last executing test programs:

1m43.539737754s ago: executing program 2 (id=476):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200"], 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000002140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='initcall_start\x00', r6}, 0x10)
r8 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f000000d740)={r8, r7, 0x0, 0x3f, &(0x7f000000d780)='cg0\x9b8\xe3\t$h>SQ\xe8\xed@roup\x00Zd\xca=\xd3a\x93\xfbin&\xa4T]\xa1\xc0n\x97\xdf\x16\x96\xa5q\xd6_h6e\x9a\xa8\xd5\x8c \xbf\x11J\xd3\xa7jd9ix', <r9=>0x0}, 0x30)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='xdp_bulk_tx\x00', r3, 0x0, 0x8}, 0x18)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r8, r10, 0x0, 0x5, &(0x7f00000001c0)='syz2\x00', <r11=>0x0}, 0x30)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYRES64=r9, @ANYRESOCT=r11], 0x7c}}, 0x4040085)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x0, 0xb, 0x108, 0x0, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'veth1_to_batadv\x00', '\x00', {}, {}, 0x32}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@esp={{0x30}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x15, 0x1, 0x619, 0x6, 'snmp\x00', 'syz0\x00', {0x631}}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'ip6erspan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x5, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8)

1m43.468693951s ago: executing program 2 (id=479):
socket$rds(0x15, 0x5, 0x0) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000003f40)=[{{&(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x4000}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="6c91d58b56f1f2a654402fbe56c1af0be0cd0f4c2b43d5812153e3a4e34fc47513f29a0ea833d27517e470a85a6e51e0e61668d45cb0c8d4953e42a4b960b110354506f1f6a0161ea5f65af6d569b425d6f403fb10705202f6c91483d907a13ba6dee36c1cf8519c18d9beaaaf9e06d98a", 0x71}, {&(0x7f0000000080)}], 0x2, &(0x7f0000000240)=[{0xd8, 0x116, 0xf, "35afd8029fa869f55be692defd915a9c9527ea9a33b6b79b218631ea0631ef5602d0ef5b2b612dc6fcb75eaeb91c7bc1dab299f6d141d65858eb14cd0fac9160218edee2796ceed64ce29f63d69224b13d45b5c223277797c743c4e6cd3156b55dc7938beb8bcd4740322ea2e833f53d8ac2fcd99ccf19985e9f334cc5b968e36ee49d6e7d9fa1c743005a1b04b4260f607f67144ac3f9846f6e663a63c62b68e8f7d823e2c1d9faf4432cb413900240d89e94713aba7fdfb540cdde55f033212f428b6bd175ed54"}, {0x10, 0x10d, 0x4}, {0xb8, 0x107, 0x3, "1c4ce1b91ce48aa6d622a943420f07a98197cb757eb1b90117f848b9b6ecf626ce5415fbb15acc4af87aa3548656f2102eadc99eed3bf792c2d791d017ba32acd22e632ffcca1b6b19430021f03be5f8c1e5f351c5f4a971e484b58fca5e142b6bb32a904a4c838f303f0a65733e28aac1982ef338487cadadc268038dc98eed13e36ab793ee5bd0c9461e1d6bc8867b580c8d75ef2d1cf66e418337322bca82c77c2d1e9619"}], 0x1a0}}], 0x1, 0x4000)
socket$inet(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6daa000000000000711015000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async)
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d6163736563000078ff028008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n'], 0x44}}, 0x0)

1m43.230541655s ago: executing program 2 (id=480):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x12d}}}}]}, 0x58}}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)) (async)
recvmmsg(r3, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}, 0x104}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000001a40)=""/4103, 0x1007}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x12}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000002a80)=""/209, 0xd1}, {&(0x7f0000001940)=""/215, 0xd7}, {&(0x7f0000000140)=""/25, 0x19}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000002d40)=""/4099, 0x1003}, {&(0x7f00000000c0)=""/66, 0x42}, {&(0x7f0000000940)=""/226, 0xe2}], 0x7}, 0x2}, {{0x0, 0x0, 0x0}, 0x827}], 0x5, 0x10102, 0x0)

1m39.555363788s ago: executing program 2 (id=480):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x12d}}}}]}, 0x58}}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)) (async)
recvmmsg(r3, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}, 0x104}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000001a40)=""/4103, 0x1007}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x12}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000002a80)=""/209, 0xd1}, {&(0x7f0000001940)=""/215, 0xd7}, {&(0x7f0000000140)=""/25, 0x19}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000002d40)=""/4099, 0x1003}, {&(0x7f00000000c0)=""/66, 0x42}, {&(0x7f0000000940)=""/226, 0xe2}], 0x7}, 0x2}, {{0x0, 0x0, 0x0}, 0x827}], 0x5, 0x10102, 0x0)

1m34.327766045s ago: executing program 2 (id=480):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x12d}}}}]}, 0x58}}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)) (async)
recvmmsg(r3, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}, 0x104}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000001a40)=""/4103, 0x1007}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x12}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000002a80)=""/209, 0xd1}, {&(0x7f0000001940)=""/215, 0xd7}, {&(0x7f0000000140)=""/25, 0x19}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000002d40)=""/4099, 0x1003}, {&(0x7f00000000c0)=""/66, 0x42}, {&(0x7f0000000940)=""/226, 0xe2}], 0x7}, 0x2}, {{0x0, 0x0, 0x0}, 0x827}], 0x5, 0x10102, 0x0)

1m14.529611539s ago: executing program 2 (id=480):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x12d}}}}]}, 0x58}}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)) (async)
recvmmsg(r3, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}, 0x104}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000001a40)=""/4103, 0x1007}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x12}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000002a80)=""/209, 0xd1}, {&(0x7f0000001940)=""/215, 0xd7}, {&(0x7f0000000140)=""/25, 0x19}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000002d40)=""/4099, 0x1003}, {&(0x7f00000000c0)=""/66, 0x42}, {&(0x7f0000000940)=""/226, 0xe2}], 0x7}, 0x2}, {{0x0, 0x0, 0x0}, 0x827}], 0x5, 0x10102, 0x0)

1m13.590250659s ago: executing program 1 (id=678):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100), 0x4)
sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20044005}, 0x4000010)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x21)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)

1m13.520370602s ago: executing program 1 (id=680):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) (async)
ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000040)={r1}) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffc5d, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0)

1m12.809932819s ago: executing program 1 (id=682):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r1=>0x0})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={<r2=>0x0}, &(0x7f0000000380)=0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@getlink={0x80, 0x12, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x60011, 0x22000}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "902fa27bc99aa40c2ece18b05900"}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x980}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_to_bridge\x00'}, {0x14, 0x35, 'bridge0\x00'}]}, @IFLA_PHYS_PORT_ID={0xc, 0x22, "e87383839e7b5863"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40090}, 0x14)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e26, 0xfffffffe, @private2, 0x6}, 0x1c)
r3 = socket$inet6(0xa, 0x5, 0x3)
setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(r4)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffcebfff, 0x1000, 0x0, 0x1}, 0x20)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ff000700", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000001c000180060005004e230000060001000200000008000300ac1414aa"], 0x30}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r9 = socket$inet6(0xa, 0x5, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000005c0), 0x4)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000640)=ANY=[@ANYRES32=r10, @ANYRES32=r10, @ANYBLOB="2b0000001400000000000000", @ANYRES32, @ANYBLOB="9e2eaddcfc65b57a11fcecbe18089ddf420024aa9f75cfbf166b6a8522d683cb7e6e047243d90336296cdac1d0d9bf3687d5d0c2405aa582b933bfa490dfb9a87948fbe2cb", @ANYRES64=0x0], 0x20)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x4}, 0x1})
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x6, 0x5, 0x7, 0xc1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r11}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r11, &(0x7f0000000340), 0x0}, 0x20)
setsockopt$sock_int(r9, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
listen(r3, 0x1000)
bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)

1m12.600633809s ago: executing program 0 (id=684):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000)=0x800000, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40200000000000000009500000001000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

1m12.497619176s ago: executing program 0 (id=685):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, 0x0, 0x4040040)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0xf000, 0x9}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000094)

1m12.340321024s ago: executing program 0 (id=686):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002600)={0x1014, 0x2b, 0x61b, 0x70bd28, 0x25dfdbfb, {0x0, 0x7c}, [@generic="e24530087d9fedbc77e50e3a883863bf399d0de9dbdd3dc7046e7a3061f2719f6cfe8af12f1c5bf89dc8c641c7b606007418f07515a2fbbf3302bab8884bc06ac361d9a426eb3323c43c42956586335342033d74e02997c0aa39cb253b86c861d80b9aee846c32e08e85bb0c0173f0ccdc010f05fa669508971d96ead1cfeee8cda6eb518f0aa813ee93b5a100fa1f2539c9b28fa28f4b66419d7c14b576025c86c23dafd971d2f351a38d5871653db7853462fea23a5039d348be57425abaa1fe58b526d415fc59dd482b761214303b3676587da6b0b5d193bf14cc00f05acd01616bb8b197df7867d89a734e2955620ac00eda63ef114c0094e32e88c4c905d720308f4060a0bac8492af7691de6ff23b86bc64d57730b408ffeba620adc013c91b274cba6b384585cecf0b67d5ac94a5e5daeb13bc0d23a4a0ea5b1883d82d695c38ed41138d8294a067a85fad2a37a700924b12950efc9f5e5b5a72ab74c2992023ace7f3f8a72aaf27e5f9293fad334934618bcfed7af583b53e27c98525c37cb8b983986fb1f41fc3b27a7543b1462d4f3b435d35f306812d469877ff994f122249692606800faa17a78fb823cfb7bc46dd254d31c6edd48194d68fee0fd5316787692516e7ed9c1fb0afc935155c44fc2a7ba043da4f01234b9b1c55f31cf49b2d5162bcac57c269cc18afb343e2d17d44baba6bc5d121a5b9ac39a1d8c746dcfe1cb595999f2b6b862722cce28299dffb6b9e9903c3a51e4aa444fd97b932fbf720d7d5d922a8001803cb1218f77b8638883a77b79c8dc8f1bcd65503b264d12a8f5d1b37c9df76d89fc545cca83b80b5a105402fff0b040e66588b4e8aa7887c39ee6c7d5d82f6eed0beaf1ea377bde170b4744f9eddb5470d032fff95d26c26273b59c9f759a020ae97c0c6b4cade02e93f8bafedaf98486e811179dee06fbdfe858979c73fe775b9ddbc1fcd265034e2d530aa2cc20dc01415d5a47956948da043562a12ae94a8d3e35dae20c5910de0c9be98b14c492cbf9e461f74116dfcc50cdf3d15a92122fd8d7ff29e35feb42217c6c674290dc12c3e681f77cdcf0461e9ef860eb6a8cc1d87b1f52ee720f0932042ca2574af8121d132a27de507115b213c7d868b064f9db808550d310d57027de111da6f681f2db09b282fb3069fa67fb0e54133c2bb8703070104a01b101ba42d2485fcb803252022b7dfb12f86bfacb1d4b2ae81a5ecc64ab6d5471c6de37aa2656d3929278ca0d26829cab4684ca90a0a0e5de92d2cb9a7c5e560cd7fd2346f0e7ae1b4b8b476b53a22fda81f2676c220404547e7f598b8c87a612b8242fd7228c8129a6a212ea0553ff0c34838eb8c6b5954b7f6e943c308edbdc8205d8dbe4bbdc7dccc625919112ad97f1496508bb2a8750ec3a1f35f9c4cb35cb15a0affe5ce32efb9aaed26cf04c08f57ea28a7d6609bc08d894ffe2fdbbe9ae441a3b0dd5a804b7f5bfb979736866e9a25ba08306635355f5a66e69ee76a0f82c1af0b7b7ea9d6a15bf3bb1559986e5ec9bf2a48d4442b70cee0f48e099d07c14a12458206e6ed6ef528ebce47d19e27c5b14dbc5fe172ef25e212a551afbc8b2548a07579d0f935fada6df3e9d14e4d35c943c50d6d513ce29eb9d9d3aff34ca2c4609697d74fa60371bd5a3ab68b5cccfd7c28dde1ca448dfa436d75a3a359247696b13b5453ae4070e7437ff2dd6570bf6adfabcef17b18c03d43ccfdd243fcad2b2b391e9bc4fa194358eb49d3ff5bb757b5a55df88b64332fcdebf8ec585421f0695240cd6d44c37d2e7cbc714b36d374b725a5a89997570cf3e564f5723d1ad2c4986e6bd4a35ef47776704c4b37a7cdc37bff392f52a9a9c85cc7944f63d442b98caf61f4eda0865aa04556d48f90dc11149fdcc43edbe6495b485c80769075ae61e20557bf36f07c4bc89169ab39a84438bfb30af6a72e0aa578d22148187b63310f72a4b05894809a68c107bc51b636f0801086edf33f6b34f73840bb26db2e34758c8eed8dc6d98cea3fa9cc63b9a1ca5a82d6a90a82b1fa45d696f0ea11f22595f4ef74a0b2232ea53a5305d64b596fccfa30749b27cc8a8c50c0d01314c818c4e68e1bfb28670e81662eed06a72979223bc87ea1ef28b9a8c9b633cab5c2a76a16ad02297d42bb841812cf164230beaa28c305fd8be79fa84eb448b90c4cd9c00fc9c837ac4ce4b8ad2e5dc9863c29406555286657e2254e9099c8f5f37b9b58cbab886bbac4a1dbec3aafef96fb3e8b6303e83d3cd31dfcf6b0df8f86aa43f45977b165aafb19daa046a91e66e64a327f8ea7ad56dc2ae6bce30d5c0702d4842f0ef68e4e54911402f7db4058d1a8765edd0ba6e78bfa99fb82a6b7dd34d0d7317c7a990898f39355f1ffe56fbf626fe64b6fe20bc07684ab89cc01f5c098b7c9780f94d8ca93887d9c483ea671e3a8751ad1875613d2db206fabb65bc53a58f2f51ae28f119dc8d9968a23e8223569f1d92cc5c50c0701ce18f35d9d4ef0c8c84f4a2bfc19ef44f586a3aff393b461be94a74586e2f66eed4c8955d78d9512587933ed40fbea6d0dbf73b388a80bdb3b289a057b794ac6fca9db78e4bf4ac5055f6e7bbf433c094dfc4120bb98d993d42fdea83996cd8e24305c9058e94c0bf8b7c7655bb99f8f483d845446ac5ffc9de0debe5980500f5ced618be30f54a61712ed9c24dd4c6721f49adb2f72f21db371a890469b2c256366dc2e09d5810a6b3c7d820197d1517e8b2382c8e1c4bd9b705860e253e15013cc827593d19167c79572605e579917ee46b364563e704bb2b02f2daf8e3375a9c5b4c3a1e771564d35736617e07c93e2ecc151ed5c454aefd0e84a4dc408c61994bd65421ca7b1e8ef56e3af41e646ab8a7cacff679983af7149ccedf66fb5dbe670c5a21929a94123455968b58830b1e322d4bf374a9f52cd045ba9cb884b2dddd2988b916cf2594723b26c89fab0f5e9a082a26dd1868d84014d9478ebf5bf71b706e362f2e040d6494bfae52ae5a0f356aed1178364cf0ea5435ceb51de4380e68091106c5fb656188b0b3e48fd3daaa6e7b80c4fb9fb4f79458e5a1bdd00fafa8e56cadbcdb94bed6364f8670850034663293860f40e5379ba651f84d8025e1aaa3d0ce61e354cd5f35bfc3e8196ccdaf95bde0400f66f42c93c894e560afba2ba773ab29f4ab94e6d723092367d85160da54a5dc02348dc6af2028a782699949e86ce2386c75a79f0e341675eb8197a1d14a48c9e0d48d162b415c681d0679c627d882f62fbaf062287818eed522425273785b1aec422baab6d3b80b8906d997e99e9903d846daf936d479451d1b801babab10b6edb861ce8be738bb8c9e9374dc1a336a9c5c7affd6783bdd17c5321aaaa97c4a184e82bd03ef14408223a592e2c6629ebedf2ebf64f47586f8db7346f38acfba788405b93f4460545a719238ba702c1551959bb2888ba5359d9521bb617205eafed97f416fa22869b38bca3af5c654469bbc5c8d563f4aecd0596a251568cf9740f040b2f83bc0b8b7ef858bdf8b0742b13d40b779678e0604a95c6c23d79487610f34994f8ae6605ad59a31fe33644c90ca0dade02c353f8f34a2c5d805b7bcef71fcb5c44c4917b1b4a8f0deeb61c44337fa92fca4d3db4d883dbe290edd3e2231acca5a0caf738a306f7c70ea8ec0ed44798d28be9df639551cf76dadf34701e6cb7fd57660dbde68f1d43d75272e45e3269bc2aa4ca2743468636a56b26d61b1f849df3c73999c7fd18c3c3d44115d4da419485b72205fb450f086567057ca8e25e95c1d782864d505fc000a5af44eeac02b81deef6fb2f479bd5f978895ed91aa74fa164a012db80590f191a10af8626e3ef0c2508279e9f5b74b6efda0368511915c0c5c2f25dec174371c2ecbfda178f066dccb9493615d000ca486a7f6a9d2989d1b255e16b45141d8d093701b20e56be8d6fa6c608e3bccc58543a532c765b3ffd87ab66470df4596a6679a11bcd13174883562847f633eaebf2c702a37648d5b9089338a07b4e431d538d1e9b61784ee642f164bdb9149d016c690f47a0b28ad51661f60d29e05634fe660bda885d9b3ebec4c5c760ac31f853e0803d2f952dd1f1269a9edfa8f3bed4ce128511421c1f72b48bcdfd244059857305388f75bed0066fb26384c398f1f5a489da5875bbdd5629643e4f1b0a810c047acb0b84c13b9997c0d466855d7920225f1689180ed35f462c760d3b0396edcba587a1f712d0403d3a61e7bd77ead0cbb8065457585d192540b9925b5fe06d6a650025bb835c6312505259a177139bad83d915c5a234351c2f3386fb3b3debb91499a61550d1040aef72ac9319319ccde628e54bcf249c44a0fcf96f4ad663ea78b516ec96d3440ec520a0b42cab502deae6befddf5e9978edce674d7bbc65d9ae01e50670fd5c48aebe60d8f7d3563565a0228eb55e390f5530297760a1b0cd5d2b95d4a26fd039d010567e9ae8049813ffd65f6f6b0fa60f1e7ac249e182b6e13d41c6e2d706ab6792b5b422f93584474cc16201a8af79f514230b9e782665b2f69245dd21db141ff34b82e26d03e062bd34b7bf65f5c0eb076a9d3ab890063d7eab170bd60ce91e199ed10ed7d7f3907fd9367cc9f256287f60f022eee04d74aa54ea193fefaf62a109525bf59fb2591112edc962435e41a7ee2f9aff9cea769e70656706d447f7bf9c8614555e8b3f3b8d951175e93b997ede214a090b903647320b0c94f78e929d143cd11db313b490442d4a638c9d34eaf0b17e7515df98780038cf91b48ad432e284da84e3678bac589383e0941251827b3d215c0db961dc0b627c3cf9af56633472e1d71b51d91a3ebd2d25c5f881d644415a9dbf174b9a48bc08680e38467a6cbddfad6ea14252b590bd35d87b5910a752c59f5244dbf80f5c37180aa5771ef479409cde22403b543d849be6a0db809f7d8b465d841d92425299a09c905fbab06e5c0f86b28b5eb0b7267e8a98a70b3ddf2a844aed3c2ff598068339b4c9bd4309e218837a27dd2010c77f5943ddb1bc13d357fa1a7d64a5d419630a1432a83d4ba8cb11fbf10fa68f38b65cf0bdf4fa902cf210f412d132906561a3239d713c561c1ac4c3968a9e9a6815ba383824e8642d4e882823da4bc779bd75dcef9e9c77c50a1299a8ae3da27d04ade3ce6b2e2dc2b63e080131c1a96497eb83950e15946ebe19e3d25727ca971881aa9c5fc27f4945c19416f006d58071349b29228a70ecbabb9a0dfa98281aa1d0fc06bdc7d87a45870cb32759268e098e7739b9f9af261bd4c7f4fe76b4ba70175fd59096652af15a3b4dd61ff69d54c5c6b1320f2a658fee7183f3f1a1cd99569bbeca7d0a4feec667efdd15a39e3d29f23b6cbf60c86008923a0d81f730b5fd2ec8fcb8d172188e4660ca12fd32a283794729449e70d7386cc7b21c554a1f23e51b9d45680448c14f6aac16b25545af6b1a4cc5f97804e5b163fc17bf6a67c7db930e715f34fc68496deb74a7ca47b52cd941873459bcf0e13936c81539cd0bb774cdce377761e48928191394b9514c95a36ae1328311416d438ec6d32f5dd37502632f6f9d6a5e403b0452246f8e972447a08ca39d0c6976345b1d51390d0e697629d408e5f29a44020e3367b9df3cb52ef942925d6dad02b91bbaed07221bd009b4e71afb33c53693f060e2e1b41f7dc30a13884c465333558c833d1c535d579d057369c814a72a1bccbffa19dbd1ad161b885ca7be9008ba956dd2d966b"]}, 0x1014}, 0x1, 0x0, 0x0, 0x404d0d0}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@random="000000ed8900", @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @random="e81b4f7a7892", @broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast2}}}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000000000007a00000008000300", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup(r5, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0xb, @mcast2, 0x44}, 0x1c)
r7 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0xa4, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0x2c}, {0x74, 0x2, [@TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x1}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @rand_addr=' \x01\x00'}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x3}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x40}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0xa4}}, 0x4000)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r10 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r10, 0x6b, 0x3, &(0x7f0000000800)=0x1, 0x4)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, 0x0, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000001000210400"/20, @ANYRES8=r3, @ANYBLOB="0000000000000000340012800e0001006970366772657461700000002000028006001000000000001400060000000000000000000000ffff000000000a0001005f"], 0x60}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20048814}, 0x4000014)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)

1m11.929051563s ago: executing program 1 (id=687):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x90000005})
epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000)
epoll_wait(r3, &(0x7f00000001c0)=[{}], 0x1, 0x80000001)
connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000040)=0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0xf, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd4b", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m11.70605924s ago: executing program 0 (id=688):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) (rerun: 64)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r2, 0x0) (async)
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) (async)
r3 = socket(0x22, 0x2, 0x1)
accept4$inet(r3, 0x0, 0x0, 0x0)

1m11.509274464s ago: executing program 0 (id=689):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x10000})
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x7c}}, 0x0)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
r2 = socket(0xa, 0x3, 0x3a)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFMTU(r2, 0x5411, &(0x7f0000000080)={'veth0_vlan\x00', 0x200})
recvmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001500)=""/4073, 0xe7c}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x75}, 0x40000020)

1m11.420557356s ago: executing program 0 (id=690):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010003b0c000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e65766500002000028008000200ac1e00010500030000000000040006000800010000000000"], 0x50}}, 0x0)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000), 0x8)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x82, &(0x7f0000000740), 0x8)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10)
sendmsg$inet_sctp(r2, &(0x7f0000000d80)={&(0x7f0000000800)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000840)='6', 0x1}], 0x1, 0x0, 0x0, 0x20000080}, 0x10)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1, 0x0, 0x2}, 0x1c)
r3 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="90", 0x1}, {0x0, 0x2e}], 0x2}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r8=>0x0})
bind$packet(r7, &(0x7f0000000300)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x8000)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450000300068000000019078ac1e000114aa0c0090421200183f250007000c0008fffbffffe0000002"], 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

1m10.471005413s ago: executing program 1 (id=691):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendfile(r1, r1, &(0x7f0000000000)=0xb35, 0x7)
r2 = socket(0x1e, 0x805, 0x0)
connect$tipc(r2, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r4], 0x30}}, 0x0)

1m4.774507111s ago: executing program 1 (id=692):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4)
recvmmsg(r2, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001980)=""/96, 0x60}], 0x1, 0x0, 0x18}, 0x9}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002280)=""/58, 0x3a}], 0x1, &(0x7f0000002300)=""/12, 0xc}, 0x90}], 0x2, 0x40002122, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711014000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e00), 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x4}, 0x38) (async)
sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000500)="e8", 0x1}], 0x1}, 0x4800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x44, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xfff3}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x43, 0x3, 'ip_vti0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x24000840) (async, rerun: 32)
r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r5 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0xd, &(0x7f0000000080), 0x24)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async, rerun: 64)
close(r5) (rerun: 64)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

51.917532784s ago: executing program 32 (id=690):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010003b0c000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e65766500002000028008000200ac1e00010500030000000000040006000800010000000000"], 0x50}}, 0x0)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000), 0x8)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x82, &(0x7f0000000740), 0x8)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10)
sendmsg$inet_sctp(r2, &(0x7f0000000d80)={&(0x7f0000000800)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000840)='6', 0x1}], 0x1, 0x0, 0x0, 0x20000080}, 0x10)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1, 0x0, 0x2}, 0x1c)
r3 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="90", 0x1}, {0x0, 0x2e}], 0x2}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r8=>0x0})
bind$packet(r7, &(0x7f0000000300)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x8000)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450000300068000000019078ac1e000114aa0c0090421200183f250007000c0008fffbffffe0000002"], 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

40.693737763s ago: executing program 33 (id=692):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4)
recvmmsg(r2, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001980)=""/96, 0x60}], 0x1, 0x0, 0x18}, 0x9}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002280)=""/58, 0x3a}], 0x1, &(0x7f0000002300)=""/12, 0xc}, 0x90}], 0x2, 0x40002122, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711014000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e00), 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x4}, 0x38) (async)
sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000500)="e8", 0x1}], 0x1}, 0x4800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x44, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xfff3}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x43, 0x3, 'ip_vti0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x24000840) (async, rerun: 32)
r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r5 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0xd, &(0x7f0000000080), 0x24)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async, rerun: 64)
close(r5) (rerun: 64)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

0s ago: executing program 3 (id=693):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000002fcff", 0x58}], 0x1)
syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888be08"], 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000340)='\x00', 0x1, 0x4040005, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0x8, 0x21, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000000)

kernel console output (not intermixed with test programs):

59][ T6334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   53.498663][ T6334] Call Trace:
[   53.498667][ T6334]  <TASK>
[   53.498671][ T6334]  dump_stack_lvl+0x189/0x250
[   53.498684][ T6334]  ? __pfx_dump_stack_lvl+0x10/0x10
[   53.498694][ T6334]  ? __pfx__printk+0x10/0x10
[   53.498706][ T6334]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   53.498717][ T6334]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   53.498727][ T6334]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   53.498737][ T6334]  warn_alloc+0x214/0x310
[   53.498748][ T6334]  ? stack_depot_save_flags+0x429/0x900
[   53.498761][ T6334]  ? __pfx_warn_alloc+0x10/0x10
[   53.498771][ T6334]  ? kasan_save_track+0x4f/0x80
[   53.498779][ T6334]  ? xskq_create+0x56/0x170
[   53.498788][ T6334]  ? xsk_init_queue+0xb0/0x110
[   53.498797][ T6334]  ? xsk_setsockopt+0x43f/0x710
[   53.498806][ T6334]  ? do_sock_setsockopt+0x25a/0x3e0
[   53.498814][ T6334]  ? __x64_sys_setsockopt+0x18b/0x220
[   53.498822][ T6334]  ? do_syscall_64+0xfa/0x3b0
[   53.498828][ T6334]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.498838][ T6334]  __vmalloc_node_range_noprof+0x125/0x12f0
[   53.498858][ T6334]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   53.498870][ T6334]  ? __kasan_kmalloc+0x93/0xb0
[   53.498879][ T6334]  vmalloc_user_noprof+0xad/0xf0
[   53.498888][ T6334]  ? xskq_create+0xbf/0x170
[   53.498899][ T6334]  xskq_create+0xbf/0x170
[   53.498911][ T6334]  xsk_init_queue+0xb0/0x110
[   53.498922][ T6334]  xsk_setsockopt+0x43f/0x710
[   53.498933][ T6334]  ? __pfx_xsk_setsockopt+0x10/0x10
[   53.498943][ T6334]  ? __lock_acquire+0xab9/0xd20
[   53.498954][ T6334]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   53.498965][ T6334]  ? __pfx_xsk_setsockopt+0x10/0x10
[   53.498975][ T6334]  do_sock_setsockopt+0x25a/0x3e0
[   53.498985][ T6334]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   53.499013][ T6334]  ? __fget_files+0x2a/0x420
[   53.499026][ T6334]  __x64_sys_setsockopt+0x18b/0x220
[   53.499037][ T6334]  do_syscall_64+0xfa/0x3b0
[   53.499069][ T6334]  ? lockdep_hardirqs_on+0x9c/0x150
[   53.499083][ T6334]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.499090][ T6334]  ? exc_page_fault+0x9f/0xf0
[   53.499102][ T6334]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.499109][ T6334] RIP: 0033:0x7fe36938e929
[   53.499117][ T6334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   53.499123][ T6334] RSP: 002b:00007fe36a1cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   53.499132][ T6334] RAX: ffffffffffffffda RBX: 00007fe3695b5fa0 RCX: 00007fe36938e929
[   53.499137][ T6334] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[   53.499142][ T6334] RBP: 00007fe369410b39 R08: 0000000000000004 R09: 0000000000000000
[   53.499147][ T6334] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   53.499152][ T6334] R13: 0000000000000000 R14: 00007fe3695b5fa0 R15: 00007fffebb5c2c8
[   53.499164][ T6334]  </TASK>
[   53.499167][ T6334] Mem-Info:
[   53.598983][ T6334] active_anon:5098 inactive_anon:0 isolated_anon:0
[   53.598983][ T6334]  active_file:1077 inactive_file:38204 isolated_file:0
[   53.598983][ T6334]  unevictable:1768 dirty:1588 writeback:0
[   53.598983][ T6334]  slab_reclaimable:9155 slab_unreclaimable:52563
[   53.598983][ T6334]  mapped:18167 shmem:2450 pagetables:982
[   53.598983][ T6334]  sec_pagetables:0 bounce:0
[   53.598983][ T6334]  kernel_misc_reclaimable:0
[   53.598983][ T6334]  free:302322 free_pcp:19652 free_cma:0
[   53.613269][ T6334] Node 0 active_anon:11012kB inactive_anon:0kB active_file:3700kB inactive_file:10004kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33224kB dirty:6080kB writeback:0kB shmem:5244kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5636kB pagetables:2196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   53.624145][ T6334] Node 1 active_anon:9448kB inactive_anon:0kB active_file:608kB inactive_file:142812kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39444kB dirty:272kB writeback:0kB shmem:4556kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5632kB pagetables:1732kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   53.634443][ T6334] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   53.643399][ T6334] lowmem_reserve[]: 0 812 812 812 812
[   53.645134][ T6334] Node 0 DMA32 free:444476kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11012kB inactive_anon:0kB active_file:3700kB inactive_file:10004kB unevictable:3536kB writepending:6080kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:32868kB local_pcp:17032kB free_cma:0kB
[   53.656745][ T6334] lowmem_reserve[]: 0 0 0 0 0
[   53.658403][ T6334] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   53.673530][ T5220] Bluetooth: hci0: command tx timeout
[   53.683599][ T6334] lowmem_reserve[]: 0 0 854 854 854
[   53.685256][ T6334] Node 1 Normal free:290960kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9448kB inactive_anon:0kB active_file:608kB inactive_file:142812kB unevictable:3536kB writepending:272kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:45084kB local_pcp:26504kB free_cma:0kB
[   53.704093][ T6334] lowmem_reserve[]: 0 0 0 0 0
[   53.706412][ T6334] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   53.707659][ T6341] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   53.717754][ T6341] batadv_slave_1: entered promiscuous mode
[   53.719817][ T6334] Node 0 DMA32: 584*4kB (UME) 262*8kB (UME) 108*16kB (UME) 104*32kB (UME) 60*64kB (UM) 22*128kB (UME) 7*256kB (UME) 5*512kB (UM) 2*1024kB (M) 4*2048kB (UME) 101*4096kB (M) = 444432kB
[   53.725838][ T6334] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   53.730927][ T6334] Node 1 Normal: 143*4kB (UME) 179*8kB (U) 328*16kB (UE) 177*32kB (UME) 12*64kB (UE) 10*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (U) 1*2048kB (M) 66*4096kB (M) = 290932kB
[   53.737121][ T6334] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   53.739982][ T6334] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   53.740559][ T6341] netlink: 68 bytes leftover after parsing attributes in process `syz.0.134'.
[   53.742958][ T6334] 41731 total pagecache pages
[   53.742972][ T6334] 0 pages in swap cache
[   53.742976][ T6334] Free swap  = 124996kB
[   53.742979][ T6334] Total swap = 124996kB
[   53.742984][ T6334] 786301 pages RAM
[   53.742987][ T6334] 0 pages HighMem/MovableOnly
[   53.742990][ T6334] 241085 pages reserved
[   53.742994][ T6334] 0 pages cma reserved
[   53.758934][ T5220] Bluetooth: hci1: command tx timeout
[   53.760697][ T5220] Bluetooth: hci2: command tx timeout
[   53.799908][ T6346] netlink: 184 bytes leftover after parsing attributes in process `syz.2.136'.
[   53.836886][ T6348] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   53.861992][ T6350] netlink: 68 bytes leftover after parsing attributes in process `syz.2.138'.
[   53.924225][ T6355] validate_nla: 4 callbacks suppressed
[   53.924233][ T6355] netlink: 'syz.2.138': attribute type 27 has an invalid length.
[   54.000842][ T6358] netlink: 'syz.1.139': attribute type 1 has an invalid length.
[   54.005842][ T6358] netlink: 144 bytes leftover after parsing attributes in process `syz.1.139'.
[   54.008953][ T6358] netlink: 28 bytes leftover after parsing attributes in process `syz.1.139'.
[   54.012639][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'.
[   54.596724][ T6369] netlink: 'syz.1.141': attribute type 11 has an invalid length.
[   54.625800][ T6370] netlink: 24 bytes leftover after parsing attributes in process `syz.0.140'.
[   54.631669][ T6370] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   54.635287][ T6370] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   54.638609][ T6370] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   54.641783][ T6370] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   54.688501][ T6366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'.
[   55.032563][ T6408] syzkaller0: entered promiscuous mode
[   55.034782][ T6408] syzkaller0: entered allmulticast mode
[   55.752616][ T6420] ieee802154 phy0 wpan0: encryption failed: -22
[   55.784269][ T6424] x_tables: duplicate underflow at hook 1
[   55.995833][ T6434] Cannot find del_set index 1 as target
[   59.546853][ T6466] __nla_validate_parse: 2 callbacks suppressed
[   59.546863][ T6466] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.169'.
[   59.551848][ T6466] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   59.556681][ T6466] openvswitch: netlink: Duplicate key (type 0).
[   59.659610][   T33] audit: type=1107 audit(1752642912.588:2): pid=6470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='2َzOWCQ'
[   59.697735][ T6487] netlink: 'syz.0.175': attribute type 1 has an invalid length.
[   59.888591][ T6509] tipc: New replicast peer: 255.255.255.255
[   59.891334][ T6509] tipc: Enabled bearer <udp:syz2>, priority 10
[   60.057270][ T6523] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.060295][ T6523] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.068656][ T6523] tipc: Resetting bearer <eth:team0>
[   60.109834][ T6523] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.118653][ T6523] batadv_slave_1: left promiscuous mode
[   60.126143][ T6530] netlink: 48 bytes leftover after parsing attributes in process `syz.1.187'.
[   60.129567][ T6530] netlink: 100 bytes leftover after parsing attributes in process `syz.1.187'.
[   60.152799][ T6523] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.155710][ T6523] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.158498][ T6523] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.161421][ T6523] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.188703][ T6523] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[   60.191625][ T6523] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[   60.195687][ T6523] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[   60.198401][ T6523] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[   60.202674][ T6528] x9: renamed from bridge_slave_0 (while UP)
[   60.239531][ T6532] xt_hashlimit: size too large, truncated to 1048576
[   60.339157][ T6541] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   60.345346][ T6541] netlink: 'syz.1.192': attribute type 4 has an invalid length.
[   60.406484][ T6546] netlink: 'syz.1.194': attribute type 8 has an invalid length.
[   60.446288][ T6549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.195'.
[   60.686387][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'.
[   60.732505][ T6555] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   60.740606][ T6555] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[   60.761269][ T6555] netlink: 'syz.1.197': attribute type 8 has an invalid length.
[   60.810564][ T6559] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 43774 - 0
[   60.814140][ T6559] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 43774 - 0
[   60.816947][ T6559] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 43774 - 0
[   60.819798][ T6559] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 43774 - 0
[   60.823940][ T6559] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 48015 - 0
[   60.829953][ T6559] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 48015 - 0
[   60.835822][ T6559] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 48015 - 0
[   60.839832][ T6559] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 48015 - 0
[   60.842906][ T6559] geneve2: entered promiscuous mode
[   60.845727][ T6559] geneve2: entered allmulticast mode
[   61.156827][ T6578]  (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   61.200977][ T6580] 8021q: adding VLAN 0 to HW filter on device bond1
[   61.204924][ T6580] bond0: (slave bond1): Enslaving as an active interface with an up link
[   61.226608][ T6580] 8021q: adding VLAN 0 to HW filter on device bond2
[   61.229771][ T6580] bond0: (slave bond2): Enslaving as an active interface with an up link
[   62.200415][ T6614] netlink: 'syz.0.213': attribute type 1 has an invalid length.
[   62.217400][ T6614] 8021q: adding VLAN 0 to HW filter on device bond3
[   62.232930][ T6614] bond3: (slave veth3): Enslaving as an active interface with a down link
[   62.261470][ T6617] netlink: 'syz.0.214': attribute type 32 has an invalid length.
[   62.264674][ T6617] netlink: 88 bytes leftover after parsing attributes in process `syz.0.214'.
[   62.316910][ T6624] netlink: 'syz.0.216': attribute type 21 has an invalid length.
[   62.319929][ T6624] netlink: 'syz.0.216': attribute type 6 has an invalid length.
[   62.322782][ T6624] netlink: 64 bytes leftover after parsing attributes in process `syz.0.216'.
[   62.422819][ T6636] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.676742][ T6651] dvmrp8: entered allmulticast mode
[   62.683532][ T6653] netlink: 16 bytes leftover after parsing attributes in process `syz.2.226'.
[   62.750522][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'.
[   62.953350][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.235'.
[   62.956191][ T6691] netlink: 'syz.1.235': attribute type 18 has an invalid length.
[   62.958809][ T6692] netlink: 'syz.1.235': attribute type 18 has an invalid length.
[   63.020564][ T6697] ip6gre1: entered allmulticast mode
[   63.125803][ T6340] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   63.128266][ T6340] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   63.156683][ T6340] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   63.386436][ T6746] tipc: Started in network mode
[   63.388345][ T6746] tipc: Node identity c2b5008eb992, cluster identity 4711
[   63.391454][ T6746] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.429423][ T6746] syzkaller0: entered promiscuous mode
[   63.442427][ T6746] syzkaller0: entered allmulticast mode
[   63.454458][ T6746] tipc: Resetting bearer <eth:syzkaller0>
[   63.536036][ T6744] tipc: Resetting bearer <eth:syzkaller0>
[   64.187088][ T6744] tipc: Disabling bearer <eth:syzkaller0>
[   65.179177][ T6795] __nla_validate_parse: 11 callbacks suppressed
[   65.179186][ T6795] netlink: 550 bytes leftover after parsing attributes in process `syz.1.257'.
[   65.192829][ T6795] validate_nla: 2 callbacks suppressed
[   65.192838][ T6795] netlink: 'syz.1.257': attribute type 7 has an invalid length.
[   65.201158][ T6795] : entered promiscuous mode
[   65.236671][ T6798] team0: No ports can be present during mode change
[   65.285776][ T6801] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   65.288755][ T6801] netlink: 'syz.2.261': attribute type 33 has an invalid length.
[   65.291183][ T6801] netlink: 152 bytes leftover after parsing attributes in process `syz.2.261'.
[   65.437357][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'.
[   65.444779][ T6814] netlink: 24 bytes leftover after parsing attributes in process `syz.0.266'.
[   65.472617][ T6816] xt_TCPMSS: Only works on TCP SYN packets
[   65.584939][ T6823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.270'.
[   65.591108][ T6823] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   65.594060][ T6823] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   65.596754][ T6823] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   65.599428][ T6823] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   65.605094][ T6823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.270'.
[   66.186037][ T6826] x_tables: duplicate underflow at hook 1
[   66.297513][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.275'.
[   66.300388][ T6835] openvswitch: netlink: Flow key attr not present in new flow.
[   66.303384][ T6833] netlink: 36 bytes leftover after parsing attributes in process `syz.2.274'.
[   66.303855][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.275'.
[   66.309389][ T6836] openvswitch: netlink: Flow key attr not present in new flow.
[   66.349446][ T6840] netlink: 'syz.2.276': attribute type 9 has an invalid length.
[   66.355150][ T6840] netlink: 'syz.2.276': attribute type 6 has an invalid length.
[   66.477136][ T6849] team0: No ports can be present during mode change
[   66.586928][ T6859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.283'.
[   66.648358][ T6869] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   66.740993][ T6879] tunl0: entered promiscuous mode
[   66.746372][ T6879] netlink: 'syz.2.289': attribute type 4 has an invalid length.
[   66.803027][ T6886] ip6tnl1: entered promiscuous mode
[   66.806095][ T6886] ip6tnl1: entered allmulticast mode
[   66.809799][ T6886] team0: Device ip6tnl1 is of different type
[   66.967159][ T6900] vlan2: entered promiscuous mode
[   66.969352][ T6900] bridge0: entered promiscuous mode
[   66.995972][ T6914] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   67.103618][ T6924] netlink: 'syz.2.304': attribute type 29 has an invalid length.
[   67.107703][ T6924] netlink: 'syz.2.304': attribute type 29 has an invalid length.
[   67.110378][ T6924] netlink: 'syz.2.304': attribute type 29 has an invalid length.
[   67.113074][ T6924] netlink: 'syz.2.304': attribute type 29 has an invalid length.
[   67.117102][ T6924] netlink: 'syz.2.304': attribute type 29 has an invalid length.
[   67.864056][    T9] cfg80211: failed to load regulatory.db
[   67.911142][ T6931] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[   67.968224][ T6935] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[   68.037119][ T6940] team0: No ports can be present during mode change
[   68.370122][ T6971] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   68.375689][ T6971] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   68.379632][ T6971] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   68.573808][ T6983] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   68.577093][ T6987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   68.666574][ T6995] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.671451][ T6995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.669399][ T7098] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   69.672198][ T7098] team0: Device macvtap1 is already an upper device of the team interface
[   70.046778][ T7134] ieee802154 phy0 wpan0: encryption failed: -22
[   70.071561][ T7136] IPVS: set_ctl: invalid protocol: 115 10.1.1.2:20004
[   70.108888][ T7141] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   70.111464][ T7141] IPv6: NLM_F_CREATE should be set when creating new route
[   70.113888][ T7141] IPv6: NLM_F_CREATE should be set when creating new route
[   70.116237][ T7141] IPv6: NLM_F_CREATE should be set when creating new route
[   70.119809][ T7141] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   70.199725][ T7150] team0: No ports can be present during mode change
[   70.230789][ T7152] __nla_validate_parse: 16 callbacks suppressed
[   70.230798][ T7152] netlink: 24 bytes leftover after parsing attributes in process `syz.1.357'.
[   70.398845][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'.
[   70.401860][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'.
[   70.407112][ T7158] netlink: 40 bytes leftover after parsing attributes in process `syz.1.359'.
[   70.409970][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'.
[   70.595392][ T7172] team0: No ports can be present during mode change
[   70.641174][ T7179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.365'.
[   70.650108][ T7165] validate_nla: 30 callbacks suppressed
[   70.650117][ T7165] netlink: 'syz.1.362': attribute type 13 has an invalid length.
[   70.655216][ T7165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.362'.
[   70.697857][ T7186] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   70.702003][ T7186] netlink: 52 bytes leftover after parsing attributes in process `syz.0.367'.
[   70.751095][ T7173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.758358][ T7188] netlink: 'syz.0.368': attribute type 1 has an invalid length.
[   70.760793][ T7173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.761114][ T7188] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.765226][ T7173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.772626][ T7188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.368'.
[   70.796143][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[   70.798177][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[   70.849344][ T7195] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   71.060957][ T7220] netlink: 'syz.2.378': attribute type 11 has an invalid length.
[   71.150494][ T7235] netlink: 56 bytes leftover after parsing attributes in process `syz.0.383'.
[   71.197334][ T7237] netlink: 'syz.0.384': attribute type 10 has an invalid length.
[   71.203957][ T7237] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.207448][ T7237] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.210290][ T7237] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.214491][ T7237] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.220695][ T7237] team0: Port device geneve0 added
[   71.252603][ T7239] netlink: 'syz.0.385': attribute type 21 has an invalid length.
[   71.280396][ T7165] syz.1.362 (7165) used greatest stack depth: 18648 bytes left
[   71.382093][ T7251] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.387712][ T7251] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   71.407784][ T7251] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   71.410955][ T7251] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   71.414073][ T7253] syzkaller0: entered promiscuous mode
[   71.415999][ T7253] syzkaller0: entered allmulticast mode
[   71.440684][ T7259] team0: No ports can be present during mode change
[   71.550778][ T7264] xt_CT: No such helper "pptp"
[   71.754004][   T54] Bluetooth: hci2: command tx timeout
[   71.868409][ T7289] xt_hashlimit: size too large, truncated to 1048576
[   72.165302][ T7311] bridge3: entered allmulticast mode
[   72.188863][ T7313] 8021q: VLANs not supported on gre0
[   72.288594][ T7319] openvswitch: netlink: Key 22 has unexpected len 2 expected 4
[   72.326769][ T7323] netlink: 'syz.1.415': attribute type 5 has an invalid length.
[   72.333296][ T7323] netdevsim netdevsim1 netdevsim0: set [1, 3] type 2 family 0 port 256 - 0
[   72.336128][ T7323] netdevsim netdevsim1 netdevsim1: set [1, 3] type 2 family 0 port 256 - 0
[   72.338888][ T7323] netdevsim netdevsim1 netdevsim2: set [1, 3] type 2 family 0 port 256 - 0
[   72.342217][ T7323] netdevsim netdevsim1 netdevsim3: set [1, 3] type 2 family 0 port 256 - 0
[   72.345526][ T7323] geneve3: entered promiscuous mode
[   72.347249][ T7323] geneve3: entered allmulticast mode
[   72.487334][ T7335] netdevsim netdevsim0 : renamed from netdevsim0
[   72.723389][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   72.853717][ T7367] team0: No ports can be present during mode change
[   73.189061][ T7388] netlink: 'syz.2.431': attribute type 9 has an invalid length.
[   73.298270][ T7398] netlink: 'syz.2.433': attribute type 10 has an invalid length.
[   73.337002][ T7402] team0: No ports can be present during mode change
[   73.414217][ T7406] netlink: zone id is out of range
[   73.423821][ T7406] netlink: zone id is out of range
[   73.425599][ T7406] netlink: zone id is out of range
[   73.451216][ T7406] netlink: zone id is out of range
[   73.498583][ T7406] netlink: zone id is out of range
[   73.501600][ T7406] netlink: zone id is out of range
[   73.566885][ T7415] delete_channel: no stack
[   73.618960][ T7419] netlink: 'syz.0.440': attribute type 2 has an invalid length.
[   73.623013][ T7419] netlink: 'syz.0.440': attribute type 1 has an invalid length.
[   73.833071][ T7441] veth7: entered promiscuous mode
[   73.989469][ T7466] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   73.994625][ T7464] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   74.291775][ T7506] ip6t_rpfilter: unknown options
[   74.386130][ T7522] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   74.389985][ T7522] Cannot find set identified by id 0 to match
[   74.912268][ T5220] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   74.915883][ T5220] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   74.919144][ T5220] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   74.922674][ T5220] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   74.926367][ T5220] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   75.038988][ T7542] chnl_net:caif_netlink_parms(): no params data found
[   75.108450][ T7542] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.111218][ T7542] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.114114][ T7542] bridge_slave_0: entered allmulticast mode
[   75.116953][ T7542] bridge_slave_0: entered promiscuous mode
[   75.120918][ T7542] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.124963][ T7542] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.129023][ T7542] bridge_slave_1: entered allmulticast mode
[   75.131641][ T7542] bridge_slave_1: entered promiscuous mode
[   75.162433][ T7542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.167355][ T7542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.208014][ T7542] team0: Port device team_slave_0 added
[   75.211491][ T7542] team0: Port device team_slave_1 added
[   75.240796][ T7542] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.242966][ T7542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.252304][ T7542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.260145][ T7542] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.262299][ T7542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.270708][ T7542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.298244][ T7542] hsr_slave_0: entered promiscuous mode
[   75.300516][ T7542] hsr_slave_1: entered promiscuous mode
[   75.302531][ T7542] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   75.304984][ T7542] Cannot create hsr debugfs directory
[   75.386470][ T7564] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   75.391750][ T7564] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   75.432822][ T7542] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.444946][ T7569] team0: No ports can be present during mode change
[   75.512126][ T7542] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.525185][ T7576] __nla_validate_parse: 22 callbacks suppressed
[   75.525195][ T7576] netlink: 84 bytes leftover after parsing attributes in process `syz.0.490'.
[   75.531578][ T7576] netlink: 84 bytes leftover after parsing attributes in process `syz.0.490'.
[   75.562990][ T7542] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.625919][ T7587] 8021q: adding VLAN 0 to HW filter on device bond3
[   75.636534][ T7542] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.653810][ T7587] bond3: (slave gretap1): making interface the new active one
[   75.657561][ T7587] bond3: (slave gretap1): Enslaving as an active interface with an up link
[   75.716722][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.496'.
[   75.771379][ T7542] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   75.777193][ T7542] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   75.781228][ T7542] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   75.787470][ T7542] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   75.848230][ T7615] team0: No ports can be present during mode change
[   75.863670][ T7612] netlink: 24 bytes leftover after parsing attributes in process `syz.0.500'.
[   75.891954][ T7542] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.905274][ T7542] 8021q: adding VLAN 0 to HW filter on device team0
[   75.917466][ T7601] gretap1: entered promiscuous mode
[   75.923635][ T7601] gretap1: entered allmulticast mode
[   75.966338][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.968584][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.985993][ T7624] netlink: 182 bytes leftover after parsing attributes in process `syz.1.505'.
[   75.991238][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.993586][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.996208][ T5220] Bluetooth: hci0: command 0x0c1a tx timeout
[   76.026483][ T7542] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   76.029800][ T7542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   76.110381][ T7542] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.133743][ T7542] veth0_vlan: entered promiscuous mode
[   76.138662][ T7542] veth1_vlan: entered promiscuous mode
[   76.156654][ T7542] veth0_macvtap: entered promiscuous mode
[   76.160446][ T7542] veth1_macvtap: entered promiscuous mode
[   76.168800][ T7542] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.177334][ T7542] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.182666][ T7542] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.185474][ T7542] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.188211][ T7542] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.190976][ T7542] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.230808][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.237035][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.248981][   T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.251437][   T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.429609][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.508'.
[   76.467343][ T7644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.509'.
[   76.467355][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.509'.
[   76.731800][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.516'.
[   76.739642][ T7666] macsec2: entered allmulticast mode
[   76.741857][ T7666] team0: entered allmulticast mode
[   76.745586][ T7666] team_slave_0: entered allmulticast mode
[   76.748004][ T7666] team_slave_1: entered allmulticast mode
[   76.749899][ T7666] geneve0: entered allmulticast mode
[   76.753517][ T7666] team0: left allmulticast mode
[   76.755151][ T7666] team_slave_0: left allmulticast mode
[   76.756961][ T7666] team_slave_1: left allmulticast mode
[   76.758721][ T7666] geneve0: left allmulticast mode
[   76.881724][ T7671] syz.1.517: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   76.888696][ T7671] CPU: 1 UID: 0 PID: 7671 Comm: syz.1.517 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   76.888708][ T7671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   76.888713][ T7671] Call Trace:
[   76.888717][ T7671]  <TASK>
[   76.888721][ T7671]  dump_stack_lvl+0x189/0x250
[   76.888734][ T7671]  ? __pfx_dump_stack_lvl+0x10/0x10
[   76.888743][ T7671]  ? __pfx__printk+0x10/0x10
[   76.888754][ T7671]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   76.888765][ T7671]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   76.888775][ T7671]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   76.888786][ T7671]  warn_alloc+0x214/0x310
[   76.888796][ T7671]  ? stack_depot_save_flags+0x40/0x900
[   76.888809][ T7671]  ? __pfx_warn_alloc+0x10/0x10
[   76.888819][ T7671]  ? kasan_save_track+0x4f/0x80
[   76.888827][ T7671]  ? xskq_create+0x56/0x170
[   76.888837][ T7671]  ? xsk_init_queue+0xb0/0x110
[   76.888846][ T7671]  ? xsk_setsockopt+0x43f/0x710
[   76.888854][ T7671]  ? do_sock_setsockopt+0x25a/0x3e0
[   76.888863][ T7671]  ? __x64_sys_setsockopt+0x18b/0x220
[   76.888871][ T7671]  ? do_syscall_64+0xfa/0x3b0
[   76.888899][ T7671]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.888912][ T7671]  __vmalloc_node_range_noprof+0x125/0x12f0
[   76.888934][ T7671]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   76.888947][ T7671]  ? __kasan_kmalloc+0x93/0xb0
[   76.888956][ T7671]  vmalloc_user_noprof+0xad/0xf0
[   76.888967][ T7671]  ? xskq_create+0xbf/0x170
[   76.888983][ T7671]  xskq_create+0xbf/0x170
[   76.888995][ T7671]  xsk_init_queue+0xb0/0x110
[   76.889006][ T7671]  xsk_setsockopt+0x43f/0x710
[   76.889017][ T7671]  ? __pfx_xsk_setsockopt+0x10/0x10
[   76.889026][ T7671]  ? __lock_acquire+0xab9/0xd20
[   76.889037][ T7671]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   76.889049][ T7671]  ? __pfx_xsk_setsockopt+0x10/0x10
[   76.889060][ T7671]  do_sock_setsockopt+0x25a/0x3e0
[   76.889070][ T7671]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   76.889082][ T7671]  ? __fget_files+0x2a/0x420
[   76.889095][ T7671]  __x64_sys_setsockopt+0x18b/0x220
[   76.889107][ T7671]  do_syscall_64+0xfa/0x3b0
[   76.889113][ T7671]  ? lockdep_hardirqs_on+0x9c/0x150
[   76.889124][ T7671]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.889131][ T7671]  ? exc_page_fault+0x9f/0xf0
[   76.889142][ T7671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.889149][ T7671] RIP: 0033:0x7fa577b8e929
[   76.889158][ T7671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   76.889164][ T7671] RSP: 002b:00007fa578a19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   76.889172][ T7671] RAX: ffffffffffffffda RBX: 00007fa577db5fa0 RCX: 00007fa577b8e929
[   76.889177][ T7671] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000e
[   76.889181][ T7671] RBP: 00007fa577c10b39 R08: 0000000000000004 R09: 0000000000000000
[   76.889186][ T7671] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   76.889190][ T7671] R13: 0000000000000000 R14: 00007fa577db5fa0 R15: 00007ffc4bcc9ed8
[   76.889201][ T7671]  </TASK>
[   76.889204][ T7671] Mem-Info:
[   76.989167][ T7671] active_anon:5181 inactive_anon:0 isolated_anon:0
[   76.989167][ T7671]  active_file:1210 inactive_file:38216 isolated_file:0
[   76.989167][ T7671]  unevictable:1768 dirty:267 writeback:0
[   76.989167][ T7671]  slab_reclaimable:9340 slab_unreclaimable:57514
[   76.989167][ T7671]  mapped:18267 shmem:2440 pagetables:968
[   76.989167][ T7671]  sec_pagetables:0 bounce:0
[   76.989167][ T7671]  kernel_misc_reclaimable:0
[   76.989167][ T7671]  free:294362 free_pcp:22110 free_cma:0
[   77.003824][ T7671] Node 0 active_anon:11020kB inactive_anon:0kB active_file:3900kB inactive_file:10044kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:25172kB dirty:828kB writeback:0kB shmem:5212kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5652kB pagetables:2120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   77.014856][ T7671] Node 1 active_anon:9704kB inactive_anon:0kB active_file:940kB inactive_file:142820kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:47896kB dirty:240kB writeback:0kB shmem:4548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6096kB pagetables:1752kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   77.025050][ T7671] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   77.034321][ T7671] lowmem_reserve[]: 0 812 812 812 812
[   77.036068][ T7671] Node 0 DMA32 free:430420kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11020kB inactive_anon:0kB active_file:3900kB inactive_file:10044kB unevictable:3536kB writepending:828kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:47092kB local_pcp:20728kB free_cma:0kB
[   77.039659][ T7685] 8021q: adding VLAN 0 to HW filter on device bond4
[   77.045685][ T7671] lowmem_reserve[]: 0 0 0 0 0
[   77.045708][ T7671] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   77.045732][ T7671] lowmem_reserve[]: 0 0 854 854 854
[   77.045749][ T7671] Node 1 Normal free:273176kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9704kB inactive_anon:0kB active_file:940kB inactive_file:142820kB unevictable:3536kB writepending:240kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:41752kB local_pcp:20000kB free_cma:0kB
[   77.045773][ T7671] lowmem_reserve[]: 0 0 0 0 0
[   77.045790][ T7671] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   77.045845][ T7671] Node 0 DMA32: 805*4kB (UME) 232*8kB (UME) 196*16kB (UME) 143*32kB (UME) 69*64kB (UME) 32*128kB (UM) 18*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 4*2048kB (UM) 96*4096kB (M) = 430388kB
[   77.045937][ T7671] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   77.046010][ T7671] Node 1 Normal: 150*4kB (UM) 
[   77.079606][ T7684] 8021q: adding VLAN 0 to HW filter on device bond5
[   77.080940][ T7671] 176*8kB (UME) 58*16kB (UME) 67*32kB (UME) 12*64kB (UME) 51*128kB (UME) 17*256kB (UME) 9*512kB (UE) 12*1024kB (UE) 7*2048kB (UME) 55*4096kB (M) = 273240kB
[   77.094782][ T7671] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   77.104199][ T7671] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   77.107038][ T7671] 41866 total pagecache pages
[   77.108925][ T7671] 0 pages in swap cache
[   77.110210][ T7671] Free swap  = 124996kB
[   77.111490][ T7671] Total swap = 124996kB
[   77.112778][ T7671] 786301 pages RAM
[   77.129242][ T7671] 0 pages HighMem/MovableOnly
[   77.130789][ T7671] 241085 pages reserved
[   77.132095][ T7671] 0 pages cma reserved
[   77.327074][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.530'.
[   77.329922][ T7705] validate_nla: 6 callbacks suppressed
[   77.329929][ T7705] netlink: 'syz.1.530': attribute type 5 has an invalid length.
[   77.362203][   T12] bridge_slave_1: left allmulticast mode
[   77.364267][   T12] bridge_slave_1: left promiscuous mode
[   77.366511][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.370779][   T12] bridge_slave_0: left allmulticast mode
[   77.372542][   T12] bridge_slave_0: left promiscuous mode
[   77.383320][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.599538][ T7718] net_ratelimit: 17 callbacks suppressed
[   77.599548][ T7718] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.732408][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   77.738491][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   77.741929][   T12] bond0 (unregistering): Released all slaves
[   77.748386][   T12] bond1 (unregistering): Released all slaves
[   77.755387][   T12] bond2 (unregistering): Released all slaves
[   77.761231][ T7710] team0: No ports can be present during mode change
[   77.816978][   T12] tipc: Left network mode
[   77.986508][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.988956][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.992274][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.994732][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.005366][   T12] hsr0: left allmulticast mode
[   78.007443][   T12] veth1_macvtap: left promiscuous mode
[   78.009323][   T12] veth0_macvtap: left promiscuous mode
[   78.011165][   T12] veth1_vlan: left promiscuous mode
[   78.012981][   T12] veth0_vlan: left promiscuous mode
[   78.078000][ T5220] Bluetooth: hci0: command 0x0c1a tx timeout
[   78.272303][   T12] team0 (unregistering): Port device team_slave_1 removed
[   78.291374][   T12] team0 (unregistering): Port device team_slave_0 removed
[   78.470945][ T7731] tipc: Started in network mode
[   78.472518][ T7731] tipc: Node identity , cluster identity 4711
[   78.475232][ T7731] tipc: Failed to obtain node identity
[   78.477145][ T7731] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[   78.690029][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   78.693831][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   78.696718][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   78.699748][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   78.705193][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   78.730329][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.850437][ T7749] bridge0: port 3(veth0_to_bridge) entered blocking state
[   78.853357][ T7749] bridge0: port 3(veth0_to_bridge) entered disabled state
[   78.859205][ T7749] veth0_to_bridge: entered allmulticast mode
[   78.864080][ T7749] veth0_to_bridge: entered promiscuous mode
[   78.868347][ T7749] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   78.875296][ T7749] bridge0: port 3(veth0_to_bridge) entered blocking state
[   78.877551][ T7749] bridge0: port 3(veth0_to_bridge) entered forwarding state
[   78.887164][ T7734] chnl_net:caif_netlink_parms(): no params data found
[   78.914597][ T7753] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[   78.950925][ T7759] team0: No ports can be present during mode change
[   78.982180][ T7734] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.990097][ T7734] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.992392][ T7734] bridge_slave_0: entered allmulticast mode
[   79.001137][ T7734] bridge_slave_0: entered promiscuous mode
[   79.006295][ T7734] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.008596][ T7734] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.011112][ T7734] bridge_slave_1: entered allmulticast mode
[   79.015124][ T7734] bridge_slave_1: entered promiscuous mode
[   79.033054][ T7734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.038427][ T7734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.065589][ T7734] team0: Port device team_slave_0 added
[   79.068752][ T7734] team0: Port device team_slave_1 added
[   79.096655][ T7734] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.098826][ T7734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.106675][ T7734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.110908][ T7734] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.113028][ T7734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.125056][ T7734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.161267][ T7734] hsr_slave_0: entered promiscuous mode
[   79.163591][ T7734] hsr_slave_1: entered promiscuous mode
[   79.192710][ T7771] netlink: 'syz.1.550': attribute type 10 has an invalid length.
[   79.206633][ T7771] batman_adv: batadv0: Adding interface: virt_wifi0
[   79.209319][ T7771] batman_adv: batadv0: Interface activated: virt_wifi0
[   79.407622][ T7783] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[   79.537983][ T7794] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.541234][ T7794] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.601136][ T7794] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.605928][ T7794] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.659665][ T7794] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.663004][ T7794] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.703602][ T7794] netdevsim netdevsim0  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.706731][ T7794] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.752226][ T7794] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   79.756499][ T7794] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.764831][ T7794] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   79.767363][ T7794] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.776071][ T7794] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   79.778560][ T7794] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.785474][ T7794] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   79.788029][ T7794] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.793699][ T7796] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.797769][ T7796] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.846522][ T7796] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.849554][ T7796] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.886334][ T7796] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.889336][ T7796] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.936217][ T7796] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.939251][ T7796] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.054333][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.104917][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.156440][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.213191][ T7802] team0: No ports can be present during mode change
[   80.281942][   T12] bridge_slave_1: left allmulticast mode
[   80.284696][   T12] bridge_slave_1: left promiscuous mode
[   80.286690][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.292386][   T12] bridge_slave_0: left allmulticast mode
[   80.296265][   T12] bridge_slave_0: left promiscuous mode
[   80.298919][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.539884][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.545420][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.548950][   T12] bond0 (unregistering): Released all slaves
[   80.617933][ T7811] __nla_validate_parse: 5 callbacks suppressed
[   80.617944][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'.
[   80.714404][ T5220] Bluetooth: hci1: command tx timeout
[   80.759299][ T7821] 8021q: VLANs not supported on vcan0
[   80.808316][   T12] hsr_slave_0: left promiscuous mode
[   80.810635][   T12] hsr_slave_1: left promiscuous mode
[   80.815791][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.818181][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.821919][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.829609][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.840665][   T12] veth1_macvtap: left promiscuous mode
[   80.842515][   T12] veth0_macvtap: left promiscuous mode
[   80.844641][   T12] veth1_vlan: left promiscuous mode
[   80.846381][   T12] veth0_vlan: left promiscuous mode
[   81.090824][   T12] team0 (unregistering): Port device team_slave_1 removed
[   81.111130][   T12] team0 (unregistering): Port device team_slave_0 removed
[   81.319401][ T7796] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   81.322067][ T7796] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.332011][ T7796] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   81.336053][ T7796] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.344609][ T7796] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   81.347335][ T7796] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.363893][ T7796] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   81.366561][ T7796] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.373819][ T7734] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   81.380877][ T7734] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   81.387281][ T7734] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   81.395777][ T7734] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   81.472130][ T7734] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.478809][ T7839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.568'.
[   81.481748][ T7734] 8021q: adding VLAN 0 to HW filter on device team0
[   81.487324][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.489591][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.497472][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.499745][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.591179][ T7850] netlink: 68 bytes leftover after parsing attributes in process `syz.0.571'.
[   81.629301][ T7734] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.700914][ T7734] veth0_vlan: entered promiscuous mode
[   81.717131][ T7734] veth1_vlan: entered promiscuous mode
[   81.767047][ T7734] veth0_macvtap: entered promiscuous mode
[   81.778661][ T7734] veth1_macvtap: entered promiscuous mode
[   81.788147][ T7734] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.794650][ T7734] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.799594][ T7734] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.802288][ T7734] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.807990][ T7734] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.810707][ T7734] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.858825][ T7866] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   81.862019][ T7866] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   81.951673][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.956461][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.980016][   T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.985899][   T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.073718][ T7889] xt_l2tp: invalid flags combination: c
[   82.118339][ T7891] netlink: 'syz.1.584': attribute type 2 has an invalid length.
[   82.122601][ T7891] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   82.128090][ T7891] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   82.436524][ T7915] netlink: 'syz.1.589': attribute type 11 has an invalid length.
[   82.502668][ T7921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'.
[   82.819326][ T7926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.592'.
[   82.900710][ T7933] netlink: 184 bytes leftover after parsing attributes in process `syz.0.595'.
[   82.905463][ T7933] netlink: 68 bytes leftover after parsing attributes in process `syz.0.595'.
[   82.908425][ T7933] netlink: 184 bytes leftover after parsing attributes in process `syz.0.595'.
[   82.964786][ T7942] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[   83.118459][ T7951] netlink: 76 bytes leftover after parsing attributes in process `syz.0.600'.
[   83.694935][ T7712] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.896409][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   83.899492][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   83.902219][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   83.906017][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   83.908694][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   83.977615][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'.
[   84.042033][ T7977] chnl_net:caif_netlink_parms(): no params data found
[   84.131142][ T8000] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[   84.134799][ T7977] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.137288][ T7977] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.139868][ T7977] bridge_slave_0: entered allmulticast mode
[   84.145909][ T7977] bridge_slave_0: entered promiscuous mode
[   84.151333][ T8003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   84.161460][ T7977] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.167094][ T7977] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.172540][ T7977] bridge_slave_1: entered allmulticast mode
[   84.178327][ T7977] bridge_slave_1: entered promiscuous mode
[   84.217669][ T7977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.222162][ T7977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.264551][ T7977] team0: Port device team_slave_0 added
[   84.276592][ T7977] team0: Port device team_slave_1 added
[   84.299206][ T7977] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.301522][ T7977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.311383][ T7977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.317061][ T7977] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.319267][ T7977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.328345][ T7977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.372697][ T7977] hsr_slave_0: entered promiscuous mode
[   84.376814][ T7977] hsr_slave_1: entered promiscuous mode
[   84.393322][ T7977] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.395807][ T7977] Cannot create hsr debugfs directory
[   84.509466][ T8020] GUP no longer grows the stack in syz.0.620 (8020): 200000004000-200000008000 (200000002000)
[   84.512892][ T8020] CPU: 1 UID: 0 PID: 8020 Comm: syz.0.620 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   84.512904][ T8020] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   84.512909][ T8020] Call Trace:
[   84.512913][ T8020]  <TASK>
[   84.512916][ T8020]  dump_stack_lvl+0x189/0x250
[   84.512931][ T8020]  ? __pfx_dump_stack_lvl+0x10/0x10
[   84.512940][ T8020]  ? __pfx__printk+0x10/0x10
[   84.512956][ T8020]  ? find_vma+0xe7/0x160
[   84.512970][ T8020]  __get_user_pages+0x2a60/0x30b0
[   84.512992][ T8020]  ? __pfx___get_user_pages+0x10/0x10
[   84.512999][ T8020]  ? __gup_longterm_locked+0x309/0x15b0
[   84.513007][ T8020]  ? down_read_killable+0x1d1/0x350
[   84.513016][ T8020]  ? try_get_folio+0x633/0x660
[   84.513027][ T8020]  __gup_longterm_locked+0x3e3/0x15b0
[   84.513045][ T8020]  gup_fast_fallback+0x1cd4/0x2260
[   84.513069][ T8020]  ? __pfx_gup_fast_fallback+0x10/0x10
[   84.513078][ T8020]  ? rcu_is_watching+0x15/0xb0
[   84.513089][ T8020]  ? is_valid_gup_args+0x11f/0x200
[   84.513097][ T8020]  ? pin_user_pages_fast+0x4d/0xb0
[   84.513106][ T8020]  rds_cmsg_rdma_args+0x8f4/0x1240
[   84.513148][ T8020]  rds_cmsg_send+0x33d/0x5c0
[   84.513162][ T8020]  rds_sendmsg+0x1129/0x1f00
[   84.513176][ T8020]  ? __pfx_rds_sendmsg+0x10/0x10
[   84.513184][ T8020]  ? aa_sk_perm+0x81e/0x950
[   84.513196][ T8020]  ? __pfx_aa_sk_perm+0x10/0x10
[   84.513206][ T8020]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[   84.513218][ T8020]  ? aa_sock_msg_perm+0x94/0x160
[   84.513246][ T8020]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   84.513256][ T8020]  ? __pfx_rds_sendmsg+0x10/0x10
[   84.513265][ T8020]  __sock_sendmsg+0x21c/0x270
[   84.513275][ T8020]  ____sys_sendmsg+0x505/0x830
[   84.513288][ T8020]  ? __pfx_____sys_sendmsg+0x10/0x10
[   84.513301][ T8020]  ? import_iovec+0x74/0xa0
[   84.513311][ T8020]  ___sys_sendmsg+0x21f/0x2a0
[   84.513322][ T8020]  ? __pfx____sys_sendmsg+0x10/0x10
[   84.513334][ T8020]  ? futex_wake+0x458/0x500
[   84.513346][ T8020]  ? __pfx_rds_bind+0x10/0x10
[   84.513354][ T8020]  ? __might_fault+0xb0/0x130
[   84.513373][ T8020]  __x64_sys_sendmsg+0x19b/0x260
[   84.513383][ T8020]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   84.513397][ T8020]  ? rcu_is_watching+0x15/0xb0
[   84.513407][ T8020]  ? do_syscall_64+0xbe/0x3b0
[   84.513416][ T8020]  do_syscall_64+0xfa/0x3b0
[   84.513423][ T8020]  ? lockdep_hardirqs_on+0x9c/0x150
[   84.513433][ T8020]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.513440][ T8020]  ? exc_page_fault+0x9f/0xf0
[   84.513451][ T8020]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.513458][ T8020] RIP: 0033:0x7fde1818e929
[   84.513466][ T8020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   84.513472][ T8020] RSP: 002b:00007fde18fac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   84.513481][ T8020] RAX: ffffffffffffffda RBX: 00007fde183b6080 RCX: 00007fde1818e929
[   84.513486][ T8020] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 000000000000000b
[   84.513490][ T8020] RBP: 00007fde18210b39 R08: 0000000000000000 R09: 0000000000000000
[   84.513494][ T8020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   84.513498][ T8020] R13: 0000000000000000 R14: 00007fde183b6080 R15: 00007ffd148f2b58
[   84.513510][ T8020]  </TASK>
[   84.621497][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   84.625589][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   84.629871][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   84.633738][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   84.637756][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   84.641584][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   84.645635][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   84.649449][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   84.653423][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   85.996208][   T54] Bluetooth: hci1: command tx timeout
[   87.501589][ T8029] tipc: Started in network mode
[   87.504845][ T8029] tipc: Node identity aa65ff19ae3c, cluster identity 4711
[   87.507884][ T8029] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.570059][ T8029] tipc: Disabling bearer <eth:syzkaller0>
[   87.706738][ T7712] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.766881][ T8050] nbd: must specify at least one socket
[   87.810642][ T7712] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.932653][ T7712] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.968726][ T8066] __nla_validate_parse: 5 callbacks suppressed
[   87.968735][ T8066] netlink: 580 bytes leftover after parsing attributes in process `syz.0.636'.
[   88.087231][   T54] Bluetooth: hci1: command tx timeout
[   88.159983][ T7712] bridge_slave_1: left allmulticast mode
[   88.162037][ T7712] bridge_slave_1: left promiscuous mode
[   88.164236][ T7712] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.178109][ T7712] bridge_slave_0: left allmulticast mode
[   88.180085][ T7712] bridge_slave_0: left promiscuous mode
[   88.182083][ T7712] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.544716][ T7712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   88.552187][ T7712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   88.556787][ T7712] bond0 (unregistering): Released all slaves
[   89.008106][ T7712] hsr_slave_0: left promiscuous mode
[   89.012241][ T7712] hsr_slave_1: left promiscuous mode
[   89.017467][ T7712] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.019946][ T7712] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.026266][ T7712] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.028679][ T7712] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.044559][ T7712] veth1_macvtap: left promiscuous mode
[   89.046439][ T7712] veth0_macvtap: left promiscuous mode
[   89.048322][ T7712] veth1_vlan: left promiscuous mode
[   89.050139][ T7712] veth0_vlan: left promiscuous mode
[   89.153169][    C1] net_ratelimit: 32787 callbacks suppressed
[   89.153180][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   89.159154][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   89.163193][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   89.166987][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   89.170576][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   89.174631][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   89.178611][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   89.182354][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   89.186318][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   89.190341][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   89.524147][ T7712] team0 (unregistering): Port device team_slave_1 removed
[   89.563994][ T7712] team0 (unregistering): Port device team_slave_0 removed
[   89.999897][ T7977] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   90.022140][ T7977] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   90.040426][ T7977] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   90.088562][ T7977] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   90.183372][   T54] Bluetooth: hci1: command tx timeout
[   90.206163][ T7977] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.256757][ T7977] 8021q: adding VLAN 0 to HW filter on device team0
[   90.272056][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.274529][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.300524][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.302928][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.386631][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.646'.
[   90.415670][ T8132] xt_TPROXY: Can be used only with -p tcp or -p udp
[   90.424501][ T8125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.647'.
[   90.546259][ T8123] netlink: 'syz.0.646': attribute type 1 has an invalid length.
[   90.548810][ T8123] netlink: 120 bytes leftover after parsing attributes in process `syz.0.646'.
[   90.562706][ T7977] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.611020][ T7977] veth0_vlan: entered promiscuous mode
[   90.626085][ T7977] veth1_vlan: entered promiscuous mode
[   90.670347][ T7977] veth0_macvtap: entered promiscuous mode
[   90.678314][ T7977] veth1_macvtap: entered promiscuous mode
[   90.696391][ T7977] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.706611][ T7977] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.711896][ T7977] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.715118][ T7977] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.718253][ T7977] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.721292][ T7977] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.268528][ T8150] netlink: 'syz.0.650': attribute type 1 has an invalid length.
[   91.271747][ T8150] netlink: 224 bytes leftover after parsing attributes in process `syz.0.650'.
[   92.233333][   T54] Bluetooth: hci1: command tx timeout
[   94.163285][    C1] net_ratelimit: 35998 callbacks suppressed
[   94.163296][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   94.169258][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   94.173329][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   94.177019][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   94.180861][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   94.184983][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   94.189004][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   94.192716][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   94.196482][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   94.200605][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   99.173210][    C1] net_ratelimit: 36425 callbacks suppressed
[   99.173221][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   99.178950][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   99.182965][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   99.186975][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   99.190603][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   99.194398][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   99.198374][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   99.202383][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   99.206026][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   99.209695][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.412975][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.429617][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.470757][ T8152] sched: DL replenish lagged too much
[  102.500488][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.514917][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.520630][ T8158] netlink: 'syz.1.653': attribute type 7 has an invalid length.
[  102.530615][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.653'.
[  102.670625][ T8166] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  103.144903][ T8187] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  103.253771][ T8199] netlink: 'syz.1.667': attribute type 9 has an invalid length.
[  103.256728][ T8199] netlink: 'syz.1.667': attribute type 7 has an invalid length.
[  103.265222][ T8199] netlink: 'syz.1.667': attribute type 8 has an invalid length.
[  103.395132][   T54] Bluetooth: hci2: link tx timeout
[  103.399649][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  103.429017][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.672'.
[  103.431857][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.672'.
[  103.564803][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.670487][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.183224][    C1] net_ratelimit: 36336 callbacks suppressed
[  104.183235][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  104.189416][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  104.193445][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  104.197191][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  104.200874][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  104.204766][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  104.208721][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  104.212385][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  104.216094][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  104.220086][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  104.281943][ T8235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  104.287960][ T8235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  104.290770][ T8235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  104.293494][ T8235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  104.296337][ T8235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  104.485894][ T8250] team0: No ports can be present during mode change
[  104.488348][ T8249] wg1: entered promiscuous mode
[  104.489909][ T8249] wg1: entered allmulticast mode
[  104.512677][ T8232] chnl_net:caif_netlink_parms(): no params data found
[  104.638721][ T8232] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.641121][ T8232] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.645931][ T8232] bridge_slave_0: entered allmulticast mode
[  104.648736][ T8232] bridge_slave_0: entered promiscuous mode
[  104.651950][ T8232] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.656086][ T8232] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.658518][ T8232] bridge_slave_1: entered allmulticast mode
[  104.662921][ T8232] bridge_slave_1: entered promiscuous mode
[  105.155523][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.189885][ T8258] netlink: 'syz.0.681': attribute type 1 has an invalid length.
[  105.201768][ T8258] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.681'.
[  105.281260][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.335811][ T8232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  105.348279][ T8232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.416860][ T8232] team0: Port device team_slave_0 added
[  105.427177][ T8232] team0: Port device team_slave_1 added
[  105.444632][ T8235] Bluetooth: hci2: command 0x0406 tx timeout
[  105.493090][ T8232] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.497918][ T8232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.508234][ T8232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.512527][ T8274] netlink: 76 bytes leftover after parsing attributes in process `syz.0.685'.
[  105.531018][ T8232] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.538882][ T8232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.547658][ T8232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.551494][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'.
[  105.724611][ T8282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.686'.
[  105.742781][   T12] bridge_slave_1: left allmulticast mode
[  105.747914][   T12] bridge_slave_1: left promiscuous mode
[  105.752784][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.769814][   T12] bridge_slave_0: left allmulticast mode
[  105.771704][   T12] bridge_slave_0: left promiscuous mode
[  105.774522][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.839238][ T8285] netlink: 64 bytes leftover after parsing attributes in process `syz.0.686'.
[  106.125621][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.134655][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.143666][   T12] bond0 (unregistering): Released all slaves
[  106.187745][ T8232] hsr_slave_0: entered promiscuous mode
[  106.190303][ T8232] hsr_slave_1: entered promiscuous mode
[  106.323932][   T54] Bluetooth: hci1: command tx timeout
[  106.871927][   T12] hsr_slave_0: left promiscuous mode
[  106.914950][   T12] hsr_slave_1: left promiscuous mode
[  106.973692][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.015223][ T8309] netlink: 'syz.0.690': attribute type 10 has an invalid length.
[  107.185828][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.137872][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.146456][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.510849][   T54] Bluetooth: hci1: command tx timeout
[  109.193169][    C1] net_ratelimit: 32911 callbacks suppressed
[  109.193181][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  109.199050][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  109.202860][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  109.206740][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  109.210391][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  109.214107][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  109.217860][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  109.221800][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  109.225846][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  109.229641][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  110.585256][   T54] Bluetooth: hci1: command tx timeout
[  112.656864][   T54] Bluetooth: hci1: command tx timeout
[  114.203277][    C1] net_ratelimit: 33504 callbacks suppressed
[  114.203289][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  114.208680][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  114.212407][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  114.216014][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  114.219584][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  114.223425][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  114.227220][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  114.230979][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  114.234702][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  114.238266][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  119.213202][    C1] net_ratelimit: 33987 callbacks suppressed
[  119.213213][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  119.219137][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  119.223203][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  119.226989][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  119.230810][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  119.234879][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  119.238392][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  119.242137][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  119.246105][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  119.249976][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  124.067975][   T12] veth1_macvtap: left promiscuous mode
[  124.223267][    C1] net_ratelimit: 34762 callbacks suppressed
[  124.223279][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  124.229058][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  124.232735][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  124.236561][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  124.240448][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  124.244363][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  124.248308][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  124.252149][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  124.256043][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  124.259933][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  124.274422][   T12] veth0_macvtap: left promiscuous mode
[  124.336122][   T12] veth1_vlan: left promiscuous mode
[  124.397921][   T12] veth0_vlan: left promiscuous mode
[  129.233243][    C1] net_ratelimit: 32661 callbacks suppressed
[  129.233255][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  129.239099][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  129.243260][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  129.247097][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  129.250910][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  129.254866][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  129.258781][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  129.262816][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  129.266651][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  129.270636][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  132.475718][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[  132.597413][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[  134.243226][    C1] net_ratelimit: 33151 callbacks suppressed
[  134.243237][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  134.249235][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  134.252870][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  134.256772][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  134.260694][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  134.264629][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  134.268489][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  134.272059][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  134.275801][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  134.279676][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  139.253263][    C1] net_ratelimit: 32583 callbacks suppressed
[  139.253275][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  139.258810][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  139.262468][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  139.266527][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  139.270514][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  139.274545][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  139.278241][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  139.281940][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  139.285948][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  139.289577][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  144.263275][    C1] net_ratelimit: 31879 callbacks suppressed
[  144.263286][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  144.268912][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  144.272887][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  144.276761][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  144.280612][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  144.284275][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  144.287922][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  144.291689][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  144.295329][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  144.298935][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  149.273217][    C1] net_ratelimit: 32638 callbacks suppressed
[  149.273228][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  149.278700][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  149.282509][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  149.286460][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  149.290269][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  149.293852][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  149.297468][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  149.301211][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  149.304793][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  149.308407][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  154.283217][    C1] net_ratelimit: 32092 callbacks suppressed
[  154.283228][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  154.288947][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  154.292494][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  154.296279][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  154.300110][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  154.304063][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  154.307877][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  154.311511][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  154.315288][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  154.319174][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  159.293337][    C1] net_ratelimit: 33737 callbacks suppressed
[  159.293349][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  159.299487][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  159.303492][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  159.307508][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  159.311320][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  159.315324][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  159.319182][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  159.322851][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  159.326692][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  159.330555][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  160.830799][   T54] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  164.303292][    C1] net_ratelimit: 34365 callbacks suppressed
[  164.303305][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  164.309087][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  164.313225][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  164.317289][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  164.321282][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  164.324935][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  164.328807][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  164.332761][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  164.336395][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  164.339952][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  166.390199][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  168.402375][ T8319] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  169.313178][    C1] net_ratelimit: 33628 callbacks suppressed
[  169.313190][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  169.318667][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  169.322572][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  169.326259][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  169.329916][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  169.333921][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  169.337950][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  169.341854][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  169.345593][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  169.349257][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  170.407094][ T8235] Bluetooth: hci0: command 0x0c1a tx timeout
[  174.323286][    C1] net_ratelimit: 32003 callbacks suppressed
[  174.323297][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  174.329284][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  174.332940][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  174.336786][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  174.340787][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  174.344826][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  174.348515][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  174.352299][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  174.356259][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  174.359990][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  179.333320][    C1] net_ratelimit: 31717 callbacks suppressed
[  179.333332][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  179.338940][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  179.342564][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  179.346460][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  179.349965][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  179.353738][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  179.357299][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  179.361103][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  179.364998][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  179.368963][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  182.045108][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  182.463406][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  182.466405][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  182.469010][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  182.471486][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  184.343205][    C1] net_ratelimit: 32754 callbacks suppressed
[  184.343217][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  184.349155][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  184.352862][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.356714][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.360674][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.364583][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  184.368322][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.372021][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.375910][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.379912][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.689966][   T54] Bluetooth: hci2: command tx timeout
[  186.803975][   T54] Bluetooth: hci2: command tx timeout
[  188.883481][   T54] Bluetooth: hci2: command tx timeout
[  189.353192][    C1] net_ratelimit: 33773 callbacks suppressed
[  189.353204][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.359003][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.363104][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  189.366900][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.370536][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.374442][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.378198][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.381723][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  189.385536][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.389045][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  191.004926][   T54] Bluetooth: hci2: command tx timeout
[  193.944846][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[  193.958108][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[  194.363192][    C1] net_ratelimit: 34102 callbacks suppressed
[  194.363204][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.368959][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  194.372953][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  194.376826][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.380561][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.384452][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.388212][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  194.391960][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.395736][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.399780][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  195.352275][ T8235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  195.410665][ T8333] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  195.424362][ T8333] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  195.484791][ T8333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  195.488636][ T8333] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  195.491225][ T8333] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  195.502923][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  195.511919][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  195.621884][ T8333] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  195.650655][ T8333] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  197.650839][ T5220] Bluetooth: hci3: command tx timeout
[  197.764791][ T5220] Bluetooth: hci4: command tx timeout
[  199.373278][    C1] net_ratelimit: 33673 callbacks suppressed
[  199.373288][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  199.379429][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.383268][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  199.387162][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  199.390810][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.394657][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.398629][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.402639][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  199.406445][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.410251][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.766997][ T5220] Bluetooth: hci3: command tx timeout
[  199.839587][ T5220] Bluetooth: hci4: command tx timeout
[  201.913346][ T5220] Bluetooth: hci3: command tx timeout
[  201.922216][ T5220] Bluetooth: hci4: command tx timeout
[  203.999452][ T5220] Bluetooth: hci4: command tx timeout
[  204.001217][ T5220] Bluetooth: hci3: command tx timeout
[  204.383290][    C1] net_ratelimit: 34268 callbacks suppressed
[  204.383300][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.389046][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  204.392793][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.396625][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.400628][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.404590][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.408189][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  204.412173][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.416036][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  204.419997][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  209.393208][    C1] net_ratelimit: 35379 callbacks suppressed
[  209.393219][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  209.398694][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  209.402285][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  209.406200][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  209.410053][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  209.413708][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  209.417509][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  209.421172][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  209.425100][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  209.428736][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.403250][    C1] net_ratelimit: 34690 callbacks suppressed
[  214.403262][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  214.408667][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.412220][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.416128][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.419999][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  214.423628][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.427256][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.431066][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.434832][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.438466][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  219.413268][    C1] net_ratelimit: 33543 callbacks suppressed
[  219.413279][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  219.419044][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  219.423030][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  219.427065][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  219.430770][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  219.434523][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  219.438494][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  219.442439][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  219.446254][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  219.450087][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  224.423266][    C1] net_ratelimit: 33284 callbacks suppressed
[  224.423277][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  224.428989][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  224.432506][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  224.436299][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  224.440096][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  224.443905][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  224.447575][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  224.451109][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  224.455009][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  224.458982][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  226.474617][ T5220] Bluetooth: hci1: command 0x0406 tx timeout
[  229.433300][    C1] net_ratelimit: 31254 callbacks suppressed
[  229.433311][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  229.439008][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  229.442651][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  229.446342][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  229.450337][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  229.454144][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  229.457765][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  229.461395][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  229.465376][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  229.469349][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  234.443189][    C1] net_ratelimit: 32168 callbacks suppressed
[  234.443201][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  234.448940][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  234.452792][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  234.456619][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  234.460336][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  234.464229][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  234.467906][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  234.471694][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  234.475322][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  234.478936][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  237.564372][ T5220] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  237.567590][ T5220] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  237.570247][ T5220] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  237.572865][ T5220] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  237.646246][ T5220] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  239.453226][    C1] net_ratelimit: 34172 callbacks suppressed
[  239.453237][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  239.459197][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  239.462909][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  239.466695][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  239.470694][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  239.474655][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  239.478430][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  239.482199][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  239.486185][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  239.490149][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  239.827582][ T8333] Bluetooth: hci5: command tx timeout
[  241.847042][ T5220] Bluetooth: hci5: command tx timeout
[  243.918713][ T5220] Bluetooth: hci5: command tx timeout
[  244.463175][    C1] net_ratelimit: 32339 callbacks suppressed
[  244.463187][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  244.468933][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  244.472725][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  244.476383][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  244.480252][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  244.484021][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  244.487637][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  244.491487][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  244.495549][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  244.499350][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  248.016240][ T5220] Bluetooth: hci5: command tx timeout
[  249.473195][    C1] net_ratelimit: 33778 callbacks suppressed
[  249.473206][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  249.478642][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  249.482257][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  249.486149][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  249.490101][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  249.493825][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  249.497583][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  249.501192][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  249.505028][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  249.508688][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  253.516476][ T8333] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  253.519928][ T8333] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  253.522608][ T8333] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  253.532114][ T8333] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  253.660431][ T8333] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  254.483256][    C1] net_ratelimit: 33312 callbacks suppressed
[  254.483267][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  254.488832][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  254.492540][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  254.496153][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  254.499710][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  254.503520][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  254.507349][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  254.510912][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  254.514778][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  254.518322][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  255.318133][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[  255.324593][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[  255.769926][ T5220] Bluetooth: hci6: command tx timeout
[  258.016744][ T5220] Bluetooth: hci6: command tx timeout
[  259.493347][    C1] net_ratelimit: 34361 callbacks suppressed
[  259.493359][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  259.498852][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  259.502660][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  259.506490][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  259.510085][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  259.513924][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  259.517577][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  259.521392][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  259.525157][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  259.528890][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  259.931060][ T8333] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  259.946835][ T8333] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  259.949498][ T8333] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  259.957432][ T8333] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  259.966657][ T8333] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  260.079189][ T5220] Bluetooth: hci6: command tx timeout
[  261.999825][ T5220] Bluetooth: hci7: command tx timeout
[  262.160409][ T5220] Bluetooth: hci6: command tx timeout
[  264.078301][ T5220] Bluetooth: hci7: command tx timeout
[  264.503334][    C1] net_ratelimit: 33694 callbacks suppressed
[  264.503345][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  264.508901][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  264.512623][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  264.516403][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  264.520081][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  264.523808][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  264.527829][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  264.531708][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  264.535441][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  264.539375][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  266.171568][ T5220] Bluetooth: hci7: command tx timeout
[  267.939774][   T34] INFO: task kworker/u9:3:74 blocked for more than 143 seconds.
[  267.942225][   T34]       Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0
[  267.955592][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  267.958357][   T34] task:kworker/u9:3    state:D stack:24232 pid:74    tgid:74    ppid:2      task_flags:0x4208060 flags:0x00004000
[  267.962072][   T34] Workqueue: events_unbound linkwatch_event
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  268.162098][   T34] Call Trace:
[  268.174167][   T34]  <TASK>
[  268.175216][   T34]  __schedule+0x16f5/0x4d00
[  268.176820][   T34]  ? __lock_acquire+0xab9/0xd20
[  268.178459][   T34]  ? __lock_acquire+0xab9/0xd20
[  268.180097][   T34]  ? schedule+0x165/0x360
[  268.181552][   T34]  ? __pfx___schedule+0x10/0x10
[  268.339672][ T5220] Bluetooth: hci7: command tx timeout
[  268.857331][   T34]  ? schedule+0x91/0x360
[  268.858734][   T34]  schedule+0x165/0x360
[  268.860034][   T34]  schedule_preempt_disabled+0x13/0x30
[  268.861729][   T34]  __mutex_lock+0x724/0xe80
[  269.085197][   T34]  ? __mutex_lock+0x51b/0xe80
[  269.086828][   T34]  ? linkwatch_event+0xe/0x60
[  269.088390][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  269.090072][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  269.091727][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  269.513273][    C1] net_ratelimit: 34040 callbacks suppressed
[  269.513285][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  269.519358][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  269.523004][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  269.527040][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  269.530894][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  269.535006][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  269.538639][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  269.542230][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  269.546065][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  269.549840][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  270.007034][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  270.008852][   T34]  linkwatch_event+0xe/0x60
[  270.010309][   T34]  process_scheduled_works+0xae1/0x17b0
[  270.012139][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  270.256774][   T34]  worker_thread+0x8a0/0xda0
[  270.258363][   T34]  kthread+0x711/0x8a0
[  270.259713][   T34]  ? __pfx_worker_thread+0x10/0x10
[  270.261341][   T34]  ? __pfx_kthread+0x10/0x10
[  270.262810][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  271.145237][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  271.146998][   T34]  ? __pfx_kthread+0x10/0x10
[  271.148482][   T34]  ret_from_fork+0x3fc/0x770
[  271.149969][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  271.151558][   T34]  ? __switch_to_asm+0x39/0x70
[  271.153107][   T34]  ? __switch_to_asm+0x33/0x70
[  271.337915][   T34]  ? __pfx_kthread+0x10/0x10
[  271.339388][   T34]  ret_from_fork_asm+0x1a/0x30
[  271.340960][   T34]  </TASK>
[  271.906621][   T34] INFO: task kworker/0:2:969 blocked for more than 147 seconds.
[  271.908981][   T34]       Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0
[  271.911449][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  272.015723][   T34] task:kworker/0:2     state:D stack:22920 pid:969   tgid:969   ppid:2      task_flags:0x4208060 flags:0x00004000
[  272.019463][   T34] Workqueue: events_power_efficient crda_timeout_work
[  272.021612][   T34] Call Trace:
[  272.022685][   T34]  <TASK>
[  272.186918][   T34]  __schedule+0x16f5/0x4d00
[  272.188411][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  272.189992][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  272.191960][   T34]  ? schedule+0x165/0x360
[  272.263803][   T34]  ? __pfx___schedule+0x10/0x10
[  272.265398][   T34]  ? schedule+0x91/0x360
[  272.266756][   T34]  schedule+0x165/0x360
[  272.268076][   T34]  schedule_preempt_disabled+0x13/0x30
[  272.269879][   T34]  __mutex_lock+0x724/0xe80
[  272.271311][   T34]  ? __mutex_lock+0x51b/0xe80
[  272.272820][   T34]  ? crda_timeout_work+0x15/0x50
[  272.328336][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  272.330012][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  272.331656][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  272.344315][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  272.346125][   T34]  crda_timeout_work+0x15/0x50
[  272.347658][   T34]  process_scheduled_works+0xae1/0x17b0
[  272.349359][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  272.351194][   T34]  worker_thread+0x8a0/0xda0
[  272.352630][   T34]  kthread+0x711/0x8a0
[  272.985172][   T34]  ? __pfx_worker_thread+0x10/0x10
[  272.986840][   T34]  ? __pfx_kthread+0x10/0x10
[  272.988304][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  272.989938][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  272.991577][   T34]  ? __pfx_kthread+0x10/0x10
[  272.993025][   T34]  ret_from_fork+0x3fc/0x770
[  273.491905][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  273.504396][   T34]  ? __switch_to_asm+0x39/0x70
[  273.506005][   T34]  ? __switch_to_asm+0x33/0x70
[  273.507534][   T34]  ? __pfx_kthread+0x10/0x10
[  273.509019][   T34]  ret_from_fork_asm+0x1a/0x30
[  273.510620][   T34]  </TASK>
[  273.748879][   T34] INFO: task dhcpcd:5576 blocked for more than 149 seconds.
[  273.751312][   T34]       Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0
[  273.758783][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  273.761511][   T34] task:dhcpcd          state:D stack:21384 pid:5576  tgid:5576  ppid:5575   task_flags:0x400140 flags:0x00004002
[  273.774393][   T34] Call Trace:
[  273.775508][   T34]  <TASK>
[  273.776438][   T34]  __schedule+0x16f5/0x4d00
[  273.777861][   T34]  ? __lock_acquire+0xab9/0xd20
[  273.779379][   T34]  ? __lock_acquire+0xab9/0xd20
[  273.780898][   T34]  ? schedule+0x165/0x360
[  273.782239][   T34]  ? __pfx___schedule+0x10/0x10
[  273.805743][   T34]  ? schedule+0x91/0x360
[  273.807098][   T34]  schedule+0x165/0x360
[  273.808377][   T34]  schedule_preempt_disabled+0x13/0x30
[  273.810067][   T34]  __mutex_lock+0x724/0xe80
[  273.811467][   T34]  ? __mutex_lock+0x51b/0xe80
[  273.812949][   T34]  ? devinet_ioctl+0x323/0x1b50
[  273.836193][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  273.837926][   T34]  ? bpf_lsm_capable+0x9/0x20
[  273.839444][   T34]  ? security_capable+0x7e/0x2e0
[  273.841046][   T34]  devinet_ioctl+0x323/0x1b50
[  273.842648][   T34]  ? __pfx_devinet_ioctl+0x10/0x10
[  273.874647][   T34]  ? get_user_ifreq+0x12c/0x180
[  273.876255][   T34]  inet_ioctl+0x3c0/0x4c0
[  273.877674][   T34]  ? __pfx_inet_ioctl+0x10/0x10
[  273.879195][   T34]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  273.881050][   T34]  sock_do_ioctl+0xdc/0x300
[  273.882474][   T34]  ? __pfx_sock_do_ioctl+0x10/0x10
[  274.523178][    C1] net_ratelimit: 33113 callbacks suppressed
[  274.523189][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  274.528628][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:04:ee:15:f6:fb, vlan:0)
[  274.532403][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  274.536015][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  274.539707][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  274.543930][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  274.547735][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  274.551537][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  274.555409][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  274.559210][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  274.566887][   T34]  ? __lock_acquire+0xab9/0xd20
[  274.568562][   T34]  sock_ioctl+0x576/0x790
[  274.570014][   T34]  ? __pfx_sock_ioctl+0x10/0x10
[  274.571617][   T34]  ? fd_install+0x30d/0x540
[  274.573084][   T34]  ? bpf_lsm_file_ioctl+0x9/0x20
[  275.268917][   T34]  ? __pfx_sock_ioctl+0x10/0x10
[  275.270507][   T34]  __se_sys_ioctl+0xfc/0x170
[  275.271978][   T34]  do_syscall_64+0xfa/0x3b0
[  275.557720][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  275.559424][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.561372][   T34]  ? exc_page_fault+0x9f/0xf0
[  275.562865][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.861530][   T34] RIP: 0033:0x7ff73b001d49
[  275.863015][   T34] RSP: 002b:00007ffed3b39938 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  275.875053][   T34] RAX: ffffffffffffffda RBX: 00007ff73af336c0 RCX: 00007ff73b001d49
[  275.877538][   T34] RDX: 00007ffed3b49b28 RSI: 0000000000008914 RDI: 0000000000000014
[  275.879933][   T34] RBP: 00007ffed3b59ce8 R08: 00007ffed3b49ae8 R09: 00007ffed3b49a98
[  275.882372][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  276.520837][   T34] R13: 00007ffed3b49b28 R14: 0000000000000028 R15: 0000000000008914
[  276.533246][   T34]  </TASK>
[  276.539272][   T34] INFO: task syz-executor:8232 blocked for more than 151 seconds.
[  276.541723][   T34]       Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0
[  276.735619][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  276.926729][   T34] task:syz-executor    state:D stack:22408 pid:8232  tgid:8232  ppid:1      task_flags:0x480140 flags:0x00004006
[  276.930609][   T34] Call Trace:
[  276.931707][   T34]  <TASK>
[  276.932704][   T34]  __schedule+0x16f5/0x4d00
[  276.986704][   T34]  ? __lock_acquire+0xab9/0xd20
[  276.988308][   T34]  ? schedule+0x165/0x360
[  276.989727][   T34]  ? __pfx___schedule+0x10/0x10
[  276.991367][   T34]  ? schedule+0x91/0x360
[  276.992779][   T34]  schedule+0x165/0x360
[  277.260888][   T34]  schedule_preempt_disabled+0x13/0x30
[  277.262812][   T34]  __mutex_lock+0x724/0xe80
[  277.278945][   T34]  ? __mutex_lock+0x51b/0xe80
[  277.280484][   T34]  ? rtnl_net_dev_lock+0x257/0x2f0
[  277.282066][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  277.288548][   T34]  ? rtnl_net_dev_lock+0x36/0x2f0
[  277.290159][   T34]  ? rtnl_net_dev_lock+0x36/0x2f0
[  277.291743][   T34]  rtnl_net_dev_lock+0x257/0x2f0
[  277.306617][   T34]  unregister_netdevice_notifier_dev_net+0x8f/0x420
[  277.308750][   T34]  ? _raw_spin_unlock+0x28/0x50
[  277.310261][   T34]  ? mntput_no_expire+0x2eb/0x860
[  277.311834][   T34]  ? __pfx_unregister_netdevice_notifier_dev_net+0x10/0x10

VM DIAGNOSIS:
05:18:41  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff900f812c RBX=ffffffff900f8130 RCX=ffffffff900f8134 RDX=ffffffff900f8130
RSI=ffffffff90b83704 RDI=ffffffff8be29d60 RBP=ffffffff900f8134 RSP=ffffc900000068b8
R8 =0000000000000004 R9 =ffffffff8172aae5 R10=ffffc900000069d8 R11=ffffffff81ad03a0
R12=ffffffff89597cb6 R13=ffffffff900f8130 R14=ffffc90000006988 R15=ffffffff900f8130
RIP=ffffffff8172bd74 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff50a8235f0 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000000d RBX=000000000000000d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6d0
R8 =ffff888107bf8237 R9 =1ffff11020f7f046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98da R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055a5a87f8e08 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff0000000000ff ffff00ff00000000 XMM05=0000000000000035 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffffffff XMM09=313030302e353035 353a464236313a35
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
