last executing test programs:

1m9.129199818s ago: executing program 3 (id=277):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x20008041)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000180001801400020076657468315f746f5f6873720000000018000380"], 0x44}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x80000005, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000"], 0xb8}}, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
socket(0x25, 0x80000, 0xfffffff7)
listen(r3, 0x0)
syz_emit_ethernet(0x81, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "051040", 0x4b, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}, {"e47667b87b2ce5555b48ea1e95532bfff48760b52a304a358d37e6bacf4a4f20584c3e3b1b3f36230d18a2ef195e8a16f583e47d1dc0ba"}}}}}}}, 0x0)

59.026237068s ago: executing program 3 (id=277):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x20008041)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000180001801400020076657468315f746f5f6873720000000018000380"], 0x44}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x80000005, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000"], 0xb8}}, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
socket(0x25, 0x80000, 0xfffffff7)
listen(r3, 0x0)
syz_emit_ethernet(0x81, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "051040", 0x4b, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}, {"e47667b87b2ce5555b48ea1e95532bfff48760b52a304a358d37e6bacf4a4f20584c3e3b1b3f36230d18a2ef195e8a16f583e47d1dc0ba"}}}}}}}, 0x0)

57.701231711s ago: executing program 1 (id=458):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1)
sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, r2, 0x5953a6d8b15e6715, 0x70bd2c}, 0x14}}, 0x90) (async)
r3 = socket$inet(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'vlan1\x00', {0x2, 0x4e20, @broadcast}})

55.693627232s ago: executing program 1 (id=462):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000340)=0x5, 0x4)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x209, 0x2}, 0xe)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFCONF(r1, 0x890b, &(0x7f0000000000)=@buf={0x0, &(0x7f0000000240)})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000007600000a4c000000060a0b0400000000000000001200000018000400000001390f00000009006f7461000000040002800900010073797a30000000000900020073797a320000000005000740c50000001400000011000133a128f8ffffff00000000000a"], 0x74}}, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbf3a, &(0x7f0000000100)={0xa, 0x4c20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, &(0x7f0000000180)={'syztnl0\x00', 0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x4010, r1}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="b0eb0100180000009c4a00050c0000000c00000002000011f88103"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2, 0x0, 0x0, @void, @value}, 0x20)
sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c5}, 0x0)
sendto$inet6(r3, &(0x7f00000000c0)="2a38240bbe", 0x5, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0xa, &(0x7f0000000180)=[{0x0, 0xff, 0x9, 0x101}, {0xc, 0xa, 0xd, 0x10000}, {0xadf, 0x36, 0x3, 0x5}, {0x7ff, 0x7, 0xb, 0x7fff}, {0x3, 0x7, 0x0, 0x6}, {0x2, 0x9, 0x1a, 0xbe0f}, {0x1, 0x31, 0x80, 0x5}, {0xa3a, 0x2, 0x2, 0xf}, {0x8, 0x60, 0x4, 0x8}, {0x9, 0xff, 0x2, 0x6}]}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000000c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x24)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080))

44.9000245s ago: executing program 3 (id=277):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x20008041)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000180001801400020076657468315f746f5f6873720000000018000380"], 0x44}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x80000005, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000"], 0xb8}}, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
socket(0x25, 0x80000, 0xfffffff7)
listen(r3, 0x0)
syz_emit_ethernet(0x81, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "051040", 0x4b, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}, {"e47667b87b2ce5555b48ea1e95532bfff48760b52a304a358d37e6bacf4a4f20584c3e3b1b3f36230d18a2ef195e8a16f583e47d1dc0ba"}}}}}}}, 0x0)

42.22944146s ago: executing program 1 (id=462):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000340)=0x5, 0x4)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x209, 0x2}, 0xe)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFCONF(r1, 0x890b, &(0x7f0000000000)=@buf={0x0, &(0x7f0000000240)})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000007600000a4c000000060a0b0400000000000000001200000018000400000001390f00000009006f7461000000040002800900010073797a30000000000900020073797a320000000005000740c50000001400000011000133a128f8ffffff00000000000a"], 0x74}}, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbf3a, &(0x7f0000000100)={0xa, 0x4c20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, &(0x7f0000000180)={'syztnl0\x00', 0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x4010, r1}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="b0eb0100180000009c4a00050c0000000c00000002000011f88103"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2, 0x0, 0x0, @void, @value}, 0x20)
sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c5}, 0x0)
sendto$inet6(r3, &(0x7f00000000c0)="2a38240bbe", 0x5, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0xa, &(0x7f0000000180)=[{0x0, 0xff, 0x9, 0x101}, {0xc, 0xa, 0xd, 0x10000}, {0xadf, 0x36, 0x3, 0x5}, {0x7ff, 0x7, 0xb, 0x7fff}, {0x3, 0x7, 0x0, 0x6}, {0x2, 0x9, 0x1a, 0xbe0f}, {0x1, 0x31, 0x80, 0x5}, {0xa3a, 0x2, 0x2, 0xf}, {0x8, 0x60, 0x4, 0x8}, {0x9, 0xff, 0x2, 0x6}]}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000000c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x24)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080))

28.669824342s ago: executing program 3 (id=277):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x20008041)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000180001801400020076657468315f746f5f6873720000000018000380"], 0x44}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x80000005, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000"], 0xb8}}, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
socket(0x25, 0x80000, 0xfffffff7)
listen(r3, 0x0)
syz_emit_ethernet(0x81, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "051040", 0x4b, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}, {"e47667b87b2ce5555b48ea1e95532bfff48760b52a304a358d37e6bacf4a4f20584c3e3b1b3f36230d18a2ef195e8a16f583e47d1dc0ba"}}}}}}}, 0x0)

27.627723214s ago: executing program 1 (id=462):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000340)=0x5, 0x4)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x209, 0x2}, 0xe)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFCONF(r1, 0x890b, &(0x7f0000000000)=@buf={0x0, &(0x7f0000000240)})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000007600000a4c000000060a0b0400000000000000001200000018000400000001390f00000009006f7461000000040002800900010073797a30000000000900020073797a320000000005000740c50000001400000011000133a128f8ffffff00000000000a"], 0x74}}, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbf3a, &(0x7f0000000100)={0xa, 0x4c20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, &(0x7f0000000180)={'syztnl0\x00', 0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x4010, r1}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="b0eb0100180000009c4a00050c0000000c00000002000011f88103"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2, 0x0, 0x0, @void, @value}, 0x20)
sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c5}, 0x0)
sendto$inet6(r3, &(0x7f00000000c0)="2a38240bbe", 0x5, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0xa, &(0x7f0000000180)=[{0x0, 0xff, 0x9, 0x101}, {0xc, 0xa, 0xd, 0x10000}, {0xadf, 0x36, 0x3, 0x5}, {0x7ff, 0x7, 0xb, 0x7fff}, {0x3, 0x7, 0x0, 0x6}, {0x2, 0x9, 0x1a, 0xbe0f}, {0x1, 0x31, 0x80, 0x5}, {0xa3a, 0x2, 0x2, 0xf}, {0x8, 0x60, 0x4, 0x8}, {0x9, 0xff, 0x2, 0x6}]}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000000c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x24)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080))

14.847100273s ago: executing program 3 (id=277):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x20008041)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000180001801400020076657468315f746f5f6873720000000018000380"], 0x44}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x80000005, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000"], 0xb8}}, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
socket(0x25, 0x80000, 0xfffffff7)
listen(r3, 0x0)
syz_emit_ethernet(0x81, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "051040", 0x4b, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}, {"e47667b87b2ce5555b48ea1e95532bfff48760b52a304a358d37e6bacf4a4f20584c3e3b1b3f36230d18a2ef195e8a16f583e47d1dc0ba"}}}}}}}, 0x0)

14.307031454s ago: executing program 1 (id=462):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000340)=0x5, 0x4)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x209, 0x2}, 0xe)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFCONF(r1, 0x890b, &(0x7f0000000000)=@buf={0x0, &(0x7f0000000240)})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000007600000a4c000000060a0b0400000000000000001200000018000400000001390f00000009006f7461000000040002800900010073797a30000000000900020073797a320000000005000740c50000001400000011000133a128f8ffffff00000000000a"], 0x74}}, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbf3a, &(0x7f0000000100)={0xa, 0x4c20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, &(0x7f0000000180)={'syztnl0\x00', 0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x4010, r1}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="b0eb0100180000009c4a00050c0000000c00000002000011f88103"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2, 0x0, 0x0, @void, @value}, 0x20)
sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c5}, 0x0)
sendto$inet6(r3, &(0x7f00000000c0)="2a38240bbe", 0x5, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0xa, &(0x7f0000000180)=[{0x0, 0xff, 0x9, 0x101}, {0xc, 0xa, 0xd, 0x10000}, {0xadf, 0x36, 0x3, 0x5}, {0x7ff, 0x7, 0xb, 0x7fff}, {0x3, 0x7, 0x0, 0x6}, {0x2, 0x9, 0x1a, 0xbe0f}, {0x1, 0x31, 0x80, 0x5}, {0xa3a, 0x2, 0x2, 0xf}, {0x8, 0x60, 0x4, 0x8}, {0x9, 0xff, 0x2, 0x6}]}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000000c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x24)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080))

8.253666104s ago: executing program 0 (id=687):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r1 = socket(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be040207fe056406040c5c0009003f0006180a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000540)=0xbc9, 0x4) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x2000}) (async)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async, rerun: 32)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (rerun: 32)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r7, @ANYBLOB="83040500010000003000128008000100677265002400028008000700ac14140005000a000000000005000800000000000500130001"], 0x50}}, 0x0)
sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty}}}], 0x20}}], 0x1, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 64)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64)
r9 = openat$cgroup_pressure(r8, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r9, &(0x7f00000003c0)={'some', 0x20, 0x128000000, 0x20, 0x8}, 0x2f) (async)
ppoll(&(0x7f0000000180)=[{r9}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000004c0)) (rerun: 64)
close(r9) (async)
close(0xffffffffffffffff)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) (async)
close(0xffffffffffffffff)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r9}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x91}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

7.777637843s ago: executing program 0 (id=689):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x238, 0x230, 0x258, 0x238, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@loopback, @mcast2, [], [], 'lo\x00', 'macvlan0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x6, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000011146ff90000050000000000080001000000000008004b0013000000080003"], 0x28}}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x5, 0x0, 0x0)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f00000043c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x2b00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40}}}}}}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc}}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0)
setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000180)=@ccm_128={{0x7}, "000020f300", "0100b7e271d026dd39f811120686eb56", "2d08c649", "71c1428afd5c00"}, 0x28)

6.261692822s ago: executing program 0 (id=694):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010101, 0x4e23, 0x3, 'sh\x00', 0x1, 0x400007, 0x48}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x84, @loopback, 0x4e25, 0x0, 'rr\x00', 0x2b, 0x81, 0x5e}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x4e22, 0x4, 0x7a3, 0x12d60, 0x12d5b}}, 0x44)

6.165821975s ago: executing program 0 (id=697):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a2000000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="042800000000000008000a0026261d15a91255ce809f8134e89ab1ff1734fb3fcb8849cf48c5a2086fb4a6f745a5252f80a24047297e0783c0cdc441441a3c5c6528f6537d9dfed4a3729bd045ef66d6122810a80b2833f986b058204ce8f95d6be54585290123afb491c5f4010e22caeaffa74a1a495e2842213c745679ec3bb8ef4b8ba44ea62ebce4646dfc408528be3d44e89d12ae8cefb6450fd42e79d3f4092e5a199231ef701684268ce3fea60a510106eb5726fdf343fe447e5ca0a681c653592ee0aa15d32908955608ec64a8ccc7302522f30860df5485dc", @ANYRES32=0x0, @ANYBLOB="140003006272696467655f736c6176655f30000004001980"], 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r5, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58)
r7 = accept4$alg(r6, 0x0, 0x0, 0x0)
writev(r7, &(0x7f00000005c0)=[{&(0x7f0000000080)="3040ce68375e33c6b8b3caee4c333b6f75d356d660d35b17648c2b66c66e40f329b1cf0803736f3cac95037386e82a93451ef009eb1b5ea97bbe5b10224ddaa9116b08fe616ba91304255ef9dd2c6b943a9c7c38bc04fac31a86b456cc644fff172ef48ee26412d45afbf72d1d4150bfe918b4ffa628158fba440e31047a31ffa647be14a2bb6d8d1f06fa90eba8cf419ea78efc4162d8c30c6f033ab20860641b24", 0xa2}, {&(0x7f0000000540)="d01f58e2939cee4492fff4725dbb777f29584724a51752cae69362070607a913c44c4d66", 0x24}, {&(0x7f0000000240)="9f4251c59f6c5009a2293da74a8c96bc372e2b0893cce20d5d94962fa9ea2ff2c11a30950d66016623f233bf536d09066a30", 0x32}], 0x3)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
close(r8)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r11=>0x0}, &(0x7f0000000300)=0x11)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@cgroup=r12, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000080)={r11, 0x5000000}, &(0x7f00000001c0)=0x8)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800b729000000000000000000180a7f83222504842c8a62"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r13}, 0x10)
write(r8, &(0x7f0000000680)="00000000a9225025ef64d85016bded3c66db5e6591c4b9f089bd1bf0b1eec9f90c60036d006bf9ad42d01a2dfb04d94a7d961a2262fa647900850b76764b9411f50bf68e2daa78d1290c524dc7cc9996beddb06e9256545023cafb5cd6f15d689ee105ad428249f39e8bfeebd1dea49d442c714a8a60a071b459f99482c0f888b5528e389907b1acb2719563b04499de74687fef00f5bcda1c", 0x99)

5.161617566s ago: executing program 0 (id=705):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x2, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='nv\x00', 0x3)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r4=>0x0})
r5 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9b75453eeeec8b9ab33ab498f86d3b8253aee01002dad39f01570846d7d509ebf5"], 0x7c}}, 0x4805)
listen(r5, 0x8)
r7 = accept4(r5, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000440)={0xa5, 0x27, '\x00', [@hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x10, {0x2, 0x2, 0x1, 0x8, [0x6]}}, @ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x50, {0x0, 0x12, 0x0, 0x28, [0x7, 0xc8f, 0x9, 0x400, 0x80000001, 0x240, 0x101, 0x9, 0xb]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic={0x1, 0x9c, "4579a60ba435cb22ec95c7b321f4e4ed068fb0976ac6c0ca8218e1de86e002889442907533738b982a9fe3e663df3403699d71ebd519fbde2ea4410001bd2094312f3785f09320fb4e7b10791f39002ebefec69e23db3abebdeae075d022ce6bc393bcfa112caaddca2d07545e11d6b7bf19a12265519c865f7a162e788178971b8285bdb2c6934f89f9dfe09b335fe3e2045077e85099dd0ed7c576"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}]}, 0x148)
sendto$inet(r7, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
sendmsg(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)="02", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x3}, 0x8)
close(r7)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'vlan0\x00', <r8=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5, 0x6, 0xff}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x4}]}}}]}, 0x50}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x60]}}, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r9 = socket$inet(0x2, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})
unshare(0x400)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
ppoll(&(0x7f0000000240)=[{r0, 0x40}], 0x1, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)

4.978988028s ago: executing program 0 (id=707):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@RTM_GETMDB={0x11, 0x56, 0x1, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x18}}, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r2 = accept4(r0, 0x0, 0x0, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x5)
recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0)

3.212502623s ago: executing program 4 (id=720):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
socket$alg(0x26, 0x5, 0x0)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="8ea6d1fde83abae9f6ecd9e10507000000ca519f87597d98b0df49e2602c81c525d8e552daff2e340e0e4953466ca55d", @ANYRES16=r1, @ANYBLOB="1bb300000000000000000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

3.065805499s ago: executing program 4 (id=721):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x1bc, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, 0x0, 0x4000040)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r2, &(0x7f0000000100)={&(0x7f0000000000), 0x14, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x44080)
ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000180))
r3 = socket$inet6(0xa, 0x80002, 0x88)
setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
sendmmsg$inet(r3, &(0x7f0000000b00)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000000)="c1", 0x1}], 0x1}}], 0x1, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x40050)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvfrom$inet6(r0, 0x0, 0x50, 0x10100, 0x0, 0x0)
pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0)

3.065348501s ago: executing program 2 (id=722):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f00000000c0)=""/3, 0x214000, 0x800, 0x2}, 0xffffffffffffff3f)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="6006000040000900fffffffffddbdf250100000099001f0046060180", @ANYRES32], 0x660}, 0x1, 0x0, 0x0, 0x8000}, 0x44014)
r3 = socket$tipc(0x1e, 0x5, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002080)=ANY=[@ANYBLOB="74000000000101040000000000000000020000002400018014000180080001000000f7ff070002"], 0x74}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'team_slave_1\x00', <r5=>0x0})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r6, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0xff, @private1, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x200}, 0x8)
bind$xdp(r0, &(0x7f0000000040)={0x2c, 0x1, r5, 0xfffffffa}, 0x10)

2.355605048s ago: executing program 2 (id=723):
r0 = socket$netlink(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$rxrpc(0x21, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200)=0x40000005, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[], 0x3ec}, 0x1, 0x0, 0x0, 0x54}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0)

2.29186063s ago: executing program 2 (id=724):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x7, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x25)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x38, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xc084) (async)
r5 = socket$caif_stream(0x25, 0x1, 0x1000)
setsockopt$CAIFSO_LINK_SELECT(r5, 0x116, 0x7f, &(0x7f0000000000)=0x4, 0x4)

2.165742689s ago: executing program 2 (id=725):
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x10, 0x13, 0xffffffffffffffff, 0x3d037000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32)
r2 = socket$packet(0x11, 0x2, 0x300) (rerun: 32)
setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000002140)=0x7ff, 0x4)

2.157948776s ago: executing program 4 (id=726):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="44007a000000000000e8ffffffffffffff000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080088a8ffff06002700feff0000"], 0x44}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r1, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0xb}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64)
r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64)
r4 = socket(0x11, 0x800000003, 0x0) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0}) (async, rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000005c0)=""/151, 0x84}, {&(0x7f00000003c0)=""/114}, {&(0x7f0000000240)=""/22}], 0x1, &(0x7f0000002f40)=""/244, 0x17}, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x2, &(0x7f0000000000)=0x8000, 0x4) (async, rerun: 64)
bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) (async, rerun: 64)
setsockopt$inet6_int(r8, 0x29, 0x8, &(0x7f0000000040)=0x5f, 0x4)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0xfffffffffffffffc, 0x200003f0, 0x20000420], 0xfeffff07, 0x0, 0x0}, 0x1f0) (async)
recvmmsg(r8, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async, rerun: 64)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8840000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40440c0}, 0x40000) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) (async, rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@empty, 0x0, 0x0, 0x30, 0x0, [{@multicast1}, {}, {@multicast2}]}}) (async, rerun: 64)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001200)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r5, {0x0, 0x300}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x24, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0xf}, @TCA_PIE_TARGET={0x8, 0x1, 0xffff}, @TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_ALPHA={0xfffffffffffffe9e, 0x4, 0xb}]}}]}, 0x50}, 0x1, 0x7a00}, 0x0) (async)
ioctl$sock_SIOCADDDLCI(r6, 0x8980, &(0x7f0000000280)={'lo\x00', 0x2})

2.037914849s ago: executing program 2 (id=727):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000040)='{\x00', 0xff65)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007111370000000000c4000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socket$rxrpc(0x21, 0x2, 0x2) (async)
setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000040)='{\x00', 0xff65) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007111370000000000c4000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async)

1.929621384s ago: executing program 4 (id=728):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r6, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'xfrm0\x00', <r9=>0x0})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r10=>r1})
ioctl$sock_bt_bnep_BNEPCONNADD(r10, 0x400442c8, &(0x7f0000000140)={r0, 0x8000, 0x3, "8bcfa07a39a278395004c62018d4f5a6c38acb70cb826f3ecbbda3aa08fc7ce9ade9117716ec34f4e838cceb09a37866a5b88cca5326ba2123751be67682a456b80c29ae96e1d186ade9413448bef2fe529a1279260e8381b2b3fc5936a609b2be00c543af420f034b84574ef84bca01b25fb8ea1dc177a4eed350336c0726280948237a78e8a4ba1cb172a17926d5fb669dd3e665db1ba8829b6a34274514fe7904e9d6f3f4883b2b9ef6027cc3f79cf152d8d5013d741dbc4534492b7456e0c45e0f"})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x1ff}}]}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x6c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) (async)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) (async)
close(r4) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$FOU_CMD_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r6, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'xfrm0\x00'}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) (async)
ioctl$sock_bt_bnep_BNEPCONNADD(r10, 0x400442c8, &(0x7f0000000140)={r0, 0x8000, 0x3, "8bcfa07a39a278395004c62018d4f5a6c38acb70cb826f3ecbbda3aa08fc7ce9ade9117716ec34f4e838cceb09a37866a5b88cca5326ba2123751be67682a456b80c29ae96e1d186ade9413448bef2fe529a1279260e8381b2b3fc5936a609b2be00c543af420f034b84574ef84bca01b25fb8ea1dc177a4eed350336c0726280948237a78e8a4ba1cb172a17926d5fb669dd3e665db1ba8829b6a34274514fe7904e9d6f3f4883b2b9ef6027cc3f79cf152d8d5013d741dbc4534492b7456e0c45e0f"}) (async)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x1ff}}]}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x6c}}, 0x0) (async)

1.927216593s ago: executing program 3 (id=277):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x20008041)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000180001801400020076657468315f746f5f6873720000000018000380"], 0x44}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x80000005, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000"], 0xb8}}, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
socket(0x25, 0x80000, 0xfffffff7)
listen(r3, 0x0)
syz_emit_ethernet(0x81, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "051040", 0x4b, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}, {"e47667b87b2ce5555b48ea1e95532bfff48760b52a304a358d37e6bacf4a4f20584c3e3b1b3f36230d18a2ef195e8a16f583e47d1dc0ba"}}}}}}}, 0x0)

1.385770345s ago: executing program 1 (id=462):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000340)=0x5, 0x4)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x209, 0x2}, 0xe)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFCONF(r1, 0x890b, &(0x7f0000000000)=@buf={0x0, &(0x7f0000000240)})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000007600000a4c000000060a0b0400000000000000001200000018000400000001390f00000009006f7461000000040002800900010073797a30000000000900020073797a320000000005000740c50000001400000011000133a128f8ffffff00000000000a"], 0x74}}, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbf3a, &(0x7f0000000100)={0xa, 0x4c20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, &(0x7f0000000180)={'syztnl0\x00', 0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x4010, r1}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="b0eb0100180000009c4a00050c0000000c00000002000011f88103"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2, 0x0, 0x0, @void, @value}, 0x20)
sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c5}, 0x0)
sendto$inet6(r3, &(0x7f00000000c0)="2a38240bbe", 0x5, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0xa, &(0x7f0000000180)=[{0x0, 0xff, 0x9, 0x101}, {0xc, 0xa, 0xd, 0x10000}, {0xadf, 0x36, 0x3, 0x5}, {0x7ff, 0x7, 0xb, 0x7fff}, {0x3, 0x7, 0x0, 0x6}, {0x2, 0x9, 0x1a, 0xbe0f}, {0x1, 0x31, 0x80, 0x5}, {0xa3a, 0x2, 0x2, 0xf}, {0x8, 0x60, 0x4, 0x8}, {0x9, 0xff, 0x2, 0x6}]}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000000c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x24)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080))

867.378405ms ago: executing program 2 (id=729):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000100)={0x16, "e154129dd310e1750be13a86349a3b59bb250ea247fc8db7665caee8e9e208915c4f2ead2e0ac561a0742ce3098095b9dd94a0cae819a3df4f80e3109dcad325278914884bb6193c41c311f0d795676a7f2a253683a7f313dc0ec79b55f7c45e3463548d726380e06ff0579e387dc29a193f6b1473207100c3ff9cf6dc3d344f"}) (async)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

867.031434ms ago: executing program 4 (id=730):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000100)={0x18, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0x10}]}, 0x18}}, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, 0x0, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x28, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1c0}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x41245}]}, 0x28}}, 0x0)

0s ago: executing program 4 (id=731):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
socket$igmp(0x2, 0x3, 0x2)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async)
write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.217279][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.228635][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.238132][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.253404][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.264984][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.277708][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.302114][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.316205][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.325193][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.334068][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.454344][ T5825] veth0_vlan: entered promiscuous mode
[   78.489171][ T5831] veth0_vlan: entered promiscuous mode
[   78.547698][ T5831] veth1_vlan: entered promiscuous mode
[   78.561146][ T5825] veth1_vlan: entered promiscuous mode
[   78.577091][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.586196][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.600801][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.603865][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.679362][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.689085][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.705725][ T5827] veth0_vlan: entered promiscuous mode
[   78.729340][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.738401][ T5831] veth0_macvtap: entered promiscuous mode
[   78.747670][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.760948][ T5827] veth1_vlan: entered promiscuous mode
[   78.787425][ T5831] veth1_macvtap: entered promiscuous mode
[   78.805594][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.816567][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.826530][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.837214][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.849150][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.868686][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.877473][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   78.880138][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.905654][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.916646][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.931332][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.954380][ T5825] veth0_macvtap: entered promiscuous mode
[   78.985857][ T5827] veth0_macvtap: entered promiscuous mode
[   79.003114][ T5827] veth1_macvtap: entered promiscuous mode
[   79.021238][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.031816][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.042083][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.052823][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.062990][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.073704][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.084998][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.102595][ T5825] veth1_macvtap: entered promiscuous mode
[   79.147669][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.188710][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.225400][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.254237][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.289476][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.304905][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.348777][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.361545][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.372727][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.388369][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.415447][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.452144][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.498460][ T5141] Bluetooth: hci0: command tx timeout
[   79.505970][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.517035][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.530410][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.540661][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.552581][ T5141] Bluetooth: hci1: command tx timeout
[   79.558535][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.586676][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.597300][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.626681][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.632144][ T5141] Bluetooth: hci3: command tx timeout
[   79.636275][ T5837] Bluetooth: hci2: command tx timeout
[   79.639347][ T5141] Bluetooth: hci4: command tx timeout
[   79.670156][ T5827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.679080][ T5827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.688442][ T5827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.708304][ T5827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.745569][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.759098][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.772991][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.783717][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.794098][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.804653][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.815096][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.826094][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.839511][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.917877][ T5825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.934725][ T5825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.943613][ T5825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.952644][ T5825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.025608][ T5935] warning: `syz.1.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   80.161692][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.190072][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.240217][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.248129][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.262378][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.274550][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.298151][ T5944] netlink: 92 bytes leftover after parsing attributes in process `syz.3.11'.
[   80.348156][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.365401][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.451245][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.470833][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.502223][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.533444][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.737208][ T5952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14'.
[   80.835121][ T5956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   81.031178][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16'.
[   81.195761][ T5970] netlink: 'syz.2.15': attribute type 4 has an invalid length.
[   81.214794][ T5971] netlink: 'syz.4.17': attribute type 29 has an invalid length.
[   81.226929][ T5972] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   81.229796][ T5970] netlink: 17 bytes leftover after parsing attributes in process `syz.2.15'.
[   81.275905][ T5972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19'.
[   81.550231][ T5141] Bluetooth: hci0: command tx timeout
[   81.630569][ T5141] Bluetooth: hci1: command tx timeout
[   81.696343][ T5988] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   81.711088][ T5141] Bluetooth: hci2: command tx timeout
[   81.711107][ T5837] Bluetooth: hci3: command tx timeout
[   81.711145][ T5837] Bluetooth: hci4: command tx timeout
[   81.750570][ T5990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.23'.
[   81.777699][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'.
[   82.000361][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26'.
[   82.049994][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'.
[   82.121413][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.129178][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.319972][ T6012] syz.0.29 uses obsolete (PF_INET,SOCK_PACKET)
[   82.779868][ T6028] ieee802154 phy0 wpan0: encryption failed: -22
[   82.857163][ T6032] netlink: 'syz.1.37': attribute type 10 has an invalid length.
[   83.151810][ T6038] ip6gretap0: entered promiscuous mode
[   83.157355][ T6038] ip6gretap0: entered allmulticast mode
[   83.234574][ T6040] dccp_invalid_packet: P.Data Offset(0) too small
[   83.598353][ T6049] Zero length message leads to an empty skb
[   84.005272][ T6071] No such timeout policy "syz0"
[   84.021837][ T6071] openvswitch: netlink: nsh attr 2 has unexpected len 0 expected 16
[   84.045371][ T6070] No such timeout policy "syz0"
[   84.069180][ T6071] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.184377][ T6127] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.434848][ T6146] __nla_validate_parse: 10 callbacks suppressed
[   85.434881][ T6146] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.65'.
[   85.470208][ T6146] openvswitch: netlink: Flow actions attr not present in new flow.
[   85.856720][ T6140] delete_channel: no stack
[   85.866210][ T6161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.68'.
[   85.879740][ T6162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.73'.
[   85.976601][ T6171] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[   86.103903][ T6177] netlink: 40 bytes leftover after parsing attributes in process `syz.2.78'.
[   86.197667][ T6177] netlink: 40 bytes leftover after parsing attributes in process `syz.2.78'.
[   86.268034][ T6177] netlink: 40 bytes leftover after parsing attributes in process `syz.2.78'.
[   86.288066][ T6189] bridge0: entered promiscuous mode
[   86.295209][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'.
[   86.304481][ T6189] bridge_slave_1: left allmulticast mode
[   86.310443][ T6189] bridge_slave_1: left promiscuous mode
[   86.316684][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.371339][ T6177] netlink: 40 bytes leftover after parsing attributes in process `syz.2.78'.
[   86.414130][ T6189] bridge_slave_0: left allmulticast mode
[   86.433871][ T6189] bridge_slave_0: left promiscuous mode
[   86.451213][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.507802][ T6177] netlink: 40 bytes leftover after parsing attributes in process `syz.2.78'.
[   86.618359][ T6189] bridge0 (unregistering): left promiscuous mode
[   86.645310][ T6177] netlink: 40 bytes leftover after parsing attributes in process `syz.2.78'.
[   87.350218][ T6233] tipc: Failed to remove unknown binding: 66,1,1/0:913507074/913507076
[   87.862891][ T6253] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[   87.905611][ T6253] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[   88.181452][ T6233] tipc: Failed to remove unknown binding: 66,1,1/0:913507074/913507076
[   88.215221][ T6233] tipc: Failed to remove unknown binding: 66,1,1/0:913507074/913507076
[   88.583901][ T6277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.739817][ T6281] geneve3: entered promiscuous mode
[   88.752254][ T6281] geneve3: entered allmulticast mode
[   89.045687][ T6299] xfrm1: entered allmulticast mode
[   90.796831][ T6406] netlink: 'syz.1.143': attribute type 4 has an invalid length.
[   90.828909][ T6406] netlink: 'syz.1.143': attribute type 11 has an invalid length.
[   90.863402][ T6406] __nla_validate_parse: 10 callbacks suppressed
[   90.863424][ T6406] netlink: 224 bytes leftover after parsing attributes in process `syz.1.143'.
[   90.965319][ T6414] Driver unsupported XDP return value 0 on prog  (id 41) dev N/A, expect packet loss!
[   91.346941][ T6435] netlink: 'syz.3.152': attribute type 2 has an invalid length.
[   91.488998][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.515632][ T6441] netlink: 32 bytes leftover after parsing attributes in process `syz.3.154'.
[   91.726783][ T6450] Bluetooth: MGMT ver 1.23
[   92.001678][ T6464] netlink: 'syz.0.159': attribute type 16 has an invalid length.
[   92.010638][ T6464] netlink: 'syz.0.159': attribute type 3 has an invalid length.
[   92.019176][ T6464] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.159'.
[   92.195678][  T119] cfg80211: failed to load regulatory.db
[   92.808442][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'.
[   92.822785][ T6499] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   92.833331][ T6499] macvlan2: entered allmulticast mode
[   92.838989][ T6499] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   92.852220][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'.
[   92.862652][ T6499] IPVS: Error joining to the multicast group
[   93.354347][ T6518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.178'.
[   93.425920][ T6518] bond1: entered promiscuous mode
[   93.435932][ T6518] bond1: entered allmulticast mode
[   93.508469][ T6525] veth3: entered promiscuous mode
[   93.529890][ T6525] veth3: entered allmulticast mode
[   93.535598][ T6525] bond1: (slave veth3): Enslaving as an active interface with an up link
[   94.122100][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.189'.
[   94.144965][   T25] IPVS: starting estimator thread 0...
[   94.260559][ T6560] IPVS: using max 21 ests per chain, 50400 per kthread
[   94.547285][ T6571] syz_tun: entered promiscuous mode
[   94.576526][ T6571] syz_tun: left promiscuous mode
[   95.036024][ T6590] netlink: 'syz.1.197': attribute type 21 has an invalid length.
[   95.057021][ T6592] netlink: 1256 bytes leftover after parsing attributes in process `syz.4.199'.
[   95.066819][ T6590] IPv6: NLM_F_CREATE should be specified when creating new route
[   95.075134][ T6592] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame.
[   95.418949][ T6611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.204'.
[   95.439991][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'.
[   95.482264][ T6611] dvmrp8: entered allmulticast mode
[   95.569840][ T6610] dvmrp8: left allmulticast mode
[   96.074591][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.213'.
[   96.091216][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.213'.
[   96.503604][ T6662] netlink: 224 bytes leftover after parsing attributes in process `syz.1.218'.
[   96.528932][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'.
[   96.625302][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.219'.
[   96.688307][ T6667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.220'.
[   96.761989][ T6667] bond1: entered promiscuous mode
[   96.768123][ T6673] policy can only be matched on NF_INET_PRE_ROUTING
[   96.768146][ T6673] unable to load match
[   96.911569][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.223'.
[   97.069320][ T6685] netlink: 68 bytes leftover after parsing attributes in process `syz.3.224'.
[   97.641511][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'.
[   97.678801][ T6718] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.685602][ T6723] netlink: 256 bytes leftover after parsing attributes in process `syz.1.237'.
[   97.695847][ T6718] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.787768][ T6718] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.797339][ T6718] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.085656][ T6739] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.268718][ T6749] x_tables: unsorted underflow at hook 2
[   98.277829][ T6749] netlink: 'syz.2.244': attribute type 13 has an invalid length.
[   98.293932][ T6749] lo: entered promiscuous mode
[   98.301233][ T6749] lo: entered allmulticast mode
[   98.317223][ T6751] netlink: 'syz.0.245': attribute type 16 has an invalid length.
[   98.326021][ T6751] netlink: 'syz.0.245': attribute type 2 has an invalid length.
[   98.341476][ T6749] tunl0: entered promiscuous mode
[   98.350054][ T6749] tunl0: entered allmulticast mode
[   98.374495][ T6749] gre0: entered promiscuous mode
[   98.388053][ T6749] gre0: entered allmulticast mode
[   98.405808][ T6749] gretap0: entered promiscuous mode
[   98.419675][ T6749] gretap0: entered allmulticast mode
[   98.437751][ T6749] gretap0: refused to change device tx_queue_len
[   98.444550][ T6749] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   98.489553][ T6757] netlink: 'syz.1.248': attribute type 11 has an invalid length.
[   98.501868][ T6759] netlink: 'syz.1.248': attribute type 11 has an invalid length.
[   98.524486][ T6761] netlink: 'syz.4.247': attribute type 4 has an invalid length.
[   99.797580][ T6813] ipvlan2: entered allmulticast mode
[   99.829831][ T6813] veth0_vlan: entered allmulticast mode
[  100.243887][ T6828] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  100.518174][ T6842] xt_l2tp: v2 doesn't support IP mode
[  101.343951][ T6059] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.468291][ T6059] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.684109][ T6059] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.719030][ T6878] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  101.752974][ T6878] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  101.912686][ T6059] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.044999][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  102.055373][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  102.067108][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  102.098596][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  102.108660][ T6897] netlink: 'syz.0.284': attribute type 10 has an invalid length.
[  102.130718][ T5828] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  102.139303][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  102.149807][ T6897] __nla_validate_parse: 7 callbacks suppressed
[  102.149827][ T6897] netlink: 2 bytes leftover after parsing attributes in process `syz.0.284'.
[  102.168927][ T6904] syzkaller1: tun_chr_ioctl cmd 1074025677
[  102.181377][ T6904] syzkaller1: linktype set to 780
[  102.215882][ T6059] bridge_slave_1: left allmulticast mode
[  102.227178][ T6059] bridge_slave_1: left promiscuous mode
[  102.235344][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.250356][ T6059] bridge_slave_0: left allmulticast mode
[  102.256173][ T6059] bridge_slave_0: left promiscuous mode
[  102.262357][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.696864][ T6059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.708445][ T6059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.719771][ T6059] bond0 (unregistering): Released all slaves
[  102.732380][ T6059] bond1 (unregistering): (slave veth3): Releasing backup interface
[  102.740901][ T6059] veth3: left promiscuous mode
[  102.745854][ T6059] veth3: left allmulticast mode
[  102.753694][ T6059] bond1 (unregistering): Released all slaves
[  102.768056][ T6897] team0: entered promiscuous mode
[  102.773263][ T6897] team_slave_0: entered promiscuous mode
[  102.779170][ T6897] team_slave_1: entered promiscuous mode
[  102.785955][ T6897] bridge0: port 3(team0) entered blocking state
[  102.792387][ T6897] bridge0: port 3(team0) entered disabled state
[  102.798789][ T6897] team0: entered allmulticast mode
[  102.803980][ T6897] team_slave_0: entered allmulticast mode
[  102.809911][ T6897] team_slave_1: entered allmulticast mode
[  102.817874][ T6897] bridge0: port 3(team0) entered blocking state
[  102.824229][ T6897] bridge0: port 3(team0) entered forwarding state
[  102.990440][ T6922] netlink: 'syz.4.289': attribute type 1 has an invalid length.
[  103.019872][ T6924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'.
[  103.036521][ T6924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'.
[  103.057075][ T6928] netlink: 600 bytes leftover after parsing attributes in process `syz.2.290'.
[  103.067344][ T6926] bond0: Unable to set down delay as MII monitoring is disabled
[  103.076456][ T6928] netlink: 202 bytes leftover after parsing attributes in process `syz.2.290'.
[  103.086541][ T6928] netlink: 26452 bytes leftover after parsing attributes in process `syz.2.290'.
[  103.098045][ T6926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.291'.
[  103.111559][ T6926] sctp: [Deprecated]: syz.0.291 (pid 6926) Use of struct sctp_assoc_value in delayed_ack socket option.
[  103.111559][ T6926] Use struct sctp_sack_info instead
[  103.139178][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'.
[  103.460339][ T6945] netlink: 'syz.0.294': attribute type 2 has an invalid length.
[  103.468776][ T6059] hsr_slave_0: left promiscuous mode
[  103.482265][ T6059] hsr_slave_1: left promiscuous mode
[  103.491745][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.499904][ T6947] x_tables: duplicate underflow at hook 2
[  103.503526][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.514384][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.522007][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.542035][ T6059] veth1_macvtap: left promiscuous mode
[  103.548051][ T6059] veth0_macvtap: left promiscuous mode
[  103.554333][ T6059] veth1_vlan: left promiscuous mode
[  103.562815][ T6059] veth0_vlan: left promiscuous mode
[  104.058007][ T6952] netlink: 134788 bytes leftover after parsing attributes in process `syz.2.297'.
[  104.077144][ T6059] team0 (unregistering): Port device team_slave_1 removed
[  104.133393][ T6059] team0 (unregistering): Port device team_slave_0 removed
[  104.203821][ T5837] Bluetooth: hci4: command tx timeout
[  104.715214][ T6945] fþ: entered promiscuous mode
[  104.879942][ T6900] chnl_net:caif_netlink_parms(): no params data found
[  105.097109][ T6900] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.118639][ T6900] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.152773][ T6900] bridge_slave_0: entered allmulticast mode
[  105.174852][ T6900] bridge_slave_0: entered promiscuous mode
[  105.197556][ T6900] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.208227][ T6900] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.223658][ T6900] bridge_slave_1: entered allmulticast mode
[  105.232982][ T6900] bridge_slave_1: entered promiscuous mode
[  105.306316][ T6900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  105.329546][ T6900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.355371][ T6059] IPVS: stop unused estimator thread 0...
[  105.399076][ T6900] team0: Port device team_slave_0 added
[  105.410541][ T6900] team0: Port device team_slave_1 added
[  105.451310][ T6900] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.463633][ T6900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.519729][ T6900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.538440][ T6989] netlink: 'syz.4.307': attribute type 21 has an invalid length.
[  105.555131][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.307'.
[  105.560404][ T6900] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.571280][ T6900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.597303][ T6900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.679018][ T6900] hsr_slave_0: entered promiscuous mode
[  105.686737][ T6900] hsr_slave_1: entered promiscuous mode
[  105.695402][ T6900] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  105.704003][ T6900] Cannot create hsr debugfs directory
[  105.710575][ T6995] netlink: 'syz.2.308': attribute type 1 has an invalid length.
[  106.260419][ T7025] Bluetooth: hci0: Opcode 0x080f failed: -22
[  106.272370][ T5837] Bluetooth: hci4: command tx timeout
[  106.496417][ T7034] sctp: [Deprecated]: syz.1.317 (pid 7034) Use of int in maxseg socket option.
[  106.496417][ T7034] Use struct sctp_assoc_value instead
[  106.634773][ T6900] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  106.680795][ T6900] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  106.764495][ T6900] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  106.795844][ T6900] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  106.834877][ T7050] tc_dump_action: action bad kind
[  107.044609][ T7059] tipc: Started in network mode
[  107.056596][ T7059] tipc: Node identity f644e867e388, cluster identity 4711
[  107.066501][ T7059] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.115348][ T7069] syzkaller0: entered promiscuous mode
[  107.130469][ T7069] syzkaller0: entered allmulticast mode
[  107.155727][ T7059] tipc: Resetting bearer <eth:syzkaller0>
[  107.229596][ T7059] tipc: Disabling bearer <eth:syzkaller0>
[  107.437693][ T6900] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.485334][ T6900] 8021q: adding VLAN 0 to HW filter on device team0
[  107.523779][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.531037][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.573982][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.581203][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.625728][ T7087] veth0_to_bridge: entered promiscuous mode
[  107.751102][ T7095] __nla_validate_parse: 5 callbacks suppressed
[  107.751122][ T7095] netlink: 68 bytes leftover after parsing attributes in process `syz.2.336'.
[  108.240432][ T6900] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.271902][ T5837] Bluetooth: hci0: command tx timeout
[  108.294528][ T7082] veth0_to_bridge: left promiscuous mode
[  108.325021][ T6900] veth0_vlan: entered promiscuous mode
[  108.340588][ T6900] veth1_vlan: entered promiscuous mode
[  108.350070][ T5837] Bluetooth: hci4: command tx timeout
[  108.393476][ T6900] veth0_macvtap: entered promiscuous mode
[  108.402688][ T6900] veth1_macvtap: entered promiscuous mode
[  108.418763][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.435614][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.445873][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.457141][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.467416][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.478079][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.508500][ T6900] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.532524][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.554852][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.574815][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.593157][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.605242][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.637839][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.650865][ T6900] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.753042][ T6900] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.777018][ T6900] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.791341][ T6900] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.806545][ T6900] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.857884][ T7135] nr0: entered promiscuous mode
[  108.998746][ T7145] netlink: 48 bytes leftover after parsing attributes in process `syz.0.349'.
[  109.129776][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.145722][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.189337][ T6059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.204657][ T6059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.244499][ T7154] netlink: 24 bytes leftover after parsing attributes in process `syz.4.351'.
[  109.841212][ T7173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.357'.
[  110.005792][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'.
[  110.114951][ T7187] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  110.129409][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.363'.
[  110.157975][ T7191] nbd: must specify an index to disconnect
[  110.504122][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.758753][ T7213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.370'.
[  110.865522][ T7219] netlink: 'syz.1.371': attribute type 1 has an invalid length.
[  110.900456][ T7219] netlink: 224 bytes leftover after parsing attributes in process `syz.1.371'.
[  110.964388][ T7226] trusted_key: syz.2.374 sent an empty control message without MSG_MORE.
[  110.983688][ T7223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.373'.
[  111.008014][ T7223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.373'.
[  111.091554][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.242000][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.267165][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  111.280608][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  111.289460][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  111.298602][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  111.314999][ T5828] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  111.322777][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  111.402760][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.428749][ T7243] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  111.597174][ T7239] chnl_net:caif_netlink_parms(): no params data found
[  111.676100][   T12] bridge_slave_1: left allmulticast mode
[  111.695427][   T12] bridge_slave_1: left promiscuous mode
[  111.719037][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.748994][   T12] bridge_slave_0: left allmulticast mode
[  111.766398][   T12] bridge_slave_0: left promiscuous mode
[  111.800113][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.454655][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  112.470695][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  112.482420][   T12] bond0 (unregistering): Released all slaves
[  112.818952][ T7239] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.846005][ T7239] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.858023][ T7239] bridge_slave_0: entered allmulticast mode
[  112.882064][ T7239] bridge_slave_0: entered promiscuous mode
[  112.907935][ T7239] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.924524][ T7239] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.940568][ T7239] bridge_slave_1: entered allmulticast mode
[  112.947837][ T7239] bridge_slave_1: entered promiscuous mode
[  113.164880][ T7239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.177701][ T7239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  113.194128][ T7306] netlink: 'syz.0.393': attribute type 4 has an invalid length.
[  113.255151][ T7311] __nla_validate_parse: 1 callbacks suppressed
[  113.255171][ T7311] netlink: 16 bytes leftover after parsing attributes in process `syz.1.396'.
[  113.271518][ T7239] team0: Port device team_slave_0 added
[  113.290775][ T7311] netlink: 224 bytes leftover after parsing attributes in process `syz.1.396'.
[  113.336396][ T7311] macsec1: entered allmulticast mode
[  113.353823][ T7311] veth1_macvtap: entered allmulticast mode
[  113.379818][ T7311] veth1_macvtap: left allmulticast mode
[  113.400055][ T5828] Bluetooth: hci4: command tx timeout
[  113.433295][ T7239] team0: Port device team_slave_1 added
[  113.447777][   T12] hsr_slave_0: left promiscuous mode
[  113.463990][   T12] hsr_slave_1: left promiscuous mode
[  113.473834][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.507463][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.547485][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.555445][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.598001][   T12] veth1_macvtap: left promiscuous mode
[  113.604336][   T12] veth0_macvtap: left promiscuous mode
[  113.612116][   T12] veth1_vlan: left promiscuous mode
[  113.618086][   T12] veth0_vlan: left promiscuous mode
[  114.146504][   T12] team0 (unregistering): Port device team_slave_1 removed
[  114.183003][   T12] team0 (unregistering): Port device team_slave_0 removed
[  114.648250][ T7239] batman_adv: batadv0: Adding interface: batadv_slave_0
[  114.672491][ T7239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.707015][ T7239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  114.727366][ T7239] batman_adv: batadv0: Adding interface: batadv_slave_1
[  114.735018][ T7239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.772220][ T7239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  114.841285][ T7337] Â: renamed from pim6reg1
[  114.877273][ T7239] hsr_slave_0: entered promiscuous mode
[  114.884606][ T7239] hsr_slave_1: entered promiscuous mode
[  114.893733][ T7239] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  114.901664][ T7239] Cannot create hsr debugfs directory
[  115.087175][ T7345] netlink: 20 bytes leftover after parsing attributes in process `syz.4.406'.
[  115.142119][ T7351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.407'.
[  115.177639][ T7351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.407'.
[  115.188092][ T7351] netlink: 'syz.0.407': attribute type 4 has an invalid length.
[  115.473311][ T5828] Bluetooth: hci4: command tx timeout
[  115.726045][ T7363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  115.758143][ T7363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  115.781805][ T7363] bond0 (unregistering): Released all slaves
[  115.978462][ T7239] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  116.014850][ T7239] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  116.034275][ T7239] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  116.051619][ T7239] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  116.059143][ T7378] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.416'.
[  116.076721][ T7377] netlink: 32 bytes leftover after parsing attributes in process `syz.4.417'.
[  116.102474][ T7378] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.112807][ T7380] netlink: 'syz.2.418': attribute type 3 has an invalid length.
[  116.122806][ T7381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.416'.
[  116.135101][ T7380] openvswitch: netlink: ERSPAN option length err (len 4096, max 255).
[  116.168693][ T7381] tipc: Started in network mode
[  116.192049][ T7381] tipc: Node identity fff07, cluster identity 1
[  116.219216][ T7381] tipc: Node number set to 1048327
[  116.327222][ T7386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.420'.
[  116.347833][ T7387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.420'.
[  116.364872][ T7239] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.394197][ T7386] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  116.426742][ T7239] 8021q: adding VLAN 0 to HW filter on device team0
[  116.434294][ T7391] xt_TCPMSS: Only works on TCP SYN packets
[  116.481106][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.488259][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.518020][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.525247][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.606316][ T7239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  117.068844][ T7239] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.186451][ T7239] veth0_vlan: entered promiscuous mode
[  117.239288][ T7239] veth1_vlan: entered promiscuous mode
[  117.331526][ T7239] veth0_macvtap: entered promiscuous mode
[  117.341912][ T7239] veth1_macvtap: entered promiscuous mode
[  117.408834][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.439739][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.459851][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.494541][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.519931][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.550522][ T5837] Bluetooth: hci4: command tx timeout
[  117.551064][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.575656][ T7239] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.603678][ T7393] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  117.665081][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.710411][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.729738][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.748219][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.758177][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.768830][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.781132][ T7239] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.871575][ T7432] atomic_op ffff8880328d4998 conn xmit_atomic 0000000000000000
[  117.971599][ T7239] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.999643][ T7239] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.008418][ T7239] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.040393][ T7239] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.294990][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.330097][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.365385][ T7450] __nla_validate_parse: 6 callbacks suppressed
[  118.365409][ T7450] netlink: 76 bytes leftover after parsing attributes in process `syz.2.438'.
[  118.396750][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.404915][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.424235][ T7451] netlink: 76 bytes leftover after parsing attributes in process `syz.2.438'.
[  119.630396][ T5837] Bluetooth: hci4: command 0x0419 tx timeout
[  119.968539][ T7487] pim6reg1: entered allmulticast mode
[  120.188501][ T7485] netlink: 47 bytes leftover after parsing attributes in process `syz.0.445'.
[  120.578558][   T66] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.802375][   T66] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.013194][   T66] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.236094][   T66] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.508449][ T7515] xt_hashlimit: size too large, truncated to 1048576
[  121.553139][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  121.568568][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  121.580672][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  121.591166][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  121.612376][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  121.614721][   T66] bridge_slave_1: left allmulticast mode
[  121.625803][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  121.667822][   T66] bridge_slave_1: left promiscuous mode
[  121.690172][   T66] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.744171][ T7522] netlink: 28 bytes leftover after parsing attributes in process `syz.4.457'.
[  121.764423][   T66] bridge_slave_0: left allmulticast mode
[  121.782181][   T66] bridge_slave_0: left promiscuous mode
[  121.788032][   T66] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.753753][   T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.796346][   T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  122.829262][   T66] bond0 (unregistering): Released all slaves
[  123.715090][ T5837] Bluetooth: hci4: command tx timeout
[  123.758131][ T7517] chnl_net:caif_netlink_parms(): no params data found
[  124.342612][   T66] hsr_slave_0: left promiscuous mode
[  124.377256][   T66] hsr_slave_1: left promiscuous mode
[  124.392203][   T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.418361][   T66] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.441123][   T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.458944][   T66] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.515607][   T66] veth1_macvtap: left promiscuous mode
[  124.531894][   T66] veth0_macvtap: left promiscuous mode
[  124.549415][   T66] veth1_vlan: left promiscuous mode
[  124.560541][   T66] veth0_vlan: left promiscuous mode
[  124.828094][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  124.838433][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  124.846690][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  124.859106][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  124.870621][ T5828] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  124.878317][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  125.605647][   T66] team0 (unregistering): Port device team_slave_1 removed
[  125.664414][   T66] team0 (unregistering): Port device team_slave_0 removed
[  125.790192][ T5828] Bluetooth: hci4: command tx timeout
[  125.958470][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.468'.
[  126.406413][ T7517] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.415418][ T7517] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.423045][ T7517] bridge_slave_0: entered allmulticast mode
[  126.430489][ T7517] bridge_slave_0: entered promiscuous mode
[  126.482007][ T7517] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.490789][ T7517] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.498667][ T7517] bridge_slave_1: entered allmulticast mode
[  126.518505][ T7517] bridge_slave_1: entered promiscuous mode
[  126.756122][ T7517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.788693][ T7517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.909780][ T5828] Bluetooth: hci3: command tx timeout
[  127.022435][ T7517] team0: Port device team_slave_0 added
[  127.047668][ T7517] team0: Port device team_slave_1 added
[  127.126706][ T7517] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.135817][ T7517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.171084][ T7517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.215848][ T7517] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.237851][ T7517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.298700][ T7517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.812841][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.472'.
[  127.848264][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.475'.
[  127.871778][ T5828] Bluetooth: hci4: command tx timeout
[  127.895532][ T7517] hsr_slave_0: entered promiscuous mode
[  127.902300][ T7517] hsr_slave_1: entered promiscuous mode
[  127.909423][ T7517] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  127.917380][ T7517] Cannot create hsr debugfs directory
[  127.936445][ T7592] netlink: 60 bytes leftover after parsing attributes in process `syz.0.474'.
[  127.959835][   T66] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.980674][ T7589] bridge_slave_1: left promiscuous mode
[  127.986786][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.016199][ T7589] bridge_slave_0: left allmulticast mode
[  128.026252][ T7589] bridge_slave_0: left promiscuous mode
[  128.032797][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.165101][   T66] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.204204][ T7560] chnl_net:caif_netlink_parms(): no params data found
[  128.345256][   T66] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.362753][ T7598] netlink: 160 bytes leftover after parsing attributes in process `syz.2.477'.
[  128.393214][ T7598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.477'.
[  128.442057][   T66] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.470935][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.476'.
[  128.504077][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.476'.
[  128.552310][ T7595] x_tables: duplicate underflow at hook 1
[  128.574710][ T7560] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.588984][ T7560] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.598073][ T7560] bridge_slave_0: entered allmulticast mode
[  128.615586][ T7560] bridge_slave_0: entered promiscuous mode
[  128.636907][ T7595] ip6gre1: entered allmulticast mode
[  128.654026][ T7560] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.661527][ T7560] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.669947][ T7560] bridge_slave_1: entered allmulticast mode
[  128.677924][ T7560] bridge_slave_1: entered promiscuous mode
[  128.763210][ T7560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  128.777167][ T7560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  128.933160][ T7560] team0: Port device team_slave_0 added
[  128.944228][ T7560] team0: Port device team_slave_1 added
[  128.989972][ T5828] Bluetooth: hci3: command tx timeout
[  129.106817][ T7621] netlink: 20 bytes leftover after parsing attributes in process `syz.2.480'.
[  129.415953][   T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  129.427520][   T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  129.438004][   T66] bond0 (unregistering): Released all slaves
[  129.476528][ T7619] bond0: entered allmulticast mode
[  129.512426][ T7560] batman_adv: batadv0: Adding interface: batadv_slave_0
[  129.519997][ T7560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.548413][ T7560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  129.567907][   T66] tipc: Left network mode
[  129.588403][ T7560] batman_adv: batadv0: Adding interface: batadv_slave_1
[  129.616089][ T7560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.659052][ T7560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  129.764074][ T7634] netlink: 'syz.0.483': attribute type 10 has an invalid length.
[  129.826935][ T7628] netlink: 36 bytes leftover after parsing attributes in process `syz.0.483'.
[  129.928529][ T7634] bridge0: port 3(team0) entered disabled state
[  129.955871][ T5828] Bluetooth: hci4: command tx timeout
[  129.971979][ T7634] team0: left allmulticast mode
[  129.977116][ T7634] team_slave_0: left allmulticast mode
[  129.982903][ T7634] team_slave_1: left allmulticast mode
[  129.988610][ T7634] team0: left promiscuous mode
[  129.993964][ T7634] team_slave_0: left promiscuous mode
[  130.000466][ T7634] team_slave_1: left promiscuous mode
[  130.006422][ T7634] bridge0: port 3(team0) entered disabled state
[  130.017751][ T7634] 8021q: adding VLAN 0 to HW filter on device team0
[  130.027864][ T7634] bond0: (slave team0): Enslaving as an active interface with an up link
[  130.152382][ T7560] hsr_slave_0: entered promiscuous mode
[  130.165916][ T7560] hsr_slave_1: entered promiscuous mode
[  130.174566][ T7560] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  130.183450][ T7560] Cannot create hsr debugfs directory
[  130.253339][   T66] mac80211_hwsim hwsim2 wlan0 (unregistering): left promiscuous mode
[  130.446902][ T7517] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  130.554852][   T66] hsr_slave_0: left promiscuous mode
[  130.565078][   T66] hsr_slave_1: left promiscuous mode
[  130.575195][   T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.583862][   T66] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.595289][   T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.603720][   T66] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.635056][   T66] veth1_macvtap: left promiscuous mode
[  130.646350][   T66] veth0_macvtap: left promiscuous mode
[  130.669927][   T66] veth1_vlan: left promiscuous mode
[  130.675417][   T66] veth0_vlan: left promiscuous mode
[  130.830059][ T7667] netlink: 'syz.2.494': attribute type 3 has an invalid length.
[  131.070050][ T5828] Bluetooth: hci3: command tx timeout
[  131.234943][   T66] team0 (unregistering): Port device team_slave_1 removed
[  131.286113][   T66] team0 (unregistering): Port device team_slave_0 removed
[  131.734549][ T7517] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  131.839508][ T7517] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  131.867583][ T7517] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  132.263546][ T7517] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.366612][ T7517] 8021q: adding VLAN 0 to HW filter on device team0
[  132.445256][ T7697] raw_sendmsg: syz.2.501 forgot to set AF_INET. Fix it!
[  132.485061][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.492385][ T5893] bridge0: port 1(bridge_slave_0) entered forwarding state
[  132.587264][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.594474][ T5893] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.732562][ T7708] netlink: 'syz.0.504': attribute type 30 has an invalid length.
[  132.820191][ T7708] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6)
[  132.834884][ T7711] tipc: Started in network mode
[  132.844325][ T7711] tipc: Node identity @, cluster identity 4711
[  132.854369][ T7711] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  132.905452][ T7560] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  132.936457][ T7560] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  132.969205][ T7560] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  132.998927][ T7560] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  133.019360][ T7517] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.061527][ T7517] veth0_vlan: entered promiscuous mode
[  133.073906][ T7517] veth1_vlan: entered promiscuous mode
[  133.107187][ T7517] veth0_macvtap: entered promiscuous mode
[  133.118395][ T7517] veth1_macvtap: entered promiscuous mode
[  133.137438][ T7517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  133.148616][ T7517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.159117][ T7517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  133.170234][ T7517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.181728][ T7517] batman_adv: batadv0: Interface activated: batadv_slave_0
[  133.186056][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  133.191977][ T5828] Bluetooth: hci3: command tx timeout
[  133.198609][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  133.252253][ T7517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.263410][ T7517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.273630][ T7517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.284303][ T7517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.297093][ T7517] batman_adv: batadv0: Interface activated: batadv_slave_1
[  133.337440][ T7517] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  133.346603][ T7517] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  133.356828][ T7517] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  133.367652][ T7517] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.379434][ T7726] __nla_validate_parse: 2 callbacks suppressed
[  133.379454][ T7726] netlink: 188 bytes leftover after parsing attributes in process `syz.4.508'.
[  133.416349][ T7726] netlink: 'syz.4.508': attribute type 1 has an invalid length.
[  133.427235][ T7728] netlink: 'syz.2.509': attribute type 13 has an invalid length.
[  133.443105][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.509'.
[  133.563232][ T6059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.591658][ T6059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.618527][ T7560] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.668142][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.689505][ T7560] 8021q: adding VLAN 0 to HW filter on device team0
[  133.699040][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.728209][ T6059] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.735488][ T6059] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.778996][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.786286][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.912329][ T7560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  134.101860][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'.
[  134.254149][ T7560] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.473740][ T7560] veth0_vlan: entered promiscuous mode
[  134.721865][ T7560] veth1_vlan: entered promiscuous mode
[  134.870896][   T66] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.897466][ T7560] veth0_macvtap: entered promiscuous mode
[  134.912662][ T7560] veth1_macvtap: entered promiscuous mode
[  134.935705][ T7560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.948539][ T7560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.959418][ T7560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.970912][ T7560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.980855][ T7560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.991578][ T7560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.003636][ T7560] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.017556][ T7560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.028232][ T7560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.038410][ T7560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.049046][ T7560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.059236][ T7560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.071493][ T7560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.082574][ T7560] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.093180][ T7560] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.102092][ T7560] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.112353][ T7560] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.122001][ T7560] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.381706][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.410652][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.495643][ T1324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.513537][ T1324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.694203][ T5141] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  135.706325][ T5141] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  135.726285][ T5141] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  135.736415][ T5141] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  135.744524][ T5141] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  135.753604][   T66] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.764547][ T5141] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  136.061245][ T7773] chnl_net:caif_netlink_parms(): no params data found
[  136.139106][   T66] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.268080][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'.
[  136.290413][   T66] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.366438][ T7773] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.381361][ T7773] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.395028][ T7773] bridge_slave_0: entered allmulticast mode
[  136.397723][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.523'.
[  136.402981][ T7773] bridge_slave_0: entered promiscuous mode
[  136.426126][ T7773] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.434666][ T7773] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.443850][ T7773] bridge_slave_1: entered allmulticast mode
[  136.465022][ T7773] bridge_slave_1: entered promiscuous mode
[  136.511402][ T5837] Bluetooth: hci3: command 0x0405 tx timeout
[  136.701449][ T7773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.722885][ T7773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.832047][ T7816] netlink: 28 bytes leftover after parsing attributes in process `syz.4.528'.
[  136.948553][ T7817] bond3 (unregistering): Released all slaves
[  136.989464][ T7821] Cannot find set identified by id 0 to match
[  137.086859][ T7773] team0: Port device team_slave_0 added
[  137.160135][ T7773] team0: Port device team_slave_1 added
[  137.227027][   T66] bridge_slave_1: left allmulticast mode
[  137.244704][   T66] bridge_slave_1: left promiscuous mode
[  137.270142][   T66] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.285751][   T66] bridge_slave_0: left allmulticast mode
[  137.299125][   T66] bridge_slave_0: left promiscuous mode
[  137.314119][   T66] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.790168][ T5837] Bluetooth: hci4: command tx timeout
[  137.841804][ T7835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.533'.
[  138.158799][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  138.174818][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  138.184363][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  138.197938][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  138.206890][ T5828] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  138.227631][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  138.293356][   T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.307756][   T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.320088][   T66] bond0 (unregistering): Released all slaves
[  138.361300][ T7773] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.385246][ T7773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.413363][ T7773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.443287][ T7773] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.452874][ T7773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.479382][ T7773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.702167][ T7773] hsr_slave_0: entered promiscuous mode
[  138.715822][ T7773] hsr_slave_1: entered promiscuous mode
[  138.722505][ T7773] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  138.730527][ T7773] Cannot create hsr debugfs directory
[  138.798398][   T66] hsr_slave_0: left promiscuous mode
[  138.807189][   T66] hsr_slave_1: left promiscuous mode
[  138.814436][   T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.822488][   T66] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.843442][   T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.856012][   T66] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.918083][   T66] veth1_macvtap: left promiscuous mode
[  138.923823][   T66] veth0_macvtap: left promiscuous mode
[  138.929649][   T66] veth1_vlan: left promiscuous mode
[  138.934997][   T66] veth0_vlan: left promiscuous mode
[  138.955682][ T7868] netlink: 36 bytes leftover after parsing attributes in process `syz.2.542'.
[  139.018292][ T7865] netlink: 360 bytes leftover after parsing attributes in process `syz.2.542'.
[  139.612330][   T66] team0 (unregistering): Port device team_slave_1 removed
[  139.655268][   T66] team0 (unregistering): Port device team_slave_0 removed
[  139.870530][ T5828] Bluetooth: hci4: command tx timeout
[  140.352716][ T5828] Bluetooth: hci3: command tx timeout
[  140.465905][    C1] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  140.610132][ T7846] chnl_net:caif_netlink_parms(): no params data found
[  140.776263][ T7902] sit0: entered promiscuous mode
[  140.796585][ T7902] netlink: 'syz.4.552': attribute type 1 has an invalid length.
[  140.837446][ T7902] netlink: 1 bytes leftover after parsing attributes in process `syz.4.552'.
[  141.219799][ T7846] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.234991][ T7846] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.244840][ T7846] bridge_slave_0: entered allmulticast mode
[  141.253125][ T7846] bridge_slave_0: entered promiscuous mode
[  141.267044][ T7846] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.275857][ T7846] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.288674][ T7846] bridge_slave_1: entered allmulticast mode
[  141.297410][ T7846] bridge_slave_1: entered promiscuous mode
[  141.450159][   T66] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.537712][ T7846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  141.568330][ T7846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.606672][   T66] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.725077][ T7940] netlink: 24 bytes leftover after parsing attributes in process `syz.0.560'.
[  141.762812][   T66] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.818934][ T7846] team0: Port device team_slave_0 added
[  141.842941][ T7773] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  141.859054][ T7846] team0: Port device team_slave_1 added
[  141.915752][   T66] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.949361][ T7773] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  141.964614][ T7773] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  141.975199][ T5828] Bluetooth: hci4: command tx timeout
[  142.007217][ T7773] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  142.040056][ T7846] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.056377][ T7846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.089626][ T7846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.110743][ T7846] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.117849][ T7846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.144031][ T7846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.284847][ T7846] hsr_slave_0: entered promiscuous mode
[  142.302147][ T7846] hsr_slave_1: entered promiscuous mode
[  142.310782][ T7846] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  142.319723][ T7846] Cannot create hsr debugfs directory
[  142.430428][ T5828] Bluetooth: hci3: command tx timeout
[  142.468699][   T25] hid-generic 0005:0458:0059.0001: item fetching failed at offset 0/1
[  142.491130][   T25] hid-generic 0005:0458:0059.0001: probe with driver hid-generic failed with error -22
[  142.555028][ T7961] netlink: 'syz.2.567': attribute type 6 has an invalid length.
[  142.572929][ T7961] netlink: 'syz.2.567': attribute type 7 has an invalid length.
[  142.598894][ T7961] netlink: 'syz.2.567': attribute type 8 has an invalid length.
[  142.609979][   T66] bridge_slave_1: left allmulticast mode
[  142.627497][   T66] bridge_slave_1: left promiscuous mode
[  142.635615][   T66] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.651993][   T66] bridge_slave_0: left allmulticast mode
[  142.657822][   T66] bridge_slave_0: left promiscuous mode
[  142.685879][   T66] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.124496][   T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.136723][   T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.147039][   T66] bond0 (unregistering): Released all slaves
[  143.173810][ T7969] netlink: 36 bytes leftover after parsing attributes in process `syz.2.570'.
[  143.547542][ T7773] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.610785][   T66] hsr_slave_0: left promiscuous mode
[  143.617109][   T66] hsr_slave_1: left promiscuous mode
[  143.627557][   T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.657777][   T66] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.675871][   T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.684932][   T66] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.744895][   T66] veth1_macvtap: left promiscuous mode
[  143.752119][   T66] veth0_macvtap: left promiscuous mode
[  143.757774][   T66] veth1_vlan: left promiscuous mode
[  143.764620][   T66] veth0_vlan: left promiscuous mode
[  144.031014][ T5828] Bluetooth: hci4: command tx timeout
[  144.218100][   T66] team0 (unregistering): Port device team_slave_1 removed
[  144.258863][   T66] team0 (unregistering): Port device team_slave_0 removed
[  144.510064][ T5828] Bluetooth: hci3: command tx timeout
[  144.658056][ T7993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  144.720153][ T7773] 8021q: adding VLAN 0 to HW filter on device team0
[  144.764119][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.771300][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.858529][ T8009] netlink: 116 bytes leftover after parsing attributes in process `syz.4.578'.
[  144.910718][ T8005] syzkaller0: entered promiscuous mode
[  144.916406][ T8005] syzkaller0: entered allmulticast mode
[  144.936730][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.943902][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.199851][ T7773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  145.373730][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.583'.
[  146.590839][ T5828] Bluetooth: hci3: command tx timeout
[  146.851126][ T7846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  146.964397][ T7846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  146.987410][ T7846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  147.002299][ T7846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  147.037988][ T7773] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.104825][ T8030] netlink: 28 bytes leftover after parsing attributes in process `syz.0.585'.
[  147.117880][ T8029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.585'.
[  147.160780][ T7846] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.177784][ T7846] 8021q: adding VLAN 0 to HW filter on device team0
[  147.194905][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.202119][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.214152][ T8029] netlink: 48 bytes leftover after parsing attributes in process `syz.0.585'.
[  147.256669][ T8035] x_tables: duplicate underflow at hook 2
[  147.265170][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.272430][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.316879][ T7773] veth0_vlan: entered promiscuous mode
[  147.359418][ T7773] veth1_vlan: entered promiscuous mode
[  147.392758][ T8039] netlink: 'syz.0.587': attribute type 21 has an invalid length.
[  147.409744][ T8039] netlink: 132 bytes leftover after parsing attributes in process `syz.0.587'.
[  147.466859][ T7773] veth0_macvtap: entered promiscuous mode
[  147.540742][ T7773] veth1_macvtap: entered promiscuous mode
[  147.604287][ T7773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.627560][ T7773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.654603][ T7773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.690066][ T7773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.711732][ T7773] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.744754][ T7773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.770974][ T7773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.782392][ T7773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.794556][ T7773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.808417][ T7773] batman_adv: batadv0: Interface activated: batadv_slave_1
[  147.821017][ T8053] netlink: 'syz.2.591': attribute type 29 has an invalid length.
[  147.848594][ T7773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.858163][ T7773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.867971][ T7773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.878180][ T7773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.888954][ T8056] netlink: 508 bytes leftover after parsing attributes in process `syz.2.591'.
[  147.901682][ T8053] netlink: 'syz.2.591': attribute type 29 has an invalid length.
[  147.966550][ T8047] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  147.988291][ T8047] syzkaller0: entered promiscuous mode
[  147.994470][ T8047] syzkaller0: entered allmulticast mode
[  148.015113][ T7846] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.193577][ T8063] netlink: 36 bytes leftover after parsing attributes in process `syz.2.592'.
[  149.945635][ T7846] veth0_vlan: entered promiscuous mode
[  149.998958][ T7846] veth1_vlan: entered promiscuous mode
[  150.016101][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.034454][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.084462][ T7846] veth0_macvtap: entered promiscuous mode
[  150.155072][ T7846] veth1_macvtap: entered promiscuous mode
[  150.170643][ T6059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.188907][ T6059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.221963][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.251023][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.269667][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.284908][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.295206][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.306539][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.317891][ T7846] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.409211][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.437985][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.454487][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.469366][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.486224][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.497939][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.528295][ T7846] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.657557][ T7846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.674899][ T7846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.685442][ T7846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.705654][ T7846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.945779][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.975793][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.036963][ T1324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.048773][ T1324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.174255][ T6059] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.287074][ T6059] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.394671][ T6059] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.466133][ T6059] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.542034][ T6059] bridge_slave_1: left allmulticast mode
[  151.547720][ T6059] bridge_slave_1: left promiscuous mode
[  151.555057][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.564058][ T6059] bridge_slave_0: left allmulticast mode
[  151.570135][ T6059] bridge_slave_0: left promiscuous mode
[  151.575863][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.756604][ T5828] Bluetooth: hci2: link tx timeout
[  151.762357][ T5828] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  151.782897][ T5828] Bluetooth: hci2: link tx timeout
[  151.788099][ T5828] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  151.990089][ T8113] netlink: 'syz.0.601': attribute type 1 has an invalid length.
[  151.997819][ T8113] netlink: 'syz.0.601': attribute type 1 has an invalid length.
[  152.023726][ T5141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  152.047579][ T5141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  152.059337][ T5141] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  152.068496][ T5141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  152.103560][ T5141] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  152.113769][ T5141] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  152.549655][ T6059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.560884][ T5141] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  152.570013][ T5141] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  152.577565][ T6059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.587017][ T5141] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  152.595778][ T5141] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  152.596988][ T6059] bond0 (unregistering): Released all slaves
[  152.614888][ T5141] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  152.623356][ T5141] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  152.786206][ T8123] hsr_slave_0: left promiscuous mode
[  152.836455][ T8123] hsr_slave_1: left promiscuous mode
[  152.989117][ T8130] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.140692][ T8130] syzkaller0: entered promiscuous mode
[  153.149650][ T8130] syzkaller0: entered allmulticast mode
[  153.244383][ T6059] hsr_slave_0: left promiscuous mode
[  153.251989][ T6059] hsr_slave_1: left promiscuous mode
[  153.253174][ T8139] netlink: 'syz.2.606': attribute type 1 has an invalid length.
[  153.274413][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.284783][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.295061][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.306842][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.338660][ T6059] veth1_macvtap: left promiscuous mode
[  153.348911][ T6059] veth0_macvtap: left promiscuous mode
[  153.356122][ T6059] veth1_vlan: left promiscuous mode
[  153.365199][ T6059] veth0_vlan: left promiscuous mode
[  153.443846][  T119] IPVS: starting estimator thread 0...
[  153.447997][ T8143] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  153.544244][ T8145] IPVS: using max 28 ests per chain, 67200 per kthread
[  153.570141][ T8146] netlink: 48 bytes leftover after parsing attributes in process `syz.4.607'.
[  153.843588][ T6059] team0 (unregistering): Port device team_slave_1 removed
[  153.875762][ T5837] Bluetooth: hci2: command 0x0406 tx timeout
[  153.893768][ T6059] team0 (unregistering): Port device team_slave_0 removed
[  154.194874][ T5837] Bluetooth: hci3: command tx timeout
[  154.288874][ T8128] tipc: Resetting bearer <eth:syzkaller0>
[  154.329057][ T8128] tipc: Disabling bearer <eth:syzkaller0>
[  154.346189][ T8139] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  154.347727][ T8143] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  154.508013][ T8156] netlink: 20 bytes leftover after parsing attributes in process `syz.0.609'.
[  154.560980][ T8156] netlink: 'syz.0.609': attribute type 1 has an invalid length.
[  154.676508][ T5837] Bluetooth: hci4: command tx timeout
[  154.735905][ T8112] chnl_net:caif_netlink_parms(): no params data found
[  154.933309][ T8175] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.964760][ T8124] chnl_net:caif_netlink_parms(): no params data found
[  154.980346][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.612'.
[  155.228597][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.614'.
[  155.326818][ T8112] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.361050][ T8112] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.368392][ T8112] bridge_slave_0: entered allmulticast mode
[  155.382581][ T8112] bridge_slave_0: entered promiscuous mode
[  155.390460][ T8112] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.397954][ T8112] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.405286][ T8112] bridge_slave_1: entered allmulticast mode
[  155.412469][ T8112] bridge_slave_1: entered promiscuous mode
[  155.615041][ T8196] netlink: ct family unspecified
[  155.640035][ T8196] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.650722][ T8112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.754443][ T6059] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.850195][ T8112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.933592][ T6059] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.035309][ T8112] team0: Port device team_slave_0 added
[  156.087708][ T6059] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.115224][ T8124] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.129771][ T8124] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.150150][ T8124] bridge_slave_0: entered allmulticast mode
[  156.157359][ T8124] bridge_slave_0: entered promiscuous mode
[  156.171906][ T8124] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.190316][ T8124] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.197829][ T8124] bridge_slave_1: entered allmulticast mode
[  156.211830][ T8124] bridge_slave_1: entered promiscuous mode
[  156.235392][ T8112] team0: Port device team_slave_1 added
[  156.269947][ T5837] Bluetooth: hci3: command tx timeout
[  156.371603][ T6059] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.440697][ T8206] netlink: 'syz.0.619': attribute type 10 has an invalid length.
[  156.498609][ T8208] netlink: 'syz.0.619': attribute type 10 has an invalid length.
[  156.499073][ T8206] bond0: (slave team0): Releasing backup interface
[  156.522635][ T8209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.620'.
[  156.529182][ T8208] netlink: 2 bytes leftover after parsing attributes in process `syz.0.619'.
[  156.544329][ T8206] batman_adv: batadv0: Adding interface: team0
[  156.552238][ T8206] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.578097][ T8206] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  156.596388][ T8211] netlink: 'syz.4.620': attribute type 10 has an invalid length.
[  156.607120][ T8124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  156.636297][ T8112] batman_adv: batadv0: Adding interface: batadv_slave_0
[  156.643384][ T8112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.669564][ T8112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  156.682295][ T8112] batman_adv: batadv0: Adding interface: batadv_slave_1
[  156.689330][ T8112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.715371][ T8112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  156.750376][ T5837] Bluetooth: hci4: command tx timeout
[  156.756940][ T8208] team0: entered promiscuous mode
[  156.762217][ T8208] team_slave_0: entered promiscuous mode
[  156.768260][ T8208] team_slave_1: entered promiscuous mode
[  156.775926][ T8208] 8021q: adding VLAN 0 to HW filter on device team0
[  156.788864][ T8208] batman_adv: batadv0: Interface activated: team0
[  156.795999][ T8208] batman_adv: batadv0: Interface deactivated: team0
[  156.809904][ T8208] batman_adv: batadv0: Removing interface: team0
[  156.833312][ T8208] bridge0: port 3(team0) entered blocking state
[  156.847329][ T8208] bridge0: port 3(team0) entered disabled state
[  156.855488][ T8208] team0: entered allmulticast mode
[  156.866980][ T8208] team_slave_0: entered allmulticast mode
[  156.873144][ T8208] team_slave_1: entered allmulticast mode
[  156.886869][ T8208] bridge0: port 3(team0) entered blocking state
[  156.893312][ T8208] bridge0: port 3(team0) entered forwarding state
[  156.928888][ T8211] batman_adv: batadv0: Adding interface: wlan0
[  156.935680][ T8211] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.990344][ T8211] batman_adv: batadv0: Interface activated: wlan0
[  157.003569][ T8124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.072458][ T8112] hsr_slave_0: entered promiscuous mode
[  157.079299][ T8112] hsr_slave_1: entered promiscuous mode
[  157.139392][ T8124] team0: Port device team_slave_0 added
[  157.185121][ T8124] team0: Port device team_slave_1 added
[  157.237941][ T5893] tipc: Subscription rejected, illegal request
[  157.310210][ T8124] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.317232][ T8124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.389705][ T8124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.404239][ T6059] bridge_slave_1: left allmulticast mode
[  157.419215][ T6059] bridge_slave_1: left promiscuous mode
[  157.425110][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.436587][ T6059] bridge_slave_0: left allmulticast mode
[  157.443205][ T6059] bridge_slave_0: left promiscuous mode
[  157.449250][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.235771][ T6059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.278498][ T6059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.306367][ T6059] bond0 (unregistering): Released all slaves
[  158.341256][ T8219] syzkaller1: entered promiscuous mode
[  158.346797][ T8219] syzkaller1: entered allmulticast mode
[  158.352608][ T5837] Bluetooth: hci3: command tx timeout
[  158.373004][ T8124] batman_adv: batadv0: Adding interface: batadv_slave_1
[  158.396035][ T8124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.423414][ T8124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  158.611932][ T8124] hsr_slave_0: entered promiscuous mode
[  158.624692][ T8124] hsr_slave_1: entered promiscuous mode
[  158.632528][ T8124] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  158.645618][ T8124] Cannot create hsr debugfs directory
[  158.767654][ T8253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.625'.
[  158.829714][ T5837] Bluetooth: hci4: command tx timeout
[  158.892723][ T6059] hsr_slave_0: left promiscuous mode
[  158.899266][ T6059] hsr_slave_1: left promiscuous mode
[  158.921498][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.928975][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_0
[  158.970652][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  158.978617][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.101516][ T6059] veth1_macvtap: left promiscuous mode
[  159.108066][ T6059] veth0_macvtap: left promiscuous mode
[  159.121049][ T6059] veth1_vlan: left promiscuous mode
[  159.126468][ T6059] veth0_vlan: left promiscuous mode
[  159.784320][ T6059] team0 (unregistering): Port device team_slave_1 removed
[  159.828780][ T6059] team0 (unregistering): Port device team_slave_0 removed
[  160.430391][ T5837] Bluetooth: hci3: command tx timeout
[  160.435791][ T8275] set match dimension is over the limit!
[  160.727280][ T8286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.634'.
[  160.909888][ T5837] Bluetooth: hci4: command tx timeout
[  161.049304][ T8112] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  161.062934][ T8112] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  161.076801][ T8112] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  161.094305][ T8112] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  161.204261][ T8124] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  161.217693][ T8124] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  161.236875][ T8124] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  161.254587][ T8124] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  161.358078][ T8298] syzkaller0: entered allmulticast mode
[  161.394650][ T8297] syzkaller0 (unregistering): left allmulticast mode
[  161.479196][ T8112] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.532819][ T8112] 8021q: adding VLAN 0 to HW filter on device team0
[  161.569464][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.576651][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.611857][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.619030][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.666947][ T8124] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.740608][ T8124] 8021q: adding VLAN 0 to HW filter on device team0
[  161.782301][ T6059] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.789450][ T6059] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.826169][ T8112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  161.864093][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.871413][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.126198][ T8318] netlink: 16 bytes leftover after parsing attributes in process `syz.4.643'.
[  162.180762][ T8318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.643'.
[  162.308549][ T8112] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.443474][ T8112] veth0_vlan: entered promiscuous mode
[  162.496771][ T8124] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.577816][ T8112] veth1_vlan: entered promiscuous mode
[  162.702578][ T8112] veth0_macvtap: entered promiscuous mode
[  162.797117][ T8112] veth1_macvtap: entered promiscuous mode
[  162.831994][ T8124] veth0_vlan: entered promiscuous mode
[  162.885337][ T8112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.898881][ T8112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.915955][ T8112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.926885][ T8112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.938846][ T8112] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.960926][ T8124] veth1_vlan: entered promiscuous mode
[  163.002057][ T8112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.049770][ T8112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.076172][ T8112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.093596][ T8112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.104997][ T8112] batman_adv: batadv0: Interface activated: batadv_slave_1
[  163.146522][ T8112] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.185884][ T8112] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.197275][ T8112] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.206381][ T8112] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.295787][ T8124] veth0_macvtap: entered promiscuous mode
[  163.358292][ T8124] veth1_macvtap: entered promiscuous mode
[  163.549242][ T8124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.563492][ T8124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.574324][ T8124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.585753][ T8124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.596164][ T8124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.606999][ T8124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.618513][ T8124] batman_adv: batadv0: Interface activated: batadv_slave_0
[  163.674314][ T8112] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0
[  163.684847][ T8112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.696567][ T8356] netlink: 33 bytes leftover after parsing attributes in process `syz.4.649'.
[  163.711513][ T8124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.726537][ T8124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.738854][ T8124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.754368][ T8124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.765229][ T8124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.780324][ T8124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.796344][ T8124] batman_adv: batadv0: Interface activated: batadv_slave_1
[  163.817500][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.827365][ T8124] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.836965][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.844739][ T8124] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.853624][ T8124] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.862719][ T8124] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.934553][ T6059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.944959][ T6059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.042413][ T8124] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0
[  164.056066][ T8124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.136227][ T6059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.159070][ T6059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.193140][ T5893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.202874][ T5893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.374087][ T8361] netlink: 40 bytes leftover after parsing attributes in process `syz.0.651'.
[  164.420048][ T8362] netlink: 'syz.2.650': attribute type 4 has an invalid length.
[  164.567506][ T8366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.653'.
[  164.743722][ T8380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.655'.
[  164.871088][   T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.999224][   T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.066104][   T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.166321][   T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.373599][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  165.382940][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  165.393219][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  165.403577][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  165.411383][ T5828] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  165.419478][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  165.478063][   T52] bridge_slave_1: left allmulticast mode
[  165.483943][   T52] bridge_slave_1: left promiscuous mode
[  165.489739][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.498579][   T52] bridge_slave_0: left allmulticast mode
[  165.505576][   T52] bridge_slave_0: left promiscuous mode
[  165.511356][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.717538][ T8399] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003
[  165.819120][ T8403] x_tables: duplicate underflow at hook 2
[  165.898416][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  165.914125][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  165.923346][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  165.942232][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  165.957834][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  165.973648][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  166.165495][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  166.177297][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  166.188941][   T52] bond0 (unregistering): Released all slaves
[  166.685917][   T52] hsr_slave_0: left promiscuous mode
[  166.699803][   T52] hsr_slave_1: left promiscuous mode
[  166.706104][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  166.720523][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  166.740466][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  166.756057][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  166.802344][   T52] veth1_macvtap: left promiscuous mode
[  166.818315][   T52] veth0_macvtap: left promiscuous mode
[  166.828521][   T52] veth1_vlan: left promiscuous mode
[  166.840064][   T52] veth0_vlan: left promiscuous mode
[  167.038403][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'.
[  167.362917][   T52] team0 (unregistering): Port device team_slave_1 removed
[  167.403829][   T52] team0 (unregistering): Port device team_slave_0 removed
[  167.471837][ T5828] Bluetooth: hci3: command tx timeout
[  167.809001][ T8422] lo speed is unknown, defaulting to 1000
[  167.825409][ T8422] lo speed is unknown, defaulting to 1000
[  167.895295][ T8404] chnl_net:caif_netlink_parms(): no params data found
[  167.938087][ T8422] lo speed is unknown, defaulting to 1000
[  168.032482][ T5828] Bluetooth: hci4: command tx timeout
[  168.160242][ T8422] infiniband syz0: set active
[  168.167328][ T8422] infiniband syz0: added lo
[  168.177816][ T8422] syz0: rxe_create_cq: returned err = -12
[  168.185078][ T8422] infiniband syz0: Couldn't create ib_mad CQ
[  168.191665][ T8422] infiniband syz0: Couldn't open port 1
[  168.203604][ T8388] chnl_net:caif_netlink_parms(): no params data found
[  168.226070][ T5879] lo speed is unknown, defaulting to 1000
[  168.247725][ T8404] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.259461][ T8404] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.275139][ T8404] bridge_slave_0: entered allmulticast mode
[  168.282802][ T8422] RDS/IB: syz0: added
[  168.287342][ T8422] smc: adding ib device syz0 with port count 1
[  168.296036][ T8404] bridge_slave_0: entered promiscuous mode
[  168.316224][ T8404] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.323717][ T8422] smc:    ib device syz0 port 1 has pnetid 
[  168.332922][ T8404] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.345851][ T8404] bridge_slave_1: entered allmulticast mode
[  168.353320][ T8404] bridge_slave_1: entered promiscuous mode
[  168.367233][ T5880] lo speed is unknown, defaulting to 1000
[  168.406285][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.670'.
[  168.427842][ T8422] lo speed is unknown, defaulting to 1000
[  168.429615][ T8404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.488407][ T8404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.520436][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.670'.
[  168.594930][ T8388] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.606699][ T8388] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.614803][ T8388] bridge_slave_0: entered allmulticast mode
[  168.622449][ T8388] bridge_slave_0: entered promiscuous mode
[  168.635728][ T8404] team0: Port device team_slave_0 added
[  168.641971][ T8388] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.649373][ T8388] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.656945][ T8388] bridge_slave_1: entered allmulticast mode
[  168.664128][ T8388] bridge_slave_1: entered promiscuous mode
[  168.670999][ T8422] lo speed is unknown, defaulting to 1000
[  168.691402][ T8404] team0: Port device team_slave_1 added
[  168.768743][ T8388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.847780][ T8388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.924102][ T8404] batman_adv: batadv0: Adding interface: batadv_slave_0
[  168.935799][ T8404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.968242][ T8404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  168.998326][ T8422] lo speed is unknown, defaulting to 1000
[  169.046885][ T8450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.672'.
[  169.063393][ T8388] team0: Port device team_slave_0 added
[  169.083326][ T8388] team0: Port device team_slave_1 added
[  169.111500][ T8404] batman_adv: batadv0: Adding interface: batadv_slave_1
[  169.129819][ T8404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.169899][ T8404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  169.225000][   T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.252771][ T8450] bond0: entered promiscuous mode
[  169.293429][ T8454] bridge1: entered promiscuous mode
[  169.299129][ T8454] bond0: (slave bridge1): Enslaving as an active interface with an up link
[  169.315074][ T8422] lo speed is unknown, defaulting to 1000
[  169.338385][ T8460] netlink: 256 bytes leftover after parsing attributes in process `syz.0.674'.
[  169.339968][ T8457] bond0 (unregistering): (slave bridge1): Releasing backup interface
[  169.372665][ T8457] bridge1: left promiscuous mode
[  169.402683][ T8457] bond0 (unregistering): Released all slaves
[  169.443630][ T8388] batman_adv: batadv0: Adding interface: batadv_slave_0
[  169.451224][ T8388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.482386][ T8388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  169.504155][ T8388] batman_adv: batadv0: Adding interface: batadv_slave_1
[  169.515059][ T8388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.550259][ T5828] Bluetooth: hci3: command tx timeout
[  169.560990][ T8388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  169.590142][   T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.618952][ T8422] lo speed is unknown, defaulting to 1000
[  169.725883][   T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.823556][ T8388] hsr_slave_0: entered promiscuous mode
[  169.833776][ T8388] hsr_slave_1: entered promiscuous mode
[  169.873829][   T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.888357][ T8422] lo speed is unknown, defaulting to 1000
[  169.904335][ T8404] hsr_slave_0: entered promiscuous mode
[  169.916848][ T8404] hsr_slave_1: entered promiscuous mode
[  169.929202][ T8404] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  169.946732][ T8404] Cannot create hsr debugfs directory
[  170.116379][ T8422] lo speed is unknown, defaulting to 1000
[  170.122457][ T5828] Bluetooth: hci4: command tx timeout
[  170.215333][ T8477] netlink: 32 bytes leftover after parsing attributes in process `syz.2.679'.
[  170.441309][   T52] bridge_slave_1: left allmulticast mode
[  170.457538][   T52] bridge_slave_1: left promiscuous mode
[  170.465224][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.494887][   T52] bridge_slave_0: left allmulticast mode
[  170.501179][   T52] bridge_slave_0: left promiscuous mode
[  170.506968][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.542566][ T8488] netlink: 32 bytes leftover after parsing attributes in process `syz.0.681'.
[  170.887992][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  170.900930][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  170.912626][   T52] bond0 (unregistering): Released all slaves
[  170.939467][ T8483] netlink: 76 bytes leftover after parsing attributes in process `syz.0.681'.
[  171.182666][ T8491] syz.0.681 (8491) used greatest stack depth: 17904 bytes left
[  171.324195][ T8499] netlink: 30 bytes leftover after parsing attributes in process `syz.4.686'.
[  171.629695][ T5828] Bluetooth: hci3: command tx timeout
[  171.884173][   T52] hsr_slave_0: left promiscuous mode
[  171.892561][   T52] hsr_slave_1: left promiscuous mode
[  171.900137][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.907886][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.917182][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.926699][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.985058][   T52] veth1_macvtap: left promiscuous mode
[  171.995289][   T52] veth0_macvtap: left promiscuous mode
[  172.005132][   T52] veth1_vlan: left promiscuous mode
[  172.014160][   T52] veth0_vlan: left promiscuous mode
[  172.200052][ T5828] Bluetooth: hci4: command tx timeout
[  172.522243][   T52] team0 (unregistering): Port device team_slave_1 removed
[  172.587354][   T52] team0 (unregistering): Port device team_slave_0 removed
[  172.841716][ T8529] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  173.134444][ T8516] pim6reg: entered allmulticast mode
[  173.157187][ T8517] netlink: 'syz.2.690': attribute type 25 has an invalid length.
[  173.224503][ T5880] IPVS: starting estimator thread 0...
[  173.251413][ T8538] xt_TPROXY: Can be used only with -p tcp or -p udp
[  173.329736][ T8535] IPVS: using max 22 ests per chain, 52800 per kthread
[  173.347806][ T8542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.697'.
[  173.442420][ T8388] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  173.534266][ T8388] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  173.540472][ T8550] netlink: 24 bytes leftover after parsing attributes in process `syz.4.699'.
[  173.565108][ T8388] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  173.607681][ T8550] bond3: entered promiscuous mode
[  173.614038][ T8550] 8021q: adding VLAN 0 to HW filter on device bond3
[  173.719926][ T5828] Bluetooth: hci3: command tx timeout
[  173.727197][ T8550] bond3 (unregistering): Released all slaves
[  173.741801][ T8388] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  173.765311][ T8557] hsr0: entered promiscuous mode
[  173.877640][ T8404] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  173.904047][ T8404] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  173.920265][ T8404] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  173.939952][ T8404] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  173.952273][ T8561] netlink: 'syz.4.701': attribute type 12 has an invalid length.
[  174.093755][ T8388] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.142032][ T8388] 8021q: adding VLAN 0 to HW filter on device team0
[  174.161663][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.168890][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.227924][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.235283][ T5893] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.269929][ T5828] Bluetooth: hci4: command tx timeout
[  174.338201][ T8404] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.387608][ T8404] 8021q: adding VLAN 0 to HW filter on device team0
[  174.417957][  T780] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.425193][  T780] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.482249][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.489457][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.567436][ T8404] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  174.579093][ T8404] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  174.648186][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.708'.
[  174.685671][ T8590] netlink: 3 bytes leftover after parsing attributes in process `syz.2.708'.
[  174.725192][ T8388] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.855515][ T8388] veth0_vlan: entered promiscuous mode
[  174.884384][ T8388] veth1_vlan: entered promiscuous mode
[  174.977125][ T8388] veth0_macvtap: entered promiscuous mode
[  175.008906][ T8388] veth1_macvtap: entered promiscuous mode
[  175.055572][ T8404] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.088561][ T8605] netlink: 44 bytes leftover after parsing attributes in process `syz.4.711'.
[  175.144097][ T8604] macsec1: entered allmulticast mode
[  175.149967][ T8604] macvlan0: entered allmulticast mode
[  175.159009][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.175780][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.185953][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.202664][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.218512][ T8388] batman_adv: batadv0: Interface activated: batadv_slave_0
[  175.280954][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.297296][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.308671][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.326186][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.339443][ T8388] batman_adv: batadv0: Interface activated: batadv_slave_1
[  175.366538][ T8613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.713'.
[  175.370744][ T8388] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.395544][ T8388] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.407824][ T8388] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.419927][ T8388] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.477795][ T8404] veth0_vlan: entered promiscuous mode
[  175.613081][ T8404] veth1_vlan: entered promiscuous mode
[  175.656357][ T8388] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0
[  175.666843][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.730982][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.738880][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.800311][ T8404] veth0_macvtap: entered promiscuous mode
[  175.822231][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.836917][ T8404] veth1_macvtap: entered promiscuous mode
[  175.846134][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.906719][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.955264][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.970740][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.981977][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.992060][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.002714][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.017399][ T8404] batman_adv: batadv0: Interface activated: batadv_slave_0
[  176.064433][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.088067][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.100048][ T8637] netlink: 116 bytes leftover after parsing attributes in process `syz.4.718'.
[  176.102193][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.126785][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.148858][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.163827][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.184009][ T8404] batman_adv: batadv0: Interface activated: batadv_slave_1
[  176.206528][ T8404] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.218094][ T8404] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.248633][ T8404] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.269648][ T8404] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.500305][ T8404] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0
[  176.504797][ T8646] netlink: set zone limit has 8 unknown bytes
[  176.525010][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.550129][ T8646] netlink: 60 bytes leftover after parsing attributes in process `syz.2.722'.
[  176.559929][  T780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.567769][  T780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.585518][ T8646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.722'.
[  176.627955][ T8648] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  176.636364][ T8646] netlink: 'syz.2.722': attribute type 2 has an invalid length.
[  176.654813][  T780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.677911][  T780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.767255][ T5893] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.143395][ T5893] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.252926][ T5893] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.365068][ T5893] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.424095][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  178.443401][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  178.456377][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  178.468684][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  178.480591][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  178.488037][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  178.560008][ T5893] bridge_slave_1: left allmulticast mode
[  178.569393][ T5893] bridge_slave_1: left promiscuous mode
[  178.645149][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.667408][ T5893] bridge_slave_0: left allmulticast mode
[  178.682775][ T5893] bridge_slave_0: left promiscuous mode
[  178.696157][ T8682] netlink: 'syz.2.729': attribute type 10 has an invalid length.
[  178.711451][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.862393][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  178.880295][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  178.901313][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  178.911563][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  178.925373][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  178.933253][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  179.363161][ T5893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  179.375077][ T5893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  179.386291][ T5893] bond0 (unregistering): Released all slaves
[  179.427359][ T8682] team0: Device veth0_macvtap failed to register rx_handler
[  179.492756][ T8673] lo speed is unknown, defaulting to 1000
[  179.577527][ T5837] ==================================================================
[  179.585671][ T5837] BUG: KASAN: slab-use-after-free in mgmt_remove_adv_monitor_sync+0x3a/0xd0
[  179.594414][ T5837] Read of size 8 at addr ffff888031371a18 by task kworker/u9:4/5837
[  179.602428][ T5837] 
[  179.604797][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: kworker/u9:4 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0
[  179.615768][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  179.625867][ T5837] Workqueue: hci0 hci_cmd_sync_work
[  179.631150][ T5837] Call Trace:
[  179.634454][ T5837]  <TASK>
[  179.637406][ T5837]  dump_stack_lvl+0x241/0x360
[  179.642166][ T5837]  ? __pfx_dump_stack_lvl+0x10/0x10
[  179.647400][ T5837]  ? __pfx__printk+0x10/0x10
[  179.652031][ T5837]  ? _printk+0xd5/0x120
[  179.656230][ T5837]  ? __virt_addr_valid+0x183/0x530
[  179.661383][ T5837]  ? __virt_addr_valid+0x183/0x530
[  179.666532][ T5837]  print_report+0x169/0x550
[  179.671180][ T5837]  ? __virt_addr_valid+0x183/0x530
[  179.676322][ T5837]  ? __virt_addr_valid+0x183/0x530
[  179.681472][ T5837]  ? __virt_addr_valid+0x45f/0x530
[  179.686620][ T5837]  ? __phys_addr+0xba/0x170
[  179.691195][ T5837]  ? mgmt_remove_adv_monitor_sync+0x3a/0xd0
[  179.697134][ T5837]  kasan_report+0x143/0x180
[  179.701679][ T5837]  ? mgmt_remove_adv_monitor_sync+0x3a/0xd0
[  179.707618][ T5837]  mgmt_remove_adv_monitor_sync+0x3a/0xd0
[  179.713378][ T5837]  ? __pfx_mgmt_remove_adv_monitor_sync+0x10/0x10
[  179.719829][ T5837]  hci_cmd_sync_work+0x22b/0x400
[  179.724821][ T5837]  ? process_scheduled_works+0x976/0x1840
[  179.730573][ T5837]  process_scheduled_works+0xa66/0x1840
[  179.736268][ T5837]  ? __pfx_process_scheduled_works+0x10/0x10
[  179.742306][ T5837]  ? assign_work+0x364/0x3d0
[  179.746929][ T5837]  worker_thread+0x870/0xd30
[  179.751566][ T5837]  ? __kthread_parkme+0x169/0x1d0
[  179.756623][ T5837]  ? __pfx_worker_thread+0x10/0x10
[  179.761763][ T5837]  kthread+0x2f0/0x390
[  179.765884][ T5837]  ? __pfx_worker_thread+0x10/0x10
[  179.771045][ T5837]  ? __pfx_kthread+0x10/0x10
[  179.775673][ T5837]  ret_from_fork+0x4b/0x80
[  179.780135][ T5837]  ? __pfx_kthread+0x10/0x10
[  179.784760][ T5837]  ret_from_fork_asm+0x1a/0x30
[  179.789601][ T5837]  </TASK>
[  179.792646][ T5837] 
[  179.794986][ T5837] Allocated by task 8687:
[  179.799329][ T5837]  kasan_save_track+0x3f/0x80
[  179.804034][ T5837]  __kasan_kmalloc+0x98/0xb0
[  179.808654][ T5837]  __kmalloc_cache_noprof+0x243/0x390
[  179.814072][ T5837]  mgmt_pending_new+0x65/0x250
[  179.818890][ T5837]  mgmt_pending_add+0x36/0x120
[  179.823703][ T5837]  remove_adv_monitor+0x102/0x1b0
[  179.828764][ T5837]  hci_mgmt_cmd+0xc47/0x11d0
[  179.833390][ T5837]  hci_sock_sendmsg+0x7b8/0x11c0
[  179.838369][ T5837]  __sock_sendmsg+0x221/0x270
[  179.843089][ T5837]  sock_write_iter+0x2d7/0x3f0
[  179.847899][ T5837]  vfs_write+0xaeb/0xd30
[  179.852182][ T5837]  ksys_write+0x18f/0x2b0
[  179.856560][ T5837]  do_syscall_64+0xf3/0x230
[  179.861105][ T5837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.867041][ T5837] 
[  179.869393][ T5837] Freed by task 8686:
[  179.873395][ T5837]  kasan_save_track+0x3f/0x80
[  179.878105][ T5837]  kasan_save_free_info+0x40/0x50
[  179.883177][ T5837]  __kasan_slab_free+0x59/0x70
[  179.887998][ T5837]  kfree+0x196/0x430
[  179.891931][ T5837]  mgmt_pending_foreach+0xd1/0x130
[  179.897083][ T5837]  mgmt_index_removed+0x133/0x390
[  179.902166][ T5837]  hci_sock_bind+0xcce/0x1150
[  179.902846][ T8690] IPVS: Scheduler module ip_vs_sip not found
[  179.906869][ T5837]  __sys_bind+0x1e4/0x290
[  179.906894][ T5837]  __x64_sys_bind+0x7a/0x90
[  179.906913][ T5837]  do_syscall_64+0xf3/0x230
[  179.906938][ T5837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.932192][ T5837] 
[  179.934546][ T5837] The buggy address belongs to the object at ffff888031371a00
[  179.934546][ T5837]  which belongs to the cache kmalloc-96 of size 96
[  179.948455][ T5837] The buggy address is located 24 bytes inside of
[  179.948455][ T5837]  freed 96-byte region [ffff888031371a00, ffff888031371a60)
[  179.962468][ T5837] 
[  179.964830][ T5837] The buggy address belongs to the physical page:
[  179.971281][ T5837] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888031371480 pfn:0x31371
[  179.981391][ T5837] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  179.988550][ T5837] page_type: f5(slab)
[  179.992574][ T5837] raw: 00fff00000000000 ffff88801ac41280 dead000000000100 dead000000000122
[  180.001226][ T5837] raw: ffff888031371480 000000008020001d 00000001f5000000 0000000000000000
[  180.009839][ T5837] page dumped because: kasan: bad access detected
[  180.016383][ T5837] page_owner tracks the page as allocated
[  180.022123][ T5837] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 35, tgid 35 (kworker/u8:2), ts 80876516658, free_ts 80833098038
[  180.041100][ T5837]  post_alloc_hook+0x1f3/0x230
[  180.045910][ T5837]  get_page_from_freelist+0x365c/0x37a0
[  180.051493][ T5837]  __alloc_pages_noprof+0x292/0x710
[  180.056728][ T5837]  alloc_pages_mpol_noprof+0x3e8/0x680
[  180.062229][ T5837]  alloc_slab_page+0x6a/0x110
[  180.066944][ T5837]  allocate_slab+0x5a/0x2b0
[  180.071483][ T5837]  ___slab_alloc+0xc27/0x14a0
[  180.076291][ T5837]  __slab_alloc+0x58/0xa0
[  180.080665][ T5837]  __kmalloc_cache_noprof+0x27b/0x390
[  180.086077][ T5837]  dst_cow_metrics_generic+0x56/0x1c0
[  180.091489][ T5837]  icmp6_dst_alloc+0x270/0x420
[  180.096292][ T5837]  ndisc_send_skb+0x316/0x1450
[  180.101100][ T5837]  addrconf_dad_completed+0x76c/0xcd0
[  180.106502][ T5837]  addrconf_dad_work+0xdc2/0x16f0
[  180.111561][ T5837]  process_scheduled_works+0xa66/0x1840
[  180.117148][ T5837]  worker_thread+0x870/0xd30
[  180.121772][ T5837] page last free pid 5203 tgid 5203 stack trace:
[  180.128117][ T5837]  free_unref_page+0xd3f/0x1010
[  180.133014][ T5837]  __slab_free+0x2c2/0x380
[  180.137460][ T5837]  qlist_free_all+0x9a/0x140
[  180.142079][ T5837]  kasan_quarantine_reduce+0x14f/0x170
[  180.147572][ T5837]  __kasan_slab_alloc+0x23/0x80
[  180.152461][ T5837]  kmem_cache_alloc_noprof+0x1d9/0x380
[  180.157969][ T5837]  getname_flags+0xb7/0x540
[  180.162510][ T5837]  do_readlinkat+0xd8/0x3a0
[  180.167053][ T5837]  __x64_sys_readlink+0x7f/0x90
[  180.171940][ T5837]  do_syscall_64+0xf3/0x230
[  180.176483][ T5837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.182423][ T5837] 
[  180.184768][ T5837] Memory state around the buggy address:
[  180.190425][ T5837]  ffff888031371900: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc
[  180.198519][ T5837]  ffff888031371980: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[  180.206628][ T5837] >ffff888031371a00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[  180.214716][ T5837]                             ^
[  180.219588][ T5837]  ffff888031371a80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  180.227682][ T5837]  ffff888031371b00: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc
[  180.235775][ T5837] ==================================================================
[  180.259708][ T5837] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  180.266970][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: kworker/u9:4 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0
[  180.277858][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  180.287924][ T5837] Workqueue: hci0 hci_cmd_sync_work
[  180.293154][ T5837] Call Trace:
[  180.296451][ T5837]  <TASK>
[  180.299388][ T5837]  dump_stack_lvl+0x241/0x360
[  180.304085][ T5837]  ? __pfx_dump_stack_lvl+0x10/0x10
[  180.309319][ T5837]  ? __pfx__printk+0x10/0x10
[  180.313949][ T5837]  ? preempt_schedule+0xe1/0xf0
[  180.318825][ T5837]  ? vscnprintf+0x5d/0x90
[  180.323178][ T5837]  panic+0x349/0x880
[  180.327090][ T5837]  ? check_panic_on_warn+0x21/0xb0
[  180.332217][ T5837]  ? __pfx_panic+0x10/0x10
[  180.336648][ T5837]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[  180.342636][ T5837]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  180.349150][ T5837]  ? print_report+0x502/0x550
[  180.353846][ T5837]  check_panic_on_warn+0x86/0xb0
[  180.358798][ T5837]  ? mgmt_remove_adv_monitor_sync+0x3a/0xd0
[  180.364702][ T5837]  end_report+0x77/0x160
[  180.368955][ T5837]  kasan_report+0x154/0x180
[  180.373500][ T5837]  ? mgmt_remove_adv_monitor_sync+0x3a/0xd0
[  180.379438][ T5837]  mgmt_remove_adv_monitor_sync+0x3a/0xd0
[  180.385187][ T5837]  ? __pfx_mgmt_remove_adv_monitor_sync+0x10/0x10
[  180.391637][ T5837]  hci_cmd_sync_work+0x22b/0x400
[  180.396592][ T5837]  ? process_scheduled_works+0x976/0x1840
[  180.402320][ T5837]  process_scheduled_works+0xa66/0x1840
[  180.407885][ T5837]  ? __pfx_process_scheduled_works+0x10/0x10
[  180.413888][ T5837]  ? assign_work+0x364/0x3d0
[  180.418527][ T5837]  worker_thread+0x870/0xd30
[  180.423155][ T5837]  ? __kthread_parkme+0x169/0x1d0
[  180.428211][ T5837]  ? __pfx_worker_thread+0x10/0x10
[  180.433340][ T5837]  kthread+0x2f0/0x390
[  180.437513][ T5837]  ? __pfx_worker_thread+0x10/0x10
[  180.442634][ T5837]  ? __pfx_kthread+0x10/0x10
[  180.447235][ T5837]  ret_from_fork+0x4b/0x80
[  180.451660][ T5837]  ? __pfx_kthread+0x10/0x10
[  180.456265][ T5837]  ret_from_fork_asm+0x1a/0x30
[  180.461041][ T5837]  </TASK>
[  180.464387][ T5837] Kernel Offset: disabled
[  180.468719][ T5837] Rebooting in 86400 seconds..