last executing test programs:

1m17.703597283s ago: executing program 1 (id=371):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async)
r1 = socket$tipc(0x1e, 0x4, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) (async)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) (async, rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)

1m17.019349994s ago: executing program 4 (id=354):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="84000000", @ANYRESDEC=r0, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)

1m7.497877404s ago: executing program 1 (id=371):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async)
r1 = socket$tipc(0x1e, 0x4, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) (async)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) (async, rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)

1m5.477096817s ago: executing program 3 (id=766):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r5, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000000), &(0x7f0000000180)=@tcp6=r3, 0x2}, 0x20)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0xc, 0xb, 0x0, 0x0, @u64}]}, 0x24}}, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r7=>0x0})
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0\x00'}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r8}]}]}, 0x40}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x6}]}, 0x3c}}, 0x0)
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r11, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r12, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32)
connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x2}}, 0x26)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r13 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x8, 0x0, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}}, 0x20004000)
getsockopt$bt_BT_SECURITY(r1, 0x111, 0x5, 0x0, 0x20001f00)

1m5.014686457s ago: executing program 3 (id=772):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xc8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r4=>0x0})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x1e}]}, 0x2c}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x50, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="b60000000000670c00028008000207070000000000", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x40}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)

1m4.762068936s ago: executing program 4 (id=354):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="84000000", @ANYRESDEC=r0, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)

55.344441212s ago: executing program 1 (id=371):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async)
r1 = socket$tipc(0x1e, 0x4, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) (async)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) (async, rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)

54.226353222s ago: executing program 3 (id=772):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xc8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r4=>0x0})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x1e}]}, 0x2c}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x50, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="b60000000000670c00028008000207070000000000", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x40}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)

52.704245837s ago: executing program 4 (id=354):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="84000000", @ANYRESDEC=r0, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)

40.134952214s ago: executing program 1 (id=371):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async)
r1 = socket$tipc(0x1e, 0x4, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) (async)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) (async, rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)

37.657900468s ago: executing program 3 (id=772):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xc8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r4=>0x0})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x1e}]}, 0x2c}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x50, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="b60000000000670c00028008000207070000000000", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x40}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)

35.874404431s ago: executing program 4 (id=354):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="84000000", @ANYRESDEC=r0, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)

25.735117198s ago: executing program 1 (id=371):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async)
r1 = socket$tipc(0x1e, 0x4, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) (async)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) (async, rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)

23.64091786s ago: executing program 3 (id=772):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xc8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r4=>0x0})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x1e}]}, 0x2c}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x50, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="b60000000000670c00028008000207070000000000", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x40}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)

21.893462412s ago: executing program 4 (id=354):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="84000000", @ANYRESDEC=r0, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)

11.551588765s ago: executing program 0 (id=1047):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x15, 0x6, 0x1)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=@delchain={0x98, 0x65, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xb}, {0x0, 0xb}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x98}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000180))
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r7=>0x0})
sendmsg$nl_route(r4, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x4c}}, 0x0)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x80, 0x0}, 0x8054)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0x8, &(0x7f0000000040)=0x10001, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)={0xd4, r2, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x44}, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xb0, 0xc5, "1b71b4fddc3f6cb64004df0524c1e381933ee514a91303a5193fa108d704cf88a6f035e857a555b8fa37b38ab7ce29c2637e2a5a3194bebc17119153d40a6e58ca718ae8072ea64fc4e7e84f9ef8427fea8a59794877387e36db5682729a92471af1113fd5a12307f61bcce6d6096a74779bb8163922e00f410c84f5b94780e7d22303d1e4a7cbc6aa22f26dacaaad0c2079106adc0d42bcf78bdf3f96f13f9e0927fbbc7e6e71dd5bce2667"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x21)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100feffffffe1c0a97edd169ba108000300", @ANYRES32=r10, @ANYBLOB="0a000600ffffffffffff0000060066008e8800002600330018970100080211000001080211000000c10cf17696513134080211000000000081c00000"], 0x58}, 0x1, 0x300}, 0x0)

10.889137125s ago: executing program 3 (id=772):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xc8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r4=>0x0})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x1e}]}, 0x2c}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x50, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="b60000000000670c00028008000207070000000000", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x40}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)

10.329240672s ago: executing program 0 (id=1050):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000600)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x4000)

10.32786108s ago: executing program 1 (id=371):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async)
r1 = socket$tipc(0x1e, 0x4, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) (async)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) (async, rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)

9.379045374s ago: executing program 0 (id=1052):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wg0\x00'})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x5, 0x4c3, 0x0, {}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "d5bea2784d005b17"}}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x40090)
r4 = gettid()
sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20}, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @local}}, 0x0, @in=@private}}, &(0x7f00000000c0)=0xe8)
r6 = getgid()
setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={r4, r5, r6}, 0xc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB="08001f"], 0x40}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

9.050435325s ago: executing program 0 (id=1054):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)

8.810459199s ago: executing program 0 (id=1056):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = socket(0x10, 0x803, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001d0001"], 0x14}}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000140001ec4a2cec481e43a50001"], 0x28}}, 0x4000)

8.80334421s ago: executing program 4 (id=354):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="84000000", @ANYRESDEC=r0, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)

7.697256327s ago: executing program 0 (id=1057):
r0 = socket$inet6(0xa, 0x802, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_FLOW={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000900)=@srh, 0x8)
connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c800)

1.631584941s ago: executing program 2 (id=1079):
r0 = socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6)
write$cgroup_subtree(r2, &(0x7f0000000500)={[{0x2d, 'pids'}]}, 0x6)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d140012801000013084959000727400000400028008000340000001"], 0xa0}}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x310)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10)

1.356633428s ago: executing program 2 (id=1080):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64)
unshare(0x28000600) (async, rerun: 64)
r3 = socket(0x10, 0x3, 0x0)
preadv(r3, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000c0005006c000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r6, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYBLOB="06"], 0x90}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002e00)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x6, 0x2}, {0x10}}}, 0x24}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r9 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64)
setsockopt$inet6_int(r9, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) (async)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000003c00128008000100677470003000028008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10], 0x5c}, 0x1, 0xba01}, 0x0)
sendmsg$inet(r8, &(0x7f0000000680)={&(0x7f0000000340)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000600)=[{&(0x7f00000004c0)="0fbcd5b0ce0c9b8d1714b4a854601fe33d06b4e3af4732d6c06f1a4d", 0x1c}, {&(0x7f0000000f80)="006f800ee730c01f5eda118367fe576e837221398a199a54a0e62d23f70c6349607fbcb426592f295b049aa534a13645d82167abf800c5cb71db2e4e31c735a2fcfb9885e59b392e76f2f26497b79c06c8510f0ae1ef5bbb41265d87b64e469390f1382a11fab680b1e18bcf8b6ca860ffbeef4d8c418d2f9b11a760c8f1894c918152ae98c2b8b51be78ece49b4d7f1647067d8d5a510d6c3837357cf1486a56b0b4cee77c5b428700b86655e7c0234d6f48010e0d29cfd2f3a48f61687d279ae93d8ad32e86f3cbfe449817f2c07f888f007756477ca0aebe239bd0b0b5675af5b0ce49efa7579ef57b334c758cbfedfe8bb38990cded72432788b4f65d91534a93ae399bd5a824e6240e1860787748e95a8c24a4bb471cdf598f3da2499caa03340db376d336ee245b588607675368f152687cd551face027fe643a45886d4dbe4bdb248654d07b8b2f0da04d42a5dbd976a1c5d59042a4a030827edb89acd7d3acd8e86747f02c5462794e19c984d7f5494075037c1f8eac64fc8406c09b5436f91f87e4949b7513706539534b00b04e9c2b2658447a8595d4b085e32851220b9ec73ea5a8dd3509f3bd9d1a11dce900a260b1a6c6c88f9f2c9568db213850a2aa3233cdd88b934627ef17bd52b5e45c034b10e7b3affefcbe03ce46259bdad5fbc1d9e8a2cc89c0e27f673dc0842d31feeb8564add560c463b5b4bd06a1946b9b71be26a1799e81cf2274788e42044786e6ec697a2d4251951407885b56d0f3d8b813ffaeff4b7c81ed4a10ad1ebf9b21661e44aa00d3ed8bbd8352de92464bead755daf1acc3f5dba7b99b646bab54722f8b6bb82a90eba57c876f3543155be75dd285f5ee1db6239780d5490d1ff90c36f183bce8d759775986b2632a0393aa7099a52cd7242851999ebb4b98bdbbe1f21f4daf0576a462a22d6ff648fc48d381c76086bb6c77fa6c6721eaf0a232157fb79961e9049391aa0ce4aea2ce212bb35b672777aa1a6fb801113b20f640f03774c0fc749d3ba7efe0a009e436370a9b0ec99cce978cca07b7a6378a0c42aed067eabf664ffc17b193ede32b90791f76b13a8c1ee0e62ac132b6f2dc96157b7b445a24d0b3e777e5aa46f13dd5ddf5b9ce5ba63a118bd215400e81e347d8693c2fde0a99e2853a8df8a1865d7acc7fbf6094be9a57862153164e51be7b028384e334b115de3c812a0c93b09915e5380cece6ee078cd1cc2c840fe3c3d8bd1e32a886f6c2e4b5a9febc1a9fea405fd544a424f29f2d8ce2d8cffce8f2402a1b77c6b8510dfe238d8cde2629985708960678741e2b91a5b203f06f15d12172ea985657a22b5b9cfa7947f1cec2c44e0afee7fe898d3d660ce0c4d66885971861a0b7d787b5230e17f4bec1ac8f56ef5f781b085b72870da1e0432ba1ba33d26231f3524322646b3c50ebdff75a95ab09ec760fc7f47043bab5cca5cacc2b32d9d01d77021bbd0d7b929d53ef427f4147ae481ce5b816dad68fa2fdfbd699d82906a1820ba436cf8ea15b66aa5cb942994324d2aa945ac404a1cbb825b38e79b705230e691e5fba3bd6101cf0e529167341ab84ad4f97ad5ff5a29bd5b5e19ccb24756613305922e5d3b4df66b4b7b07531315686423f65a2f40f69395f8562c5f4894e24c58cb949652bae8e2f3d2a017151b7641402daca46274392d4edc9372271319fae163722397325b22a2d09cfbc1e4b46c0e17f347b4e91feedbbd185fb82a3e761e7b5bf939227016c194189fa45e4aeabde75a7b5b0095a694b38e17fc5cb0ed216eab0ce503a749d03065329927a0eaf995fd8a472d6d09a8caa2ac086d7f9cb8801eec7997b4799ee57e6343844eeac352dc57da4d873e6826f78bb6f459082f4bdcab62face1320da47337cf3e50a23101d7464792f0b69e6713002de338fa917176988faee4b52caef0683fb02c4a05897c6e8d02f986faa592b89ccf5560370f92093b94d8ab93d6559a801ca025bc2c3826e236c3ae8c20eda5103cf068c779f29b9695c6b32b0421268847e97b4bae0c5fb37c6c0a31c1aee4a502cc43508404d7d9d8dda7b925d6240860392c80e263a64957e98be84b3b7842150e2a758b7df095ee7b3f4d9115291f744314edca8d8e8f7b19419635b84fb397f1accf6b0186dcd9a2b172e23e5af3e4f69f78c8eea03e660c950fed9faa8135a56a4c94d81f95409894e896a912bf1065373194e2b39e0200deb14ff79d0bc0f912bb4d21833f5168cad5e2e793c4cbb71890959e0de2d066140570d5678a1260b50e6e51c3263eec8562a854890ff4d8a83e4b26433d597b10e8057f0de042cbe957801c19c17c4578c84254dbd481886c3b0d9e3506376b7284bcdcf61c8bc0d7f54bce938c8c927df026631277bbd04a2dcb1bbe54bc48552de2094534f266493687841d7ca4619621a5035969535264f1af79a772af8dbe4485494c8b1c91924f66b61886b00ca03c5e7d6dcfc9574e9018808c59cf4d00a112859f784339cfcd372fb93d1eaa576c98a60a0618abf48699b128ca6ead8f7baa04af8b93930cd79a0261c6f191399edfa9bef6c7f587e9801026b1942e54656e922bb6a6714decf12874daa06f1a203a4a3d82ba6cd7876302d18d9abbb302b761ad5ed39ecd034064ef47566e6a1b599968e198c1fa14e612c399f7d879308d69da6108c060aa2d13c0be84f26967ce3ab851cfef01161cfec1f23562c8e840fec32165047c2905c4cde1e86a7816f7f3ab346d2df1d9cd9215267d4330e4032690f6b0b661bca464aa6c397274031d4b49f6603c6bd2b3f51220752a5c3bb35d9f29beb4897384b9b53c4b5a2094991fc9682c414dbf878c984e4a5e98c029038ea9c0321ec782b4162120837805c3390de761bf847dda96e335a928dc181a7d4c0cd35bfc798b718b00a81667b552cf0c10c4c013ef3a414bb8af7c7985da58ecd305f16b136770a6152cd37ce57b97b29ff9bb5e177a80b7f0f4e1054fd98afed474663b4388e9deaa304c2e954011559154731696f1e1a25553ec7e57bb041b9d87020e8eec06a804318bc110da9f28eac640f2f58ce0b1c2bf63a4b95f6c46784be1aa4e38a03d125a0038aacfd4c38fd87e9412c812a79e48fd6fe8ec5f7ebd95223c5f2a90b9541302a5d9388d3685cf58f5ade2e8a204e8495a7a832a2b8bc14a93ecefcdb78f65edf29f8f8e3221b12bef9711b9c0eda7bededc70903c55290337998d1a1925e0c74fbe243c7a49790a60eae34008d26a75b05b0e096d004dabf60c02f71388963f49811c74e6a05f374dacf233e43a8e665aecff9e5a28a1570f79a552c8fcc44fb9d7024727b52a53818393f4ca75632d748f6b1a0ff6d8c889954733bdd69a4c4d9ef6e391168068edd4f4b1b44d58c0c8d899f09ce824614ab09852a894e78d8b5e0079fae2920eec8f9e13b83d3386f02fa20555cf5b142ce31e01bb5232da83df039dee00e423690d50092ed7ce0d02f00c7d33962da682d577b85afd0db219c9825540167f8f372372ee29b02d8c33334213ee3f46300322c0a3a727f752b129b43b7cfa7ac261b0eab0bfecf22ed6339d53af98262e54f45bdf9ba95720d5d6d01cc5a9821add042ba240966911ac53e5b5322affdbc6044e8ead4245de79cea657ffce3cb87da902151788b2f37bfddebc9da554e8abd166a8702f94affbf40cc807866aef1696063ea1125a5d10e3db90f1e7e7491b0437aa16eaf8dc3238c8780171b65d46632c2b6867ff7764681b43f064727de2794680b25c64bf751aa7a60161a9385085f2e40b5711601265b6ec4dffd3fd2153004429e511b06c6cc755a54e8aba2ba764d6f1b033372a5c69027162671f66f1f72fb45e23fca34301610f8809433d73b6190eaeea8b09d4cd9df2c7198d1d242a1bf35b3bef9c0dd26afdb57f38268f037265668a9b0b1195fab3c8dc2511995028c319ec2ad8a50761e38816ba411d07027ee3a6c708c2354ed95accbf7a0894e4f754990febe5e01b3a0183f488a9edf092968c9f58fcf8d2e3c018d0a46d76b9a47d76a5920a8c11dd4fd0447fbc8a269517ee738c6c85481d308aa188a3b11f6382daa91c341f56da6af24833fe45407d8060a937414136794f1cac6a495a40b3ffa748f881dd02e34f9cbf2ad4ac2aba40c3bfac74b802cfa2b8b8b2f5d8bae0d0a7ca3815addea278535581b447caba8c12863fd787d64b7e17135073da21ac8cfc81d62040fa18f2cb54f45ba3ab7d0c1eebd53d349e4a33e954f4d5c65eaef53c75ea0a4ec77f85d5051cbc37e25827e22c1e3f13273a59c9ac1c4491bec497400e7a0fae84fa98ec453261a37f009127ef1ae4233af7102f9890b8d562008b96bf908a17766558e904e2edf7be9524e0cc422df8ce5b80328717494c941789e83dc90d3775cd5d837a808e1d36a696ab4cd9305e3ca9037e2539db9c26cfed38c3495c884bf2a04b67a5b446f2b5cd9486fc01e95281d945b94c828df382c25ed977de994004b6079a566c5e72c866f32246d73d7ba837374790907d1c5a4fefbeb3b93dbf883991ce4fb83479cd3b2db7ad14a69ec68ac16e59b95f5db5b36845be0750894701dc5d767d9e4389ab0361eaf164305f8a70adce3adb5508e2cc93067de335fff36c39d9e7bad2b6bf554edba0f69cc75383f7591d0161c769d84e99e594b876c413f453801a826ef8cf6b6be31120e762b752372a9157dd238ecb331c4632c201546c0c47d2e311eb17a0945d280a3d7fe607280d08ea19d1137dda1498f584dab958171abcb2fba225f34f5e07eb3eaa829413d1b7e15093c083f2e09141c4c0bebf4240de1a0976b440867fab61a6bf60c56f3a993e464fdc7f6bdd1d245405cece633a731f890e61b7d570b17c001d86ab07cd2502ef3f0c852dd2e81bca787bb7041bb7123448c27b2a39025bf012da1a7200d897fba7e54aeccd6a8009b8d2f56c9ff9dcdd155ca086ff3dc9d863ad46a7d1bd524230f4fbe2c7f4477ffb499a827a649696cba17908bf7fb3d8b8ab1e2fb1a29aa25e898e64887f99141aa804aca0e7bbedd9ef172520bcdf378dd864682da2c70e6a7aa68cabde2913b2b7abaedbd60f64fb0f630868ba9066ab554942d3a680d84d6002aae325a78f138403c45fef6012fbfe32bded3cd24e4d86d59ca8d9804a3cb09f03fee302832af0b5f6b650b7727783db68151b8952f4584f7718a3dea6a03545cb9df510ba90c343b366f82e62271b1fac63ac79a5868ce517afce8ba9714c2bc40de67eda8497073a2503cc989a8be5b68c0e911e489eb492a14186ff6c0c0cd8b284f5fc3b7a80ceb9f38e65902de14cd620eb5a4f721f77f9927c9e3ceed47f203f427fdffe04b3054386b836533ad31f429c7fb643d92aff97bfe5858a5532457f08ec6987fbd6632b6fd5d01637a20a264523d68802bd0bfe9d6e561fad1e76a903e113eb4fe106712b7211cb6497f0db3db4836085e68a30def1308f15e1ec9eba84d2e52f31fca55c3f2e9c3ca3a17fedfb120add20c5c0b6caea4a971851a6b3976242da56b72a47791aa71c83141eca643a7d28df870e2eda0143b6f8af48dd8aa761659649fbb5c9be40caa3f3a7338fa098eb50bb5111ff76a4f634445930535edfa300d362c92dcf659c89ccf824285d18abd9f106535f591e7ec548cdd351dd08e1f570bc4bfcb4ad928c83142bb45c01e9ba67f83add420f98bf6afa74f0281dd559eb191c8b00f4c445309c405f068b05d1d90732c5c4bc800c", 0x1000}, {&(0x7f0000000500)="14fb6e48f4e112cc07a801b48e", 0x7}, {&(0x7f0000000540)="1bc783f9fcaefb2616ba1a02040d8b30fdf5cbf5a1b7e7dbb2cbf7a6ad5c4081678f5992209f58b45b670dae2b8b375b39fd1de3004b21c6aa92a997d5609f767230f015e0d39648bac8bd00c4223a9307a316b77e0880ae90b90270b7d431dd406fc7aa07f87e39b2f3c033c7623e", 0x6f}, {&(0x7f00000006c0)="c62c03b69772297d0e35852776c38dd72bb8d12bae77c4ea644c1fb271173fae89e0f1a3393cc9d4022ac0ebad7b4bd954ad05de6f689a6ccf7b4f18120e612aa879cbe2358694e0d120c7aa2c7ff9994f63eb32f978308294cebb779fb76eb3955a61f961bbfc", 0x67}], 0x5}, 0x0) (async)
socket$netlink(0x10, 0x3, 0xb)
r11 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r11, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r12, @ANYBLOB="00012abd7000fedbdf250100000004000300100002800c0001800800010007000000540001800800030000000000080003000300000014000200000000000000001400020077673000000000000000000000000000080003000200000008000100"/106, @ANYRES32=r7, @ANYBLOB="080003000100000004000300500002804c00018008000100060000000800010007000000080001000600000008000100060000000800010005000000080001000200000008000100010000000800010004000000080001000800000004000300"], 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 64)
sendmsg$rds(r11, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@fadd={0x58, 0x114, 0x6, {{}, 0xfffffffffffffffe, 0x0}}], 0x58}, 0x0) (rerun: 64)

1.209062079s ago: executing program 2 (id=1081):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000240))
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x70, "983c0c0d41325688ca02985d12c42acab873aa7635be55e8a6100e7490c473dc9fce72961dfcc6dcf404b6a3e80fb2041a07646b37555bea29e6b03af975b071e39d3b66734c204c3a7934f83a48da636d9a325ba469330802127049ec4845bc0b7adc98ca1c514d4e7332607e53fe06"}, &(0x7f0000000140)=0x78)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000004000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$igmp6(0xa, 0x3, 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$packet(r4, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

251.589295ms ago: executing program 2 (id=1082):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x2000000, 0x4)
ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x200000, 'syz1\x00', @default, 0x2, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x4}, @TCA_CODEL_CE_THRESHOLD={0xffffffffffffff79}]}}]}, 0x44}}, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x200440aa)

121.867768ms ago: executing program 2 (id=1083):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0xfffd, 0x3, @loopback}, 0x1c) (async)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0xfffd, 0x3, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async)
r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
bind$ax25(r3, &(0x7f0000000380)={{0x3, @null, 0x1}, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x3c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$ax25_int(r3, 0x101, 0x1, &(0x7f0000000000)=0xfff, 0x4)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000011c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000018400180140002000a007464657673696d3000000000000008000700030010000e42be23903f7a4bb8f17a570dadc7a6d9d92d2d0f9adf8000311785d323c906fc496ffbdf8746a6fbb7493d9cd8a0506a122e7dea02f3f56e5c116cb84112faee095d11aa9ef9a58738df139b17065ffb4c2d07d08de443ab83ffed52c24fdf8f408526cd859cc2c1303c723a7092cc739510c7542ee9fd0b533863de98d040e0339da944526a41470704980704f5f28336d853803b4a55f91f9f0ee0b6cd7e1ba78fb94664e7edffb63d8a0bc4f7452985c5d506920ce3fdb736e472b66e43d16cb18555b86a652fe8"], 0x34}}, 0x0)

0s ago: executing program 2 (id=1084):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0xfffffffffffffffe, r0, 0x0, 0x8000000000000000}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x11c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x58}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x60, 0x2d, 0x0, 0x1, [{0x1d, 0x0, @random="0187fdf1a662bef4bbbfc96ac2827f806f185ed3a84fe30a39"}, {0xa, 0x0, @default_ap_ssid}, {0x1a, 0x0, @random="a5cd54f169fc4970a1e33b3e92d78c4cff3ba4fe5682"}, {0x12, 0x0, @random="a88985f5346d0dea1c3d6d7c5803"}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x74, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x40}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="2f1868a8b4b5"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xf, 0x1, @random="015303adc7d98d6edc4798"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x8, 0x1, @random="dda03fec"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xd, 0x1, @random="3125b8ead8c34f6013"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xe, 0x1, @random="2dc5b54550faaf280e08"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x11c}}, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000007c0)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f00000000c0)={'wlan1\x00', @random="0100ffffff7f"})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={&(0x7f0000000540)="6e5a396384d1b899cdbeccc338c4deb97006421ff29312ac82a3ad14220bcda4c303617547e6057b70e656c5e3095da13f0ae25eae575d21d7a1cc0c9c863de5e7680e77b6baea56fac65ae6f6a6f0ba06bb3da16b5b852be4a62c4ff00926e4d68857031258e0fc8260fe0439cc6a2e90bcf814033ace1c1179fc02e75b948cf1eb2e5fece82e06b1da2c8ced5cebcc", &(0x7f00000006c0)=""/123, &(0x7f0000000440)="3608ddc72f84b5906ec9b5203e69302b220a908daddae6521708f3156b440c54ff06247ed73b48d13199f338ff956e103b1d7a008f765eca", &(0x7f0000000740)="a1f915fe60953058085e50bde4e1e32fcef65982a42f5ab2bad04bea771f0b4a42cd0166f7ff91d339cce38821ca4a811cd83135da3cc5abfe9c5ebe3a02a4b1", 0x9, r0, 0x4}, 0x38)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

kernel console output (not intermixed with test programs):

ng as an active interface with an up link
[  142.219498][ T8833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.331491][ T8833] team0: Port device team_slave_0 added
[  142.356220][ T8833] team0: Port device team_slave_1 added
[  142.458860][ T8833] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.474905][ T8833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.509828][ T8833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.576448][ T8833] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.597708][ T8833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.652616][ T8833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.943055][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.999021][ T8871] chnl_net:caif_netlink_parms(): no params data found
[  143.028313][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.058318][ T8833] hsr_slave_0: entered promiscuous mode
[  143.069427][ T8833] hsr_slave_1: entered promiscuous mode
[  143.073777][   T53] Bluetooth: hci2: command tx timeout
[  143.081736][ T8833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  143.090426][ T8833] Cannot create hsr debugfs directory
[  143.124939][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.140893][ T8879] chnl_net:caif_netlink_parms(): no params data found
[  143.225780][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.361493][ T8871] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.369012][ T8871] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.376767][ T8871] bridge_slave_0: entered allmulticast mode
[  143.383677][   T53] Bluetooth: hci1: command tx timeout
[  143.385189][ T8871] bridge_slave_0: entered promiscuous mode
[  143.436078][ T8879] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.452378][ T8879] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.462555][ T8879] bridge_slave_0: entered allmulticast mode
[  143.480853][ T8879] bridge_slave_0: entered promiscuous mode
[  143.500709][ T8871] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.520006][ T8871] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.533721][ T8871] bridge_slave_1: entered allmulticast mode
[  143.540338][ T8871] bridge_slave_1: entered promiscuous mode
[  143.580226][ T8879] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.589952][ T8879] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.598169][ T8879] bridge_slave_1: entered allmulticast mode
[  143.606855][ T8879] bridge_slave_1: entered promiscuous mode
[  143.623363][   T53] Bluetooth: hci4: command tx timeout
[  143.671896][ T8871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  143.684357][ T8871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  143.759807][ T8879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  143.827477][   T12] bridge_slave_1: left allmulticast mode
[  143.834108][   T12] bridge_slave_1: left promiscuous mode
[  143.839885][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.851097][   T12] bridge_slave_0: left allmulticast mode
[  143.860472][   T12] bridge_slave_0: left promiscuous mode
[  143.893868][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.042798][ T8955] netlink: 76 bytes leftover after parsing attributes in process `syz.0.791'.
[  144.275498][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  144.286083][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.296450][   T12] bond0 (unregistering): Released all slaves
[  144.307853][ T8879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.370904][ T8871] team0: Port device team_slave_0 added
[  144.497647][ T8871] team0: Port device team_slave_1 added
[  144.519992][ T8879] team0: Port device team_slave_0 added
[  144.529137][ T8879] team0: Port device team_slave_1 added
[  144.585416][ T8871] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.592404][ T8871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.650989][ T8871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.691829][ T8971] netlink: 'syz.2.797': attribute type 29 has an invalid length.
[  144.713685][ T8871] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.721028][ T8871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.747430][ T8871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.759388][ T8974] netlink: 548 bytes leftover after parsing attributes in process `syz.2.797'.
[  144.778046][ T8971] netlink: 'syz.2.797': attribute type 29 has an invalid length.
[  144.801700][ T8879] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.816293][ T8879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.847040][ T8879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.911495][ T8879] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.920220][ T8879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.946337][ T8879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.968267][   T12] hsr_slave_0: left promiscuous mode
[  144.977096][   T12] hsr_slave_1: left promiscuous mode
[  144.988770][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.996714][ T8981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.800'.
[  144.998115][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.016063][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.024280][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.041393][   T12] veth1_macvtap: left promiscuous mode
[  145.046980][   T12] veth0_macvtap: left promiscuous mode
[  145.052490][   T12] veth1_vlan: left promiscuous mode
[  145.058675][   T12] veth0_vlan: left promiscuous mode
[  145.148323][   T53] Bluetooth: hci2: command tx timeout
[  145.435044][   T12] team0 (unregistering): Port device team_slave_1 removed
[  145.467357][   T53] Bluetooth: hci1: command tx timeout
[  145.480571][   T12] team0 (unregistering): Port device team_slave_0 removed
[  145.709506][   T53] Bluetooth: hci4: command tx timeout
[  145.839631][ T8983] netlink: 80 bytes leftover after parsing attributes in process `syz.0.799'.
[  145.870202][ T8871] hsr_slave_0: entered promiscuous mode
[  145.895183][ T8871] hsr_slave_1: entered promiscuous mode
[  145.903870][ T8871] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  145.911457][ T8871] Cannot create hsr debugfs directory
[  145.953546][ T8879] hsr_slave_0: entered promiscuous mode
[  145.963530][ T8879] hsr_slave_1: entered promiscuous mode
[  145.983494][ T8879] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  145.991100][ T8879] Cannot create hsr debugfs directory
[  146.213068][ T8998] xt_bpf: check failed: parse error
[  146.295588][ T8833] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  146.326156][ T8833] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  146.368163][ T8833] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  146.393983][ T8833] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  146.547431][ T8871] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.572313][ T9016] netlink: 'syz.2.810': attribute type 27 has an invalid length.
[  146.606566][ T9016] netlink: 'syz.2.810': attribute type 27 has an invalid length.
[  146.640554][ T8871] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.797387][ T8871] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.813062][ T9034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.812'.
[  146.813074][ T9035] netlink: 'syz.2.812': attribute type 7 has an invalid length.
[  146.813091][ T9035] netlink: 'syz.2.812': attribute type 8 has an invalid length.
[  146.839179][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.812'.
[  146.851114][ T9034] netlink: 'syz.2.812': attribute type 7 has an invalid length.
[  146.860758][ T9034] netlink: 'syz.2.812': attribute type 8 has an invalid length.
[  146.870533][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.812'.
[  146.908997][ T8871] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.956494][ T8833] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.988666][ T8833] 8021q: adding VLAN 0 to HW filter on device team0
[  147.023702][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.030832][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.063833][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.071170][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.190498][ T8871] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  147.224784][   T53] Bluetooth: hci2: command tx timeout
[  147.225621][ T8871] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  147.309896][ T8871] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  147.320438][ T9050] netlink: 40 bytes leftover after parsing attributes in process `syz.0.818'.
[  147.353890][ T8871] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  147.557143][   T53] Bluetooth: hci1: command tx timeout
[  147.606643][ T9062] xfrm0 speed is unknown, defaulting to 1000
[  147.630777][ T9062] lo speed is unknown, defaulting to 1000
[  147.677417][ T8833] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.784323][   T53] Bluetooth: hci4: command tx timeout
[  147.831275][ T8871] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.862772][ T8879] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  147.880703][ T8879] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  147.897533][ T8879] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  147.914586][ T8879] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  148.014486][ T8833] veth0_vlan: entered promiscuous mode
[  148.026221][ T8833] veth1_vlan: entered promiscuous mode
[  148.089218][ T8871] 8021q: adding VLAN 0 to HW filter on device team0
[  148.130592][ T3469] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.137764][ T3469] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.155719][ T8833] veth0_macvtap: entered promiscuous mode
[  148.169667][ T9078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.178800][ T9078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.189381][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.196512][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.238176][ T8833] veth1_macvtap: entered promiscuous mode
[  148.257209][ T9078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.260263][ T8871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  148.300357][ T9078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.345570][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.356527][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.367928][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.378598][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.411444][ T8833] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.440692][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.465546][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.484107][ T8833] batman_adv: batadv0: Interface activated: batadv_slave_1
[  148.528710][ T8879] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.548062][ T9085] vlan2: entered promiscuous mode
[  148.562594][ T9085] bond0: entered promiscuous mode
[  148.568048][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.578386][ T9085] bond_slave_0: entered promiscuous mode
[  148.585135][ T9085] bond_slave_1: entered promiscuous mode
[  148.590931][ T9085] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  148.628877][ T9085] bond0: left promiscuous mode
[  148.634559][ T9085] bond_slave_0: left promiscuous mode
[  148.643597][ T9085] bond_slave_1: left promiscuous mode
[  148.653017][ T9085] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  148.671703][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.828'.
[  148.689070][ T8833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.698112][ T8833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.708136][ T8833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.719189][ T8833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.748667][ T8871] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.802673][ T8879] 8021q: adding VLAN 0 to HW filter on device team0
[  148.827672][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.834849][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.872528][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.879697][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.886419][ T9093] netlink: 24 bytes leftover after parsing attributes in process `syz.0.829'.
[  148.932234][ T9097] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  149.040117][ T8879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  149.044210][ T3482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.071616][ T8871] veth0_vlan: entered promiscuous mode
[  149.107818][ T3482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.132526][ T8871] veth1_vlan: entered promiscuous mode
[  149.162430][ T9099] netlink: 'syz.2.831': attribute type 10 has an invalid length.
[  149.179256][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.183511][ T9099] hsr0: entered promiscuous mode
[  149.192163][ T9099] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  149.206442][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.232899][ T9099] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  149.264280][ T9099] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  149.304326][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.304512][   T53] Bluetooth: hci2: command tx timeout
[  149.336028][ T8871] veth0_macvtap: entered promiscuous mode
[  149.389552][ T8871] veth1_macvtap: entered promiscuous mode
[  149.461188][ T8871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.478024][ T8871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.509089][ T8871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.525173][ T8871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.539718][ T8871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.550973][ T8871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.561726][ T9115] netlink: 192 bytes leftover after parsing attributes in process `syz.0.835'.
[  149.571882][ T9115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'.
[  149.582830][ T8871] batman_adv: batadv0: Interface activated: batadv_slave_0
[  149.616257][ T8871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.627318][ T8871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.637706][ T8871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.662722][ T8871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.675453][ T8871] batman_adv: batadv0: Interface activated: batadv_slave_1
[  149.720158][ T8879] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.729275][ T8871] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.740128][ T8871] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.749696][ T8871] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.759509][ T8871] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.863886][   T53] Bluetooth: hci4: command tx timeout
[  149.991239][ T3469] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.009155][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'.
[  150.018170][ T9130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.838'.
[  150.065074][ T9129] netlink: 44 bytes leftover after parsing attributes in process `syz.0.838'.
[  150.160822][ T3469] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.286988][ T3469] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.313451][ T3482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.321305][ T3482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.357505][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.371175][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.381215][ T3469] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.409364][ T8879] veth0_vlan: entered promiscuous mode
[  150.424015][ T8879] veth1_vlan: entered promiscuous mode
[  150.496327][ T8879] veth0_macvtap: entered promiscuous mode
[  150.507075][ T8879] veth1_macvtap: entered promiscuous mode
[  150.524931][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.535831][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.546025][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.556896][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.566870][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.577357][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.587321][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.598077][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.609982][ T8879] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.622794][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.634237][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.644764][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.656645][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.667730][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.678452][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.689139][ T8879] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.701196][ T8879] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.710636][ T8879] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.719626][ T8879] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.728748][ T8879] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.799744][ T3469] bridge_slave_1: left allmulticast mode
[  150.805869][ T3469] bridge_slave_1: left promiscuous mode
[  150.811519][ T3469] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.820199][ T3469] bridge_slave_0: left allmulticast mode
[  150.827151][ T3469] bridge_slave_0: left promiscuous mode
[  150.832803][ T3469] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.964722][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.841'.
[  151.310738][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  151.332828][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  151.341814][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  151.349820][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  151.357541][ T5148] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  151.364912][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  151.541319][ T3469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  151.558767][ T5148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  151.572521][ T5148] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  151.581025][ T5148] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  151.588603][ T3469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  151.589352][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  151.606430][ T5148] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  151.614905][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  151.626303][ T3469] bond0 (unregistering): Released all slaves
[  151.679641][ T9149] xfrm0 speed is unknown, defaulting to 1000
[  151.688038][ T9149] lo speed is unknown, defaulting to 1000
[  151.745523][ T3665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.758867][ T9152] xfrm0 speed is unknown, defaulting to 1000
[  151.800862][ T3665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.811689][ T9152] lo speed is unknown, defaulting to 1000
[  151.996652][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.845'.
[  152.071432][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.088707][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.158578][ T9172] veth0_to_hsr: entered promiscuous mode
[  152.285111][ T9172] hsr_slave_0 (unregistering): left promiscuous mode
[  152.300951][ T9149] chnl_net:caif_netlink_parms(): no params data found
[  152.319323][ T9176] vlan2: entered allmulticast mode
[  152.325215][ T9176] bond0: entered allmulticast mode
[  152.330372][ T9176] bond_slave_0: entered allmulticast mode
[  152.337862][ T9176] bond_slave_1: entered allmulticast mode
[  152.344302][ T9176] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  152.357010][ T9176] bond0: left allmulticast mode
[  152.361905][ T9176] bond_slave_0: left allmulticast mode
[  152.367511][ T9176] bond_slave_1: left allmulticast mode
[  152.372983][ T9176] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  152.411547][ T3469] hsr_slave_0: left promiscuous mode
[  152.417861][ T3469] hsr_slave_1: left promiscuous mode
[  152.425686][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  152.434785][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.444515][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.451921][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_1
[  152.492444][ T3469] veth1_macvtap: left promiscuous mode
[  152.500477][ T3469] veth0_macvtap: left promiscuous mode
[  152.507086][ T3469] veth1_vlan: left promiscuous mode
[  152.512407][ T3469] veth0_vlan: left promiscuous mode
[  153.007180][ T3469] team0 (unregistering): Port device team_slave_1 removed
[  153.049791][ T3469] team0 (unregistering): Port device team_slave_0 removed
[  153.473717][ T5148] Bluetooth: hci1: command tx timeout
[  153.746832][ T5148] Bluetooth: hci2: command tx timeout
[  153.757823][ T9191] SET target dimension over the limit!
[  153.765267][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  153.775099][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  153.782785][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  153.802342][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  153.810697][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  153.814726][ T9149] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.828739][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  153.847132][ T9149] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.879145][ T9149] bridge_slave_0: entered allmulticast mode
[  153.887140][ T9149] bridge_slave_0: entered promiscuous mode
[  153.935170][ T9152] chnl_net:caif_netlink_parms(): no params data found
[  153.981892][ T9149] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.989694][ T9149] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.997201][ T9149] bridge_slave_1: entered allmulticast mode
[  154.004300][ T9149] bridge_slave_1: entered promiscuous mode
[  154.061972][ T9149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.139531][ T9149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.176696][ T9197] xfrm0 speed is unknown, defaulting to 1000
[  154.219369][ T9197] lo speed is unknown, defaulting to 1000
[  154.250079][ T9149] team0: Port device team_slave_0 added
[  154.332003][ T9149] team0: Port device team_slave_1 added
[  154.368603][ T9152] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.383305][ T9152] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.390506][ T9152] bridge_slave_0: entered allmulticast mode
[  154.397545][ T9152] bridge_slave_0: entered promiscuous mode
[  154.407907][ T9152] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.415147][ T9152] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.422340][ T9152] bridge_slave_1: entered allmulticast mode
[  154.438502][ T9152] bridge_slave_1: entered promiscuous mode
[  154.518038][ T3469] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.535380][ T9149] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.542369][ T9149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.570663][ T9149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.625250][ T9152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.636005][ T9149] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.642976][ T9149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.687246][ T9149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.730711][ T3469] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.751075][ T9152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.831111][ T3469] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.875814][ T9152] team0: Port device team_slave_0 added
[  154.905246][ T9152] team0: Port device team_slave_1 added
[  154.911783][ T9233] netlink: 216 bytes leftover after parsing attributes in process `syz.2.863'.
[  154.934441][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.863'.
[  154.945570][ T3469] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.006837][ T9149] hsr_slave_0: entered promiscuous mode
[  155.014622][ T9149] hsr_slave_1: entered promiscuous mode
[  155.020798][ T9149] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  155.028460][ T9149] Cannot create hsr debugfs directory
[  155.086961][ T9152] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.100227][ T9152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.138360][ T9152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.201322][ T9236] syzkaller0: entered promiscuous mode
[  155.208030][ T9236] syzkaller0: entered allmulticast mode
[  155.222960][ T9152] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.230680][ T9152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.257197][ T9152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.545844][ T5148] Bluetooth: hci1: command tx timeout
[  155.784105][ T5148] Bluetooth: hci2: command tx timeout
[  155.866807][ T5148] Bluetooth: hci4: command tx timeout
[  156.818327][ T9249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.867'.
[  157.006077][ T9152] hsr_slave_0: entered promiscuous mode
[  157.020018][ T9152] hsr_slave_1: entered promiscuous mode
[  157.034397][ T9152] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  157.053268][ T9152] Cannot create hsr debugfs directory
[  157.114895][ T9264] netlink: 40 bytes leftover after parsing attributes in process `syz.0.871'.
[  157.141952][ T9264] netlink: 'syz.0.871': attribute type 1 has an invalid length.
[  157.147845][ T3469] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.161810][ T9264] netlink: 'syz.0.871': attribute type 4 has an invalid length.
[  157.176123][ T9264] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.871'.
[  157.192592][ T9197] chnl_net:caif_netlink_parms(): no params data found
[  157.250201][ T3469] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.362043][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'.
[  157.366195][ T3469] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.535007][ T3469] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.627622][ T5148] Bluetooth: hci1: command tx timeout
[  157.760989][ T9197] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.778076][ T9197] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.793714][ T9197] bridge_slave_0: entered allmulticast mode
[  157.816177][ T9197] bridge_slave_0: entered promiscuous mode
[  157.827621][ T9197] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.835147][ T9197] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.842345][ T9197] bridge_slave_1: entered allmulticast mode
[  157.850522][ T9197] bridge_slave_1: entered promiscuous mode
[  157.866801][ T5148] Bluetooth: hci2: command tx timeout
[  157.944037][ T5148] Bluetooth: hci4: command tx timeout
[  157.986050][ T9299] netlink: 64 bytes leftover after parsing attributes in process `syz.2.881'.
[  157.995419][ T9299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.881'.
[  158.006046][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'.
[  158.016065][ T9299] sctp: [Deprecated]: syz.2.881 (pid 9299) Use of int in max_burst socket option.
[  158.016065][ T9299] Use struct sctp_assoc_value instead
[  158.019192][ T9197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  158.046332][ T9197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  158.155797][ T3469] bridge_slave_1: left allmulticast mode
[  158.172535][ T3469] bridge_slave_1: left promiscuous mode
[  158.180209][ T3469] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.209150][ T3469] bridge_slave_0: left allmulticast mode
[  158.228888][ T3469] bridge_slave_0: left promiscuous mode
[  158.235806][ T3469] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.248118][ T3469] bridge_slave_1: left allmulticast mode
[  158.254020][ T3469] bridge_slave_1: left promiscuous mode
[  158.264194][ T3469] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.280558][ T3469] bridge_slave_0: left allmulticast mode
[  158.286611][ T3469] bridge_slave_0: left promiscuous mode
[  158.292330][ T3469] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.834683][ T3469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.846657][ T3469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.857161][ T3469] bond0 (unregistering): Released all slaves
[  158.962551][ T3469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.972889][ T3469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.982885][ T3469] bond0 (unregistering): Released all slaves
[  158.997665][ T9197] team0: Port device team_slave_0 added
[  159.008402][ T9197] team0: Port device team_slave_1 added
[  159.030426][ T9310] ipip0: entered promiscuous mode
[  159.272335][ T9197] batman_adv: batadv0: Adding interface: batadv_slave_0
[  159.282836][ T9197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.318139][ T9197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  159.345869][ T9197] batman_adv: batadv0: Adding interface: batadv_slave_1
[  159.362087][ T9197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.369162][ T9325] netlink: 224 bytes leftover after parsing attributes in process `syz.2.888'.
[  159.393734][ T9197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  159.566383][ T9329] hsr0: entered allmulticast mode
[  159.574822][ T9329] hsr_slave_1: entered allmulticast mode
[  159.603698][ T9149] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  159.618463][ T9333] hsr_slave_1: left promiscuous mode
[  159.631773][ T9333] hsr0 (unregistering): left allmulticast mode
[  159.647835][ T9197] hsr_slave_0: entered promiscuous mode
[  159.655871][ T9197] hsr_slave_1: entered promiscuous mode
[  159.662407][ T9197] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  159.671112][ T9197] Cannot create hsr debugfs directory
[  159.691862][ T9149] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  159.703804][ T5148] Bluetooth: hci1: command tx timeout
[  159.779895][ T9338] netlink: 'syz.2.892': attribute type 3 has an invalid length.
[  159.788347][ T9149] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  159.814102][ T9149] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  159.843838][ T9340] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  159.919700][ T9340] __nla_validate_parse: 2 callbacks suppressed
[  159.919720][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.893'.
[  159.944075][ T5148] Bluetooth: hci2: command tx timeout
[  160.023969][ T5148] Bluetooth: hci4: command tx timeout
[  160.108770][ T3469] hsr_slave_0: left promiscuous mode
[  160.123451][ T3469] hsr_slave_1: left promiscuous mode
[  160.129579][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.137604][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.148759][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.156740][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.167897][ T3469] hsr_slave_0: left promiscuous mode
[  160.170577][ T9353] ieee802154 phy0 wpan0: encryption failed: -22
[  160.180469][ T3469] hsr_slave_1: left promiscuous mode
[  160.186701][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.194675][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.211766][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.221047][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.272011][ T3469] veth1_macvtap: left promiscuous mode
[  160.277793][ T3469] veth0_macvtap: left promiscuous mode
[  160.283853][ T3469] veth1_vlan: left promiscuous mode
[  160.289177][ T3469] veth0_vlan: left promiscuous mode
[  160.295436][ T3469] veth1_macvtap: left promiscuous mode
[  160.300963][ T3469] veth0_macvtap: left promiscuous mode
[  160.306647][ T3469] veth1_vlan: left promiscuous mode
[  160.311914][ T3469] veth0_vlan: left promiscuous mode
[  160.763443][ T3469] team0 (unregistering): Port device team_slave_1 removed
[  160.806002][ T3469] team0 (unregistering): Port device team_slave_0 removed
[  161.441715][ T3469] team0 (unregistering): Port device team_slave_1 removed
[  161.482300][ T3469] team0 (unregistering): Port device team_slave_0 removed
[  161.980626][ T9149] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.068469][ T9149] 8021q: adding VLAN 0 to HW filter on device team0
[  162.107959][ T5148] Bluetooth: hci4: command tx timeout
[  162.151921][ T9149] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  162.162539][ T9149] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  162.174993][   T54] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.182157][   T54] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.201439][   T54] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.208552][   T54] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.341203][ T9374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.902'.
[  162.402482][ T9375] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  162.548165][ T9152] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  162.573772][ T9149] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.584139][ T9152] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  162.599381][ T9152] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  162.630450][ T9152] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  162.673085][ T9197] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  162.687917][ T9197] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  162.700227][ T9197] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  162.717133][ T9197] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  162.760025][ T9149] veth0_vlan: entered promiscuous mode
[  162.789724][ T9149] veth1_vlan: entered promiscuous mode
[  162.819557][ T9361] Bluetooth: hci3: Opcode 0x0401 failed: -4
[  162.852472][ T9152] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.888503][ T9149] veth0_macvtap: entered promiscuous mode
[  162.899186][ T9152] 8021q: adding VLAN 0 to HW filter on device team0
[  162.922590][ T9149] veth1_macvtap: entered promiscuous mode
[  162.952806][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.959954][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.978052][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.985207][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.027502][ T9197] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.054846][ T9149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.066455][ T9149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.076967][ T9149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.088089][ T9149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.099273][ T9149] batman_adv: batadv0: Interface activated: batadv_slave_0
[  163.129629][ T9197] 8021q: adding VLAN 0 to HW filter on device team0
[  163.147078][ T9149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.163983][ T9149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.183022][ T9149] batman_adv: batadv0: Interface activated: batadv_slave_1
[  163.195925][ T9393] netlink: 40 bytes leftover after parsing attributes in process `syz.2.906'.
[  163.206188][ T9392] netlink: 40 bytes leftover after parsing attributes in process `syz.2.906'.
[  163.211980][ T9152] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  163.234269][ T9152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  163.260523][ T3665] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.267688][ T3665] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.298593][ T9149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.309523][ T9149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.327315][ T9149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.337954][ T9149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.372405][   T54] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.379587][   T54] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.578156][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.624368][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.635142][ T3665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.669470][ T3665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.697332][ T9152] 8021q: adding VLAN 0 to HW filter on device batadv0
[  163.790169][ T9152] veth0_vlan: entered promiscuous mode
[  163.806189][ T9152] veth1_vlan: entered promiscuous mode
[  164.034721][ T9152] veth0_macvtap: entered promiscuous mode
[  164.043366][ T9152] veth1_macvtap: entered promiscuous mode
[  164.057538][ T9152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.068337][ T9152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.078397][ T9152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.088885][ T9152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.098776][ T9152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.109435][ T9152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.109496][ T5148] Bluetooth: hci3: command 0x0401 tx timeout
[  164.120510][ T9152] batman_adv: batadv0: Interface activated: batadv_slave_0
[  164.138040][ T9152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.148908][ T9152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.159075][ T9152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.169613][ T9152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.180819][ T9152] batman_adv: batadv0: Interface activated: batadv_slave_1
[  164.192243][ T9152] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.201020][ T9152] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.209808][ T9152] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.218568][ T9152] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.227603][ T9426] netlink: 892 bytes leftover after parsing attributes in process `syz.0.914'.
[  164.262962][ T9197] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.309443][ T9424] tipc: Started in network mode
[  164.341789][ T9424] tipc: Node identity 8a578a0c4b47, cluster identity 4711
[  164.352537][ T9424] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.448579][ T9425] tipc: Resetting bearer <eth:syzkaller0>
[  164.533865][ T9423] tipc: Resetting bearer <eth:syzkaller0>
[  165.376840][ T8913] tipc: Node number set to 3239086604
[  166.225530][ T9423] tipc: Disabling bearer <eth:syzkaller0>
[  166.277637][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.303384][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.363848][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  166.374588][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  166.384088][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  166.393049][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  166.413675][ T5834] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  166.421043][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  166.432111][ T1005] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.544723][ T9197] veth0_vlan: entered promiscuous mode
[  166.597327][ T3543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.610737][ T3543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.651044][ T1005] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.669079][ T9197] veth1_vlan: entered promiscuous mode
[  166.678129][ T9452] xfrm0 speed is unknown, defaulting to 1000
[  166.704666][ T9452] lo speed is unknown, defaulting to 1000
[  166.754106][ T9197] veth0_macvtap: entered promiscuous mode
[  166.825641][ T9197] veth1_macvtap: entered promiscuous mode
[  167.002433][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.032153][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.053995][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.073665][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.084988][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.096093][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.106906][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.118230][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.130131][ T9197] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.140937][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.151864][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.162104][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.174317][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.193949][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.206213][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.223075][ T9197] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.291656][ T1005] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.333933][ T9489] syz.2.931[9489] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  167.334037][ T9489] syz.2.931[9489] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  167.346810][ T9489] syz.2.931[9489] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  167.356564][ T9197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.373896][ T9489] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[  167.389196][ T9489] netlink: 14 bytes leftover after parsing attributes in process `syz.2.931'.
[  167.398964][ T9197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.423578][ T9197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.432319][ T9197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.445398][ T9493] netlink: 48 bytes leftover after parsing attributes in process `syz.2.931'.
[  167.477298][ T9452] chnl_net:caif_netlink_parms(): no params data found
[  167.580973][ T9500] netlink: 'syz.0.934': attribute type 3 has an invalid length.
[  167.622610][ T1005] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.939003][ T9452] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.963415][ T9452] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.970674][ T9452] bridge_slave_0: entered allmulticast mode
[  167.971787][ T9509] netlink: 'syz.0.935': attribute type 28 has an invalid length.
[  167.981359][ T9452] bridge_slave_0: entered promiscuous mode
[  167.998089][ T9452] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.006888][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  168.015671][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  168.022240][ T9509] netlink: 'syz.0.935': attribute type 3 has an invalid length.
[  168.023325][ T9452] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.037902][ T9452] bridge_slave_1: entered allmulticast mode
[  168.044103][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  168.052059][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  168.059878][ T9509] netlink: 132 bytes leftover after parsing attributes in process `syz.0.935'.
[  168.059949][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  168.078137][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  168.082823][ T9452] bridge_slave_1: entered promiscuous mode
[  168.127424][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.143574][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.187988][ T9452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.200790][ T9452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.277258][ T9452] team0: Port device team_slave_0 added
[  168.299764][ T9452] team0: Port device team_slave_1 added
[  168.327163][ T9523] netlink: 40 bytes leftover after parsing attributes in process `syz.2.938'.
[  168.340945][ T1005] bridge_slave_1: left allmulticast mode
[  168.348507][ T1005] bridge_slave_1: left promiscuous mode
[  168.355186][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.367815][ T1005] bridge_slave_0: left allmulticast mode
[  168.374625][ T1005] bridge_slave_0: left promiscuous mode
[  168.380352][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.509644][ T5148] Bluetooth: hci1: command tx timeout
[  168.709819][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  168.721057][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  168.732068][ T1005] bond0 (unregistering): Released all slaves
[  168.744265][ T9510] xfrm0 speed is unknown, defaulting to 1000
[  168.776783][ T9452] batman_adv: batadv0: Adding interface: batadv_slave_0
[  168.789537][ T9452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.823913][ T9452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  168.856962][ T9529] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  168.881682][ T9510] lo speed is unknown, defaulting to 1000
[  168.883610][ T9452] batman_adv: batadv0: Adding interface: batadv_slave_1
[  168.895092][ T3665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.902908][ T9452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.902940][ T9452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  168.951242][ T3665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.042561][ T9452] hsr_slave_0: entered promiscuous mode
[  169.075236][ T9452] hsr_slave_1: entered promiscuous mode
[  169.082974][ T9452] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  169.094874][ T9452] Cannot create hsr debugfs directory
[  169.202061][ T9538] team0: Device wg2 is of different type
[  169.296694][ T9541] xt_hashlimit: max too large, truncated to 1048576
[  169.324673][ T1005] hsr_slave_0: left promiscuous mode
[  169.333206][ T1005] hsr_slave_1: left promiscuous mode
[  169.340816][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.369598][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0
[  169.415150][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.422607][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1
[  169.439345][ T9546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.944'.
[  169.483050][ T1005] veth1_macvtap: left promiscuous mode
[  169.493895][ T1005] veth0_macvtap: left promiscuous mode
[  169.497430][ T9547] netlink: 'syz.0.944': attribute type 1 has an invalid length.
[  169.500903][ T1005] veth1_vlan: left promiscuous mode
[  169.507641][ T9547] netlink: 224 bytes leftover after parsing attributes in process `syz.0.944'.
[  169.519679][ T1005] veth0_vlan: left promiscuous mode
[  169.885724][ T1005] team0 (unregistering): Port device team_slave_1 removed
[  169.924981][ T1005] team0 (unregistering): Port device team_slave_0 removed
[  170.188851][ T5148] Bluetooth: hci2: command tx timeout
[  170.504292][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  170.515046][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  170.534373][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  170.553052][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  170.565076][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  170.586865][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  170.594629][ T5834] Bluetooth: hci1: command tx timeout
[  170.610058][ T9553] bond0: (slave team0): Releasing backup interface
[  170.646834][ T9553] bridge_slave_0: left allmulticast mode
[  170.652526][ T9553] bridge_slave_0: left promiscuous mode
[  170.658845][ T9553] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.670698][ T9553] bridge_slave_1: left allmulticast mode
[  170.677516][ T9553] bridge_slave_1: left promiscuous mode
[  170.683267][ T9553] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.698757][ T9553] bond0: (slave bond_slave_0): Releasing backup interface
[  170.711602][ T9553] bond0: (slave bond_slave_1): Releasing backup interface
[  170.737072][ T9553] team0: Port device team_slave_0 removed
[  170.769330][ T9553] team0: Port device team_slave_1 removed
[  170.776659][ T9553] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.784393][ T9553] batman_adv: batadv0: Removing interface: batadv_slave_0
[  170.792437][ T9553] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.800334][ T9553] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.849770][ T9550] xfrm0 speed is unknown, defaulting to 1000
[  170.895124][ T9557] team0: Port device wg2 added
[  170.901203][ T9553] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  170.931467][ T9550] lo speed is unknown, defaulting to 1000
[  171.026605][ T9510] chnl_net:caif_netlink_parms(): no params data found
[  171.137878][ T9561] netlink: 72 bytes leftover after parsing attributes in process `syz.0.946'.
[  171.147861][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.946'.
[  171.171780][ T9510] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.180375][ T9510] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.190624][ T9510] bridge_slave_0: entered allmulticast mode
[  171.199019][ T9510] bridge_slave_0: entered promiscuous mode
[  171.218624][ T9510] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.226824][ T9510] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.234430][ T9510] bridge_slave_1: entered allmulticast mode
[  171.241755][ T9510] bridge_slave_1: entered promiscuous mode
[  171.282982][ T9510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.298451][ T9510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.415196][ T9510] team0: Port device team_slave_0 added
[  171.424335][ T9510] team0: Port device team_slave_1 added
[  171.457811][ T1005] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.492287][ T9550] chnl_net:caif_netlink_parms(): no params data found
[  171.511284][ T9452] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  171.537308][ T9452] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  171.548602][ T9452] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  171.584861][ T1005] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.596999][ T9510] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.604621][ T9510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.631774][ T9510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.670424][ T9452] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  171.682666][ T9510] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.691114][ T9510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.719834][ T9510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  171.741240][ T1005] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.817811][ T1005] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.843972][ T9550] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.851819][ T9550] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.859405][ T9550] bridge_slave_0: entered allmulticast mode
[  171.868004][ T9550] bridge_slave_0: entered promiscuous mode
[  171.875966][ T9550] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.883300][ T9550] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.890481][ T9550] bridge_slave_1: entered allmulticast mode
[  171.897624][ T9550] bridge_slave_1: entered promiscuous mode
[  171.991825][ T9510] hsr_slave_0: entered promiscuous mode
[  171.999469][ T9510] hsr_slave_1: entered promiscuous mode
[  172.007154][ T9510] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  172.015650][ T9510] Cannot create hsr debugfs directory
[  172.027594][ T9550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.109593][ T9550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  172.114688][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.948'.
[  172.128712][ T9579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.948'.
[  172.255591][ T9550] team0: Port device team_slave_0 added
[  172.264079][ T5148] Bluetooth: hci2: command tx timeout
[  172.315259][ T9550] team0: Port device team_slave_1 added
[  172.447289][ T9594] bridge_slAve_0: renamed from lo (while UP)
[  172.481677][ T9587] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  172.506475][ T9550] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.533471][ T9550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.581480][ T9550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.584974][ T9600] netlink: 'syz.0.952': attribute type 2 has an invalid length.
[  172.664451][ T5148] Bluetooth: hci1: command tx timeout
[  172.664508][ T5834] Bluetooth: hci4: command tx timeout
[  173.426261][ T1005] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.451431][ T9608] netlink: 'syz.2.955': attribute type 64 has an invalid length.
[  173.470997][ T9550] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.478169][ T9550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.505487][ T9550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.532430][ T9452] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.588633][ T1005] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.685479][ T9550] hsr_slave_0: entered promiscuous mode
[  173.701383][ T9550] hsr_slave_1: entered promiscuous mode
[  173.711012][ T9550] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  173.719108][ T9550] Cannot create hsr debugfs directory
[  173.765038][ T1005] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.767070][ T9617] __nla_validate_parse: 2 callbacks suppressed
[  173.767088][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.957'.
[  173.793070][ T9617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.957'.
[  173.814964][ T9452] 8021q: adding VLAN 0 to HW filter on device team0
[  173.883773][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.890911][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.932873][ T1005] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.001448][ T9628] netlink: 'syz.2.959': attribute type 4 has an invalid length.
[  174.026307][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.033473][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.204688][ T1005] bridge_slave_1: left allmulticast mode
[  174.210829][ T1005] bridge_slave_1: left promiscuous mode
[  174.220841][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.247633][ T1005] bridge_slave_0: left allmulticast mode
[  174.254828][ T1005] bridge_slave_0: left promiscuous mode
[  174.260549][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.275452][ T1005] bridge_slave_1: left allmulticast mode
[  174.291344][ T1005] bridge_slave_1: left promiscuous mode
[  174.301603][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.344626][ T5834] Bluetooth: hci2: command tx timeout
[  174.344755][ T1005] bridge_slave_0: left allmulticast mode
[  174.370474][ T1005] bridge_slave_0: left promiscuous mode
[  174.393401][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.744063][ T5834] Bluetooth: hci1: command tx timeout
[  174.749505][ T5148] Bluetooth: hci4: command tx timeout
[  174.939605][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  174.950348][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  174.960688][ T1005] bond0 (unregistering): Released all slaves
[  175.068470][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  175.092293][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  175.102428][ T1005] bond0 (unregistering): Released all slaves
[  175.153737][ T9452] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  175.399620][ T9653] netlink: 20 bytes leftover after parsing attributes in process `syz.0.966'.
[  175.547360][ T9452] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.660153][ T9452] veth0_vlan: entered promiscuous mode
[  175.757933][ T9667] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  175.774381][ T9452] veth1_vlan: entered promiscuous mode
[  175.805139][ T9665] xfrm0 speed is unknown, defaulting to 1000
[  175.884376][ T1005] hsr_slave_0: left promiscuous mode
[  175.893887][ T1005] hsr_slave_1: left promiscuous mode
[  175.922090][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.941926][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.964751][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.972221][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.003274][ T1005] hsr_slave_0: left promiscuous mode
[  176.009205][ T1005] hsr_slave_1: left promiscuous mode
[  176.023683][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.031122][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.040188][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.048098][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.092275][ T1005] veth1_macvtap: left promiscuous mode
[  176.110378][ T1005] veth0_macvtap: left promiscuous mode
[  176.120647][ T1005] veth1_vlan: left promiscuous mode
[  176.128445][ T1005] veth0_vlan: left promiscuous mode
[  176.139624][ T1005] veth1_macvtap: left promiscuous mode
[  176.148944][ T1005] veth0_macvtap: left promiscuous mode
[  176.155184][ T1005] veth1_vlan: left promiscuous mode
[  176.160582][ T1005] veth0_vlan: left promiscuous mode
[  176.423443][ T5148] Bluetooth: hci2: command tx timeout
[  176.757237][ T1005] team0 (unregistering): Port device team_slave_1 removed
[  176.793787][ T1005] team0 (unregistering): Port device team_slave_0 removed
[  176.826285][ T5148] Bluetooth: hci4: command tx timeout
[  177.428561][ T1005] team0 (unregistering): Port device team_slave_1 removed
[  177.466828][ T1005] team0 (unregistering): Port device team_slave_0 removed
[  177.819045][ T9665] lo speed is unknown, defaulting to 1000
[  177.825398][ T9510] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  177.858215][ T9668] xfrm0 speed is unknown, defaulting to 1000
[  177.868448][ T9668] lo speed is unknown, defaulting to 1000
[  177.894337][ T9510] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  177.912835][ T9510] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  177.971740][ T9510] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  178.120204][ T9452] veth0_macvtap: entered promiscuous mode
[  178.171205][ T9452] veth1_macvtap: entered promiscuous mode
[  178.302999][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.314115][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.326771][ T9452] batman_adv: batadv0: Interface activated: batadv_slave_0
[  178.343225][ T9550] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  178.362802][ T9550] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  178.395238][ T9550] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  178.404385][ T9550] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  178.439980][ T9510] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.446376][ T9689] syz.2.975 uses old SIOCAX25GETINFO
[  178.476703][ T9452] batman_adv: batadv0: Interface activated: batadv_slave_1
[  178.525827][ T9452] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.535458][ T9452] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.544906][ T9452] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.554345][ T9452] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.608172][ T9510] 8021q: adding VLAN 0 to HW filter on device team0
[  178.731510][   T54] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.738675][   T54] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.764844][   T54] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.771939][   T54] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.913450][ T5148] Bluetooth: hci4: command tx timeout
[  178.948540][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.978417][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.009032][ T9550] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.071485][ T9550] 8021q: adding VLAN 0 to HW filter on device team0
[  179.102480][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.109658][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.165701][   T54] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.172839][   T54] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.196732][ T9510] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.211133][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.239358][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.302033][ T9704] netlink: 'syz.0.979': attribute type 11 has an invalid length.
[  179.405276][ T9510] veth0_vlan: entered promiscuous mode
[  179.430266][ T9510] veth1_vlan: entered promiscuous mode
[  179.578305][   T54] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.664483][ T9510] veth0_macvtap: entered promiscuous mode
[  179.731428][   T54] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.756269][ T9510] veth1_macvtap: entered promiscuous mode
[  179.806714][   T54] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.829632][ T9510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.841521][ T9510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.851861][ T9510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.862672][ T9510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.878278][ T9510] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.899560][   T54] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.921929][ T9510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.932926][ T9510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.952256][ T9510] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.962398][ T9550] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.983657][ T9510] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.992374][ T9510] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.007972][ T9510] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.020695][ T9510] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.154680][ T3665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.162549][ T3665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.208979][   T54] bridge_slave_1: left allmulticast mode
[  180.219916][   T54] bridge_slave_1: left promiscuous mode
[  180.226681][   T54] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.236604][   T54] bridge_slave_0: left allmulticast mode
[  180.242266][   T54] bridge_slave_0: left promiscuous mode
[  180.248966][   T54] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.534619][   T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  180.546719][   T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  180.557124][   T54] bond0 (unregistering): Released all slaves
[  180.570373][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.578614][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.678033][ T9550] veth0_vlan: entered promiscuous mode
[  180.738026][ T9550] veth1_vlan: entered promiscuous mode
[  180.895107][ T9550] veth0_macvtap: entered promiscuous mode
[  180.918438][ T9550] veth1_macvtap: entered promiscuous mode
[  180.996309][ T5834] Bluetooth: hci4: command tx timeout
[  181.012938][ T9550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.042626][ T9550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.086662][ T9550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.098177][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  181.105107][ T9550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.119102][ T9550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.129913][ T9550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.130306][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  181.147883][ T9550] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.156708][ T5847] Bluetooth: hci0: command 0x0406 tx timeout
[  181.166876][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  181.179173][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  181.189585][ T5148] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  181.197274][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  181.223844][ T9550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.235187][ T9550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.245216][ T9550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.256464][ T9550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.267744][ T9550] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.316668][   T54] hsr_slave_0: left promiscuous mode
[  181.323071][   T54] hsr_slave_1: left promiscuous mode
[  181.342065][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.351199][   T54] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.364476][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.371886][   T54] batman_adv: batadv0: Removing interface: batadv_slave_1
[  181.400739][   T54] veth1_macvtap: left promiscuous mode
[  181.406637][   T54] veth0_macvtap: left promiscuous mode
[  181.412306][   T54] veth1_vlan: left promiscuous mode
[  181.417878][   T54] veth0_vlan: left promiscuous mode
[  181.991276][   T54] team0 (unregistering): Port device team_slave_1 removed
[  182.031091][   T54] team0 (unregistering): Port device team_slave_0 removed
[  182.509667][ T9742] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  182.532639][ T9742] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  182.545023][ T9742] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  182.568626][ T9550] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.581185][ T5148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  182.583060][ T9550] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.598381][ T5148] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  182.607583][ T9550] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.608042][ T5148] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  182.620597][ T9550] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.634365][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  182.644220][ T5148] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  182.660088][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  182.693321][ T9729] xfrm0 speed is unknown, defaulting to 1000
[  182.701792][ T9743] xfrm0 speed is unknown, defaulting to 1000
[  182.728508][ T9729] lo speed is unknown, defaulting to 1000
[  182.786947][ T9743] lo speed is unknown, defaulting to 1000
[  182.865355][ T9746] netlink: 'syz.2.988': attribute type 3 has an invalid length.
[  182.933476][ T3665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.953339][ T3665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.980203][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.990134][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.064256][ T5834] Bluetooth: hci4: command tx timeout
[  183.076638][ T9753] netlink: 'syz.0.990': attribute type 1 has an invalid length.
[  183.085019][ T9753] netlink: 'syz.0.990': attribute type 2 has an invalid length.
[  183.223345][ T5834] Bluetooth: hci1: command tx timeout
[  183.359206][ T9765] xfrm0 speed is unknown, defaulting to 1000
[  183.375232][ T9765] lo speed is unknown, defaulting to 1000
[  183.441185][ T9743] chnl_net:caif_netlink_parms(): no params data found
[  183.652689][   T54] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.737743][   T54] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.755917][ T9729] chnl_net:caif_netlink_parms(): no params data found
[  183.845395][   T54] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.888408][ T9743] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.896445][ T9743] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.904287][ T9743] bridge_slave_0: entered allmulticast mode
[  183.910810][ T9743] bridge_slave_0: entered promiscuous mode
[  183.920742][ T9743] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.932578][ T9743] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.940940][ T9743] bridge_slave_1: entered allmulticast mode
[  183.949769][ T9743] bridge_slave_1: entered promiscuous mode
[  183.987280][ T9764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  184.020350][   T54] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.047202][ T9743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  184.059034][ T9743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  184.068941][ T9729] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.076442][ T9729] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.083690][ T9729] bridge_slave_0: entered allmulticast mode
[  184.090249][ T9729] bridge_slave_0: entered promiscuous mode
[  184.111486][ T9729] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.119111][ T9729] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.126897][ T9729] bridge_slave_1: entered allmulticast mode
[  184.134844][ T9729] bridge_slave_1: entered promiscuous mode
[  184.147706][ T9743] team0: Port device team_slave_0 added
[  184.164716][ T9743] team0: Port device team_slave_1 added
[  184.194277][ T9729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  184.206487][ T9729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  184.234144][ T9743] batman_adv: batadv0: Adding interface: batadv_slave_0
[  184.241714][ T9743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.269089][ T9743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  184.281597][ T9743] batman_adv: batadv0: Adding interface: batadv_slave_1
[  184.289472][ T9743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.315788][ T9743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.355556][ T9729] team0: Port device team_slave_0 added
[  184.382702][ T9729] team0: Port device team_slave_1 added
[  184.406576][ T9743] hsr_slave_0: entered promiscuous mode
[  184.414018][ T9743] hsr_slave_1: entered promiscuous mode
[  184.420731][ T9743] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  184.428763][ T9743] Cannot create hsr debugfs directory
[  184.462060][ T9729] batman_adv: batadv0: Adding interface: batadv_slave_0
[  184.469131][ T9729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.496939][ T9729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  184.577253][   T54] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.620471][ T9729] batman_adv: batadv0: Adding interface: batadv_slave_1
[  184.643960][ T9729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.723334][ T9729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.746363][ T5834] Bluetooth: hci2: command tx timeout
[  185.127312][ T5148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  185.139209][ T5148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  185.147219][ T5148] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  185.161678][   T54] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.198266][ T1005] tipc: Subscription rejected, illegal request
[  185.208045][ T5148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  185.216820][ T5148] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  185.229075][ T5148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  185.284176][ T9796] xfrm0 speed is unknown, defaulting to 1000
[  185.303908][ T5834] Bluetooth: hci1: command tx timeout
[  185.346355][   T54] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.362518][ T9806] syz.2.1001[9806] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  185.362581][ T9806] syz.2.1001[9806] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  185.392242][ T9806] syz.2.1001[9806] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  185.423860][ T9796] lo speed is unknown, defaulting to 1000
[  185.462936][ T9806] netlink: 'syz.2.1001': attribute type 9 has an invalid length.
[  185.478035][ T9806] netlink: 'syz.2.1001': attribute type 6 has an invalid length.
[  185.499756][   T54] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.827609][ T9729] hsr_slave_0: entered promiscuous mode
[  185.845825][ T9729] hsr_slave_1: entered promiscuous mode
[  185.874652][ T9729] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  185.892720][ T9729] Cannot create hsr debugfs directory
[  185.975299][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1004'.
[  186.247453][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1006'.
[  186.257178][ T9831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1006'.
[  186.268405][ T9831] netlink: 'syz.0.1006': attribute type 11 has an invalid length.
[  186.310666][   T54] bridge_slave_1: left allmulticast mode
[  186.317247][   T54] bridge_slave_1: left promiscuous mode
[  186.323036][   T54] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.347525][   T54] bridge_slave_0: left allmulticast mode
[  186.361280][   T54] bridge_slave_0: left promiscuous mode
[  186.369583][   T54] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.392469][   T54] bridge_slave_1: left allmulticast mode
[  186.398948][   T54] bridge_slave_1: left promiscuous mode
[  186.405392][   T54] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.415594][   T54] bridge_slave_0: left allmulticast mode
[  186.421351][   T54] bridge_slave_0: left promiscuous mode
[  186.428696][   T54] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.825882][ T5834] Bluetooth: hci2: command tx timeout
[  187.048279][   T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  187.059650][   T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  187.070446][   T54] bond0 (unregistering): Released all slaves
[  187.179711][   T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  187.191604][   T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  187.202135][   T54] bond0 (unregistering): Released all slaves
[  187.225953][ T9815] xfrm0 speed is unknown, defaulting to 1000
[  187.252790][ T9815] lo speed is unknown, defaulting to 1000
[  187.284305][ T9796] chnl_net:caif_netlink_parms(): no params data found
[  187.308434][ T5834] Bluetooth: hci4: command tx timeout
[  187.384847][ T5834] Bluetooth: hci1: command tx timeout
[  187.615043][ T9796] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.624405][ T9796] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.631604][ T9796] bridge_slave_0: entered allmulticast mode
[  187.639140][ T9796] bridge_slave_0: entered promiscuous mode
[  187.675376][ T9796] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.682498][ T9796] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.699036][ T9796] bridge_slave_1: entered allmulticast mode
[  187.710544][ T9796] bridge_slave_1: entered promiscuous mode
[  187.755575][ T9796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.795250][ T9796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.909292][ T9796] team0: Port device team_slave_0 added
[  187.944344][ T9796] team0: Port device team_slave_1 added
[  187.999110][ T9796] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.015092][ T9853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1012'.
[  188.024085][ T9796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.024116][ T9796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.082341][   T54] hsr_slave_0: left promiscuous mode
[  188.103078][   T54] hsr_slave_1: left promiscuous mode
[  188.110922][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  188.128067][   T54] batman_adv: batadv0: Removing interface: batadv_slave_0
[  188.136324][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  188.145329][   T54] batman_adv: batadv0: Removing interface: batadv_slave_1
[  188.157948][   T54] hsr_slave_0: left promiscuous mode
[  188.166800][   T54] hsr_slave_1: left promiscuous mode
[  188.172608][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  188.180236][   T54] batman_adv: batadv0: Removing interface: batadv_slave_0
[  188.188217][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  188.197014][   T54] batman_adv: batadv0: Removing interface: batadv_slave_1
[  188.231761][   T54] veth1_macvtap: left promiscuous mode
[  188.243332][   T54] veth0_macvtap: left promiscuous mode
[  188.253427][   T54] veth1_vlan: left promiscuous mode
[  188.258767][   T54] veth0_vlan: left promiscuous mode
[  188.283932][   T54] veth1_macvtap: left promiscuous mode
[  188.289764][   T54] veth0_macvtap: left promiscuous mode
[  188.295637][   T54] veth1_vlan: left promiscuous mode
[  188.302593][   T54] veth0_vlan: left promiscuous mode
[  188.874935][   T54] team0 (unregistering): Port device team_slave_1 removed
[  188.903892][ T5834] Bluetooth: hci2: command tx timeout
[  188.921788][   T54] team0 (unregistering): Port device team_slave_0 removed
[  189.306265][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.383892][ T5834] Bluetooth: hci4: command tx timeout
[  189.463917][ T5834] Bluetooth: hci1: command tx timeout
[  189.590316][   T54] team0 (unregistering): Port device team_slave_1 removed
[  189.628719][   T54] team0 (unregistering): Port device team_slave_0 removed
[  189.980831][ T9796] batman_adv: batadv0: Adding interface: batadv_slave_1
[  189.988022][ T9796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.014321][ T9796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.162354][ T9796] hsr_slave_0: entered promiscuous mode
[  190.171137][ T9796] hsr_slave_1: entered promiscuous mode
[  190.184722][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1019'.
[  190.194923][ T9796] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  190.202507][ T9796] Cannot create hsr debugfs directory
[  190.268339][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1020'.
[  190.340229][ T9729] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  190.384841][ T9729] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  190.408454][ T9729] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  190.447367][ T9884] netlink: 'syz.2.1021': attribute type 1 has an invalid length.
[  190.491369][ T9887] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.512413][ T9884] 8021q: adding VLAN 0 to HW filter on device bond2
[  190.542371][ T9882] 8021q: adding VLAN 0 to HW filter on device bond2
[  190.549549][ T9882] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  190.560857][ T9882] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  190.577679][ T9729] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  190.612792][ T9888] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  190.666814][ T9743] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  190.690271][ T9743] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  190.715372][ T9743] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  190.764413][ T9743] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  190.785064][ T9891] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1024'.
[  190.922917][ T9895] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1025'.
[  190.983492][ T5834] Bluetooth: hci2: command tx timeout
[  191.053428][ T9743] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.063500][ T9729] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.127938][ T9743] 8021q: adding VLAN 0 to HW filter on device team0
[  191.155616][ T9743] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  191.166178][ T9743] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  191.188712][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.195869][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.219584][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.226763][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.299861][ T9909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1028'.
[  191.316156][ T9729] 8021q: adding VLAN 0 to HW filter on device team0
[  191.411347][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.418542][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.448909][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.456076][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.468410][ T5834] Bluetooth: hci4: command tx timeout
[  191.816504][ T9912] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.843701][ T9912] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.852633][ T9912] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.873234][ T9912] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.944791][ T9912] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[  191.953750][ T9912] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  191.982540][ T9912] bond1: left allmulticast mode
[  192.004421][ T9912] bond1: left promiscuous mode
[  192.012893][ T9912] vlan2: left promiscuous mode
[  192.018088][ T9912] vlan2: left allmulticast mode
[  192.028450][ T9912] gtp0: left promiscuous mode
[  192.033253][ T9912] gtp0: left allmulticast mode
[  192.082173][ T9922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1030'.
[  192.124964][ T9919] batadv1: entered allmulticast mode
[  192.161035][ T9743] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.223587][ T9796] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  192.272967][ T9796] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  192.308539][ T9796] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  192.345544][ T9729] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  192.365340][ T9729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  192.396549][ T9796] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  192.505673][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1035'.
[  192.548897][ T9743] veth0_vlan: entered promiscuous mode
[  192.621737][ T9950] No such timeout policy "syz0"
[  192.655156][ T9743] veth1_vlan: entered promiscuous mode
[  192.771290][ T9796] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.789596][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1037'.
[  192.817956][ T9743] veth0_macvtap: entered promiscuous mode
[  192.839496][ T9796] 8021q: adding VLAN 0 to HW filter on device team0
[  192.860023][ T9743] veth1_macvtap: entered promiscuous mode
[  192.902372][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.909542][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.913806][ T9959] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  192.950711][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.957879][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.997639][ T9729] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.025592][ T9743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  193.048728][ T9743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.071660][ T9743] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.110705][ T9743] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.177135][ T9743] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.207145][ T9743] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.233904][ T9743] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.242928][ T9743] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.370778][ T9975] A link change request failed with some changes committed already. Interface bridge_slAve_0 may have been left with an inconsistent configuration, please check.
[  193.432934][ T9729] veth0_vlan: entered promiscuous mode
[  193.457010][ T9980] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1043'.
[  193.477909][ T9729] veth1_vlan: entered promiscuous mode
[  193.521061][ T9796] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.543737][ T5834] Bluetooth: hci4: command tx timeout
[  193.579416][ T9729] veth0_macvtap: entered promiscuous mode
[  193.609428][ T9729] veth1_macvtap: entered promiscuous mode
[  193.616889][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.626390][ T9729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  193.637967][ T9729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.650107][ T9729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  193.661911][ T9729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.673077][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.686496][ T9729] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.698150][ T9729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  193.710144][ T9729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.722030][ T9729] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.768142][ T9729] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.777910][ T9729] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.780967][ T9990] netlink: 'syz.2.1046': attribute type 28 has an invalid length.
[  193.796341][ T9990] netlink: 'syz.2.1046': attribute type 3 has an invalid length.
[  193.797085][ T9729] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.804252][ T9990] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1046'.
[  193.822023][ T9729] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.840038][ T3543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.849160][ T9990] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1046'.
[  193.862413][ T3543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.000427][ T3665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.008650][ T3665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.098415][ T3665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.114725][ T3665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.249248][T10002] bridge: RTM_NEWNEIGH with invalid ether address
[  194.422509][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'.
[  194.435719][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  194.437333][ T3469] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.460315][T10007] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  194.558417][ T9796] veth0_vlan: entered promiscuous mode
[  194.676717][ T3469] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.741929][ T9796] veth1_vlan: entered promiscuous mode
[  194.811583][ T3469] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.932551][ T3469] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.975583][ T9796] veth0_macvtap: entered promiscuous mode
[  194.996076][ T9796] veth1_macvtap: entered promiscuous mode
[  195.021490][ T9796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.032975][ T9796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.050198][ T9796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.073383][ T9796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.090344][ T9796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.102066][ T9796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.124296][ T9796] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.156875][ T9796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.183516][ T9796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.203161][ T9796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.214402][ T9796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.226308][ T9796] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.236477][ T9796] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.245477][ T9796] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.254246][ T9796] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.262955][ T9796] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.272992][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  195.284532][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  195.292716][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  195.304087][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  195.315931][ T5148] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  195.323936][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  195.368516][T10016] xfrm0 speed is unknown, defaulting to 1000
[  195.378450][ T3469] bridge_slave_1: left allmulticast mode
[  195.394004][ T3469] bridge_slave_1: left promiscuous mode
[  195.399745][ T3469] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.410016][ T3469] bridge_slave_0: left allmulticast mode
[  195.420717][ T3469] bridge_slave_0: left promiscuous mode
[  195.426915][ T3469] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.705054][ T3469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  195.717874][ T3469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  195.727751][ T3469] bond0 (unregistering): Released all slaves
[  195.746059][T10016] lo speed is unknown, defaulting to 1000
[  195.763911][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.771742][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.941999][ T3665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.952604][T10022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1051'.
[  195.962848][ T3665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.238740][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  196.255769][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  196.280747][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  196.289938][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  196.308048][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  196.317455][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  196.356004][T10033] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  196.422892][ T3469] hsr_slave_0: left promiscuous mode
[  196.434778][ T3469] hsr_slave_1: left promiscuous mode
[  196.442371][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.450529][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_0
[  196.457504][T10034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1055'.
[  196.471376][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.478996][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_1
[  196.515746][ T3469] veth1_macvtap: left promiscuous mode
[  196.521401][ T3469] veth0_macvtap: left promiscuous mode
[  196.527124][ T3469] veth1_vlan: left promiscuous mode
[  196.533276][ T3469] veth0_vlan: left promiscuous mode
[  196.912968][ T3469] team0 (unregistering): Port device team_slave_1 removed
[  196.946912][ T3469] team0 (unregistering): Port device team_slave_0 removed
[  197.293328][T10016] chnl_net:caif_netlink_parms(): no params data found
[  197.360676][T10028] xfrm0 speed is unknown, defaulting to 1000
[  197.370489][T10028] lo speed is unknown, defaulting to 1000
[  197.386532][ T5148] Bluetooth: hci1: command tx timeout
[  197.500724][T10016] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.520037][T10016] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.531014][T10016] bridge_slave_0: entered allmulticast mode
[  197.559247][T10016] bridge_slave_0: entered promiscuous mode
[  197.588520][T10016] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.618465][T10016] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.653967][T10016] bridge_slave_1: entered allmulticast mode
[  197.661415][T10016] bridge_slave_1: entered promiscuous mode
[  197.864336][T10016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.021995][T10016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.034161][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  198.045174][T10049] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1059'.
[  198.056376][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  198.082217][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  198.090417][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  198.104546][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  198.120705][   T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  198.129156][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  198.134980][T10016] team0: Port device team_slave_0 added
[  198.137166][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  198.150309][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  198.159274][   T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  198.161529][T10016] team0: Port device team_slave_1 added
[  198.179396][ T5847] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  198.198696][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  198.240535][T10016] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.250037][T10016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.286306][T10016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.304660][T10028] chnl_net:caif_netlink_parms(): no params data found
[  198.322218][T10047] xfrm0 speed is unknown, defaulting to 1000
[  198.328653][T10055] netlink: 'syz.2.1060': attribute type 11 has an invalid length.
[  198.337662][T10016] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.351403][T10016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.379737][T10016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.414599][ T3469] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.425962][ T5834] Bluetooth: hci2: command tx timeout
[  198.452185][T10047] lo speed is unknown, defaulting to 1000
[  198.542152][ T3469] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.634040][T10016] hsr_slave_0: entered promiscuous mode
[  198.646320][T10016] hsr_slave_1: entered promiscuous mode
[  198.657685][T10016] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.668535][T10016] Cannot create hsr debugfs directory
[  198.691094][ T3469] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.704893][T10051] xfrm0 speed is unknown, defaulting to 1000
[  198.720632][T10051] lo speed is unknown, defaulting to 1000
[  198.723806][T10028] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.741292][T10028] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.749032][T10028] bridge_slave_0: entered allmulticast mode
[  198.766646][T10028] bridge_slave_0: entered promiscuous mode
[  198.800589][T10028] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.808692][T10028] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.823320][T10028] bridge_slave_1: entered allmulticast mode
[  198.829974][T10028] bridge_slave_1: entered promiscuous mode
[  198.914396][ T3469] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.932636][T10028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.945282][T10028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.029223][T10028] team0: Port device team_slave_0 added
[  199.058373][T10028] team0: Port device team_slave_1 added
[  199.171989][T10028] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.179413][T10028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.209524][T10028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.241843][ T3469] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.281233][T10028] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.320063][T10028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.351313][T10028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.401277][ T3469] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.420438][T10083] team0 (unregistering): Port device wg2 removed
[  199.471495][T10028] hsr_slave_0: entered promiscuous mode
[  199.473847][ T5834] Bluetooth: hci1: command tx timeout
[  199.482960][T10028] hsr_slave_1: entered promiscuous mode
[  199.490436][T10028] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  199.500351][T10028] Cannot create hsr debugfs directory
[  199.628451][ T3469] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.683812][ T5912] IPVS: starting estimator thread 0...
[  199.691659][T10047] chnl_net:caif_netlink_parms(): no params data found
[  199.728620][T10051] chnl_net:caif_netlink_parms(): no params data found
[  199.774577][T10091] IPVS: using max 19 ests per chain, 45600 per kthread
[  199.784607][ T3469] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.149870][T10051] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.158173][T10051] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.166228][T10051] bridge_slave_0: entered allmulticast mode
[  200.174515][T10051] bridge_slave_0: entered promiscuous mode
[  200.183994][ T5834] Bluetooth: hci0: command tx timeout
[  200.208654][T10047] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.229374][T10047] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.237315][T10047] bridge_slave_0: entered allmulticast mode
[  200.244337][T10047] bridge_slave_0: entered promiscuous mode
[  200.251216][T10051] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.266675][ T5834] Bluetooth: hci4: command tx timeout
[  200.266671][T10051] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.272187][T10051] bridge_slave_1: entered allmulticast mode
[  200.292056][T10051] bridge_slave_1: entered promiscuous mode
[  200.325878][T10047] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.339494][T10047] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.347687][T10047] bridge_slave_1: entered allmulticast mode
[  200.355275][T10047] bridge_slave_1: entered promiscuous mode
[  200.402149][ T3469] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.456759][T10051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.512262][ T5834] Bluetooth: hci2: command tx timeout
[  200.521550][ T3469] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.548479][T10047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.571994][T10047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.587404][T10051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.625596][ T3469] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.684608][T10016] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  200.694674][T10016] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  200.708110][T10047] team0: Port device team_slave_0 added
[  200.732279][ T3469] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.741889][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1069'.
[  200.759588][T10051] team0: Port device team_slave_0 added
[  200.765705][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1069'.
[  200.776330][T10101] netlink: 'syz.2.1069': attribute type 1 has an invalid length.
[  200.778321][T10051] team0: Port device team_slave_1 added
[  200.784150][T10101] nbd: error processing sock list
[  200.805277][T10016] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  200.814588][T10016] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  200.838304][T10047] team0: Port device team_slave_1 added
[  200.912033][T10051] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.923679][T10051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.951034][T10051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.989083][T10051] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.999986][T10051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.026763][T10051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.040814][T10047] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.048205][T10047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.074902][T10047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.098007][T10047] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.105675][T10047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.137446][T10047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.177853][T10109] netlink: 'syz.2.1072': attribute type 1 has an invalid length.
[  201.186324][T10109] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1072'.
[  201.269333][T10051] hsr_slave_0: entered promiscuous mode
[  201.285208][T10111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1073'.
[  201.295575][T10051] hsr_slave_1: entered promiscuous mode
[  201.301609][T10111] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1073'.
[  201.310984][T10051] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  201.318975][T10051] Cannot create hsr debugfs directory
[  201.335376][ T3469] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.355766][ T3469] bridge_slave_0: left allmulticast mode
[  201.361505][ T3469] bridge_slave_0: left promiscuous mode
[  201.373848][ T3469] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.384162][T10113] netlink: 'syz.2.1074': attribute type 3 has an invalid length.
[  201.387836][ T3469] bridge_slave_1: left allmulticast mode
[  201.396208][T10113] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1074'.
[  201.398065][ T3469] bridge_slave_1: left promiscuous mode
[  201.412957][ T3469] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.429802][ T3469] bridge_slave_0: left allmulticast mode
[  201.436145][ T3469] bridge_slave_0: left promiscuous mode
[  201.441909][ T3469] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.470403][ T3469] bridge_slave_1: left allmulticast mode
[  201.483761][ T3469] bridge_slave_1: left promiscuous mode
[  201.489489][ T3469] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.510563][ T3469] bridge_slave_0: left allmulticast mode
[  201.522714][ T3469] bridge_slave_0: left promiscuous mode
[  201.529173][ T3469] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.544000][ T5834] Bluetooth: hci1: command tx timeout
[  201.824271][ T3469] xfrm0 (unregistering): left allmulticast mode
[  201.970239][ T3469] bond3 (unregistering): (slave gretap1): Releasing active interface
[  202.264579][ T5834] Bluetooth: hci0: command tx timeout
[  202.343711][ T5834] Bluetooth: hci4: command tx timeout
[  202.486202][ T3469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  202.500528][ T3469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  202.516559][ T3469] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  202.528375][ T3469] bond0 (unregistering): Released all slaves
[  202.538433][ T3469] bond1 (unregistering): Released all slaves
[  202.552462][ T3469] bond2 (unregistering): Released all slaves
[  202.586150][ T5834] Bluetooth: hci2: command tx timeout
[  202.672291][ T3469] bond3 (unregistering): Released all slaves
[  202.779129][ T3469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  202.789445][ T3469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  202.800131][ T3469] bond0 (unregistering): Released all slaves
[  202.908906][ T3469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  202.919393][ T3469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  202.929839][ T3469] bond0 (unregistering): Released all slaves
[  203.006395][T10118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1076'.
[  203.045046][ T3469] tipc: Left network mode
[  203.071263][T10047] hsr_slave_0: entered promiscuous mode
[  203.096441][T10047] hsr_slave_1: entered promiscuous mode
[  203.102950][T10047] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  203.120251][T10047] Cannot create hsr debugfs directory
[  203.391893][T10016] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.441999][T10126] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1078'.
[  203.633371][ T5834] Bluetooth: hci1: command tx timeout
[  203.658770][T10016] 8021q: adding VLAN 0 to HW filter on device team0
[  203.692494][T10128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1079'.
[  203.731047][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.738221][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.747417][T10028] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  203.764746][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.771846][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.804404][T10028] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  203.821757][T10028] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  203.856171][T10028] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  204.030547][ T3469] hsr_slave_0: left promiscuous mode
[  204.045354][ T3469] hsr_slave_1: left promiscuous mode
[  204.052216][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  204.059802][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_0
[  204.075696][ T3469] hsr_slave_0: left promiscuous mode
[  204.088341][ T3469] hsr_slave_1: left promiscuous mode
[  204.107922][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  204.116052][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_0
[  204.141709][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  204.153991][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_1
[  204.165704][ T3469] hsr_slave_0: left promiscuous mode
[  204.174339][ T3469] hsr_slave_1: left promiscuous mode
[  204.180735][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  204.194954][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_0
[  204.202752][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  204.210787][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_1
[  204.256415][ T3469] veth0_macvtap: left promiscuous mode
[  204.262137][ T3469] veth1_vlan: left promiscuous mode
[  204.267653][ T3469] veth0_vlan: left allmulticast mode
[  204.273132][ T3469] veth0_vlan: left promiscuous mode
[  204.282206][ T3469] veth1_macvtap: left promiscuous mode
[  204.287879][ T3469] veth0_macvtap: left promiscuous mode
[  204.293603][ T3469] veth1_vlan: left promiscuous mode
[  204.299027][ T3469] veth0_vlan: left promiscuous mode
[  204.305393][ T3469] veth1_macvtap: left promiscuous mode
[  204.311175][ T3469] veth0_macvtap: left promiscuous mode
[  204.317099][ T3469] veth1_vlan: left promiscuous mode
[  204.322483][ T3469] veth0_vlan: left promiscuous mode
[  204.343331][ T5834] Bluetooth: hci0: command tx timeout
[  204.425788][ T5834] Bluetooth: hci4: command tx timeout
[  204.668353][ T5834] Bluetooth: hci2: command tx timeout
[  204.842284][ T3469] team0 (unregistering): Port device team_slave_1 removed
[  204.888485][ T3469] team0 (unregistering): Port device team_slave_0 removed
[  205.180012][T10147] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1083'.
[  205.288658][T10150] ------------[ cut here ]------------
[  205.294469][T10150] WARNING: CPU: 0 PID: 10150 at net/core/skbuff.c:1219 sk_skb_reason_drop+0x87/0x380
[  205.304058][T10150] Modules linked in:
[  205.307960][T10150] CPU: 0 UID: 0 PID: 10150 Comm: syz.2.1084 Not tainted 6.13.0-rc1-syzkaller-00183-g4c49f38e20a5 #0
[  205.318744][T10150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  205.328826][T10150] RIP: 0010:sk_skb_reason_drop+0x87/0x380
[  205.334569][T10150] Code: 00 00 00 fc ff df 41 8d 9e 00 00 fc ff bf 01 00 fc ff 89 de e8 4a f3 0a f8 81 fb 00 00 fc ff 77 3a 4c 89 e5 e8 fa ee 0a f8 90 <0f> 0b 90 eb 5e bf 01 00 00 00 89 ee e8 28 f3 0a f8 85 ed 0f 8e 49
[  205.354254][T10150] RSP: 0018:ffffc90003297078 EFLAGS: 00010287
[  205.360330][T10150] RAX: ffffffff89948326 RBX: 00000000fffbffea RCX: 0000000000080000
[  205.368353][T10150] RDX: ffffc9000d3aa000 RSI: 000000000000582f RDI: 0000000000005830
[  205.376351][T10150] RBP: dffffc0000000000 R08: ffffffff89948316 R09: 1ffff110052d0094
[  205.384356][T10150] R10: dffffc0000000000 R11: ffffed10052d0095 R12: dffffc0000000000
[  205.392330][T10150] R13: ffff8880296803c0 R14: 00000000ffffffea R15: 0000000000000000
[  205.400354][T10150] FS:  00007f2b401f66c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  205.409322][T10150] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  205.415928][T10150] CR2: 0000000000000000 CR3: 000000006cea6000 CR4: 00000000003526f0
[  205.423923][T10150] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  205.431888][T10150] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  205.439889][T10150] Call Trace:
[  205.443201][T10150]  <TASK>
[  205.446130][T10150]  ? __warn+0x165/0x4d0
[  205.450285][T10150]  ? sk_skb_reason_drop+0x87/0x380
[  205.455423][T10150]  ? report_bug+0x2b3/0x500
[  205.459923][T10150]  ? sk_skb_reason_drop+0x87/0x380
[  205.465063][T10150]  ? handle_bug+0x60/0x90
[  205.469391][T10150]  ? exc_invalid_op+0x1a/0x50
[  205.474116][T10150]  ? asm_exc_invalid_op+0x1a/0x20
[  205.479143][T10150]  ? sk_skb_reason_drop+0x76/0x380
[  205.484280][T10150]  ? sk_skb_reason_drop+0x86/0x380
[  205.489403][T10150]  ? sk_skb_reason_drop+0x87/0x380
[  205.494562][T10150]  ? sk_skb_reason_drop+0x86/0x380
[  205.499678][T10150]  ? ip_rcv_finish_core+0x129f/0x1b50
[  205.505076][T10150]  ip_rcv_finish_core+0xfde/0x1b50
[  205.510192][T10150]  ip_sublist_rcv+0x3b1/0xab0
[  205.514919][T10150]  ? __pfx_ip_sublist_rcv+0x10/0x10
[  205.520116][T10150]  ? skb_orphan+0xae/0xd0
[  205.524493][T10150]  ? __pfx_ip_rcv_finish+0x10/0x10
[  205.529631][T10150]  ip_list_rcv+0x42b/0x480
[  205.534088][T10150]  ? __pfx_ip_list_rcv+0x10/0x10
[  205.539047][T10150]  ? __pfx_ip_list_rcv+0x10/0x10
[  205.544042][T10150]  __netif_receive_skb_list_core+0x94e/0x980
[  205.550037][T10150]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  205.556653][T10150]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  205.563229][T10150]  ? read_tsc+0x9/0x20
[  205.567310][T10150]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[  205.573714][T10150]  netif_receive_skb_list_internal+0xa51/0xe30
[  205.579886][T10150]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[  205.586244][T10150]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  205.592918][T10150]  ? __pfx_eth_type_trans+0x10/0x10
[  205.598143][T10150]  ? __phys_addr+0xba/0x170
[  205.602666][T10150]  ? build_skb_around+0x111/0x260
[  205.607732][T10150]  ? __xdp_build_skb_from_frame+0x313/0x650
[  205.613650][T10150]  netif_receive_skb_list+0x55/0x4b0
[  205.618939][T10150]  bpf_test_run_xdp_live+0x1b9f/0x21f0
[  205.624767][T10150]  ? bpf_dispatcher_change_prog+0xd96/0xf20
[  205.630684][T10150]  ? bpf_test_run_xdp_live+0x5d6/0x21f0
[  205.636259][T10150]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  205.642074][T10150]  ? synchronize_rcu+0x11b/0x360
[  205.647067][T10150]  ? __pfx_synchronize_rcu+0x10/0x10
[  205.652383][T10150]  ? __pfx_bpf_dispatcher_change_prog+0x10/0x10
[  205.658685][T10150]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  205.664624][T10150]  ? _copy_from_user+0x99/0xc0
[  205.669395][T10150]  ? bpf_test_init+0x15a/0x180
[  205.674177][T10150]  ? xdp_convert_md_to_buff+0x5b/0x330
[  205.679631][T10150]  bpf_prog_test_run_xdp+0x805/0x11e0
[  205.685026][T10150]  ? __pfx_lock_release+0x10/0x10
[  205.690065][T10150]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  205.695922][T10150]  ? __fget_files+0x2a/0x410
[  205.700524][T10150]  ? __fget_files+0x2a/0x410
[  205.705139][T10150]  ? fput+0x21b/0x290
[  205.709114][T10150]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  205.714941][T10150]  bpf_prog_test_run+0x2e4/0x360
[  205.719875][T10150]  __sys_bpf+0x48d/0x810
[  205.724151][T10150]  ? __pfx___sys_bpf+0x10/0x10
[  205.728917][T10150]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  205.734918][T10150]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  205.741241][T10150]  ? do_syscall_64+0x100/0x230
[  205.746039][T10150]  __x64_sys_bpf+0x7c/0x90
[  205.750462][T10150]  do_syscall_64+0xf3/0x230
[  205.755015][T10150]  ? clear_bhb_loop+0x35/0x90
[  205.759705][T10150]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.765623][T10150] RIP: 0033:0x7f2b4237fed9
[  205.770039][T10150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.789664][T10150] RSP: 002b:00007f2b401f6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  205.798121][T10150] RAX: ffffffffffffffda RBX: 00007f2b42545fa0 RCX: 00007f2b4237fed9
[  205.806121][T10150] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a
[  205.814150][T10150] RBP: 00007f2b423f3cc8 R08: 0000000000000000 R09: 0000000000000000
[  205.822117][T10150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  205.830125][T10150] R13: 0000000000000000 R14: 00007f2b42545fa0 R15: 00007ffc780f1238
[  205.838222][T10150]  </TASK>
[  205.842294][T10150] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  205.849567][T10150] CPU: 0 UID: 0 PID: 10150 Comm: syz.2.1084 Not tainted 6.13.0-rc1-syzkaller-00183-g4c49f38e20a5 #0
[  205.860314][T10150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  205.870364][T10150] Call Trace:
[  205.873666][T10150]  <TASK>
[  205.876592][T10150]  dump_stack_lvl+0x241/0x360
[  205.881269][T10150]  ? __pfx_dump_stack_lvl+0x10/0x10
[  205.886474][T10150]  ? __pfx__printk+0x10/0x10
[  205.891062][T10150]  ? vscnprintf+0x5d/0x90
[  205.895387][T10150]  panic+0x349/0x880
[  205.899278][T10150]  ? __warn+0x174/0x4d0
[  205.903424][T10150]  ? __pfx_panic+0x10/0x10
[  205.907860][T10150]  __warn+0x344/0x4d0
[  205.911832][T10150]  ? sk_skb_reason_drop+0x87/0x380
[  205.916935][T10150]  report_bug+0x2b3/0x500
[  205.921261][T10150]  ? sk_skb_reason_drop+0x87/0x380
[  205.926363][T10150]  handle_bug+0x60/0x90
[  205.930518][T10150]  exc_invalid_op+0x1a/0x50
[  205.935019][T10150]  asm_exc_invalid_op+0x1a/0x20
[  205.939871][T10150] RIP: 0010:sk_skb_reason_drop+0x87/0x380
[  205.945612][T10150] Code: 00 00 00 fc ff df 41 8d 9e 00 00 fc ff bf 01 00 fc ff 89 de e8 4a f3 0a f8 81 fb 00 00 fc ff 77 3a 4c 89 e5 e8 fa ee 0a f8 90 <0f> 0b 90 eb 5e bf 01 00 00 00 89 ee e8 28 f3 0a f8 85 ed 0f 8e 49
[  205.965219][T10150] RSP: 0018:ffffc90003297078 EFLAGS: 00010287
[  205.971286][T10150] RAX: ffffffff89948326 RBX: 00000000fffbffea RCX: 0000000000080000
[  205.979247][T10150] RDX: ffffc9000d3aa000 RSI: 000000000000582f RDI: 0000000000005830
[  205.987228][T10150] RBP: dffffc0000000000 R08: ffffffff89948316 R09: 1ffff110052d0094
[  205.995303][T10150] R10: dffffc0000000000 R11: ffffed10052d0095 R12: dffffc0000000000
[  206.003274][T10150] R13: ffff8880296803c0 R14: 00000000ffffffea R15: 0000000000000000
[  206.011264][T10150]  ? sk_skb_reason_drop+0x76/0x380
[  206.016390][T10150]  ? sk_skb_reason_drop+0x86/0x380
[  206.021504][T10150]  ? sk_skb_reason_drop+0x86/0x380
[  206.026608][T10150]  ? ip_rcv_finish_core+0x129f/0x1b50
[  206.031991][T10150]  ip_rcv_finish_core+0xfde/0x1b50
[  206.037111][T10150]  ip_sublist_rcv+0x3b1/0xab0
[  206.041802][T10150]  ? __pfx_ip_sublist_rcv+0x10/0x10
[  206.047011][T10150]  ? skb_orphan+0xae/0xd0
[  206.051341][T10150]  ? __pfx_ip_rcv_finish+0x10/0x10
[  206.056460][T10150]  ip_list_rcv+0x42b/0x480
[  206.060907][T10150]  ? __pfx_ip_list_rcv+0x10/0x10
[  206.065864][T10150]  ? __pfx_ip_list_rcv+0x10/0x10
[  206.070811][T10150]  __netif_receive_skb_list_core+0x94e/0x980
[  206.076797][T10150]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  206.083569][T10150]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  206.090094][T10150]  ? read_tsc+0x9/0x20
[  206.094177][T10150]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[  206.100520][T10150]  netif_receive_skb_list_internal+0xa51/0xe30
[  206.106670][T10150]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[  206.112990][T10150]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  206.119659][T10150]  ? __pfx_eth_type_trans+0x10/0x10
[  206.124850][T10150]  ? __phys_addr+0xba/0x170
[  206.129349][T10150]  ? build_skb_around+0x111/0x260
[  206.134379][T10150]  ? __xdp_build_skb_from_frame+0x313/0x650
[  206.140267][T10150]  netif_receive_skb_list+0x55/0x4b0
[  206.145550][T10150]  bpf_test_run_xdp_live+0x1b9f/0x21f0
[  206.151000][T10150]  ? bpf_dispatcher_change_prog+0xd96/0xf20
[  206.156902][T10150]  ? bpf_test_run_xdp_live+0x5d6/0x21f0
[  206.162442][T10150]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  206.168236][T10150]  ? synchronize_rcu+0x11b/0x360
[  206.173170][T10150]  ? __pfx_synchronize_rcu+0x10/0x10
[  206.178453][T10150]  ? __pfx_bpf_dispatcher_change_prog+0x10/0x10
[  206.184714][T10150]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  206.190624][T10150]  ? _copy_from_user+0x99/0xc0
[  206.195385][T10150]  ? bpf_test_init+0x15a/0x180
[  206.200137][T10150]  ? xdp_convert_md_to_buff+0x5b/0x330
[  206.205587][T10150]  bpf_prog_test_run_xdp+0x805/0x11e0
[  206.210948][T10150]  ? __pfx_lock_release+0x10/0x10
[  206.215975][T10150]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  206.221770][T10150]  ? __fget_files+0x2a/0x410
[  206.226356][T10150]  ? __fget_files+0x2a/0x410
[  206.230944][T10150]  ? fput+0x21b/0x290
[  206.234934][T10150]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  206.240817][T10150]  bpf_prog_test_run+0x2e4/0x360
[  206.245749][T10150]  __sys_bpf+0x48d/0x810
[  206.249991][T10150]  ? __pfx___sys_bpf+0x10/0x10
[  206.254749][T10150]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  206.260724][T10150]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  206.267044][T10150]  ? do_syscall_64+0x100/0x230
[  206.271811][T10150]  __x64_sys_bpf+0x7c/0x90
[  206.276243][T10150]  do_syscall_64+0xf3/0x230
[  206.280762][T10150]  ? clear_bhb_loop+0x35/0x90
[  206.285433][T10150]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.291316][T10150] RIP: 0033:0x7f2b4237fed9
[  206.295722][T10150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  206.315342][T10150] RSP: 002b:00007f2b401f6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  206.323755][T10150] RAX: ffffffffffffffda RBX: 00007f2b42545fa0 RCX: 00007f2b4237fed9
[  206.331724][T10150] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a
[  206.339684][T10150] RBP: 00007f2b423f3cc8 R08: 0000000000000000 R09: 0000000000000000
[  206.347649][T10150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  206.355619][T10150] R13: 0000000000000000 R14: 00007f2b42545fa0 R15: 00007ffc780f1238
[  206.363595][T10150]  </TASK>
[  206.366753][T10150] Kernel Offset: disabled
[  206.371069][T10150] Rebooting in 86400 seconds..