmulticast mode
[  671.851951][ T6331] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  671.851987][ T6331] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  672.330371][ T6311] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  672.415744][ T3532] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  672.415781][ T3532] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  672.484944][ T3532] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  672.484992][ T3532] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  672.592343][ T6337] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  672.592382][ T6337] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  672.880303][ T6311] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  673.135670][ T5852] Bluetooth: hci5: command tx timeout
[  673.285001][T10991] veth0_macvtap: entered promiscuous mode
[  674.470133][ T6311] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  674.591881][T10991] veth1_macvtap: entered promiscuous mode
[  674.832464][ T6311] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  675.018824][T11463] syzkaller0: entered promiscuous mode
[  675.018860][T11463] syzkaller0: entered allmulticast mode
[  675.215249][ T5852] Bluetooth: hci5: command tx timeout
[  677.295576][ T5852] Bluetooth: hci5: command tx timeout
[  679.376617][ T5852] Bluetooth: hci5: command tx timeout
[  681.875701][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  681.883462][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  681.892757][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  681.894180][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  681.895075][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  684.027660][ T5852] Bluetooth: hci1: command tx timeout
[  686.095543][ T5852] Bluetooth: hci1: command tx timeout
[  688.175369][ T5852] Bluetooth: hci1: command tx timeout
[  688.353200][ T5857] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  688.375486][ T5857] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  688.378358][ T5857] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  688.380746][ T5857] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  688.383616][ T5857] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  690.454355][ T5852] Bluetooth: hci6: command tx timeout
[  690.547907][ T5852] Bluetooth: hci1: command tx timeout
[  691.155516][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  691.155591][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  691.387868][T11419] chnl_net:caif_netlink_parms(): no params data found
[  691.447786][ T6311] bridge_slave_1: left allmulticast mode
[  691.447821][ T6311] bridge_slave_1: left promiscuous mode
[  691.448146][ T6311] bridge0: port 2(bridge_slave_1) entered disabled state
[  691.534475][ T6311] bridge_slave_0: left allmulticast mode
[  691.534499][ T6311] bridge_slave_0: left promiscuous mode
[  691.534710][ T6311] bridge0: port 1(bridge_slave_0) entered disabled state
[  692.508743][ T5857] Bluetooth: hci6: command tx timeout
[  693.215233][ T5857] Bluetooth: hci3: command 0x0406 tx timeout
[  694.466015][ T6311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  694.536500][ T6311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  694.560549][ T6311] bond0 (unregistering): Released all slaves
[  694.575432][ T5852] Bluetooth: hci6: command tx timeout
[  696.655369][ T5852] Bluetooth: hci6: command tx timeout
[  698.218407][T11419] bridge0: port 1(bridge_slave_0) entered blocking state
[  698.219900][T11419] bridge0: port 1(bridge_slave_0) entered disabled state
[  698.220191][T11419] bridge_slave_0: entered allmulticast mode
[  698.223227][T11419] bridge_slave_0: entered promiscuous mode
[  698.481899][T11419] bridge0: port 2(bridge_slave_1) entered blocking state
[  698.482067][T11419] bridge0: port 2(bridge_slave_1) entered disabled state
[  698.482338][T11419] bridge_slave_1: entered allmulticast mode
[  698.507638][T11419] bridge_slave_1: entered promiscuous mode
[  698.951784][T11565] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  699.145503][ T6311] hsr_slave_0: left promiscuous mode
[  699.193555][ T6311] hsr_slave_1: left promiscuous mode
[  699.195570][ T6311] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  699.195608][ T6311] batman_adv: batadv0: Removing interface: batadv_slave_0
[  699.226901][ T6311] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  699.226937][ T6311] batman_adv: batadv0: Removing interface: batadv_slave_1
[  699.348128][ T6311] veth1_macvtap: left promiscuous mode
[  699.348263][ T6311] veth0_macvtap: left promiscuous mode
[  699.348479][ T6311] veth1_vlan: left promiscuous mode
[  699.348625][ T6311] veth0_vlan: left promiscuous mode
[  702.246450][ T6311] team0 (unregistering): Port device team_slave_1 removed
[  702.486192][ T6311] team0 (unregistering): Port device team_slave_0 removed
[  705.350509][T11419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  705.351014][T11572] syz_tun: entered allmulticast mode
[  705.459726][T11572] syz_tun: left allmulticast mode
[  705.464291][T11419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  705.893118][ T5935] hid_parser_main: 20 callbacks suppressed
[  705.893144][ T5935] hid-generic 0005:0007:0008.0003: unknown main item tag 0x0
[  705.918390][T11419] team0: Port device team_slave_0 added
[  705.941132][T11419] team0: Port device team_slave_1 added
[  705.953209][ T5935] hid-generic 0005:0007:0008.0003: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa
[  706.181987][T11473] chnl_net:caif_netlink_parms(): no params data found
[  706.318352][T11470] chnl_net:caif_netlink_parms(): no params data found
[  706.376684][T11419] batman_adv: batadv0: Adding interface: batadv_slave_0
[  706.376703][T11419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  706.376735][T11419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  706.506844][T11419] batman_adv: batadv0: Adding interface: batadv_slave_1
[  706.506860][T11419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  706.506884][T11419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  707.533530][T11612] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  707.763801][T11608] syzkaller0: MTU too low for tipc bearer
[  707.763829][T11608] tipc: Disabling bearer <eth:syzkaller0>
[  707.832237][T11419] hsr_slave_0: entered promiscuous mode
[  707.837048][T11419] hsr_slave_1: entered promiscuous mode
[  707.957696][T11473] bridge0: port 1(bridge_slave_0) entered blocking state
[  707.957893][T11473] bridge0: port 1(bridge_slave_0) entered disabled state
[  707.958117][T11473] bridge_slave_0: entered allmulticast mode
[  707.963074][T11473] bridge_slave_0: entered promiscuous mode
[  708.583992][T11470] bridge0: port 1(bridge_slave_0) entered blocking state
[  708.584141][T11470] bridge0: port 1(bridge_slave_0) entered disabled state
[  708.584390][T11470] bridge_slave_0: entered allmulticast mode
[  708.588278][T11470] bridge_slave_0: entered promiscuous mode
[  708.600300][T11473] bridge0: port 2(bridge_slave_1) entered blocking state
[  708.600467][T11473] bridge0: port 2(bridge_slave_1) entered disabled state
[  708.600738][T11473] bridge_slave_1: entered allmulticast mode
[  708.604070][T11473] bridge_slave_1: entered promiscuous mode
[  708.645650][T11470] bridge0: port 2(bridge_slave_1) entered blocking state
[  708.645801][T11470] bridge0: port 2(bridge_slave_1) entered disabled state
[  708.646014][T11470] bridge_slave_1: entered allmulticast mode
[  708.648974][T11470] bridge_slave_1: entered promiscuous mode
[  709.633396][T11473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  709.719710][T11470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  709.777171][T11473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  709.986675][T11470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  710.607517][T11637] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  710.607559][T11637] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  711.187049][T11645] team0: Port device dummy0 removed
[  711.193559][T11645] bridge_slave_0: left allmulticast mode
[  711.193596][T11645] bridge_slave_0: left promiscuous mode
[  711.193900][T11645] bridge0: port 1(bridge_slave_0) entered disabled state
[  711.251313][T11645] bridge_slave_1: left allmulticast mode
[  711.251351][T11645] bridge_slave_1: left promiscuous mode
[  711.251639][T11645] bridge0: port 2(bridge_slave_1) entered disabled state
[  711.356157][T11645] bond0: (slave bond_slave_0): Releasing backup interface
[  711.450147][T11645] bond0: (slave bond_slave_1): Releasing backup interface
[  711.533767][T11645] team0: Port device team_slave_0 removed
[  711.578602][T11645] team0: Port device team_slave_1 removed
[  711.579752][T11645] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  711.579783][T11645] batman_adv: batadv0: Removing interface: batadv_slave_0
[  711.621446][T11645] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  711.621480][T11645] batman_adv: batadv0: Removing interface: batadv_slave_1
[  711.681548][T11473] team0: Port device team_slave_0 added
[  711.734648][T11470] team0: Port device team_slave_0 added
[  711.810267][T11637] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  711.810309][T11637] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  711.870667][T11473] team0: Port device team_slave_1 added
[  711.873438][T11470] team0: Port device team_slave_1 added
[  712.451221][T11637] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  712.451264][T11637] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  713.521797][T11473] batman_adv: batadv0: Adding interface: batadv_slave_0
[  713.521816][T11473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  713.521853][T11473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  713.523531][T11470] batman_adv: batadv0: Adding interface: batadv_slave_0
[  713.523546][T11470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  713.523576][T11470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  713.634095][T11637] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  713.634135][T11637] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  713.689678][T11473] batman_adv: batadv0: Adding interface: batadv_slave_1
[  713.689697][T11473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  713.689729][T11473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  713.691503][T11470] batman_adv: batadv0: Adding interface: batadv_slave_1
[  713.691518][T11470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  713.691548][T11470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  714.486508][T11470] hsr_slave_0: entered promiscuous mode
[  714.488027][T11470] hsr_slave_1: entered promiscuous mode
[  714.489012][T11470] debugfs: 'hsr0' already exists in 'hsr'
[  714.489038][T11470] Cannot create hsr debugfs directory
[  714.503420][T11473] hsr_slave_0: entered promiscuous mode
[  714.505015][T11473] hsr_slave_1: entered promiscuous mode
[  714.540044][T11473] debugfs: 'hsr0' already exists in 'hsr'
[  714.540074][T11473] Cannot create hsr debugfs directory
[  715.005864][ T6350] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  715.005902][ T6350] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  715.286389][ T6337] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  715.286428][ T6337] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  716.128653][ T6347] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  716.128691][ T6347] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  716.570561][ T6337] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  716.570597][ T6337] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  718.842647][T11691] syz_tun: entered allmulticast mode
[  718.932549][T11691] syz_tun: left allmulticast mode
[  719.652958][T11717] pimreg: entered allmulticast mode
[  719.957465][T11718] pimreg: left allmulticast mode
[  720.230260][T11419] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  720.306224][T11419] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  720.595303][T11419] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  720.809851][T11419] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  721.759573][ T6311] bridge_slave_1: left allmulticast mode
[  721.759679][ T6311] bridge_slave_1: left promiscuous mode
[  721.759973][ T6311] bridge0: port 2(bridge_slave_1) entered disabled state
[  721.840541][ T6311] bridge_slave_0: left allmulticast mode
[  721.840581][ T6311] bridge_slave_0: left promiscuous mode
[  721.840987][ T6311] bridge0: port 1(bridge_slave_0) entered disabled state
[  721.921142][ T6311] bridge_slave_1: left allmulticast mode
[  721.921178][ T6311] bridge_slave_1: left promiscuous mode
[  721.921455][ T6311] bridge0: port 2(bridge_slave_1) entered disabled state
[  722.047280][ T6311] bridge_slave_0: left allmulticast mode
[  722.047316][ T6311] bridge_slave_0: left promiscuous mode
[  722.047612][ T6311] bridge0: port 1(bridge_slave_0) entered disabled state
[  722.216412][T11766] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  722.216412][T11766] The task syz.4.1998 (11766) triggered the difference, watch for misbehavior.
[  724.156298][ T6311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  724.233906][ T6311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  724.272316][ T6311] bond0 (unregistering): Released all slaves
[  725.896319][ T6311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  725.968290][ T6311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  725.992288][ T6311] bond0 (unregistering): Released all slaves
[  726.906033][ T6311] hsr_slave_0: left promiscuous mode
[  726.945484][ T6311] hsr_slave_1: left promiscuous mode
[  726.946555][ T6311] batman_adv: batadv0: Removing interface: batadv_slave_0
[  726.996449][ T6311] batman_adv: batadv0: Removing interface: batadv_slave_1
[  727.091263][T11796] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input7
[  727.216025][ T6311] hsr_slave_0: left promiscuous mode
[  727.256767][ T6311] hsr_slave_1: left promiscuous mode
[  727.259165][ T6311] batman_adv: batadv0: Removing interface: batadv_slave_0
[  727.309946][ T6311] batman_adv: batadv0: Removing interface: batadv_slave_1
[  727.502741][ T6311] veth1_macvtap: left promiscuous mode
[  727.502876][ T6311] veth0_macvtap: left promiscuous mode
[  727.503187][ T6311] veth1_vlan: left promiscuous mode
[  727.503416][ T6311] veth0_vlan: left promiscuous mode
[  730.036343][ T6311] team0 (unregistering): Port device team_slave_1 removed
[  730.289848][ T6311] team0 (unregistering): Port device team_slave_0 removed
[  730.996559][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  731.001132][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  731.002390][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  731.003567][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  731.010232][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  733.062778][ T5852] Bluetooth: hci0: command tx timeout
[  734.546296][ T6311] team0 (unregistering): Port device team_slave_1 removed
[  734.796251][ T6311] team0 (unregistering): Port device team_slave_0 removed
[  735.135395][ T5852] Bluetooth: hci0: command tx timeout
[  737.215973][ T5852] Bluetooth: hci0: command tx timeout
[  737.383600][T11804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  738.163658][ T5957] hid (null): report_id 0 is invalid
[  738.180949][ T5957] hid-generic 0005:0005:5505.0004: report_id 0 is invalid
[  738.180974][ T5957] hid-generic 0005:0005:5505.0004: item 0 0 1 8 parsing failed
[  738.181758][ T5957] hid-generic 0005:0005:5505.0004: probe with driver hid-generic failed with error -22
[  738.241599][T11826] netlink: 'syz.4.2017': attribute type 10 has an invalid length.
[  738.464799][T11826] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  739.077305][T11840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2023'.
[  740.476096][ T5852] Bluetooth: hci0: command tx timeout
[  741.383803][T11846] lo: entered promiscuous mode
[  741.393514][T11845] lo: left promiscuous mode
[  741.867745][T11807] chnl_net:caif_netlink_parms(): no params data found
[  742.175436][T11855] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2028'.
[  742.189791][T11473] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  742.298432][T11473] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  742.425561][T11473] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  742.524279][T11473] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  742.996661][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  743.039777][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  743.043441][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  743.044860][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  743.046163][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  744.820774][T11807] bridge0: port 1(bridge_slave_0) entered blocking state
[  744.821013][T11807] bridge0: port 1(bridge_slave_0) entered disabled state
[  744.821222][T11807] bridge_slave_0: entered allmulticast mode
[  744.823296][T11807] bridge_slave_0: entered promiscuous mode
[  744.876860][T11807] bridge0: port 2(bridge_slave_1) entered blocking state
[  744.877029][T11807] bridge0: port 2(bridge_slave_1) entered disabled state
[  744.877284][T11807] bridge_slave_1: entered allmulticast mode
[  744.892488][T11807] bridge_slave_1: entered promiscuous mode
[  744.986513][T11892] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2037'.
[  745.055362][ T5857] Bluetooth: hci1: command tx timeout
[  745.196885][T11898] netlink: 'syz.4.2038': attribute type 10 has an invalid length.
[  745.760501][T11807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  745.810607][T11807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  746.462079][T11807] team0: Port device team_slave_0 added
[  747.135331][ T5857] Bluetooth: hci1: command tx timeout
[  747.417851][T11807] team0: Port device team_slave_1 added
[  748.105448][T11922] 9pnet: Could not find request transport: fd0x0000000000000003
[  748.199348][T11807] batman_adv: batadv0: Adding interface: batadv_slave_0
[  748.199367][T11807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  748.199398][T11807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  748.369122][T11807] batman_adv: batadv0: Adding interface: batadv_slave_1
[  748.369141][T11807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  748.369172][T11807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  748.957077][T11807] hsr_slave_0: entered promiscuous mode
[  748.971209][T11807] hsr_slave_1: entered promiscuous mode
[  748.975998][T11807] debugfs: 'hsr0' already exists in 'hsr'
[  748.976035][T11807] Cannot create hsr debugfs directory
[  749.216737][ T5857] Bluetooth: hci1: command tx timeout
[  750.532251][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  750.580948][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  750.583014][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  750.584840][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  750.607955][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  751.296084][ T5852] Bluetooth: hci1: command tx timeout
[  751.642143][T11875] chnl_net:caif_netlink_parms(): no params data found
[  751.775827][T11962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  752.581175][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  752.581295][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  752.655270][ T5852] Bluetooth: hci2: command tx timeout
[  754.244980][T11875] bridge0: port 1(bridge_slave_0) entered blocking state
[  754.249069][T11875] bridge0: port 1(bridge_slave_0) entered disabled state
[  754.249388][T11875] bridge_slave_0: entered allmulticast mode
[  754.252549][T11875] bridge_slave_0: entered promiscuous mode
[  754.503804][T11875] bridge0: port 2(bridge_slave_1) entered blocking state
[  754.503975][T11875] bridge0: port 2(bridge_slave_1) entered disabled state
[  754.504184][T11875] bridge_slave_1: entered allmulticast mode
[  754.509213][T11875] bridge_slave_1: entered promiscuous mode
[  754.522258][T12016] pimreg: entered allmulticast mode
[  754.522502][T12017] pimreg: left allmulticast mode
[  754.661621][T12020] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  754.735368][ T5852] Bluetooth: hci2: command tx timeout
[  754.994560][T12018] tipc: Disabling bearer <eth:syzkaller0>
[  755.129432][T11875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  755.134116][T11875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  755.397022][ T6311] bridge_slave_1: left allmulticast mode
[  755.398310][ T6311] bridge_slave_1: left promiscuous mode
[  755.398613][ T6311] bridge0: port 2(bridge_slave_1) entered disabled state
[  755.444844][T12037] netlink: 'syz.4.2081': attribute type 10 has an invalid length.
[  755.466976][ T6311] bridge_slave_0: left allmulticast mode
[  755.467012][ T6311] bridge_slave_0: left promiscuous mode
[  755.467325][ T6311] bridge0: port 1(bridge_slave_0) entered disabled state
[  755.604790][ T6311] bridge_slave_1: left allmulticast mode
[  755.604828][ T6311] bridge_slave_1: left promiscuous mode
[  755.605788][ T6311] bridge0: port 2(bridge_slave_1) entered disabled state
[  755.690857][ T6311] bridge_slave_0: left allmulticast mode
[  755.690891][ T6311] bridge_slave_0: left promiscuous mode
[  755.691236][ T6311] bridge0: port 1(bridge_slave_0) entered disabled state
[  756.625567][ T6311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  756.696383][ T6311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  756.762538][ T6311] bond0 (unregistering): Released all slaves
[  756.837388][ T5852] Bluetooth: hci2: command tx timeout
[  757.226118][ T6311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  757.314723][ T6311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  757.373262][ T6311] bond0 (unregistering): Released all slaves
[  757.799533][T11875] team0: Port device team_slave_0 added
[  758.082080][T11875] team0: Port device team_slave_1 added
[  758.387242][T11938] chnl_net:caif_netlink_parms(): no params data found
[  758.424726][T11875] batman_adv: batadv0: Adding interface: batadv_slave_0
[  758.424744][T11875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  758.424770][T11875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  758.645355][ T6311] hsr_slave_0: left promiscuous mode
[  758.685395][ T6311] hsr_slave_1: left promiscuous mode
[  758.686387][ T6311] batman_adv: batadv0: Removing interface: batadv_slave_0
[  758.742540][ T6311] batman_adv: batadv0: Removing interface: batadv_slave_1
[  758.895467][ T5852] Bluetooth: hci2: command tx timeout
[  758.895553][ T6311] hsr_slave_0: left promiscuous mode
[  758.935469][ T6311] hsr_slave_1: left promiscuous mode
[  758.936564][ T6311] batman_adv: batadv0: Removing interface: batadv_slave_0
[  758.963952][ T6311] batman_adv: batadv0: Removing interface: batadv_slave_1
[  759.796101][ T6311] team0 (unregistering): Port device team_slave_1 removed
[  759.928702][ T6311] team0 (unregistering): Port device team_slave_0 removed
[  761.186309][ T6311] team0 (unregistering): Port device team_slave_1 removed
[  761.346245][ T6311] team0 (unregistering): Port device team_slave_0 removed
[  762.143272][T11875] batman_adv: batadv0: Adding interface: batadv_slave_1
[  762.143291][T11875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  762.143322][T11875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  762.207541][T12059] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  762.399299][T12058] tipc: Disabling bearer <eth:syzkaller0>
[  762.737564][T12069] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  762.962348][T11807] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  764.242440][T11807] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  764.588255][T11875] hsr_slave_0: entered promiscuous mode
[  764.592946][T11875] hsr_slave_1: entered promiscuous mode
[  764.608015][T11807] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  764.750517][T11807] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  764.821322][T12090] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  764.822998][T11938] bridge0: port 1(bridge_slave_0) entered blocking state
[  764.823150][T11938] bridge0: port 1(bridge_slave_0) entered disabled state
[  764.823374][T11938] bridge_slave_0: entered allmulticast mode
[  764.867261][T11938] bridge_slave_0: entered promiscuous mode
[  765.114920][T12088] tipc: Disabling bearer <eth:syzkaller0>
[  765.240264][T11938] bridge0: port 2(bridge_slave_1) entered blocking state
[  765.240416][T11938] bridge0: port 2(bridge_slave_1) entered disabled state
[  765.240673][T11938] bridge_slave_1: entered allmulticast mode
[  765.243786][T11938] bridge_slave_1: entered promiscuous mode
[  766.556061][T12110] ./file0: Can't lookup blockdev
[  767.633532][T11938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  767.690109][T11938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  768.296361][T11938] team0: Port device team_slave_0 added
[  768.948489][T11938] team0: Port device team_slave_1 added
[  770.845650][T12131] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  771.086826][T11938] batman_adv: batadv0: Adding interface: batadv_slave_0
[  771.086846][T11938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  771.086876][T11938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  771.147242][T11938] batman_adv: batadv0: Adding interface: batadv_slave_1
[  771.147262][T11938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  771.147294][T11938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  772.784864][T11938] hsr_slave_0: entered promiscuous mode
[  772.792563][T11938] hsr_slave_1: entered promiscuous mode
[  772.793561][T11938] debugfs: 'hsr0' already exists in 'hsr'
[  772.793586][T11938] Cannot create hsr debugfs directory
[  774.381351][T12171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2124'.
[  774.381394][T12171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2124'.
[  774.522462][T12171] ip6gretap0: entered promiscuous mode
[  774.524664][T12171] syz_tun: entered promiscuous mode
[  776.693392][ T5936] kernel write not supported for file /vcsu (pid: 5936 comm: kworker/0:4)
[  777.188185][T12204] IPv6: NLM_F_CREATE should be specified when creating new route
[  777.528697][T12206] netlink: 'syz.4.2137': attribute type 2 has an invalid length.
[  777.528724][T12206] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  777.890254][T12218] pimreg: entered allmulticast mode
[  777.890473][T12219] pimreg: left allmulticast mode
[  778.225920][T11875] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  778.285852][T11807] 8021q: adding VLAN 0 to HW filter on device bond0
[  778.354297][T11875] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  778.444799][T11875] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  778.533940][T11875] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  778.923467][T11807] 8021q: adding VLAN 0 to HW filter on device team0
[  781.568554][ T6353] bridge0: port 1(bridge_slave_0) entered blocking state
[  781.577354][ T6353] bridge0: port 1(bridge_slave_0) entered forwarding state
[  781.625340][ T6311] bridge_slave_1: left allmulticast mode
[  781.625386][ T6311] bridge_slave_1: left promiscuous mode
[  781.625666][ T6311] bridge0: port 2(bridge_slave_1) entered disabled state
[  781.731352][T12258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2151'.
[  781.746721][ T6311] bridge_slave_0: left allmulticast mode
[  781.746756][ T6311] bridge_slave_0: left promiscuous mode
[  781.747049][ T6311] bridge0: port 1(bridge_slave_0) entered disabled state
[  782.437593][ T6311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  782.516336][ T6311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  782.611648][ T6311] bond0 (unregistering): Released all slaves
[  783.120999][ T6337] bridge0: port 2(bridge_slave_1) entered blocking state
[  783.121253][ T6337] bridge0: port 2(bridge_slave_1) entered forwarding state
[  783.546569][ T6311] hsr_slave_0: left promiscuous mode
[  783.589019][ T6311] hsr_slave_1: left promiscuous mode
[  783.590163][ T6311] batman_adv: batadv0: Removing interface: batadv_slave_0
[  783.639710][ T6311] batman_adv: batadv0: Removing interface: batadv_slave_1
[  783.722581][T12288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2160'.
[  784.570976][ T6311] team0 (unregistering): Port device team_slave_1 removed
[  784.721214][ T6311] team0 (unregistering): Port device team_slave_0 removed
[  787.311175][T12301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2163'.
[  787.311214][T12301] netlink: 'syz.2.2163': attribute type 7 has an invalid length.
[  787.311229][T12301] netlink: 'syz.2.2163': attribute type 8 has an invalid length.
[  787.311243][T12301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2163'.
[  787.447260][T12303] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2164'.
[  787.784779][T11938] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  787.906545][T11938] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  788.066450][T11938] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  788.349219][T11938] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  788.953634][T11875] 8021q: adding VLAN 0 to HW filter on device bond0
[  789.104279][T11875] 8021q: adding VLAN 0 to HW filter on device team0
[  789.294982][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state
[  789.295297][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state
[  789.333509][T11807] 8021q: adding VLAN 0 to HW filter on device batadv0
[  789.537257][ T6337] bridge0: port 2(bridge_slave_1) entered blocking state
[  789.537563][ T6337] bridge0: port 2(bridge_slave_1) entered forwarding state
[  789.935814][T11938] 8021q: adding VLAN 0 to HW filter on device bond0
[  790.049391][T11938] 8021q: adding VLAN 0 to HW filter on device team0
[  790.067493][ T6337] bridge0: port 1(bridge_slave_0) entered blocking state
[  790.067748][ T6337] bridge0: port 1(bridge_slave_0) entered forwarding state
[  790.688350][ T6353] bridge0: port 2(bridge_slave_1) entered blocking state
[  790.688552][ T6353] bridge0: port 2(bridge_slave_1) entered forwarding state
[  791.428032][T11875] 8021q: adding VLAN 0 to HW filter on device batadv0
[  791.650364][T11938] 8021q: adding VLAN 0 to HW filter on device batadv0
[  793.654532][T11940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  793.680738][T11940] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  793.682215][T11940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  793.702393][T11940] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  793.718587][T11940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  796.265801][T11940] Bluetooth: hci0: command tx timeout
[  796.398296][T11875] veth0_vlan: entered promiscuous mode
[  796.401662][T11938] veth0_vlan: entered promiscuous mode
[  796.496323][T11875] veth1_vlan: entered promiscuous mode
[  796.547303][T11938] veth1_vlan: entered promiscuous mode
[  798.338410][T11940] Bluetooth: hci0: command tx timeout
[  799.495742][T12416] pimreg: entered allmulticast mode
[  799.496310][T12417] pimreg: left allmulticast mode
[  799.725683][T12374] chnl_net:caif_netlink_parms(): no params data found
[  800.425105][T11940] Bluetooth: hci0: command tx timeout
[  801.002134][T12429] 8021q: adding VLAN 0 to HW filter on device team0
[  801.045709][T12429] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  801.700425][T11875] veth0_macvtap: entered promiscuous mode
[  802.128729][T12374] bridge0: port 1(bridge_slave_0) entered blocking state
[  802.128902][T12374] bridge0: port 1(bridge_slave_0) entered disabled state
[  802.129163][T12374] bridge_slave_0: entered allmulticast mode
[  802.132227][T12374] bridge_slave_0: entered promiscuous mode
[  802.167921][T11938] veth0_macvtap: entered promiscuous mode
[  802.184593][T11875] veth1_macvtap: entered promiscuous mode
[  802.212031][T12374] bridge0: port 2(bridge_slave_1) entered blocking state
[  802.212180][T12374] bridge0: port 2(bridge_slave_1) entered disabled state
[  802.212445][T12374] bridge_slave_1: entered allmulticast mode
[  802.267251][T12374] bridge_slave_1: entered promiscuous mode
[  802.503424][T11940] Bluetooth: hci0: command tx timeout
[  803.074181][T11938] veth1_macvtap: entered promiscuous mode
[  803.180191][T12374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  803.242248][T12374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  803.692211][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  803.709903][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  803.714830][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  803.718307][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  803.720074][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  803.850777][T12374] team0: Port device team_slave_0 added
[  804.254437][T12374] team0: Port device team_slave_1 added
[  804.451023][ T6316] bridge_slave_1: left allmulticast mode
[  804.451058][ T6316] bridge_slave_1: left promiscuous mode
[  804.451342][ T6316] bridge0: port 2(bridge_slave_1) entered disabled state
[  804.556500][ T6316] bridge_slave_0: left allmulticast mode
[  804.556538][ T6316] bridge_slave_0: left promiscuous mode
[  804.556832][ T6316] bridge0: port 1(bridge_slave_0) entered disabled state
[  805.867188][T11940] Bluetooth: hci5: command tx timeout
[  807.955432][T11940] Bluetooth: hci5: command tx timeout
[  808.076381][ T6316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  808.156276][ T6316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  808.200832][ T6316] bond0 (unregistering): Released all slaves
[  808.412420][T11938] batman_adv: batadv0: Interface activated: batadv_slave_0
[  808.428504][T12470] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  808.446328][T12374] batman_adv: batadv0: Adding interface: batadv_slave_0
[  808.446347][T12374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  808.446378][T12374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  808.470713][T12374] batman_adv: batadv0: Adding interface: batadv_slave_1
[  808.470734][T12374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  808.470770][T12374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  808.486673][T11938] batman_adv: batadv0: Interface activated: batadv_slave_1
[  808.780419][ T6316] hsr_slave_0: left promiscuous mode
[  808.833094][ T6316] hsr_slave_1: left promiscuous mode
[  808.836246][ T6316] batman_adv: batadv0: Removing interface: batadv_slave_0
[  808.877823][ T6316] batman_adv: batadv0: Removing interface: batadv_slave_1
[  809.987064][T12500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2220'.
[  810.025229][T11940] Bluetooth: hci5: command tx timeout
[  810.187040][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  810.208727][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  810.210078][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  810.211934][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  810.213275][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  811.096264][ T6316] team0 (unregistering): Port device team_slave_1 removed
[  811.349553][ T6316] team0 (unregistering): Port device team_slave_0 removed
[  812.111659][T11940] Bluetooth: hci5: command tx timeout
[  812.262833][T11940] Bluetooth: hci1: command tx timeout
[  814.022297][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  814.022381][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  814.335241][T11940] Bluetooth: hci1: command tx timeout
[  814.337498][T12506] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  814.343098][ T2151] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  814.497471][ T2151] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  814.530148][T12374] hsr_slave_0: entered promiscuous mode
[  814.531561][T12374] hsr_slave_1: entered promiscuous mode
[  814.532610][T12374] debugfs: 'hsr0' already exists in 'hsr'
[  814.532637][T12374] Cannot create hsr debugfs directory
[  814.533904][ T2151] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  814.609224][ T2151] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  815.384707][T12526] netlink: 'syz.2.2227': attribute type 10 has an invalid length.
[  816.554244][T12526] team0: Port device dummy0 added
[  816.725837][T11940] Bluetooth: hci1: command tx timeout
[  817.319330][T12533] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  818.745710][T11940] Bluetooth: hci1: command tx timeout
[  820.239387][T12445] chnl_net:caif_netlink_parms(): no params data found
[  820.387085][T12562] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  821.617264][T12584] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2245'.
[  821.617303][T12584] netlink: 'syz.4.2245': attribute type 7 has an invalid length.
[  821.617318][T12584] netlink: 'syz.4.2245': attribute type 8 has an invalid length.
[  821.617332][T12584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2245'.
[  821.671025][ T6316] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  821.794195][T12584] syz_tun: entered promiscuous mode
[  821.845500][T12584] syz_tun: left promiscuous mode
[  822.510919][ T6316] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  822.973353][T12598] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  822.990190][T12501] chnl_net:caif_netlink_parms(): no params data found
[  823.314117][ T6316] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  823.532816][T12606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2251'.
[  823.813607][ T6316] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  823.976788][T12445] bridge0: port 1(bridge_slave_0) entered blocking state
[  823.976928][T12445] bridge0: port 1(bridge_slave_0) entered disabled state
[  823.977163][T12445] bridge_slave_0: entered allmulticast mode
[  823.979685][T12445] bridge_slave_0: entered promiscuous mode
[  824.045669][T12445] bridge0: port 2(bridge_slave_1) entered blocking state
[  824.045809][T12445] bridge0: port 2(bridge_slave_1) entered disabled state
[  824.046078][T12445] bridge_slave_1: entered allmulticast mode
[  824.049092][T12445] bridge_slave_1: entered promiscuous mode
[  824.893350][T12630] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  824.909356][T12445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  825.098515][T12445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  825.099059][T12501] bridge0: port 1(bridge_slave_0) entered blocking state
[  825.099286][T12501] bridge0: port 1(bridge_slave_0) entered disabled state
[  825.099489][T12501] bridge_slave_0: entered allmulticast mode
[  825.108766][T12501] bridge_slave_0: entered promiscuous mode
[  825.340191][T12501] bridge0: port 2(bridge_slave_1) entered blocking state
[  825.340368][T12501] bridge0: port 2(bridge_slave_1) entered disabled state
[  825.340611][T12501] bridge_slave_1: entered allmulticast mode
[  825.349210][T12501] bridge_slave_1: entered promiscuous mode
[  825.632453][T12445] team0: Port device team_slave_0 added
[  825.746901][T12445] team0: Port device team_slave_1 added
[  825.773114][T12501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  825.774185][T12374] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  825.934679][T12501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  825.938072][T12374] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  826.210898][T12374] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  826.251685][T12445] batman_adv: batadv0: Adding interface: batadv_slave_0
[  826.251705][T12445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  826.251736][T12445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  826.574895][T12374] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  826.635548][T12445] batman_adv: batadv0: Adding interface: batadv_slave_1
[  826.635568][T12445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  826.635600][T12445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  826.784821][T12658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2270'.
[  826.784861][T12658] netlink: 'syz.2.2270': attribute type 7 has an invalid length.
[  826.784876][T12658] netlink: 'syz.2.2270': attribute type 8 has an invalid length.
[  826.784890][T12658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2270'.
[  827.043301][T12501] team0: Port device team_slave_0 added
[  827.340840][T12501] team0: Port device team_slave_1 added
[  827.924540][T12668] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  827.982679][T12501] batman_adv: batadv0: Adding interface: batadv_slave_0
[  827.982695][T12501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  827.982718][T12501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  828.337163][T12501] batman_adv: batadv0: Adding interface: batadv_slave_1
[  828.337182][T12501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  828.337213][T12501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  828.535522][T12445] hsr_slave_0: entered promiscuous mode
[  828.539885][T12445] hsr_slave_1: entered promiscuous mode
[  828.542270][T12445] debugfs: 'hsr0' already exists in 'hsr'
[  828.542298][T12445] Cannot create hsr debugfs directory
[  829.238678][T12501] hsr_slave_0: entered promiscuous mode
[  829.240141][T12501] hsr_slave_1: entered promiscuous mode
[  829.241100][T12501] debugfs: 'hsr0' already exists in 'hsr'
[  829.241127][T12501] Cannot create hsr debugfs directory
[  829.273831][T12691] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2277'.
[  829.633954][T12696] program syz.4.2280 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  830.694710][ T6316] bridge_slave_1: left allmulticast mode
[  830.694748][ T6316] bridge_slave_1: left promiscuous mode
[  830.695159][ T6316] bridge0: port 2(bridge_slave_1) entered disabled state
[  830.759645][ T6316] bridge_slave_0: left allmulticast mode
[  830.759683][ T6316] bridge_slave_0: left promiscuous mode
[  830.760044][ T6316] bridge0: port 1(bridge_slave_0) entered disabled state
[  830.837053][ T6316] bridge_slave_1: left allmulticast mode
[  830.837093][ T6316] bridge_slave_1: left promiscuous mode
[  830.837420][ T6316] bridge0: port 2(bridge_slave_1) entered disabled state
[  830.890761][ T6316] bridge_slave_0: left allmulticast mode
[  830.890800][ T6316] bridge_slave_0: left promiscuous mode
[  830.891073][ T6316] bridge0: port 1(bridge_slave_0) entered disabled state
[  833.326687][ T6316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  833.387767][ T6316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  833.438447][ T6316] bond0 (unregistering): Released all slaves
[  835.126149][ T6316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  835.197695][ T6316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  835.240615][ T6316] bond0 (unregistering): Released all slaves
[  835.615458][   T38] audit: type=1326 audit(1758001032.646:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12727 comm="syz.4.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa758fceba9 code=0x7ffc0000
[  835.615520][   T38] audit: type=1326 audit(1758001032.646:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12727 comm="syz.4.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa758fceba9 code=0x7ffc0000
[  835.616889][   T38] audit: type=1326 audit(1758001032.656:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12727 comm="syz.4.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa758fceba9 code=0x7ffc0000
[  835.620001][   T38] audit: type=1326 audit(1758001032.656:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12727 comm="syz.4.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa758fceba9 code=0x7ffc0000
[  835.620946][   T38] audit: type=1326 audit(1758001032.656:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12727 comm="syz.4.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa758fceba9 code=0x7ffc0000
[  835.621331][   T38] audit: type=1326 audit(1758001032.656:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12727 comm="syz.4.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fa758fceba9 code=0x7ffc0000
[  835.622560][   T38] audit: type=1326 audit(1758001032.656:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12727 comm="syz.4.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa758fceba9 code=0x7ffc0000
[  835.776857][   T38] audit: type=1326 audit(1758001032.656:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12727 comm="syz.4.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa758fceba9 code=0x7ffc0000
[  836.237078][ T6316] hsr_slave_0: left promiscuous mode
[  836.277717][ T6316] hsr_slave_1: left promiscuous mode
[  836.278899][ T6316] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  836.278931][ T6316] batman_adv: batadv0: Removing interface: batadv_slave_0
[  836.306478][ T6316] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  836.306513][ T6316] batman_adv: batadv0: Removing interface: batadv_slave_1
[  836.445447][ T6316] hsr_slave_0: left promiscuous mode
[  836.470808][ T6316] hsr_slave_1: left promiscuous mode
[  836.471805][ T6316] batman_adv: batadv0: Removing interface: batadv_slave_0
[  836.515486][ T6316] batman_adv: batadv0: Removing interface: batadv_slave_1
[  836.650938][ T6316] veth1_macvtap: left promiscuous mode
[  836.651074][ T6316] veth0_macvtap: left promiscuous mode
[  836.651398][ T6316] veth1_vlan: left promiscuous mode
[  836.651625][ T6316] veth0_vlan: left promiscuous mode
[  836.668202][ T6316] veth1_macvtap: left promiscuous mode
[  836.668334][ T6316] veth0_macvtap: left promiscuous mode
[  836.668653][ T6316] veth1_vlan: left promiscuous mode
[  836.668882][ T6316] veth0_vlan: left promiscuous mode
[  839.586352][ T6316] team0 (unregistering): Port device team_slave_1 removed
[  839.836459][ T6316] team0 (unregistering): Port device team_slave_0 removed
[  844.249441][ T6316] team0 (unregistering): Port device team_slave_1 removed
[  844.506190][ T6316] team0 (unregistering): Port device team_slave_0 removed
[  847.029217][T12738] pimreg: entered allmulticast mode
[  847.034143][T12739] pimreg: left allmulticast mode
[  847.337129][T12747] ip6tnl0: Caught tx_queue_len zero misconfig
[  847.542490][T12753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2300'.
[  847.736040][T12374] 8021q: adding VLAN 0 to HW filter on device bond0
[  847.829877][T12374] 8021q: adding VLAN 0 to HW filter on device team0
[  847.856124][ T6337] bridge0: port 1(bridge_slave_0) entered blocking state
[  847.864141][ T6337] bridge0: port 1(bridge_slave_0) entered forwarding state
[  848.150820][ T2151] bridge0: port 2(bridge_slave_1) entered blocking state
[  848.150989][ T2151] bridge0: port 2(bridge_slave_1) entered forwarding state
[  848.448449][T12763] pimreg: entered allmulticast mode
[  848.462416][T12763] pimreg: left allmulticast mode
[  848.971135][T12374] 8021q: adding VLAN 0 to HW filter on device batadv0
[  848.982776][T12773] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2307'.
[  848.982818][T12773] netlink: 'syz.4.2307': attribute type 7 has an invalid length.
[  848.982834][T12773] netlink: 'syz.4.2307': attribute type 8 has an invalid length.
[  848.982847][T12773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2307'.
[  849.007926][T12773] syz_tun: entered promiscuous mode
[  849.088311][T12773] syz_tun: left promiscuous mode
[  849.932715][T12445] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  850.078392][T12445] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  850.154884][T12445] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  850.219621][T12445] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  850.475705][T12804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2314'.
[  850.762443][T12501] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  850.819377][T12501] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  850.881337][T12501] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  850.972996][T12501] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  851.072314][T12374] veth0_vlan: entered promiscuous mode
[  851.181617][T12374] veth1_vlan: entered promiscuous mode
[  851.263631][T12832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2322'.
[  851.418533][T12374] veth0_macvtap: entered promiscuous mode
[  851.531091][T12445] 8021q: adding VLAN 0 to HW filter on device bond0
[  851.653020][T12445] 8021q: adding VLAN 0 to HW filter on device team0
[  851.703515][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state
[  851.703753][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state
[  851.727019][T12501] 8021q: adding VLAN 0 to HW filter on device bond0
[  851.761803][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state
[  851.761988][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state
[  851.898587][T12501] 8021q: adding VLAN 0 to HW filter on device team0
[  851.967701][ T6316] bridge0: port 1(bridge_slave_0) entered blocking state
[  851.967859][ T6316] bridge0: port 1(bridge_slave_0) entered forwarding state
[  852.003094][ T6316] bridge0: port 2(bridge_slave_1) entered blocking state
[  852.004450][ T6316] bridge0: port 2(bridge_slave_1) entered forwarding state
[  852.718248][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  852.722588][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  852.740589][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  852.747364][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  852.750678][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  852.834805][T12847] syz_tun: entered allmulticast mode
[  852.925578][T12845] syz_tun: left allmulticast mode
[  853.204085][T12861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2330'.
[  854.694398][T12445] 8021q: adding VLAN 0 to HW filter on device batadv0
[  854.722043][T12884] syz_tun: entered allmulticast mode
[  854.775620][T12882] syz_tun: left allmulticast mode
[  854.815421][ T5852] Bluetooth: hci0: command tx timeout
[  854.986674][T12501] 8021q: adding VLAN 0 to HW filter on device batadv0
[  855.719083][ T2151] bridge_slave_1: left allmulticast mode
[  855.719123][ T2151] bridge_slave_1: left promiscuous mode
[  855.719445][ T2151] bridge0: port 2(bridge_slave_1) entered disabled state
[  855.837109][ T2151] bridge_slave_0: left allmulticast mode
[  855.837145][ T2151] bridge_slave_0: left promiscuous mode
[  855.837443][ T2151] bridge0: port 1(bridge_slave_0) entered disabled state
[  856.905218][ T5852] Bluetooth: hci0: command tx timeout
[  857.031097][T12930] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2348'.
[  858.197553][ T2151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  858.276327][ T2151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  858.301849][ T2151] bond0 (unregistering): Released all slaves
[  858.545902][T12848] chnl_net:caif_netlink_parms(): no params data found
[  858.978068][ T5852] Bluetooth: hci0: command tx timeout
[  860.067406][ T2151] hsr_slave_0: left promiscuous mode
[  860.131930][ T2151] hsr_slave_1: left promiscuous mode
[  860.132943][ T2151] batman_adv: batadv0: Removing interface: batadv_slave_0
[  860.180661][ T2151] batman_adv: batadv0: Removing interface: batadv_slave_1
[  860.324458][ T2151] veth0_macvtap: left promiscuous mode
[  860.324804][ T2151] veth1_vlan: left promiscuous mode
[  860.326517][ T2151] veth0_vlan: left promiscuous mode
[  860.530030][T12953] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2356'.
[  861.056158][ T5852] Bluetooth: hci0: command tx timeout
[  862.495859][ T2151] team0 (unregistering): Port device team_slave_1 removed
[  862.760676][ T2151] team0 (unregistering): Port device team_slave_0 removed
[  864.102139][T11940] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  864.104926][T11940] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  864.113856][T11940] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  864.118092][T11940] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  864.119796][T11940] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  866.258751][T11940] Bluetooth: hci2: command tx timeout
[  866.958395][T12848] bridge0: port 1(bridge_slave_0) entered blocking state
[  866.958733][T12848] bridge0: port 1(bridge_slave_0) entered disabled state
[  866.958928][T12848] bridge_slave_0: entered allmulticast mode
[  866.970594][T12848] bridge_slave_0: entered promiscuous mode
[  867.018826][T12848] bridge0: port 2(bridge_slave_1) entered blocking state
[  867.018978][T12848] bridge0: port 2(bridge_slave_1) entered disabled state
[  867.019222][T12848] bridge_slave_1: entered allmulticast mode
[  867.025783][T12848] bridge_slave_1: entered promiscuous mode
[  867.220576][T12979] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2365'.
[  867.799936][T12848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  867.834385][T12848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  868.335701][T11940] Bluetooth: hci2: command tx timeout
[  869.082351][T12990] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  869.427981][T12848] team0: Port device team_slave_0 added
[  869.476657][T12848] team0: Port device team_slave_1 added
[  869.802673][T12848] batman_adv: batadv0: Adding interface: batadv_slave_0
[  869.802692][T12848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  869.802723][T12848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  869.849165][T12848] batman_adv: batadv0: Adding interface: batadv_slave_1
[  869.849187][T12848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  869.849222][T12848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  870.272891][T12848] hsr_slave_0: entered promiscuous mode
[  870.281171][T13002] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2374'.
[  870.281967][T12848] hsr_slave_1: entered promiscuous mode
[  870.416872][T11940] Bluetooth: hci2: command tx timeout
[  870.822878][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  870.845508][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  870.850281][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  870.852025][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  870.852830][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  872.495393][T11940] Bluetooth: hci2: command tx timeout
[  872.721357][T13028] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2383'.
[  872.895802][T11940] Bluetooth: hci1: command tx timeout
[  874.191385][T12957] chnl_net:caif_netlink_parms(): no params data found
[  874.988061][ T5852] Bluetooth: hci1: command tx timeout
[  875.474922][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  875.475104][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  877.073844][ T5852] Bluetooth: hci1: command tx timeout
[  878.173334][T12957] bridge0: port 1(bridge_slave_0) entered blocking state
[  878.173486][T12957] bridge0: port 1(bridge_slave_0) entered disabled state
[  878.173756][T12957] bridge_slave_0: entered allmulticast mode
[  878.205448][T12957] bridge_slave_0: entered promiscuous mode
[  878.245616][T12957] bridge0: port 2(bridge_slave_1) entered blocking state
[  878.245768][T12957] bridge0: port 2(bridge_slave_1) entered disabled state
[  878.246109][T12957] bridge_slave_1: entered allmulticast mode
[  878.249047][T12957] bridge_slave_1: entered promiscuous mode
[  878.760199][T12957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  878.822219][T12957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  879.135285][ T5852] Bluetooth: hci1: command tx timeout
[  879.290982][ T2151] bridge_slave_1: left allmulticast mode
[  879.291017][ T2151] bridge_slave_1: left promiscuous mode
[  879.291427][ T2151] bridge0: port 2(bridge_slave_1) entered disabled state
[  879.369234][ T2151] bridge_slave_0: left allmulticast mode
[  879.369269][ T2151] bridge_slave_0: left promiscuous mode
[  879.369557][ T2151] bridge0: port 1(bridge_slave_0) entered disabled state
[  882.107333][ T2151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  882.166122][ T2151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  882.190359][ T2151] bond0 (unregistering): Released all slaves
[  882.461277][T12957] team0: Port device team_slave_0 added
[  882.479392][T13091] veth0: entered promiscuous mode
[  882.479928][T13092] batadv_slave_0: entered promiscuous mode
[  882.482971][T12957] team0: Port device team_slave_1 added
[  882.541581][T13096] batadv_slave_0: left promiscuous mode
[  882.541875][T13096] veth0: left promiscuous mode
[  882.813601][T13007] chnl_net:caif_netlink_parms(): no params data found
[  883.196369][T12957] batman_adv: batadv0: Adding interface: batadv_slave_0
[  883.196388][T12957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  883.196418][T12957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  884.585205][ T2151] hsr_slave_0: left promiscuous mode
[  884.625179][ T2151] hsr_slave_1: left promiscuous mode
[  884.626287][ T2151] batman_adv: batadv0: Removing interface: batadv_slave_0
[  884.676116][ T2151] batman_adv: batadv0: Removing interface: batadv_slave_1
[  885.290744][T13123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2413'.
[  886.111749][ T2151] team0 (unregistering): Port device team_slave_1 removed
[  886.351121][ T2151] team0 (unregistering): Port device team_slave_0 removed
[  888.755913][T12957] batman_adv: batadv0: Adding interface: batadv_slave_1
[  888.755934][T12957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  888.755965][T12957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  891.084830][T12848] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  891.121563][T13154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2422'.
[  891.153392][T12957] hsr_slave_0: entered promiscuous mode
[  891.156550][T12957] hsr_slave_1: entered promiscuous mode
[  891.157884][T12957] debugfs: 'hsr0' already exists in 'hsr'
[  891.157915][T12957] Cannot create hsr debugfs directory
[  891.158374][T13007] bridge0: port 1(bridge_slave_0) entered blocking state
[  891.158590][T13007] bridge0: port 1(bridge_slave_0) entered disabled state
[  891.158816][T13007] bridge_slave_0: entered allmulticast mode
[  891.163343][T13007] bridge_slave_0: entered promiscuous mode
[  891.175311][T12848] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  891.248548][T13007] bridge0: port 2(bridge_slave_1) entered blocking state
[  891.248695][T13007] bridge0: port 2(bridge_slave_1) entered disabled state
[  891.248906][T13007] bridge_slave_1: entered allmulticast mode
[  891.263436][T13007] bridge_slave_1: entered promiscuous mode
[  891.273169][T12848] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  891.643821][T12848] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  892.066517][T13007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  892.113781][T13007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  892.823964][T13007] team0: Port device team_slave_0 added
[  892.889563][T13007] team0: Port device team_slave_1 added
[  894.418042][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2431'.
[  894.674697][T13007] batman_adv: batadv0: Adding interface: batadv_slave_0
[  894.674725][T13007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  894.674754][T13007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  895.139346][T13007] batman_adv: batadv0: Adding interface: batadv_slave_1
[  895.139365][T13007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  895.139396][T13007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  896.544758][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2442'.
[  897.186594][T13007] hsr_slave_0: entered promiscuous mode
[  897.189013][T13007] hsr_slave_1: entered promiscuous mode
[  897.190099][T13007] debugfs: 'hsr0' already exists in 'hsr'
[  897.190126][T13007] Cannot create hsr debugfs directory
[  897.705726][T13239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2450'.
[  901.798566][ T2151] bridge_slave_1: left allmulticast mode
[  901.798603][ T2151] bridge_slave_1: left promiscuous mode
[  901.798881][ T2151] bridge0: port 2(bridge_slave_1) entered disabled state
[  901.886974][ T2151] bridge_slave_0: left allmulticast mode
[  901.887013][ T2151] bridge_slave_0: left promiscuous mode
[  901.887322][ T2151] bridge0: port 1(bridge_slave_0) entered disabled state
[  904.706417][ T2151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  904.766924][ T2151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  904.791338][ T2151] bond0 (unregistering): Released all slaves
[  904.941090][T12957] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  905.044104][T12957] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  905.258326][T13295] netfs: Couldn't get user pages (rc=-14)
[  905.379759][T12957] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  905.415325][T13300] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2471'.
[  905.547559][ T2151] hsr_slave_0: left promiscuous mode
[  905.596632][ T2151] hsr_slave_1: left promiscuous mode
[  905.597703][ T2151] batman_adv: batadv0: Removing interface: batadv_slave_0
[  905.637677][ T2151] batman_adv: batadv0: Removing interface: batadv_slave_1
[  908.525990][ T2151] team0 (unregistering): Port device team_slave_1 removed
[  908.736210][ T2151] team0 (unregistering): Port device team_slave_0 removed
[  911.122877][T12957] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  911.247704][T12848] 8021q: adding VLAN 0 to HW filter on device bond0
[  911.970603][T12848] 8021q: adding VLAN 0 to HW filter on device team0
[  912.537477][ T6319] bridge0: port 1(bridge_slave_0) entered blocking state
[  912.537721][ T6319] bridge0: port 1(bridge_slave_0) entered forwarding state
[  912.569628][ T6319] bridge0: port 2(bridge_slave_1) entered blocking state
[  912.575292][ T6319] bridge0: port 2(bridge_slave_1) entered forwarding state
[  914.254653][T12957] 8021q: adding VLAN 0 to HW filter on device bond0
[  914.310131][T12957] 8021q: adding VLAN 0 to HW filter on device team0
[  914.359346][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state
[  914.362037][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state
[  914.428146][ T6337] bridge0: port 2(bridge_slave_1) entered blocking state
[  914.428306][ T6337] bridge0: port 2(bridge_slave_1) entered forwarding state
[  914.743155][T11940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  914.758443][T11940] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  914.759969][T11940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  914.779880][T11940] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  914.780822][T11940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  915.171460][T13361] capability: warning: `syz.2.2489' uses 32-bit capabilities (legacy support in use)
[  916.803997][T13007] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  916.895853][ T5852] Bluetooth: hci0: command tx timeout
[  917.019248][T13007] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  917.125422][T13007] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  917.909137][T13007] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  917.981202][T13384] team0: Port device vlan0 added
[  918.728248][T13404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2502'.
[  918.728275][T13404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2502'.
[  918.975215][ T5852] Bluetooth: hci0: command tx timeout
[  919.651747][T13356] chnl_net:caif_netlink_parms(): no params data found
[  919.836287][T12957] 8021q: adding VLAN 0 to HW filter on device batadv0
[  920.426839][ T2151] bridge_slave_1: left allmulticast mode
[  920.426875][ T2151] bridge_slave_1: left promiscuous mode
[  920.427140][ T2151] bridge0: port 2(bridge_slave_1) entered disabled state
[  920.517373][ T2151] bridge_slave_0: left allmulticast mode
[  920.517410][ T2151] bridge_slave_0: left promiscuous mode
[  920.517761][ T2151] bridge0: port 1(bridge_slave_0) entered disabled state
[  921.055573][ T5852] Bluetooth: hci0: command tx timeout
[  922.181326][T13482] 9pnet_fd: Insufficient options for proto=fd
[  922.811777][T13499] 9pnet_fd: Insufficient options for proto=fd
[  923.018533][ T2151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  923.096267][ T2151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  923.135156][ T5852] Bluetooth: hci0: command tx timeout
[  923.160014][ T2151] bond0 (unregistering): Released all slaves
[  923.422403][T13356] bridge0: port 1(bridge_slave_0) entered blocking state
[  923.422538][T13356] bridge0: port 1(bridge_slave_0) entered disabled state
[  923.422708][T13356] bridge_slave_0: entered allmulticast mode
[  923.425611][T13356] bridge_slave_0: entered promiscuous mode
[  923.621291][T13356] bridge0: port 2(bridge_slave_1) entered blocking state
[  923.621533][T13356] bridge0: port 2(bridge_slave_1) entered disabled state
[  923.621793][T13356] bridge_slave_1: entered allmulticast mode
[  923.627636][T13356] bridge_slave_1: entered promiscuous mode
[  923.975265][ T2151] hsr_slave_0: left promiscuous mode
[  924.045174][ T2151] hsr_slave_1: left promiscuous mode
[  924.047349][ T2151] batman_adv: batadv0: Removing interface: batadv_slave_0
[  924.086015][ T2151] batman_adv: batadv0: Removing interface: batadv_slave_1
[  924.867698][T13516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2544'.
[  924.867734][T13516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2544'.
[  924.867751][T13516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2544'.
[  925.090740][T13519] 9pnet_fd: Insufficient options for proto=fd
[  925.279855][T11940] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  925.312998][T11940] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  925.314397][T11940] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  925.336851][T11940] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  925.338223][T11940] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  925.856066][ T2151] team0 (unregistering): Port device team_slave_1 removed
[  926.086238][ T2151] team0 (unregistering): Port device team_slave_0 removed
[  926.930075][T13544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2553'.
[  926.930111][T13544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2553'.
[  926.930128][T13544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2553'.
[  927.087092][T13546] 9pnet_fd: Insufficient options for proto=fd
[  927.465371][T11940] Bluetooth: hci2: command tx timeout
[  929.404510][T13356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  929.535190][T11940] Bluetooth: hci2: command tx timeout
[  929.714026][T13356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  930.151768][T13007] 8021q: adding VLAN 0 to HW filter on device bond0
[  930.162302][T13356] team0: Port device team_slave_0 added
[  930.184095][T13356] team0: Port device team_slave_1 added
[  930.636316][T13356] batman_adv: batadv0: Adding interface: batadv_slave_0
[  930.636335][T13356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  930.636366][T13356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  930.685786][T13356] batman_adv: batadv0: Adding interface: batadv_slave_1
[  930.685806][T13356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  930.685837][T13356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  931.154792][T13356] hsr_slave_0: entered promiscuous mode
[  931.162456][T13356] hsr_slave_1: entered promiscuous mode
[  931.615149][T11940] Bluetooth: hci2: command tx timeout
[  931.891325][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  931.916176][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  931.923368][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  931.933952][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  931.939505][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  933.513083][T13607] 9pnet_fd: Insufficient options for proto=fd
[  933.704815][T11940] Bluetooth: hci2: command tx timeout
[  934.015458][T11940] Bluetooth: hci1: command tx timeout
[  934.423549][T13524] chnl_net:caif_netlink_parms(): no params data found
[  935.594329][T13628] 9pnet_fd: Insufficient options for proto=fd
[  936.098865][T11940] Bluetooth: hci1: command tx timeout
[  936.328441][T13524] bridge0: port 1(bridge_slave_0) entered blocking state
[  936.328695][T13524] bridge0: port 1(bridge_slave_0) entered disabled state
[  936.328960][T13524] bridge_slave_0: entered allmulticast mode
[  936.363305][T13524] bridge_slave_0: entered promiscuous mode
[  936.528047][T13524] bridge0: port 2(bridge_slave_1) entered blocking state
[  936.528363][T13524] bridge0: port 2(bridge_slave_1) entered disabled state
[  936.528630][T13524] bridge_slave_1: entered allmulticast mode
[  936.557871][T13524] bridge_slave_1: entered promiscuous mode
[  936.923380][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  936.923465][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  937.012480][T13524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  937.112013][T13524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  937.333119][ T2151] bridge_slave_1: left allmulticast mode
[  937.333155][ T2151] bridge_slave_1: left promiscuous mode
[  937.333368][ T2151] bridge0: port 2(bridge_slave_1) entered disabled state
[  937.438433][ T2151] bridge_slave_0: left allmulticast mode
[  937.438471][ T2151] bridge_slave_0: left promiscuous mode
[  937.438747][ T2151] bridge0: port 1(bridge_slave_0) entered disabled state
[  938.193710][T11940] Bluetooth: hci1: command tx timeout
[  939.349287][ T2151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  939.406236][ T2151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  939.450487][ T2151] bond0 (unregistering): Released all slaves
[  939.867900][T13524] team0: Port device team_slave_0 added
[  940.008286][T13524] team0: Port device team_slave_1 added
[  940.150391][T13681] Driver unsupported XDP return value 0 on prog  (id 861) dev N/A, expect packet loss!
[  940.220602][ T2151] hsr_slave_0: left promiscuous mode
[  940.255146][T11940] Bluetooth: hci1: command tx timeout
[  940.261746][ T2151] hsr_slave_1: left promiscuous mode
[  940.262724][ T2151] batman_adv: batadv0: Removing interface: batadv_slave_0
[  940.297768][ T2151] batman_adv: batadv0: Removing interface: batadv_slave_1
[  941.768092][ T2151] team0 (unregistering): Port device team_slave_1 removed
[  942.039602][ T2151] team0 (unregistering): Port device team_slave_0 removed
[  945.098506][T13524] batman_adv: batadv0: Adding interface: batadv_slave_0
[  945.098524][T13524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  945.098546][T13524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  945.108445][T13704] pimreg: entered allmulticast mode
[  945.110624][T13590] chnl_net:caif_netlink_parms(): no params data found
[  945.132052][T13705] pimreg: left allmulticast mode
[  945.306432][T13524] batman_adv: batadv0: Adding interface: batadv_slave_1
[  945.306451][T13524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  945.306483][T13524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  945.316599][T13356] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  945.338792][T13709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2614'.
[  945.525382][T13356] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  945.679129][T13356] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  945.869059][T13356] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  946.640713][T13524] hsr_slave_0: entered promiscuous mode
[  946.659032][T13524] hsr_slave_1: entered promiscuous mode
[  946.660073][T13524] debugfs: 'hsr0' already exists in 'hsr'
[  946.660100][T13524] Cannot create hsr debugfs directory
[  946.977001][T13590] bridge0: port 1(bridge_slave_0) entered blocking state
[  946.977234][T13590] bridge0: port 1(bridge_slave_0) entered disabled state
[  946.977502][T13590] bridge_slave_0: entered allmulticast mode
[  946.985606][T13590] bridge_slave_0: entered promiscuous mode
[  947.229218][T13590] bridge0: port 2(bridge_slave_1) entered blocking state
[  947.229370][T13590] bridge0: port 2(bridge_slave_1) entered disabled state
[  947.229693][T13590] bridge_slave_1: entered allmulticast mode
[  947.233621][T13590] bridge_slave_1: entered promiscuous mode
[  948.578555][T13590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  948.674318][T13590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  949.392888][T13590] team0: Port device team_slave_0 added
[  949.611200][T13590] team0: Port device team_slave_1 added
[  950.835825][T13793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  951.208001][T13590] batman_adv: batadv0: Adding interface: batadv_slave_0
[  951.208021][T13590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  951.208052][T13590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  951.283037][T13590] batman_adv: batadv0: Adding interface: batadv_slave_1
[  951.283057][T13590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  951.283088][T13590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  953.447903][T13590] hsr_slave_0: entered promiscuous mode
[  953.449334][T13590] hsr_slave_1: entered promiscuous mode
[  953.453901][T13590] debugfs: 'hsr0' already exists in 'hsr'
[  953.453930][T13590] Cannot create hsr debugfs directory
[  954.333358][T13356] 8021q: adding VLAN 0 to HW filter on device bond0
[  954.334365][ T2151] bridge_slave_1: left allmulticast mode
[  954.334395][ T2151] bridge_slave_1: left promiscuous mode
[  954.334666][ T2151] bridge0: port 2(bridge_slave_1) entered disabled state
[  954.403900][ T2151] bridge_slave_0: left allmulticast mode
[  954.403937][ T2151] bridge_slave_0: left promiscuous mode
[  954.404242][ T2151] bridge0: port 1(bridge_slave_0) entered disabled state
[  956.446684][ T2151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  956.525863][ T2151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  956.589579][ T2151] bond0 (unregistering): Released all slaves
[  957.626643][ T2151] hsr_slave_0: left promiscuous mode
[  958.317356][ T2151] hsr_slave_1: left promiscuous mode
[  958.318323][ T2151] batman_adv: batadv0: Removing interface: batadv_slave_0
[  958.356492][ T2151] batman_adv: batadv0: Removing interface: batadv_slave_1
[  959.356294][ T2151] team0 (unregistering): Port device team_slave_1 removed
[  959.506144][ T2151] team0 (unregistering): Port device team_slave_0 removed
[  960.722397][T13356] 8021q: adding VLAN 0 to HW filter on device team0
[  961.037669][ T6353] bridge0: port 1(bridge_slave_0) entered blocking state
[  961.039512][ T6353] bridge0: port 1(bridge_slave_0) entered forwarding state
[  961.754274][T13524] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  961.819977][T13524] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  962.087244][ T6337] bridge0: port 2(bridge_slave_1) entered blocking state
[  962.087372][ T6337] bridge0: port 2(bridge_slave_1) entered forwarding state
[  962.095384][T13524] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  962.155649][T13524] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  965.955379][T13590] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  965.998644][T13590] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  966.051520][T13590] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  966.167358][T13928] netlink: 'syz.2.2692': attribute type 10 has an invalid length.
[  966.466754][T13524] 8021q: adding VLAN 0 to HW filter on device bond0
[  966.601318][T13590] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  967.219530][T13356] 8021q: adding VLAN 0 to HW filter on device batadv0
[  967.308125][T13524] 8021q: adding VLAN 0 to HW filter on device team0
[  967.355952][ T2151] bridge0: port 1(bridge_slave_0) entered blocking state
[  967.356195][ T2151] bridge0: port 1(bridge_slave_0) entered forwarding state
[  967.412652][T13811] bridge0: port 2(bridge_slave_1) entered blocking state
[  967.412899][T13811] bridge0: port 2(bridge_slave_1) entered forwarding state
[  968.664290][T13590] 8021q: adding VLAN 0 to HW filter on device bond0
[  968.828666][T13590] 8021q: adding VLAN 0 to HW filter on device team0
[  968.858020][ T3092] bridge0: port 1(bridge_slave_0) entered blocking state
[  968.858173][ T3092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  968.918240][ T3092] bridge0: port 2(bridge_slave_1) entered blocking state
[  968.918577][ T3092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  969.356079][T13356] veth0_vlan: entered promiscuous mode
[  969.424198][T13356] veth1_vlan: entered promiscuous mode
[  969.503338][T13524] 8021q: adding VLAN 0 to HW filter on device batadv0
[  969.652301][T13356] veth0_macvtap: entered promiscuous mode
[  969.688691][T13356] veth1_macvtap: entered promiscuous mode
[  969.843734][T13979] netlink: 'syz.2.2702': attribute type 10 has an invalid length.
[  970.640224][T13356] batman_adv: batadv0: Interface activated: batadv_slave_0
[  970.688387][T13356] batman_adv: batadv0: Interface activated: batadv_slave_1
[  970.692259][T13590] 8021q: adding VLAN 0 to HW filter on device batadv0
[  970.827899][ T6316] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  970.831308][ T3092] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  970.872608][ T3092] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  970.875860][ T3092] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  971.441820][ T6347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  971.441845][ T6347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  972.560680][ T2786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  972.560702][ T2786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  972.840357][T13524] veth0_vlan: entered promiscuous mode
[  972.967808][T13524] veth1_vlan: entered promiscuous mode
[  973.000936][T13590] veth0_vlan: entered promiscuous mode
[  973.074611][T13590] veth1_vlan: entered promiscuous mode
[  973.175520][T14015] netlink: 'syz.9.2710': attribute type 10 has an invalid length.
[  973.298810][T14015] team0: Port device dummy0 added
[  974.046450][T13524] veth0_macvtap: entered promiscuous mode
[  974.175657][T13524] veth1_macvtap: entered promiscuous mode
[  974.246712][T13590] veth0_macvtap: entered promiscuous mode
[  974.266860][T13590] veth1_macvtap: entered promiscuous mode
[  974.272352][T13524] batman_adv: batadv0: Interface activated: batadv_slave_0
[  974.333161][T13524] batman_adv: batadv0: Interface activated: batadv_slave_1
[  974.363458][ T6322] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  974.387938][ T6322] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  974.393573][ T6331] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  974.421091][ T6331] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  974.538596][T13590] batman_adv: batadv0: Interface activated: batadv_slave_0
[  974.647179][T13590] batman_adv: batadv0: Interface activated: batadv_slave_1
[  974.804002][ T6337] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  974.816308][ T6337] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  974.834378][ T6337] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  974.834700][ T6337] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  976.025185][T13811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  976.025207][T13811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  976.445977][ T6347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  976.445999][ T6347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  976.668032][ T6337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  976.668054][ T6337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  977.439855][T14054] lo: Caught tx_queue_len zero misconfig
[  977.439902][T14054] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  977.730363][ T6337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  977.730386][ T6337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  977.757597][T14061] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2724'.
[  978.652670][T14088] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2736'.
[  980.420287][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  980.434905][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  980.470535][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  980.482670][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  980.492505][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  981.081686][T14121] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2748'.
[  982.575749][T11940] Bluetooth: hci5: command tx timeout
[  982.747528][T14142] kernel read not supported for file /file1 (pid: 14142 comm: syz.8.2757)
[  982.755162][   T38] audit: type=1800 audit(1758001179.786:762): pid=14142 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.2757" name="file1" dev="mqueue" ino=54305 res=0 errno=0
[  982.769704][ T6347] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  982.769750][ T6347] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  983.163041][ T6347] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  983.163080][ T6347] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  983.400061][T14170] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2768'.
[  983.574553][T14179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2768'.
[  983.692509][ T6347] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  983.692556][ T6347] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  984.032715][ T6347] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  984.032752][ T6347] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  984.285106][T14108] chnl_net:caif_netlink_parms(): no params data found
[  984.655281][T11940] Bluetooth: hci5: command tx timeout
[  985.364675][T14108] bridge0: port 1(bridge_slave_0) entered blocking state
[  985.364824][T14108] bridge0: port 1(bridge_slave_0) entered disabled state
[  985.365213][T14108] bridge_slave_0: entered allmulticast mode
[  985.369805][T14108] bridge_slave_0: entered promiscuous mode
[  985.372526][ T6347] bridge_slave_1: left allmulticast mode
[  985.372562][ T6347] bridge_slave_1: left promiscuous mode
[  985.372888][ T6347] bridge0: port 2(bridge_slave_1) entered disabled state
[  985.504305][ T6347] bridge_slave_0: left allmulticast mode
[  985.504345][ T6347] bridge_slave_0: left promiscuous mode
[  985.504670][ T6347] bridge0: port 1(bridge_slave_0) entered disabled state
[  985.814932][T14237] program syz.8.2795 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  986.735328][T11940] Bluetooth: hci5: command tx timeout
[  987.774843][T14271] netlink: 'syz.8.2809': attribute type 10 has an invalid length.
[  988.831899][T11940] Bluetooth: hci5: command tx timeout
[  989.596320][ T6347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  989.677719][ T6347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  989.725889][ T6347] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  989.828221][ T6347] bond0 (unregistering): Released all slaves
[  989.860777][T14271] team0: Port device dummy0 added
[  989.919663][T14108] bridge0: port 2(bridge_slave_1) entered blocking state
[  989.919802][T14108] bridge0: port 2(bridge_slave_1) entered disabled state
[  989.920101][T14108] bridge_slave_1: entered allmulticast mode
[  989.923106][T14108] bridge_slave_1: entered promiscuous mode
[  990.505416][ T6347] tipc: Left network mode
[  990.713229][T14108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  990.728283][T14108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  990.953978][T14297] netlink: 'syz.7.2819': attribute type 10 has an invalid length.
[  991.856633][T14297] team0: Port device dummy0 added
[  992.482405][T14108] team0: Port device team_slave_0 added
[  992.498978][T14108] team0: Port device team_slave_1 added
[  992.681673][T14325] netlink: 'syz.7.2832': attribute type 10 has an invalid length.
[  994.147686][T14328] syz_tun (unregistering): left promiscuous mode
[  994.638259][T14359] netlink: 'syz.2.2845': attribute type 10 has an invalid length.
[  995.607351][T14108] batman_adv: batadv0: Adding interface: batadv_slave_0
[  995.607372][T14108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  995.607404][T14108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  995.710630][T14108] batman_adv: batadv0: Adding interface: batadv_slave_1
[  995.710650][T14108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  995.710681][T14108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  996.393942][T14384] netlink: 'syz.2.2855': attribute type 10 has an invalid length.
[  997.385011][ T6347] hsr_slave_0: left promiscuous mode
[  997.405218][ T6347] hsr_slave_1: left promiscuous mode
[  997.406209][ T6347] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  997.406240][ T6347] batman_adv: batadv0: Removing interface: batadv_slave_0
[  997.460372][ T6347] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  997.460408][ T6347] batman_adv: batadv0: Removing interface: batadv_slave_1
[  997.545736][ T6347] veth1_macvtap: left promiscuous mode
[  997.545869][ T6347] veth0_macvtap: left promiscuous mode
[  997.986390][ T6347] team0 (unregistering): Port device vlan0 removed
[  997.987983][T14407] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2866'.
[  998.122429][T14411] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2866'.
[  998.342568][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  998.342640][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[ 1000.246006][ T6347] team0 (unregistering): Port device team_slave_1 removed
[ 1000.515950][ T6347] team0 (unregistering): Port device C removed
[ 1001.929519][ T6347] team0 (unregistering): Port device dummy0 removed
[ 1003.277706][T14108] hsr_slave_0: entered promiscuous mode
[ 1003.279136][T14108] hsr_slave_1: entered promiscuous mode
[ 1003.280052][T14108] debugfs: 'hsr0' already exists in 'hsr'
[ 1003.280078][T14108] Cannot create hsr debugfs directory
[ 1004.812962][T14478] netlink: 'syz.8.2894': attribute type 10 has an invalid length.
[ 1006.533050][T14488] Process accounting resumed
[ 1006.814392][ T5935] kernel write not supported for file /139/loginuid (pid: 5935 comm: kworker/1:6)
[ 1007.041650][ T6347] IPVS: stop unused estimator thread 0...
[ 1008.575987][    C0] ==================================================================
[ 1008.576070][    C0] BUG: KASAN: slab-use-after-free in rose_send_frame+0x131/0x220
[ 1008.576113][    C0] Write of size 8 at addr ffff88805a57c018 by task ktimers/0/16
[ 1008.576132][    C0] 
[ 1008.576163][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1008.576190][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1008.576208][    C0] Call Trace:
[ 1008.576217][    C0]  <TASK>
[ 1008.576228][    C0]  dump_stack_lvl+0x189/0x250
[ 1008.576263][    C0]  ? __kasan_check_byte+0x12/0x40
[ 1008.576296][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1008.576328][    C0]  ? lock_release+0x4b/0x3e0
[ 1008.576361][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[ 1008.576384][    C0]  print_report+0xca/0x240
[ 1008.576413][    C0]  ? rose_send_frame+0x131/0x220
[ 1008.576435][    C0]  kasan_report+0x118/0x150
[ 1008.576467][    C0]  ? rose_send_frame+0x131/0x220
[ 1008.576494][    C0]  rose_send_frame+0x131/0x220
[ 1008.576519][    C0]  rose_t0timer_expiry+0x143/0x360
[ 1008.576543][    C0]  call_timer_fn+0x17e/0x5f0
[ 1008.576572][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[ 1008.576595][    C0]  ? call_timer_fn+0xbe/0x5f0
[ 1008.576623][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[ 1008.576659][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1008.576694][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1008.576726][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[ 1008.576751][    C0]  __run_timer_base+0x648/0x970
[ 1008.576787][    C0]  ? __pfx___run_timer_base+0x10/0x10
[ 1008.576824][    C0]  run_timer_softirq+0xb7/0x180
[ 1008.576852][    C0]  handle_softirqs+0x22f/0x710
[ 1008.576886][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[ 1008.576922][    C0]  run_ktimerd+0xcf/0x190
[ 1008.576952][    C0]  ? __pfx_run_ktimerd+0x10/0x10
[ 1008.576983][    C0]  ? schedule+0x91/0x360
[ 1008.577032][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[ 1008.577060][    C0]  smpboot_thread_fn+0x53f/0xa60
[ 1008.577090][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[ 1008.577123][    C0]  kthread+0x70e/0x8a0
[ 1008.577159][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 1008.577188][    C0]  ? __pfx_kthread+0x10/0x10
[ 1008.577224][    C0]  ? __pfx_kthread+0x10/0x10
[ 1008.577259][    C0]  ret_from_fork+0x439/0x7d0
[ 1008.577289][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1008.577322][    C0]  ? __switch_to_asm+0x39/0x70
[ 1008.577344][    C0]  ? __switch_to_asm+0x33/0x70
[ 1008.577364][    C0]  ? __pfx_kthread+0x10/0x10
[ 1008.577399][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1008.577430][    C0]  </TASK>
[ 1008.577438][    C0] 
[ 1008.577444][    C0] Allocated by task 11663:
[ 1008.577455][    C0]  kasan_save_track+0x3e/0x80
[ 1008.577479][    C0]  __kasan_kmalloc+0x93/0xb0
[ 1008.577504][    C0]  __kmalloc_cache_noprof+0x1a8/0x320
[ 1008.577534][    C0]  rose_add_node+0x26f/0xf20
[ 1008.577556][    C0]  rose_rt_ioctl+0xd74/0x1300
[ 1008.577579][    C0]  rose_ioctl+0x3ce/0x8b0
[ 1008.577609][    C0]  sock_do_ioctl+0xdc/0x300
[ 1008.577633][    C0]  sock_ioctl+0x579/0x790
[ 1008.577655][    C0]  __se_sys_ioctl+0xfc/0x170
[ 1008.577678][    C0]  do_syscall_64+0xfa/0x3b0
[ 1008.577696][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1008.577718][    C0] 
[ 1008.577723][    C0] Freed by task 29:
[ 1008.577733][    C0]  kasan_save_track+0x3e/0x80
[ 1008.577756][    C0]  kasan_save_free_info+0x46/0x50
[ 1008.577775][    C0]  __kasan_slab_free+0x5b/0x80
[ 1008.577799][    C0]  kfree+0x195/0x550
[ 1008.577824][    C0]  rose_timer_expiry+0x4cb/0x600
[ 1008.577849][    C0]  call_timer_fn+0x17e/0x5f0
[ 1008.577879][    C0]  __run_timer_base+0x648/0x970
[ 1008.577902][    C0]  run_timer_softirq+0xb7/0x180
[ 1008.577927][    C0]  handle_softirqs+0x22f/0x710
[ 1008.577950][    C0]  run_ktimerd+0xcf/0x190
[ 1008.577976][    C0]  smpboot_thread_fn+0x53f/0xa60
[ 1008.577999][    C0]  kthread+0x70e/0x8a0
[ 1008.578035][    C0]  ret_from_fork+0x439/0x7d0
[ 1008.578060][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1008.578080][    C0] 
[ 1008.578085][    C0] The buggy address belongs to the object at ffff88805a57c000
[ 1008.578085][    C0]  which belongs to the cache kmalloc-512 of size 512
[ 1008.578110][    C0] The buggy address is located 24 bytes inside of
[ 1008.578110][    C0]  freed 512-byte region [ffff88805a57c000, ffff88805a57c200)
[ 1008.578133][    C0] 
[ 1008.578139][    C0] The buggy address belongs to the physical page:
[ 1008.578157][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805a57f800 pfn:0x5a57c
[ 1008.578185][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1008.578204][    C0] flags: 0x80000000000240(workingset|head|node=0|zone=1)
[ 1008.578227][    C0] page_type: f5(slab)
[ 1008.578248][    C0] raw: 0080000000000240 ffff888019841c80 ffffea0000a34c10 ffffea00008f7510
[ 1008.578268][    C0] raw: ffff88805a57f800 000000000010000c 00000000f5000000 0000000000000000
[ 1008.578290][    C0] head: 0080000000000240 ffff888019841c80 ffffea0000a34c10 ffffea00008f7510
[ 1008.578310][    C0] head: ffff88805a57f800 000000000010000c 00000000f5000000 0000000000000000
[ 1008.578330][    C0] head: 0080000000000002 ffffea0001695f01 00000000ffffffff 00000000ffffffff
[ 1008.578347][    C0] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004
[ 1008.578358][    C0] page dumped because: kasan: bad access detected
[ 1008.578373][    C0] page_owner tracks the page as allocated
[ 1008.578380][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5851, tgid 5851 (syz-executor), ts 123546082948, free_ts 0
[ 1008.578420][    C0]  post_alloc_hook+0x240/0x2a0
[ 1008.578466][    C0]  get_page_from_freelist+0x2119/0x21b0
[ 1008.578488][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[ 1008.578509][    C0]  alloc_pages_mpol+0xd1/0x380
[ 1008.578538][    C0]  allocate_slab+0x8a/0x370
[ 1008.578558][    C0]  ___slab_alloc+0x8d1/0xdc0
[ 1008.578574][    C0]  __kmalloc_cache_noprof+0xe6/0x320
[ 1008.578604][    C0]  __ipv6_dev_mc_inc+0x44f/0xa50
[ 1008.578628][    C0]  ipv6_add_dev+0xea1/0x13c0
[ 1008.578648][    C0]  addrconf_notify+0x794/0x1010
[ 1008.578674][    C0]  notifier_call_chain+0x1b3/0x3e0
[ 1008.578702][    C0]  register_netdevice+0x163c/0x1b10
[ 1008.578725][    C0]  register_vlan_dev+0x3cb/0x800
[ 1008.578754][    C0]  vlan_newlink+0x4b2/0x610
[ 1008.578776][    C0]  rtnl_newlink_create+0x310/0xb00
[ 1008.578807][    C0]  rtnl_newlink+0x16d6/0x1c70
[ 1008.578833][    C0] page_owner free stack trace missing
[ 1008.578841][    C0] 
[ 1008.578846][    C0] Memory state around the buggy address:
[ 1008.578859][    C0]  ffff88805a57bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1008.578876][    C0]  ffff88805a57bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1008.578891][    C0] >ffff88805a57c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1008.578903][    C0]                             ^
[ 1008.578912][    C0]  ffff88805a57c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1008.578928][    C0]  ffff88805a57c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1008.578939][    C0] ==================================================================
[ 1008.578978][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1008.578996][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1008.579032][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1008.579046][    C0] Call Trace:
[ 1008.579055][    C0]  <TASK>
[ 1008.579065][    C0]  dump_stack_lvl+0x99/0x250
[ 1008.579105][    C0]  ? __asan_memcpy+0x40/0x70
[ 1008.579130][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1008.579164][    C0]  ? __pfx__printk+0x10/0x10
[ 1008.579195][    C0]  vpanic+0x281/0x750
[ 1008.579230][    C0]  ? __pfx_vpanic+0x10/0x10
[ 1008.579263][    C0]  ? irqentry_exit+0x74/0x90
[ 1008.579304][    C0]  panic+0xb9/0xc0
[ 1008.579341][    C0]  ? __pfx_panic+0x10/0x10
[ 1008.579375][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[ 1008.579410][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1008.579450][    C0]  ? rose_send_frame+0x131/0x220
[ 1008.579473][    C0]  check_panic_on_warn+0x89/0xb0
[ 1008.579497][    C0]  ? rose_send_frame+0x131/0x220
[ 1008.579520][    C0]  end_report+0x78/0x160
[ 1008.579550][    C0]  kasan_report+0x129/0x150
[ 1008.579581][    C0]  ? rose_send_frame+0x131/0x220
[ 1008.579609][    C0]  rose_send_frame+0x131/0x220
[ 1008.579635][    C0]  rose_t0timer_expiry+0x143/0x360
[ 1008.579662][    C0]  call_timer_fn+0x17e/0x5f0
[ 1008.579694][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[ 1008.579718][    C0]  ? call_timer_fn+0xbe/0x5f0
[ 1008.579748][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[ 1008.579784][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1008.579818][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1008.579851][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[ 1008.579877][    C0]  __run_timer_base+0x648/0x970
[ 1008.579914][    C0]  ? __pfx___run_timer_base+0x10/0x10
[ 1008.579952][    C0]  run_timer_softirq+0xb7/0x180
[ 1008.579981][    C0]  handle_softirqs+0x22f/0x710
[ 1008.580023][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[ 1008.580058][    C0]  run_ktimerd+0xcf/0x190
[ 1008.580089][    C0]  ? __pfx_run_ktimerd+0x10/0x10
[ 1008.580120][    C0]  ? schedule+0x91/0x360
[ 1008.580155][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[ 1008.580183][    C0]  smpboot_thread_fn+0x53f/0xa60
[ 1008.580212][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[ 1008.580245][    C0]  kthread+0x70e/0x8a0
[ 1008.580281][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 1008.580310][    C0]  ? __pfx_kthread+0x10/0x10
[ 1008.580347][    C0]  ? __pfx_kthread+0x10/0x10
[ 1008.580381][    C0]  ret_from_fork+0x439/0x7d0
[ 1008.580413][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1008.580446][    C0]  ? __switch_to_asm+0x39/0x70
[ 1008.580467][    C0]  ? __switch_to_asm+0x33/0x70
[ 1008.580488][    C0]  ? __pfx_kthread+0x10/0x10
[ 1008.580522][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1008.580554][    C0]  </TASK>
[ 1008.580858][    C0] Kernel Offset: disabled