last executing test programs:

32.130879537s ago: executing program 2 (id=551):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @local, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0xf, 0x0, 0x1b00, {[@mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0x9, 0x0, 0xc000000}]}}}}}}}}, 0x0)

26.830156405s ago: executing program 2 (id=551):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @local, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0xf, 0x0, 0x1b00, {[@mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0x9, 0x0, 0xc000000}]}}}}}}}}, 0x0)

21.48953349s ago: executing program 2 (id=551):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @local, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0xf, 0x0, 0x1b00, {[@mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0x9, 0x0, 0xc000000}]}}}}}}}}, 0x0)

15.759317207s ago: executing program 2 (id=551):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @local, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0xf, 0x0, 0x1b00, {[@mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0x9, 0x0, 0xc000000}]}}}}}}}}, 0x0)

9.912507372s ago: executing program 2 (id=551):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @local, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0xf, 0x0, 0x1b00, {[@mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0x9, 0x0, 0xc000000}]}}}}}}}}, 0x0)

3.824121863s ago: executing program 2 (id=551):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @local, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0xf, 0x0, 0x1b00, {[@mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0x9, 0x0, 0xc000000}]}}}}}}}}, 0x0)

1.880858166s ago: executing program 0 (id=817):
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000000})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r2=>0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
sendmmsg$inet(r3, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0x500}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884)
sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0)

1.793213271s ago: executing program 0 (id=818):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb023, 0x241}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r0, 0x0, 0x3}, 0x18)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_emit_ethernet(0x7e, &(0x7f0000000380)={@local, @empty, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fd690b", 0x44, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x4}}}}}}}}}, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000000040)="07000000010003", 0x7)
ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000040)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1})
ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"})
sendmmsg(r2, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)='&', 0x1}], 0x1}}], 0x1, 0x2c000011)

1.492054602s ago: executing program 0 (id=820):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r1, &(0x7f0000000140)={@val={0x0, 0xc}, @void, @eth={@empty, @random="8bc6002500", @val={@val, {0x8100, 0x0, 0x0, 0x1}}, {@mpls_mc={0x8848, {[], @llc={@llc={0x0, 0x8, "d3"}}}}}}}, 0x1d)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a)
sendfile(r4, r5, 0x0, 0xffffffff000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
shutdown(r4, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newsa={0x150, 0x10, 0x300, 0x70bd29, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x2f, 0x0, r7}, {@in=@multicast1, 0x0, 0x32}, @in6=@loopback={0x100000000000000}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x80000, 0x81}, {0x0, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x5}, 0x0, 0x0, 0x2, 0x1, 0x81, 0x68}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "25cac5216d3c8af0aa76902918bf448c5d9f5459"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x20000080)
sendto$inet6(r0, &(0x7f0000000340)='g', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
shutdown(r0, 0x1)

1.437880203s ago: executing program 1 (id=822):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x14}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x50864c3c5b6a2a38, 0xffffffffffffffff, 0x4b17e000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote})
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008, 0x40000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x13e, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfd"], 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000001}, 0x40000)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000900)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\b\x00', 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xc0, '\x00', @remote}}}}}}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r6)
r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x0)
r8 = accept4$bt_l2cap(r7, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x0)
r9 = socket$inet(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r9, 0x0, 0x4, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc)
r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000300), r4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000440)={'syztnl0\x00', <r11=>0x0, 0x80, 0x83668dba8206b492, 0x6, 0xb, {{0x16, 0x4, 0x0, 0x24, 0x58, 0x66, 0x0, 0x2, 0x29, 0x0, @broadcast, @private=0xa010100, {[@noop, @noop, @ssrr={0x89, 0x13, 0x5, [@multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x11}, @broadcast]}, @lsrr={0x83, 0x13, 0x77, [@local, @multicast2, @rand_addr=0x64010100, @multicast2]}, @ssrr={0x89, 0x1b, 0xd5, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x2e}, @remote]}, @end]}}}}})
sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, r10, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_IFINDEX={0x8, 0xb, r11}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x58}}, 0x40000)
syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000000001c0600fe8000000020000001000000000000aafe8000000000001f000000001f0000aa80004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002010090780000fe06e2d4c3d90000"], 0x0)

1.320952852s ago: executing program 1 (id=823):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2e0000000000000040a7f51fe100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095000000000000002348003fd384040b849ab5520d07a7441e0e65de07b1a4da87429bf84f9cc4addb972fe68b01196cdbfb8074d6fe83f29db843dd34ca85ef20e674748aef24cf35b549cfb4581366483833300977e1634540353ccf997711ddff6d524d787f3755fea2032afa25b19c04ec2479621010653defe15d0d429513a8f1f186d0d755aeffcbd12ed27bb72bfe4a061c38320d93662f420ec1333b7554bfb2bf76f731c3d754a8e9a237fc3ecc92343a9a10459d2440bc05d00f1f3e873ee6268f070b27fdcb8686de52e8513818bcae356b70036c7d01545089c720814b561efd10fe3f8a41c86582a3a06ee563667231996662380cbd6118e84f136ed709ebfdbb73e91e9caf7338fb815ac7d5c1a63fcf4b1a9f2c3f0b944489cad573dcacbf9b00aafccd38b76d6a68"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000300)=@tcp=r0}, 0x20)
shutdown(r0, 0x1)

1.161513728s ago: executing program 1 (id=824):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="240000005e00250e00000000000000000c00008008000000080000e307000180"], 0x24}], 0x1}, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x20, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x1000, 0x0, 0x0, {[@fastopen={0x22, 0x9, "ef5d22c57cf9bf"}]}}}}}}}}, 0x0) (async, rerun: 64)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000001c0)={0x32}, 0x8) (async, rerun: 64)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xcc, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x401}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x71}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1000}, 0x20000080) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r2=>0x0}) (rerun: 32)
sendto$packet(r1, &(0x7f0000000180)="0b032212e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) (async)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$l2tp6(r3, &(0x7f0000000000)="b993429170e5d7a5d94a014c3022b189010f86006be6bcd055d828d59ebc845669e7375f8de23e52a102d1222dc25a3a1dbf461af94c1f37d25ab1841cf1719b70a31154655a9a53fa2723c53e05bc04a616631c23135b551457c57a42974a47775b4eb16b142b8265eabda0dd12ce85c1cf6d7380778afb375ed40ea0f1eb354f84494b468375f244947cfa7c9c3a9e9215e3186cf3ee66cd206ff26e4266827d6a2a71e7f028f681452de068b82393598746adb773ea9bb7ae301f44fc6748e9de154477c390e03a56d589cf5661413512a0dc7b55237e3206fe134c0441ef1945f6", 0xe3, 0x4000042, &(0x7f0000000100)={0xa, 0x0, 0x200, @mcast1, 0xffff, 0x1}, 0x20) (async, rerun: 64)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000003c0)={<r5=>0x0, 0x0, 0x4}, &(0x7f0000000400)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000500)={r5, 0xbc, &(0x7f0000000440)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}, @in={0x2, 0x4e23, @private=0xa010100}, @in6={0xa, 0x4e20, 0x40, @loopback, 0x2944}, @in6={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x300000}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e21, 0x1ff, @loopback, 0x3}, @in6={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53}, @in6={0xa, 0x4e23, 0xfffffff8, @private2={0xfc, 0x2, '\x00', 0x1}, 0xff}]}, &(0x7f0000000540)=0x10)

1.062355864s ago: executing program 1 (id=825):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0)=0x100000001, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, r2, 0x1, 0x70bd2c, 0x2, {}, [@NL80211_ATTR_REG_RULES={0x4, 0x10d}]}, 0xf}, 0x1, 0x0, 0x0, 0x40000}, 0x40010)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000002940)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="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", @ANYRESDEC=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newrule={0x54, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x20}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7fffffff}, @FRA_SRC={0x14, 0x2, @private0}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}, @FRA_DST={0x14, 0x1, @remote}]}, 0x54}}, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000200))
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6)

982.395387ms ago: executing program 0 (id=826):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0x2}, 0x6)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r4, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x22}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffa}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfff}]}, 0x50}, 0x1, 0x0, 0x0, 0xc010}, 0x4001)
write$bt_hci(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="5dd0ed7df436524a5458b357da08ea9a16eceb1ca3af35c88b3c222d98531fa659813a53a1a69c0b0af0c8fbe7984f5fa4a4bab90a078e4abd61174721396f6958aa3fde3c09bc675b2998aa3d5686877267568f3590dc758a9511ff1da9947dffa225cb66b1eef710ace96d09bd705e94f1e7210d5f00"/138], 0x7)
syz_emit_ethernet(0x1e, &(0x7f0000000280)={@broadcast, @empty, @void, {@can={0xc, {{0x0, 0x1, 0x0, 0x1}, 0x5, 0x2, 0x0, 0x0, "0d3cc243acd9fcb7"}}}}, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg$sock(r1, &(0x7f0000002800)=[{{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x2, 0x2, 0x0, {0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00', 0xfffff7ff}}}, 0x80, &(0x7f0000001480), 0x5, &(0x7f0000000100)=[@mark={{0x14, 0x1, 0x24, 0x2}}], 0x18}}, {{&(0x7f0000001500)=@ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x80, &(0x7f0000002700), 0x1000000000000334, &(0x7f0000002740)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x401}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x90}}], 0x2, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r6 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r6, 0x8)
r7 = accept4(r6, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x3, 0x30, 0x8, 0xd8}, &(0x7f0000000100)=0x18)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28)
sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137)

202.130913ms ago: executing program 1 (id=827):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth0_to_team\x00', 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='udp_fail_queue_rcv_skb\x00', r3, 0x0, 0x6}, 0x18)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000001d40)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='udp_fail_queue_rcv_skb\x00', r5, 0x0, 0x6}, 0x18)
r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x2}]}}}]}, 0x3c}}, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x1b, &(0x7f00000000c0)=0xe, 0x4)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='dummy0\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000028000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0200009078814f"], 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1b00", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@mp_fclose={0x1e, 0xc, 0xa62, 0x0, 0x1000}]}}}}}}}}, 0x0)

81.69926ms ago: executing program 0 (id=828):
r0 = socket$packet(0x11, 0x3, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
syz_emit_ethernet(0x2e, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
listen(r2, 0x3)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080000000005c88c43f8ae000006907864010185cf2e76f40e429d22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

930.183µs ago: executing program 1 (id=829):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x300000, 0x0, 0x1, 0x68, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x300000, 0x0, 0x1, 0x68, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00'})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1d, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r5, 0xfffffffc) (async)
listen(r5, 0xfffffffc)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_int(r5, 0x1, 0x12, &(0x7f00000003c0), &(0x7f0000000400)=0x4)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r8, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r9=>0x0})
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r10)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r10, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x44004094) (async)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r10, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x44004094)
sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x64, 0x0, 0x8, 0x40, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVICE={0x30, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_SEC_DEVICE={0x18, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, 0x64}}, 0x40000)
pwrite64(r1, &(0x7f0000000280)="31f0bbabf16f44ef265c7ab0ee122fcc053a3242277cec505c9faa3c9ce38533581594ffc34a85f6a842b44339f7cf8c7ece3ecc038ecfd701a792a0e0589dfc8401face823404e251d0cbc4628260d796d29487540684f2ebe1b446ed6e19db6083a5d8125d405434352d128145b6e1965f", 0x72, 0x8)

0s ago: executing program 0 (id=830):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
socket$packet(0x11, 0x3, 0x300)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2) (async)
socket$kcm(0x2, 0xa, 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$rds(0x15, 0x5, 0x0) (async)
socket$rds(0x15, 0x5, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r2, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) (async)
sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:21580' (ED25519) to the list of known hosts.
syzkaller login: [   48.365668][ T5788] cgroup: Unknown subsys name 'net'
[   48.476733][ T5788] cgroup: Unknown subsys name 'cpuset'
[   48.482077][ T5788] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.915031][ T5788] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.113820][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.117263][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.120659][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.123854][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.127545][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.138214][ T5220] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.141004][ T5220] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.144379][ T5220] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.147264][ T5220] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.149924][ T5220] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.219163][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.224297][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.227230][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.234091][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.237731][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.457953][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   54.487261][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   54.599766][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.602705][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.606274][ T5828] bridge_slave_0: entered allmulticast mode
[   54.610050][ T5828] bridge_slave_0: entered promiscuous mode
[   54.635293][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.637670][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.639987][ T5828] bridge_slave_1: entered allmulticast mode
[   54.642792][ T5828] bridge_slave_1: entered promiscuous mode
[   54.664337][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   54.679945][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.682724][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.686377][ T5832] bridge_slave_0: entered allmulticast mode
[   54.689261][ T5832] bridge_slave_0: entered promiscuous mode
[   54.695216][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.704223][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.714291][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.716828][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.719235][ T5832] bridge_slave_1: entered allmulticast mode
[   54.721965][ T5832] bridge_slave_1: entered promiscuous mode
[   54.764965][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.776863][ T5828] team0: Port device team_slave_0 added
[   54.780422][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.790820][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.793145][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.796685][ T5837] bridge_slave_0: entered allmulticast mode
[   54.799366][ T5837] bridge_slave_0: entered promiscuous mode
[   54.804318][ T5828] team0: Port device team_slave_1 added
[   54.812978][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.816616][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.818925][ T5837] bridge_slave_1: entered allmulticast mode
[   54.821654][ T5837] bridge_slave_1: entered promiscuous mode
[   54.857503][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.859909][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.868785][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.875424][ T5832] team0: Port device team_slave_0 added
[   54.887565][ T5832] team0: Port device team_slave_1 added
[   54.889937][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.892246][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.900613][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.910228][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.932990][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.935588][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.944471][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.950606][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.962940][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.965506][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.975212][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.989390][ T5837] team0: Port device team_slave_0 added
[   55.004274][ T5837] team0: Port device team_slave_1 added
[   55.031713][ T5828] hsr_slave_0: entered promiscuous mode
[   55.035943][ T5828] hsr_slave_1: entered promiscuous mode
[   55.050153][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.052897][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.062077][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.067262][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.070038][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.080387][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.110835][ T5832] hsr_slave_0: entered promiscuous mode
[   55.114419][ T5832] hsr_slave_1: entered promiscuous mode
[   55.117470][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.120819][ T5832] Cannot create hsr debugfs directory
[   55.181048][ T5837] hsr_slave_0: entered promiscuous mode
[   55.184653][ T5837] hsr_slave_1: entered promiscuous mode
[   55.187352][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.190332][ T5837] Cannot create hsr debugfs directory
[   55.377159][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.390595][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.396925][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.419884][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.474955][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.487280][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.492229][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.515388][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.552661][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.560145][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.567428][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.578946][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.612650][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.647163][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   55.659596][ T2165] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.662059][ T2165] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.678372][ T2165] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.680647][ T2165] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.696394][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.721748][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   55.730960][ T2165] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.733578][ T2165] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.742986][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.760616][ T2165] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.763118][ T2165] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.796139][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   55.809663][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.812599][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.834120][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.836591][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.853970][ T5832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   55.857783][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.888829][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.934956][ T5828] veth0_vlan: entered promiscuous mode
[   55.948343][ T5828] veth1_vlan: entered promiscuous mode
[   55.983208][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.987641][ T5828] veth0_macvtap: entered promiscuous mode
[   56.004200][ T5828] veth1_macvtap: entered promiscuous mode
[   56.027601][ T5832] veth0_vlan: entered promiscuous mode
[   56.031191][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.041720][ T5832] veth1_vlan: entered promiscuous mode
[   56.047117][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.057661][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.072544][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.077683][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.081285][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.085925][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.114258][ T5832] veth0_macvtap: entered promiscuous mode
[   56.122966][ T5832] veth1_macvtap: entered promiscuous mode
[   56.144558][   T54] Bluetooth: hci0: command tx timeout
[   56.150338][ T5837] veth0_vlan: entered promiscuous mode
[   56.164209][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.180122][ T5837] veth1_vlan: entered promiscuous mode
[   56.189433][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.196721][ T3029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.204947][ T3029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.224745][   T54] Bluetooth: hci1: command tx timeout
[   56.228577][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.231451][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.234529][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.237440][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.246264][ T3029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.249412][ T3029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.258119][ T5837] veth0_macvtap: entered promiscuous mode
[   56.276757][ T5837] veth1_macvtap: entered promiscuous mode
[   56.287467][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.313844][   T54] Bluetooth: hci2: command tx timeout
[   56.318071][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.328504][ T5893] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   56.329670][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.341742][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.348162][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.351122][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.354760][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.397672][ T2165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.402766][ T2165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.428029][  T825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.430815][  T825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.485442][ T2165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.487907][ T2165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.518456][  T825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.522349][  T825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.575049][ T5900] Zero length message leads to an empty skb
[   56.803950][ T5910] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.900282][ T5926] syz_tun: entered allmulticast mode
[   56.992783][   T33] audit: type=1107 audit(1752117977.907:2): pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   56.995928][ T5935] netlink: 'syz.2.16': attribute type 9 has an invalid length.
[   57.032588][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'.
[   57.047557][ T5941] netlink: 332 bytes leftover after parsing attributes in process `syz.1.17'.
[   57.050133][ T5935] hsr0: entered promiscuous mode
[   57.050857][ T5941] netlink: 'syz.1.17': attribute type 2 has an invalid length.
[   57.052629][ T5935] macvlan2: entered promiscuous mode
[   57.055795][ T5941] netlink: 'syz.1.17': attribute type 5 has an invalid length.
[   57.057875][ T5935] macvlan2: entered allmulticast mode
[   57.061817][ T5935] hsr0: entered allmulticast mode
[   57.065131][ T5935] hsr_slave_0: entered allmulticast mode
[   57.067648][ T5935] hsr_slave_1: entered allmulticast mode
[   57.191109][ T5951] nbd: must specify an index to disconnect
[   57.203997][ T5951] netlink: 'syz.2.21': attribute type 1 has an invalid length.
[   58.149734][ T5978] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.238276][   T54] Bluetooth: hci0: command tx timeout
[   58.270618][ T5991] netlink: 40 bytes leftover after parsing attributes in process `syz.0.34'.
[   58.305100][   T54] Bluetooth: hci1: command tx timeout
[   58.357482][ T5993] xt_CT: No such helper "syz1"
[   58.394486][   T54] Bluetooth: hci2: command tx timeout
[   58.398995][ T5999] netlink: 20 bytes leftover after parsing attributes in process `syz.0.38'.
[   58.468575][ T6002] netlink: 'syz.2.37': attribute type 1 has an invalid length.
[   58.478146][ T6002] netlink: 'syz.2.37': attribute type 2 has an invalid length.
[   58.481009][ T6006] warning: `syz.0.40' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.520852][ T6008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.42'.
[   58.530077][ T6008] netlink: 'syz.2.42': attribute type 7 has an invalid length.
[   58.534931][ T6008] netlink: 'syz.2.42': attribute type 8 has an invalid length.
[   58.537368][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'.
[   58.572555][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.43'.
[   58.883925][ T6030] Dead loop on virtual device ip6_vti0, fix it urgently!
[   59.406025][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'.
[   59.408752][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'.
[   59.411569][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'.
[   60.307035][   T54] Bluetooth: hci0: command tx timeout
[   60.383470][   T54] Bluetooth: hci1: command tx timeout
[   60.464079][   T54] Bluetooth: hci2: command tx timeout
[   60.628760][ T6130] bridge1: entered promiscuous mode
[   60.635328][ T6130] bridge1: entered allmulticast mode
[   60.640118][ T6130] team0: Port device bridge1 added
[   60.792627][ T6131] infiniband syz1: set active
[   60.795585][ T6131] infiniband syz1: added macvlan1
[   60.798169][ T6131] syz1: rxe_create_cq: returned err = -12
[   60.800103][ T6131] infiniband syz1: Couldn't create ib_mad CQ
[   60.802099][ T6131] infiniband syz1: Couldn't open port 1
[   60.822362][ T6131] RDS/IB: syz1: added
[   60.825212][ T6131] smc: adding ib device syz1 with port count 1
[   60.827448][ T6131] smc:    ib device syz1 port 1 has pnetid 
[   60.839645][ T6141] ipt_rpfilter: unknown options
[   61.362390][ T6152] xt_CT: No such helper "snmp"
[   62.141696][ T6203] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received
[   62.350370][ T6223] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.383625][   T54] Bluetooth: hci0: command tx timeout
[   62.463443][   T54] Bluetooth: hci1: command tx timeout
[   62.518572][ T6237] IPv4: Oversized IP packet from 127.202.26.0
[   62.545126][   T54] Bluetooth: hci2: command tx timeout
[   62.568724][ T6241] __nla_validate_parse: 3 callbacks suppressed
[   62.568732][ T6241] netlink: 24 bytes leftover after parsing attributes in process `syz.2.107'.
[   62.848378][ T6267] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   62.865757][ T6271] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   62.869327][ T6271] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   63.041489][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'.
[   63.203098][ T6294] tipc: Can't bind to reserved service type 1
[   63.232257][ T6294] x_tables: duplicate underflow at hook 1
[   63.307998][ T6307] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.376751][ T6307] syz.0.124 uses obsolete (PF_INET,SOCK_PACKET)
[   64.309595][ T6335] lo speed is unknown, defaulting to 1000
[   64.312184][ T6335] lo speed is unknown, defaulting to 1000
[   64.324511][ T6335] lo speed is unknown, defaulting to 1000
[   64.383457][ T6336] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   64.419776][ T6335] infiniband syz0: set active
[   64.421469][ T5894] lo speed is unknown, defaulting to 1000
[   64.424896][ T6335] infiniband syz0: added lo
[   64.446955][ T6335] RDS/IB: syz0: added
[   64.449854][ T6335] smc: adding ib device syz0 with port count 1
[   64.453044][ T6335] smc:    ib device syz0 port 1 has pnetid 
[   64.455327][    T9] lo speed is unknown, defaulting to 1000
[   64.458425][ T6335] lo speed is unknown, defaulting to 1000
[   64.618165][ T6346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.133'.
[   64.642246][ T6335] lo speed is unknown, defaulting to 1000
[   64.799355][ T6335] lo speed is unknown, defaulting to 1000
[   64.907777][ T6354] netlink: 256 bytes leftover after parsing attributes in process `syz.1.135'.
[   64.910800][ T6354] unsupported nlmsg_type 40
[   64.920999][ T6354] netlink: 'syz.1.135': attribute type 1 has an invalid length.
[   64.955035][ T6354] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.971206][ T6354] ipvlan2: entered allmulticast mode
[   64.976915][ T6354] bond1: entered allmulticast mode
[   65.241310][ T6386] syzkaller1: entered promiscuous mode
[   65.243252][ T6386] syzkaller1: entered allmulticast mode
[   65.251538][ T6388] netlink: 11 bytes leftover after parsing attributes in process `syz.1.145'.
[   65.300980][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.147'.
[   65.451974][ T6395] xt_TPROXY: Can be used only with -p tcp or -p udp
[   65.600107][ T6405] netlink: 24 bytes leftover after parsing attributes in process `syz.2.152'.
[   65.603019][ T6405] netlink: 24 bytes leftover after parsing attributes in process `syz.2.152'.
[   65.607229][ T6405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.152'.
[   65.709738][ T6411] netlink: 14 bytes leftover after parsing attributes in process `syz.2.154'.
[   65.724804][ T6411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   65.729894][ T6411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   65.738605][ T6411] bond0 (unregistering): Released all slaves
[   65.813543][ T6414] tipc: Invalid UDP bearer configuration
[   65.813584][ T6414] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[   65.899890][ T6420] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[   66.829385][ T6459] xt_connbytes: Forcing CT accounting to be enabled
[   66.832489][ T6459] x_tables: ip6_tables: SNPT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING
[   66.893172][ T6470] TCP: tcp_parse_options: Illegal window scaling value 94 > 14 received
[   67.081786][ T6475] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received
[   67.140583][ T6475] netlink: 'syz.0.170': attribute type 9 has an invalid length.
[   67.149153][ T6475] hsr0: entered promiscuous mode
[   67.151107][ T6475] macvlan2: entered promiscuous mode
[   67.153132][ T6475] macvlan2: entered allmulticast mode
[   67.155587][ T6475] hsr0: entered allmulticast mode
[   67.157686][ T6475] hsr_slave_0: entered allmulticast mode
[   67.160209][ T6475] hsr_slave_1: entered allmulticast mode
[   67.757167][ T6505] __nla_validate_parse: 5 callbacks suppressed
[   67.757179][ T6505] netlink: 56 bytes leftover after parsing attributes in process `syz.2.178'.
[   67.859407][ T6511] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[   67.866022][ T6512] trusted_key: syz.1.180 sent an empty control message without MSG_MORE.
[   67.965314][ T6509] lo speed is unknown, defaulting to 1000
[   68.098595][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.184'.
[   68.113571][ T6523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.184'.
[   68.872936][ T6544] netlink: 'syz.1.190': attribute type 1 has an invalid length.
[   68.877083][ T6544] netlink: 232 bytes leftover after parsing attributes in process `syz.1.190'.
[   68.879832][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.190'.
[   68.909108][ T6546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.191'.
[   68.923178][ T6546] pim6reg: entered allmulticast mode
[   68.929683][ T6546] pim6reg: left allmulticast mode
[   69.975726][ T6568] netlink: 'syz.2.197': attribute type 1 has an invalid length.
[   69.978300][ T6568] netlink: 224 bytes leftover after parsing attributes in process `syz.2.197'.
[   70.132960][ T6579] Bluetooth: MGMT ver 1.23
[   70.142065][ T6579] netlink: 'syz.0.201': attribute type 1 has an invalid length.
[   70.145560][ T6579] netlink: 600 bytes leftover after parsing attributes in process `syz.0.201'.
[   70.205477][   T33] audit: type=1804 audit(1752117991.117:3): pid=6589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.202" name="/newroot/65/cgroup.controllers" dev="tmpfs" ino=347 res=1 errno=0
[   70.213600][   T33] audit: type=1800 audit(1752117991.127:4): pid=6589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.202" name="cgroup.controllers" dev="tmpfs" ino=347 res=0 errno=0
[   70.707128][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'.
[   70.711059][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'.
[   70.862368][ T6607] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:18976
[   70.867813][ T6607] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20006
[   70.890834][ T6607] netlink: 'syz.1.209': attribute type 1 has an invalid length.
[   71.194266][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.196680][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.872382][ T6625] SET target dimension over the limit!
[   72.219378][ T6652] netlink: 'syz.2.225': attribute type 4 has an invalid length.
[   73.211395][ T6677] __nla_validate_parse: 6 callbacks suppressed
[   73.211408][ T6677] netlink: 24 bytes leftover after parsing attributes in process `syz.0.232'.
[   73.412406][ T6687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.233'.
[   73.421328][ T6687] netlink: 16 bytes leftover after parsing attributes in process `syz.0.233'.
[   73.426864][ T6686] bridge2: entered promiscuous mode
[   73.427209][ T6687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.233'.
[   73.428764][ T6686] bridge2: entered allmulticast mode
[   73.438289][ T6686] team0: Port device bridge2 added
[   73.446871][ T6686] rdma_rxe: rxe_newlink: failed to add macvlan1
[   73.500228][ T6689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.236'.
[   73.695211][ T6706] bridge4: entered promiscuous mode
[   73.697618][ T6706] bridge4: entered allmulticast mode
[   73.702867][ T6706] team0: Port device bridge4 added
[   73.709820][ T6706] rdma_rxe: rxe_newlink: failed to add macvlan1
[   73.795062][ T6710] netlink: 'syz.1.242': attribute type 4 has an invalid length.
[   73.842060][ T6714] netlink: 20 bytes leftover after parsing attributes in process `syz.2.244'.
[   73.860991][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.244'.
[   74.283067][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.251'.
[   74.342669][ T6743] netlink: 'syz.0.252': attribute type 9 has an invalid length.
[   74.347948][ T6743] netlink: 'syz.0.252': attribute type 6 has an invalid length.
[   74.501048][ T6743] tipc: Started in network mode
[   74.503417][ T6743] tipc: Node identity ac14142f, cluster identity 4711
[   74.506478][ T6743] tipc: New replicast peer: 0.0.0.0
[   74.508952][ T6743] tipc: Enabled bearer <udp:syz2>, priority 10
[   74.512486][ T6743] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[   75.625070][ T5297] tipc: Node number set to 2886997039
[   75.862209][ T6780] lo speed is unknown, defaulting to 1000
[   76.891105][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'.
[   76.894302][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'.
[   77.636538][ T6821] pim6reg9: entered allmulticast mode
[   77.812170][ T6833] netlink: 'syz.2.281': attribute type 3 has an invalid length.
[   78.447898][ T6836] __nla_validate_parse: 1 callbacks suppressed
[   78.447912][ T6836] netlink: 88 bytes leftover after parsing attributes in process `syz.0.282'.
[   78.458599][ T6836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.282'.
[   78.463138][ T6836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.282'.
[   78.550471][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'.
[   78.553601][ T6843] openvswitch: netlink: Unknown nsh attribute 0
[   78.556149][ T6843] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.587821][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.286'.
[   79.822860][ T6899] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   79.831587][ T5891] lo speed is unknown, defaulting to 1000
[   79.911446][ T6902] netlink: 44 bytes leftover after parsing attributes in process `syz.1.302'.
[   79.917092][ T6902] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.919960][ T6902] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.707654][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.305'.
[   81.176054][ T6924] netlink: 36 bytes leftover after parsing attributes in process `syz.2.309'.
[   81.426572][   T10] cfg80211: failed to load regulatory.db
[   81.545828][ T6929] bond0: Unable to set down delay as MII monitoring is disabled
[   81.599102][ T6931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.312'.
[   81.603707][ T6931] netlink: 'syz.1.312': attribute type 32 has an invalid length.
[   81.606292][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'.
[   81.609342][ T6931] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[   82.450948][ T6955] netlink: 'syz.0.319': attribute type 21 has an invalid length.
[   83.548240][ T6971] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received
[   83.605113][ T6972] netlink: 'syz.1.324': attribute type 9 has an invalid length.
[   83.608627][ T6972] __nla_validate_parse: 5 callbacks suppressed
[   83.608639][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'.
[   83.620987][ T6972] hsr0: entered promiscuous mode
[   83.623509][ T6972] macvlan2: entered promiscuous mode
[   83.626050][ T6972] macvlan2: entered allmulticast mode
[   83.628493][ T6972] hsr0: entered allmulticast mode
[   83.630807][ T6972] hsr_slave_0: entered allmulticast mode
[   83.633400][ T6972] hsr_slave_1: entered allmulticast mode
[   83.819677][ T6974] Illegal XDP return value 4294967262 on prog  (id 120) dev N/A, expect packet loss!
[   84.262893][ T6994] xt_hashlimit: max too large, truncated to 1048576
[   84.928872][ T7006] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.944995][ T7006] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.011830][ T7006] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.015624][ T7006] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.018901][ T7006] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.022176][ T7006] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.066378][ T7006] hsr0: left allmulticast mode
[   85.068212][ T7006] hsr_slave_0: left allmulticast mode
[   85.070367][ T7006] hsr_slave_1: left allmulticast mode
[   85.964219][ T7018] syzkaller1: entered promiscuous mode
[   85.966632][ T7018] syzkaller1: entered allmulticast mode
[   85.971781][ T7018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.338'.
[   85.979121][ T7018] netlink: 'syz.0.338': attribute type 7 has an invalid length.
[   85.982392][ T7018] netlink: 'syz.0.338': attribute type 8 has an invalid length.
[   85.987021][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.338'.
[   86.359858][ T7023] lo speed is unknown, defaulting to 1000
[   86.630386][ T7035] nft_compat: unsupported protocol 0
[   86.839876][ T7043] pim6reg: entered allmulticast mode
[   86.990265][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.349'.
[   86.995401][ T7055] netlink: 172 bytes leftover after parsing attributes in process `syz.0.349'.
[   87.002985][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.346'.
[   87.007797][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.346'.
[   87.021629][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.346'.
[   87.097269][ T7068] netlink: 48 bytes leftover after parsing attributes in process `syz.0.353'.
[   87.781229][ T7115] syzkaller1: entered promiscuous mode
[   87.785548][ T7115] syzkaller1: entered allmulticast mode
[   87.919800][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.369'.
[   87.993138][ T7123] netlink: 'syz.1.369': attribute type 9 has an invalid length.
[   88.002077][ T7123] macvlan3: entered promiscuous mode
[   88.006316][ T7123] macvlan3: entered allmulticast mode
[   88.009794][ T7123] hsr0: entered allmulticast mode
[   88.012203][ T7123] hsr_slave_0: entered allmulticast mode
[   88.015446][ T7123] hsr_slave_1: entered allmulticast mode
[   88.042481][ T7122] netlink: 'syz.0.370': attribute type 9 has an invalid length.
[   88.051217][ T7122] macvlan3: entered promiscuous mode
[   88.054119][ T7122] macvlan3: entered allmulticast mode
[   88.847684][ T7135] xt_l2tp: v2 doesn't support IP mode
[   88.851791][ T7135] __nla_validate_parse: 2 callbacks suppressed
[   88.851804][ T7135] netlink: 224 bytes leftover after parsing attributes in process `syz.2.374'.
[   88.858968][ T7136] netlink: 224 bytes leftover after parsing attributes in process `syz.2.374'.
[   89.085657][ T7145] netlink: 'syz.2.378': attribute type 1 has an invalid length.
[   89.088995][ T7145] netlink: 244 bytes leftover after parsing attributes in process `syz.2.378'.
[   89.157126][ T7138] lo speed is unknown, defaulting to 1000
[   89.236085][ T7152] netlink: 32 bytes leftover after parsing attributes in process `syz.2.379'.
[   89.267797][ T7152] netlink: 32 bytes leftover after parsing attributes in process `syz.2.379'.
[   89.283854][ T7141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.375'.
[   89.290312][ T7141] syzkaller1: entered promiscuous mode
[   89.292238][ T7141] syzkaller1: entered allmulticast mode
[   89.308385][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'.
[   89.311454][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'.
[   89.320743][ T7155] netlink: 'syz.1.381': attribute type 14 has an invalid length.
[   89.399723][ T7164] netlink: 'syz.1.383': attribute type 1 has an invalid length.
[   89.403054][ T7164] netlink: 'syz.1.383': attribute type 3 has an invalid length.
[   89.408778][ T7164] netlink: 224 bytes leftover after parsing attributes in process `syz.1.383'.
[   89.412625][ T7164] NCSI netlink: No device for ifindex 246
[   89.696959][ T7178] netlink: 'syz.1.387': attribute type 4 has an invalid length.
[   89.794748][ T7180] vti0: entered promiscuous mode
[   90.949656][   T24] IPVS: starting estimator thread 0...
[   91.043458][ T7209] IPVS: using max 80 ests per chain, 192000 per kthread
[   91.468888][ T7213] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   91.472154][ T7213] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   91.627965][ T7226] netlink: 'syz.0.402': attribute type 29 has an invalid length.
[   91.686628][ T7229] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[   91.699943][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'.
[   91.929776][ T7256] netlink: 'syz.1.412': attribute type 1 has an invalid length.
[   92.020431][ T7261] netlink: 'syz.2.413': attribute type 1 has an invalid length.
[   92.024322][ T7261] netlink: 'syz.2.413': attribute type 2 has an invalid length.
[   92.027760][ T7258] tipc: Started in network mode
[   92.029440][ T7258] tipc: Node identity 7, cluster identity 4711
[   92.031688][ T7258] tipc: Node number set to 7
[   92.177787][ T7271] bridge5: entered promiscuous mode
[   92.180108][ T7271] bridge5: entered allmulticast mode
[   92.189873][ T7271] team0: Port device bridge5 added
[   92.262322][ T7280] sctp: [Deprecated]: syz.2.419 (pid 7280) Use of int in max_burst socket option.
[   92.262322][ T7280] Use struct sctp_assoc_value instead
[   92.296083][ T7282] sctp: [Deprecated]: syz.1.420 (pid 7282) Use of int in max_burst socket option.
[   92.296083][ T7282] Use struct sctp_assoc_value instead
[   92.429551][ T7292] vxcan3: entered allmulticast mode
[   92.777366][ T7300] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.220975][   T10] IPVS: starting estimator thread 0...
[   93.230243][ T7302] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.315531][ T7303] IPVS: using max 78 ests per chain, 187200 per kthread
[   93.439683][ T7296] tipc: Disabling bearer <eth:syzkaller0>
[   93.886348][ T7334] __nla_validate_parse: 9 callbacks suppressed
[   93.886357][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'.
[   93.891517][ T7334] netlink: 48 bytes leftover after parsing attributes in process `syz.0.437'.
[   94.249382][ T7339] netlink: 20 bytes leftover after parsing attributes in process `syz.1.439'.
[   94.262825][ T7337] lo speed is unknown, defaulting to 1000
[   94.319155][ T7345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.440'.
[   94.457823][ T7359] netlink: 'syz.1.444': attribute type 30 has an invalid length.
[   94.597891][ T7364] netlink: 'syz.1.445': attribute type 25 has an invalid length.
[   96.935574][ T7426] netlink: 172 bytes leftover after parsing attributes in process `syz.0.462'.
[   97.128005][ T7434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.464'.
[   97.139529][ T7434] bridge_slave_1: left allmulticast mode
[   97.141877][ T7434] bridge_slave_1: left promiscuous mode
[   97.146214][ T7434] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.151433][ T7434] bridge_slave_0: left allmulticast mode
[   97.154178][ T7434] bridge_slave_0: left promiscuous mode
[   97.156426][ T7434] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.364595][ T7442] siw: device registration error -23
[   97.683118][ T7446] netlink: 'syz.0.467': attribute type 9 has an invalid length.
[   97.686261][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.467'.
[   97.694464][ T7446] macvlan4: entered promiscuous mode
[   97.696706][ T7446] macvlan4: entered allmulticast mode
[   97.858697][ T7453] sctp: [Deprecated]: syz.2.469 (pid 7453) Use of struct sctp_assoc_value in delayed_ack socket option.
[   97.858697][ T7453] Use struct sctp_sack_info instead
[   97.948519][ T7462] netlink: 172 bytes leftover after parsing attributes in process `syz.0.472'.
[   97.957106][ T7462] netlink: 'syz.0.472': attribute type 1 has an invalid length.
[   98.000595][ T7462] 8021q: adding VLAN 0 to HW filter on device bond1
[   98.031475][ T7467] netlink: 172 bytes leftover after parsing attributes in process `syz.2.474'.
[   98.071069][ T7469] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20002
[   98.074605][ T7462] veth3: entered promiscuous mode
[   98.079992][ T7462] bond1: (slave veth3): Enslaving as an active interface with a down link
[   98.086427][ T7462] erspan0: entered allmulticast mode
[   98.093766][ T7462] bond1: (slave erspan0): making interface the new active one
[   98.106146][ T7462] erspan0: entered promiscuous mode
[   98.112150][ T7462] bond1: (slave erspan0): Enslaving as an active interface with an up link
[   98.182799][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'.
[   98.350235][ T7493] netlink: 'syz.1.482': attribute type 21 has an invalid length.
[   98.522943][ T7499] lo speed is unknown, defaulting to 1000
[   98.556382][ T7505] xt_hashlimit: max too large, truncated to 1048576
[   99.172569][ T7521] __nla_validate_parse: 1 callbacks suppressed
[   99.172579][ T7521] netlink: 164 bytes leftover after parsing attributes in process `syz.0.491'.
[   99.220196][ T7521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.491'.
[   99.776453][ T7548] netlink: 172 bytes leftover after parsing attributes in process `syz.1.497'.
[   99.824879][   T54] Bluetooth: hci2: command tx timeout
[   99.887647][ T7555] netlink: 'syz.1.499': attribute type 4 has an invalid length.
[   99.928048][ T7562] netlink: 56 bytes leftover after parsing attributes in process `syz.1.500'.
[  100.030507][ T7571] netlink: 'syz.1.503': attribute type 11 has an invalid length.
[  100.033052][ T7571] netlink: 228 bytes leftover after parsing attributes in process `syz.1.503'.
[  100.037730][ T7572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.503'.
[  100.178799][ T7581] netlink: 172 bytes leftover after parsing attributes in process `syz.2.506'.
[  100.323654][ T7592] netlink: 20 bytes leftover after parsing attributes in process `syz.0.508'.
[  100.327526][ T7592] netlink: 40 bytes leftover after parsing attributes in process `syz.0.508'.
[  101.001374][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'.
[  102.103108][ T7619] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  102.110554][ T7619] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  102.140853][ T7622] bridge2: entered promiscuous mode
[  102.142895][ T7622] bridge2: entered allmulticast mode
[  102.160071][ T7622] team0: Port device bridge2 added
[  102.164615][ T7622] rdma_rxe: rxe_newlink: failed to add macvlan1
[  102.202609][ T7628] netlink: 'syz.0.522': attribute type 1 has an invalid length.
[  102.675352][ T7671] xt_TCPMSS: Only works on TCP SYN packets
[  102.678167][ T7671] netlink: 'syz.1.532': attribute type 1 has an invalid length.
[  102.681762][ T7671] xt_CONNSECMARK: invalid mode: 254
[  103.158349][ T7678] team0: Port device team_slave_0 removed
[  103.494220][ T7696] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  103.610675][ T7708] netlink: 'syz.2.543': attribute type 1 has an invalid length.
[  103.614510][ T7708] netlink: 'syz.2.543': attribute type 10 has an invalid length.
[  103.647471][ T7713] netlink: 'syz.2.545': attribute type 11 has an invalid length.
[  104.190408][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  104.195510][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  104.199714][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  104.206971][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  104.211584][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  104.321910][ T7729] lo speed is unknown, defaulting to 1000
[  104.526457][ T7729] chnl_net:caif_netlink_parms(): no params data found
[  104.595022][ T7729] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.598158][ T7729] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.601179][ T7729] bridge_slave_0: entered allmulticast mode
[  104.605395][ T7729] bridge_slave_0: entered promiscuous mode
[  104.624766][ T7729] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.628488][ T7729] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.631548][ T7729] bridge_slave_1: entered allmulticast mode
[  104.635608][ T7729] bridge_slave_1: entered promiscuous mode
[  104.669880][ T7729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.690487][ T7729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.730499][ T7729] team0: Port device team_slave_0 added
[  104.739021][ T7729] team0: Port device team_slave_1 added
[  104.776868][ T7729] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.780054][ T7729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.795627][ T7729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.802049][ T7729] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.806079][ T7729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.817085][ T7729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.860816][ T7729] hsr_slave_0: entered promiscuous mode
[  104.864756][ T7729] hsr_slave_1: entered promiscuous mode
[  104.867666][ T7729] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  104.870932][ T7729] Cannot create hsr debugfs directory
[  104.995883][ T7729] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.060197][ T7729] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.096457][ T7729] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.136870][ T7729] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.273463][ T7729] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  105.279514][ T7729] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  105.285924][ T7729] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  105.291203][ T7729] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  105.367734][ T7729] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.384116][ T7729] 8021q: adding VLAN 0 to HW filter on device team0
[  105.391723][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.394871][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.407367][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.410505][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.539983][ T7729] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.578517][ T7729] veth0_vlan: entered promiscuous mode
[  105.587779][ T7729] veth1_vlan: entered promiscuous mode
[  105.613927][ T7729] veth0_macvtap: entered promiscuous mode
[  105.621311][ T7729] veth1_macvtap: entered promiscuous mode
[  105.649729][ T7729] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.654318][ T7729] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.660378][ T7729] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.663233][ T7729] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.666603][ T7729] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.669519][ T7729] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.730544][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.733182][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.756974][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.759824][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.841119][ T7782] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  106.819650][ T7790] lo speed is unknown, defaulting to 1000
[  107.465054][ T7805] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  107.525013][ T7806] __nla_validate_parse: 6 callbacks suppressed
[  107.525022][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.570'.
[  107.529997][ T7806] netlink: 32 bytes leftover after parsing attributes in process `syz.0.570'.
[  107.532893][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.570'.
[  107.539320][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.570'.
[  107.687148][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.910343][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  107.916596][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  107.919501][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  107.922593][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  107.926495][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  108.028578][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'.
[  108.031598][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'.
[  108.035951][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'.
[  108.044351][ T7808] lo speed is unknown, defaulting to 1000
[  108.222161][ T7808] chnl_net:caif_netlink_parms(): no params data found
[  108.271419][ T7808] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.274607][ T7808] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.277018][ T7808] bridge_slave_0: entered allmulticast mode
[  108.280275][ T7808] bridge_slave_0: entered promiscuous mode
[  108.285026][ T7808] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.287439][ T7808] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.289855][ T7808] bridge_slave_1: entered allmulticast mode
[  108.292628][ T7808] bridge_slave_1: entered promiscuous mode
[  108.321013][ T7808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.333643][ T7808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  108.363271][ T7808] team0: Port device team_slave_0 added
[  108.368474][ T7808] team0: Port device team_slave_1 added
[  108.404944][ T7808] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.407537][ T7808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.416950][ T7808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.421518][ T7808] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.424473][ T7808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.432975][ T7808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.463029][ T7808] hsr_slave_0: entered promiscuous mode
[  108.465404][ T7808] hsr_slave_1: entered promiscuous mode
[  108.467556][ T7808] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  108.470365][ T7808] Cannot create hsr debugfs directory
[  108.842670][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'.
[  108.869056][ T7833] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  108.939121][ T7838] netlink: 'syz.1.577': attribute type 29 has an invalid length.
[  109.112108][ T7851] netlink: 44 bytes leftover after parsing attributes in process `syz.1.581'.
[  109.116717][ T7851] netlink: 43 bytes leftover after parsing attributes in process `syz.1.581'.
[  109.323611][ T5857] erspan0: left promiscuous mode
[  109.505214][ T7864] syz_tun: left allmulticast mode
[  109.548161][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.594733][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.646536][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.767729][   T13] bridge_slave_1: left allmulticast mode
[  109.771076][   T13] bridge_slave_1: left promiscuous mode
[  109.774637][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.783571][   T13] bridge_slave_0: left allmulticast mode
[  109.785913][   T13] bridge_slave_0: left promiscuous mode
[  109.788269][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.984003][ T5830] Bluetooth: hci1: command tx timeout
[  110.023207][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  110.033626][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  110.038216][   T13] bond0 (unregistering): Released all slaves
[  110.429777][   T13] hsr_slave_0: left promiscuous mode
[  110.432675][   T13] hsr_slave_1: left promiscuous mode
[  110.453426][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.458666][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  110.467073][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.469472][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.481087][   T13] veth1_macvtap: left promiscuous mode
[  110.483014][   T13] veth0_macvtap: left promiscuous mode
[  110.485083][   T13] veth1_vlan: left promiscuous mode
[  110.487159][   T13] veth0_vlan: left promiscuous mode
[  110.739961][ T7884] syz1: rxe_newlink: already configured on macvlan1
[  110.779949][   T13] team0 (unregistering): Port device team_slave_1 removed
[  110.801014][   T13] team0 (unregistering): Port device team_slave_0 removed
[  111.036674][ T7883] bridge0: entered promiscuous mode
[  111.039235][ T7883] bridge0: entered allmulticast mode
[  111.055260][ T7883] team0: Port device bridge0 added
[  111.066821][ T7808] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  111.082305][ T7808] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  111.126908][ T7808] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  111.136351][ T7808] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  111.227055][ T7896] ipt_rpfilter: unknown options
[  111.265408][ T7808] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.281809][ T7808] 8021q: adding VLAN 0 to HW filter on device team0
[  111.291560][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.294719][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.313115][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.316397][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.440109][ T7808] 8021q: adding VLAN 0 to HW filter on device batadv0
[  111.467614][ T7808] veth0_vlan: entered promiscuous mode
[  111.476400][ T7808] veth1_vlan: entered promiscuous mode
[  111.496584][ T7808] veth0_macvtap: entered promiscuous mode
[  111.502693][ T7808] veth1_macvtap: entered promiscuous mode
[  111.520860][ T7808] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.532227][ T7808] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.542078][ T7808] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.546946][ T7808] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.550673][ T7808] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.558726][ T7808] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.620271][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.628212][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.649355][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.652721][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.407682][ T7923] xt_CT: No such helper "syz1"
[  112.415903][ T7923] netlink: 'syz.0.603': attribute type 1 has an invalid length.
[  112.930538][ T7931] __nla_validate_parse: 5 callbacks suppressed
[  112.930547][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.605'.
[  112.937790][ T7931] x_tables: duplicate underflow at hook 1
[  112.968860][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'.
[  112.971999][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'.
[  112.977490][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'.
[  113.303214][ T7943] netlink: 452 bytes leftover after parsing attributes in process `syz.0.609'.
[  113.360558][ T7948] delete_channel: no stack
[  113.645257][ T5699] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.793078][ T7965] netlink: 'syz.0.614': attribute type 1 has an invalid length.
[  113.815335][ T7965] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  113.821480][ T7965] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  113.868809][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  113.872698][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  113.876933][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  113.880609][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  113.886322][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  114.005799][ T7968] lo speed is unknown, defaulting to 1000
[  114.176325][ T7968] chnl_net:caif_netlink_parms(): no params data found
[  114.221262][ T7968] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.223828][ T7968] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.226304][ T7968] bridge_slave_0: entered allmulticast mode
[  114.229209][ T7968] bridge_slave_0: entered promiscuous mode
[  114.241046][ T7968] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.245438][ T7968] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.247995][ T7968] bridge_slave_1: entered allmulticast mode
[  114.250783][ T7968] bridge_slave_1: entered promiscuous mode
[  114.273889][ T7968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  114.278433][ T7968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  114.316379][ T7968] team0: Port device team_slave_0 added
[  114.319610][ T7968] team0: Port device team_slave_1 added
[  114.347593][ T7968] batman_adv: batadv0: Adding interface: batadv_slave_0
[  114.349914][ T7968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.365484][ T7968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  114.375091][ T7968] batman_adv: batadv0: Adding interface: batadv_slave_1
[  114.379152][ T7968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.397346][ T7968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  114.436785][ T7987] veth2: entered allmulticast mode
[  114.451047][ T7968] hsr_slave_0: entered promiscuous mode
[  114.453470][ T7968] hsr_slave_1: entered promiscuous mode
[  114.456515][ T7968] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  114.459508][ T7968] Cannot create hsr debugfs directory
[  114.552109][ T7991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.619'.
[  114.759505][ T8003] bridge3: entered promiscuous mode
[  114.761365][ T8003] bridge3: entered allmulticast mode
[  114.765578][ T8003] team0: Port device bridge3 added
[  114.771207][ T8003] rdma_rxe: rxe_newlink: failed to add macvlan1
[  114.869734][ T8006] netlink: 'syz.1.626': attribute type 9 has an invalid length.
[  114.872272][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.626'.
[  114.878659][ T8006] macvlan4: entered promiscuous mode
[  114.880566][ T8006] macvlan4: entered allmulticast mode
[  115.007363][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.627'.
[  115.011359][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.627'.
[  115.018572][ T8010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.627'.
[  115.777476][ T8020] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20003
[  115.842812][ T5699] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.897946][ T5699] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.907180][   T54] Bluetooth: hci1: command tx timeout
[  115.910417][ T8027] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  115.941491][ T5699] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.025902][ T5699] bridge_slave_1: left allmulticast mode
[  116.027955][ T5699] bridge_slave_1: left promiscuous mode
[  116.030004][ T5699] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.035219][ T5699] bridge_slave_0: left allmulticast mode
[  116.037538][ T5699] bridge_slave_0: left promiscuous mode
[  116.039958][ T5699] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.100760][ T8038] xt_CT: No such helper "syz1"
[  116.235990][ T5699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.240505][ T5699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.244560][ T5699] bond0 (unregistering): Released all slaves
[  116.720586][ T5699] hsr_slave_0: left promiscuous mode
[  116.722870][ T5699] hsr_slave_1: left promiscuous mode
[  116.736356][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.738788][ T5699] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.741743][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.744261][ T5699] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.752237][ T5699] veth1_macvtap: left promiscuous mode
[  116.754303][ T5699] veth0_macvtap: left promiscuous mode
[  116.756772][ T5699] veth1_vlan: left promiscuous mode
[  116.758548][ T5699] veth0_vlan: left promiscuous mode
[  117.059746][ T5699] team0 (unregistering): Port device team_slave_1 removed
[  117.080288][ T5699] team0 (unregistering): Port device team_slave_0 removed
[  117.308644][ T8067] macsec1: entered allmulticast mode
[  117.310455][ T8067] macsec0: entered allmulticast mode
[  117.323590][ T7968] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  117.337113][ T7968] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  117.341273][ T7968] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  117.350721][ T7968] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  117.435008][ T7968] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.444733][ T7968] 8021q: adding VLAN 0 to HW filter on device team0
[  117.451493][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.453874][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.472316][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.474730][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.600236][ T7968] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.630492][ T7968] veth0_vlan: entered promiscuous mode
[  117.640183][ T7968] veth1_vlan: entered promiscuous mode
[  117.656800][ T7968] veth0_macvtap: entered promiscuous mode
[  117.660987][ T7968] veth1_macvtap: entered promiscuous mode
[  117.676958][ T7968] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.685509][ T7968] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.690198][ T7968] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.693012][ T7968] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.696965][ T7968] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.700140][ T7968] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.742752][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.749759][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.767503][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.770404][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.292519][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.306818][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.276918][ T8122] netlink: 'syz.0.655': attribute type 21 has an invalid length.
[  119.297199][ T8122] netlink: 'syz.0.655': attribute type 5 has an invalid length.
[  119.500306][ T8145] __nla_validate_parse: 5 callbacks suppressed
[  119.500324][ T8145] netlink: 9 bytes leftover after parsing attributes in process `syz.0.660'.
[  119.776534][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.426191][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  120.430536][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  120.438217][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  120.441722][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  120.444748][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  120.554813][ T8160] lo speed is unknown, defaulting to 1000
[  120.765928][ T8160] chnl_net:caif_netlink_parms(): no params data found
[  120.812742][ T8160] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.816458][ T8160] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.818945][ T8160] bridge_slave_0: entered allmulticast mode
[  120.821838][ T8160] bridge_slave_0: entered promiscuous mode
[  120.825966][ T8160] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.828288][ T8160] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.830641][ T8160] bridge_slave_1: entered allmulticast mode
[  120.833687][ T8160] bridge_slave_1: entered promiscuous mode
[  120.853421][ T8160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.858401][ T8160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.887694][ T8160] team0: Port device team_slave_0 added
[  120.892889][ T8160] team0: Port device team_slave_1 added
[  120.910579][ T8160] batman_adv: batadv0: Adding interface: batadv_slave_0
[  120.912941][ T8160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.922466][ T8160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  120.927325][ T8160] batman_adv: batadv0: Adding interface: batadv_slave_1
[  120.929925][ T8160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.940804][ T8160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  120.985365][ T8160] hsr_slave_0: entered promiscuous mode
[  120.988522][ T8160] hsr_slave_1: entered promiscuous mode
[  120.991462][ T8160] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  120.994845][ T8160] Cannot create hsr debugfs directory
[  121.210555][ T8174] xt_CT: No such helper "syz1"
[  121.225557][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.267241][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.315575][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.389617][   T13] bridge_slave_1: left allmulticast mode
[  121.391840][   T13] bridge_slave_1: left promiscuous mode
[  121.394189][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.398747][   T13] bridge_slave_0: left allmulticast mode
[  121.401414][   T13] bridge_slave_0: left promiscuous mode
[  121.404102][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.442433][ T8183] x_tables: duplicate underflow at hook 1
[  121.632289][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  121.638462][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  121.645445][   T13] bond0 (unregistering): Released all slaves
[  122.013044][   T13] hsr_slave_0: left promiscuous mode
[  122.025577][   T13] hsr_slave_1: left promiscuous mode
[  122.035570][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.042968][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.047915][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.051066][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.078083][   T13] veth1_macvtap: left promiscuous mode
[  122.080516][   T13] veth0_macvtap: left promiscuous mode
[  122.082998][   T13] veth1_vlan: left promiscuous mode
[  122.085511][   T13] veth0_vlan: left promiscuous mode
[  122.427075][   T13] team0 (unregistering): Port device team_slave_1 removed
[  122.447961][   T13] team0 (unregistering): Port device team_slave_0 removed
[  122.465512][ T5830] Bluetooth: hci1: command tx timeout
[  122.735694][ T8160] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  122.756186][ T8160] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  122.770023][ T8160] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  122.786445][ T8160] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  122.868354][ T8160] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.899344][ T8160] 8021q: adding VLAN 0 to HW filter on device team0
[  122.918295][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.921125][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.945437][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.947961][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.007884][ T8227] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[  123.104740][ T8160] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.111943][ T8235] netlink: 20 bytes leftover after parsing attributes in process `syz.1.681'.
[  123.132536][ T8160] veth0_vlan: entered promiscuous mode
[  123.138407][ T8160] veth1_vlan: entered promiscuous mode
[  123.164377][ T8242] vlan2: entered promiscuous mode
[  123.166158][ T8242] vlan2: entered allmulticast mode
[  123.168565][ T8160] veth0_macvtap: entered promiscuous mode
[  123.172746][ T8160] veth1_macvtap: entered promiscuous mode
[  123.186049][ T8160] batman_adv: batadv0: Interface activated: batadv_slave_0
[  123.196265][ T8160] batman_adv: batadv0: Interface activated: batadv_slave_1
[  123.202963][ T8160] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.206458][ T8160] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.209205][ T8160] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.216469][ T8160] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.291845][ T2165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.296480][ T2165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.350562][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.354918][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.006953][ T8258] netlink: 48 bytes leftover after parsing attributes in process `syz.0.686'.
[  124.007566][ T8259] netlink: 48 bytes leftover after parsing attributes in process `syz.0.686'.
[  124.010685][ T8258] netlink: 56 bytes leftover after parsing attributes in process `syz.0.686'.
[  124.021561][ T8259] netlink: 56 bytes leftover after parsing attributes in process `syz.0.686'.
[  124.081196][ T5894] IPVS: starting estimator thread 0...
[  124.193655][ T8265] IPVS: using max 43 ests per chain, 103200 per kthread
[  124.412888][ T8281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.692'.
[  125.066771][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.786440][ T8286] ipt_rpfilter: unknown options
[  125.868796][ T8290] bridge0: port 1(gretap0) entered blocking state
[  125.871468][ T8290] bridge0: port 1(gretap0) entered disabled state
[  125.873903][ T8290] gretap0: entered allmulticast mode
[  125.877886][ T8290] gretap0: entered promiscuous mode
[  125.881400][ T8290] bridge0: port 1(gretap0) entered blocking state
[  125.883689][ T8290] bridge0: port 1(gretap0) entered listening state
[  125.910777][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  125.914112][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  125.917039][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  125.921131][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  125.926546][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  126.023021][ T8294] lo speed is unknown, defaulting to 1000
[  126.225204][ T8294] chnl_net:caif_netlink_parms(): no params data found
[  126.289564][ T8294] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.292091][ T8294] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.295017][ T8294] bridge_slave_0: entered allmulticast mode
[  126.297840][ T8294] bridge_slave_0: entered promiscuous mode
[  126.302193][ T8294] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.307072][ T8294] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.309491][ T8294] bridge_slave_1: entered allmulticast mode
[  126.312378][ T8294] bridge_slave_1: entered promiscuous mode
[  126.334714][ T8294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.339475][ T8294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.368987][ T8294] team0: Port device team_slave_0 added
[  126.374717][ T8294] team0: Port device team_slave_1 added
[  126.401713][ T8294] batman_adv: batadv0: Adding interface: batadv_slave_0
[  126.405157][ T8294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.410028][ T8311] netlink: 'syz.0.698': attribute type 142 has an invalid length.
[  126.413146][ T8294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.414832][ T8294] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.421936][ T8294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.431841][ T8294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  126.464639][ T8294] hsr_slave_0: entered promiscuous mode
[  126.466986][ T8294] hsr_slave_1: entered promiscuous mode
[  126.469114][ T8294] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  126.471555][ T8294] Cannot create hsr debugfs directory
[  126.679261][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.706447][ T8316] 8021q: adding VLAN 0 to HW filter on device team0
[  126.711546][ T8316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.732341][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.786316][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.873148][   T13] bridge_slave_1: left allmulticast mode
[  126.876353][   T13] bridge_slave_1: left promiscuous mode
[  126.878878][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.885515][   T13] bridge_slave_0: left allmulticast mode
[  126.888321][   T13] bridge_slave_0: left promiscuous mode
[  126.891854][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.107674][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  127.115742][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  127.121541][   T13] bond0 (unregistering): Released all slaves
[  127.639074][   T13] hsr_slave_0: left promiscuous mode
[  127.642300][   T13] hsr_slave_1: left promiscuous mode
[  127.651014][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.656485][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.659372][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.661828][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.672653][   T13] veth1_macvtap: left promiscuous mode
[  127.677206][   T13] veth0_macvtap: left promiscuous mode
[  127.679206][   T13] veth1_vlan: left promiscuous mode
[  127.680953][   T13] veth0_vlan: left promiscuous mode
[  127.715168][ T8326] xt_CT: No such helper "syz1"
[  127.971047][   T13] team0 (unregistering): Port device team_slave_1 removed
[  127.984021][   T54] Bluetooth: hci1: command tx timeout
[  128.001866][   T13] team0 (unregistering): Port device team_slave_0 removed
[  128.223762][ T8322] lo speed is unknown, defaulting to 1000
[  128.231282][ T8294] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  128.258029][ T8294] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  128.275606][ T8294] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  128.287667][ T8294] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  128.410406][ T8294] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.419303][ T8294] 8021q: adding VLAN 0 to HW filter on device team0
[  128.425028][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.427393][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.435309][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.437680][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.572369][ T8294] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.605705][ T8294] veth0_vlan: entered promiscuous mode
[  128.615173][ T8294] veth1_vlan: entered promiscuous mode
[  128.645796][ T8294] veth0_macvtap: entered promiscuous mode
[  128.652326][ T8294] veth1_macvtap: entered promiscuous mode
[  128.669622][ T8294] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.682506][ T8294] batman_adv: batadv0: Interface activated: batadv_slave_1
[  128.688350][ T8294] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.691222][ T8294] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.695485][ T8294] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.698631][ T8294] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.748201][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.750779][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.765955][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.768444][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.830654][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.704'.
[  129.235017][ T8351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'.
[  129.691511][ T8361] netlink: 'syz.0.709': attribute type 8 has an invalid length.
[  130.426460][ T5857] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.232066][ T8395] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.355144][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  131.359147][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  131.362545][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  131.365938][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  131.368752][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  131.430382][ T8413] netlink: 60 bytes leftover after parsing attributes in process `syz.1.723'.
[  131.435083][ T8413] 8021q: VLANs not supported on wg2
[  131.541813][ T8404] lo speed is unknown, defaulting to 1000
[  131.574619][ T8420] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input4
[  131.726054][ T8404] chnl_net:caif_netlink_parms(): no params data found
[  131.772689][ T8404] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.775296][ T8404] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.777569][ T8404] bridge_slave_0: entered allmulticast mode
[  131.780217][ T8404] bridge_slave_0: entered promiscuous mode
[  131.783902][ T8404] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.786326][ T8404] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.789294][ T8404] bridge_slave_1: entered allmulticast mode
[  131.792462][ T8404] bridge_slave_1: entered promiscuous mode
[  131.812308][ T8404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  131.817595][ T8404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  131.841034][ T8404] team0: Port device team_slave_0 added
[  131.845403][ T8404] team0: Port device team_slave_1 added
[  131.861506][ T8404] batman_adv: batadv0: Adding interface: batadv_slave_0
[  131.864072][ T8404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.872082][ T8404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  131.878064][ T8404] batman_adv: batadv0: Adding interface: batadv_slave_1
[  131.880262][ T8404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.890495][ T8404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  131.919624][ T8404] hsr_slave_0: entered promiscuous mode
[  131.922374][ T8404] hsr_slave_1: entered promiscuous mode
[  131.925362][ T8404] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  131.928338][ T8404] Cannot create hsr debugfs directory
[  131.976907][ T5857] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.066835][ T5857] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.117557][ T5857] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.164491][ T8449] xt_hashlimit: max too large, truncated to 1048576
[  132.196924][ T5857] bridge_slave_1: left allmulticast mode
[  132.198830][ T5857] bridge_slave_1: left promiscuous mode
[  132.200803][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.209539][ T5857] bridge_slave_0: left allmulticast mode
[  132.211496][ T5857] bridge_slave_0: left promiscuous mode
[  132.215987][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.428389][ T5857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  132.432565][ T5857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.437142][ T5857] bond0 (unregistering): Released all slaves
[  132.625680][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.627909][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  132.840226][ T5857] hsr_slave_0: left promiscuous mode
[  132.855914][ T5857] hsr_slave_1: left promiscuous mode
[  132.860955][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.865021][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.875761][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.878168][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.888527][ T5857] veth1_macvtap: left promiscuous mode
[  132.890512][ T5857] veth0_macvtap: left promiscuous mode
[  132.892467][ T5857] veth1_vlan: left promiscuous mode
[  132.894464][ T5857] veth0_vlan: left promiscuous mode
[  133.257116][ T5857] team0 (unregistering): Port device team_slave_1 removed
[  133.289501][ T5857] team0 (unregistering): Port device team_slave_0 removed
[  133.425666][   T54] Bluetooth: hci1: command tx timeout
[  133.701410][ T8404] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  133.719250][ T8404] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  133.729650][ T8404] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  133.737944][ T8404] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  133.810666][ T8486] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  133.867051][ T8404] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.878564][ T8404] 8021q: adding VLAN 0 to HW filter on device team0
[  133.887178][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.889870][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.901892][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.904453][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.010007][ T8404] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.058349][ T8404] veth0_vlan: entered promiscuous mode
[  134.068337][ T8404] veth1_vlan: entered promiscuous mode
[  134.087894][ T8404] veth0_macvtap: entered promiscuous mode
[  134.092644][ T8404] veth1_macvtap: entered promiscuous mode
[  134.109806][ T8404] batman_adv: batadv0: Interface activated: batadv_slave_0
[  134.119081][ T8495] xt_hashlimit: size too large, truncated to 1048576
[  134.119866][ T8404] batman_adv: batadv0: Interface activated: batadv_slave_1
[  134.122157][ T8488] xt_hashlimit: size too large, truncated to 1048576
[  134.137802][ T8404] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.140736][ T8404] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.144503][ T8404] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.150017][ T8404] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.284340][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.286946][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.307809][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.310473][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.481288][ T8516] netlink: 27 bytes leftover after parsing attributes in process `syz.1.749'.
[  134.538795][ T8518] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.542720][ T8518] syzkaller0: MTU too low for tipc bearer
[  134.548370][ T8518] tipc: Disabling bearer <eth:syzkaller0>
[  135.197629][ T8526] bridge2: entered promiscuous mode
[  135.199933][ T8526] bridge2: entered allmulticast mode
[  135.206495][ T8526] team0: Port device bridge2 added
[  135.216384][ T8526] syz1: rxe_newlink: already configured on macvlan1
[  135.398651][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.755'.
[  135.401771][ T8531] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.404985][ T8531] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.408554][ T8531] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.411042][ T8531] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.140026][ T7793] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.006561][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'.
[  137.149818][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  137.153172][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  137.157677][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  137.162475][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  137.166233][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  137.294554][ T8555] lo speed is unknown, defaulting to 1000
[  137.515213][ T8555] chnl_net:caif_netlink_parms(): no params data found
[  137.595694][ T8555] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.598157][ T8555] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.600736][ T8555] bridge_slave_0: entered allmulticast mode
[  137.603608][ T8555] bridge_slave_0: entered promiscuous mode
[  137.608241][ T8555] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.611089][ T8555] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.613996][ T8555] bridge_slave_1: entered allmulticast mode
[  137.616934][ T8555] bridge_slave_1: entered promiscuous mode
[  137.638370][ T8555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  137.643438][ T8555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  137.672386][ T8555] team0: Port device team_slave_0 added
[  137.678514][ T8555] team0: Port device team_slave_1 added
[  137.697391][ T8555] batman_adv: batadv0: Adding interface: batadv_slave_0
[  137.699703][ T8555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.710402][ T8555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  137.716233][ T8555] batman_adv: batadv0: Adding interface: batadv_slave_1
[  137.719062][ T8555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.730584][ T8555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  137.758163][ T8555] hsr_slave_0: entered promiscuous mode
[  137.760427][ T8555] hsr_slave_1: entered promiscuous mode
[  137.762578][ T8555] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  137.765127][ T8555] Cannot create hsr debugfs directory
[  137.881174][ T7793] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.942206][ T7793] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.012266][ T7793] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.021179][ T8575] netlink: 40 bytes leftover after parsing attributes in process `syz.0.763'.
[  138.026560][ T8574] bridge4: entered promiscuous mode
[  138.028350][ T8574] bridge4: entered allmulticast mode
[  138.035518][ T8574] team0: Port device bridge4 added
[  138.043021][ T8574] rdma_rxe: rxe_newlink: failed to add macvlan1
[  138.080614][ T7793] bridge_slave_1: left allmulticast mode
[  138.082662][ T7793] bridge_slave_1: left promiscuous mode
[  138.085982][ T7793] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.089894][ T7793] bridge_slave_0: left allmulticast mode
[  138.091729][ T7793] bridge_slave_0: left promiscuous mode
[  138.094167][ T7793] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.298065][ T7793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.302606][ T7793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.307162][ T7793] bond0 (unregistering): Released all slaves
[  138.726623][ T7793] hsr_slave_0: left promiscuous mode
[  138.729033][ T7793] hsr_slave_1: left promiscuous mode
[  138.731215][ T7793] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.738497][ T7793] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.742138][ T7793] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.745717][ T7793] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.765510][ T7793] veth1_macvtap: left promiscuous mode
[  138.767719][ T7793] veth0_macvtap: left promiscuous mode
[  138.769663][ T7793] veth1_vlan: left promiscuous mode
[  138.771482][ T7793] veth0_vlan: left promiscuous mode
[  139.121368][ T7793] team0 (unregistering): Port device team_slave_1 removed
[  139.147325][ T7793] team0 (unregistering): Port device team_slave_0 removed
[  139.184123][ T5830] Bluetooth: hci1: command tx timeout
[  139.465908][ T8555] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  139.480237][ T8555] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  139.485574][ T8593] netlink: 20 bytes leftover after parsing attributes in process `syz.1.771'.
[  139.525294][ T8555] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  139.538022][ T8593] xt_connbytes: Forcing CT accounting to be enabled
[  139.542854][ T8555] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  139.544195][ T8593] x_tables: ip6_tables: SNPT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING
[  139.654106][ T8555] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.672795][ T8555] 8021q: adding VLAN 0 to HW filter on device team0
[  139.682895][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.685735][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.694806][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.697484][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.810712][ T8555] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.839054][ T8555] veth0_vlan: entered promiscuous mode
[  139.847128][ T8555] veth1_vlan: entered promiscuous mode
[  139.866411][ T8555] veth0_macvtap: entered promiscuous mode
[  139.871097][ T8555] veth1_macvtap: entered promiscuous mode
[  139.885430][ T8555] batman_adv: batadv0: Interface activated: batadv_slave_0
[  139.892066][ T8555] batman_adv: batadv0: Interface activated: batadv_slave_1
[  139.900360][ T8555] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.904182][ T8555] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.907230][ T8555] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.910215][ T8555] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.958859][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.961454][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.977355][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.979943][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.416161][ T8611] nbd: must specify a device to reconfigure
[  140.944571][    C1] bridge0: port 1(gretap0) entered learning state
[  141.406196][ T8631] netlink: 168 bytes leftover after parsing attributes in process `syz.0.779'.
[  141.412693][ T8631] netlink: 28 bytes leftover after parsing attributes in process `syz.0.779'.
[  141.987064][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.950996][ T8644] batadv1: entered allmulticast mode
[  143.075986][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  143.079624][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  143.082746][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  143.086875][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  143.092102][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  143.242764][ T8648] lo speed is unknown, defaulting to 1000
[  143.486761][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.517432][ T8648] chnl_net:caif_netlink_parms(): no params data found
[  143.561800][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.640463][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.651011][ T8648] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.655312][ T8648] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.657671][ T8648] bridge_slave_0: entered allmulticast mode
[  143.660515][ T8648] bridge_slave_0: entered promiscuous mode
[  143.665974][ T8648] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.668273][ T8648] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.670800][ T8648] bridge_slave_1: entered allmulticast mode
[  143.674747][ T8648] bridge_slave_1: entered promiscuous mode
[  143.715454][ T8648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  143.723211][ T8648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  143.819480][ T8648] team0: Port device team_slave_0 added
[  143.823983][   T12] bridge_slave_1: left allmulticast mode
[  143.826315][   T12] bridge_slave_1: left promiscuous mode
[  143.829334][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.840728][   T12] bridge_slave_0: left allmulticast mode
[  143.843066][   T12] bridge_slave_0: left promiscuous mode
[  143.847175][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.143024][ T8674] netlink: 'syz.0.788': attribute type 1 has an invalid length.
[  144.148205][ T8674] netlink: 172 bytes leftover after parsing attributes in process `syz.0.788'.
[  144.246563][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  144.251322][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.255583][   T12] bond0 (unregistering): Released all slaves
[  144.268023][ T8648] team0: Port device team_slave_1 added
[  144.338660][ T8648] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.341595][ T8648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.355989][ T8648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.361229][ T8648] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.365500][ T8648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.375589][ T8648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.431520][ T8648] hsr_slave_0: entered promiscuous mode
[  144.438146][ T8648] hsr_slave_1: entered promiscuous mode
[  144.440552][ T8648] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  144.443018][ T8648] Cannot create hsr debugfs directory
[  144.575280][ T8683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.793'.
[  144.624294][ T8683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.793'.
[  144.715029][   T13] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  144.725437][   T13] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  144.729238][   T13] bond0: now running without any active interface!
[  144.734367][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.794'.
[  144.758924][ T8686] hsr0 (unregistering): left allmulticast mode
[  144.835092][   T12] hsr_slave_0: left promiscuous mode
[  144.837459][   T12] hsr_slave_1: left promiscuous mode
[  144.839527][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.841892][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.853503][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.855914][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.865044][   T12] veth1_macvtap: left promiscuous mode
[  144.866918][   T12] veth0_macvtap: left promiscuous mode
[  144.868784][   T12] veth1_vlan: left promiscuous mode
[  144.870564][   T12] veth0_vlan: left promiscuous mode
[  145.172015][   T12] team0 (unregistering): Port device team_slave_1 removed
[  145.185352][   T54] Bluetooth: hci1: command tx timeout
[  145.200806][   T12] team0 (unregistering): Port device team_slave_0 removed
[  145.526246][ T8698] Cannot find del_set index 1 as target
[  145.665889][ T8648] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  145.670169][ T8648] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  145.682108][ T8648] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  145.690606][ T8648] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  145.751472][ T8648] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.765556][ T8648] 8021q: adding VLAN 0 to HW filter on device team0
[  145.772387][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.775095][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.782297][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.784723][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.904177][ T8648] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.934417][ T8648] veth0_vlan: entered promiscuous mode
[  145.939726][ T8648] veth1_vlan: entered promiscuous mode
[  145.965143][ T8648] veth0_macvtap: entered promiscuous mode
[  145.971884][ T8648] veth1_macvtap: entered promiscuous mode
[  145.985116][ T8648] batman_adv: batadv0: Interface activated: batadv_slave_0
[  145.992182][ T8648] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.999519][ T8648] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.002707][ T8648] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.007201][ T8648] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.010007][ T8648] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.055933][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.061532][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.082051][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.085888][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.542222][ T8728] bridge3: entered promiscuous mode
[  146.546213][ T8728] bridge3: entered allmulticast mode
[  146.551268][ T8728] team0: Port device bridge3 added
[  146.559550][ T8728] syz1: rxe_newlink: already configured on macvlan1
[  147.764434][ T8760] tipc: New replicast peer: 0.0.0.0
[  147.767849][ T8760] tipc: Enabled bearer <udp:syz2>, priority 10
[  147.770586][ T8760] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  148.064265][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.120570][ T8772] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  149.123172][ T8772] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  149.131129][ T8772] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  149.162575][ T8770] netlink: 'syz.1.814': attribute type 1 has an invalid length.
[  149.208512][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  149.212225][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  149.215847][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  149.217829][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'.
[  149.221518][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'.
[  149.228023][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  149.231188][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  149.333555][ T8775] lo speed is unknown, defaulting to 1000
[  149.485996][ T8775] chnl_net:caif_netlink_parms(): no params data found
[  149.533078][ T8775] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.536234][ T8775] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.539131][ T8775] bridge_slave_0: entered allmulticast mode
[  149.542453][ T8775] bridge_slave_0: entered promiscuous mode
[  149.548782][ T8775] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.551825][ T8775] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.555240][ T8775] bridge_slave_1: entered allmulticast mode
[  149.558566][ T8775] bridge_slave_1: entered promiscuous mode
[  149.579410][ T8775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.584911][ T8775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.605848][ T8775] team0: Port device team_slave_0 added
[  149.610289][ T8775] team0: Port device team_slave_1 added
[  149.627941][ T8775] batman_adv: batadv0: Adding interface: batadv_slave_0
[  149.630324][ T8775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.639540][ T8775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  149.644559][ T8775] batman_adv: batadv0: Adding interface: batadv_slave_1
[  149.647202][ T8775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.656530][ T8775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  149.686101][ T8775] hsr_slave_0: entered promiscuous mode
[  149.688520][ T8775] hsr_slave_1: entered promiscuous mode
[  149.690796][ T8775] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  149.693785][ T8775] Cannot create hsr debugfs directory
[  149.806302][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.871256][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.942450][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.036048][   T13] bridge_slave_1: left allmulticast mode
[  150.037880][   T13] bridge_slave_1: left promiscuous mode
[  150.039869][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.045238][ T8791] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5
[  150.052312][   T13] bridge_slave_0: left allmulticast mode
[  150.056447][   T13] bridge_slave_0: left promiscuous mode
[  150.059031][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.075831][ T8794] netlink: 'syz.1.819': attribute type 4 has an invalid length.
[  150.079064][ T8794] netlink: 17 bytes leftover after parsing attributes in process `syz.1.819'.
[  150.276206][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  150.281309][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  150.285544][   T13] bond0 (unregistering): Released all slaves
[  150.294689][ T8791] !: renamed from dummy0 (while UP)
[  150.768920][   T13] hsr_slave_0: left promiscuous mode
[  150.772157][   T13] hsr_slave_1: left promiscuous mode
[  150.793959][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.796421][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.799377][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.801831][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.817395][   T13] veth1_macvtap: left promiscuous mode
[  150.819266][   T13] veth0_macvtap: left promiscuous mode
[  150.821144][   T13] veth1_vlan: left promiscuous mode
[  150.822925][   T13] veth0_vlan: left promiscuous mode
[  150.919422][ T8826] raw_sendmsg: syz.0.826 forgot to set AF_INET. Fix it!
[  151.096160][   T13] team0 (unregistering): Port device team_slave_1 removed
[  151.116990][   T13] team0 (unregistering): Port device team_slave_0 removed
[  151.273423][ T5830] Bluetooth: hci1: command tx timeout
[  151.371377][ T8775] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  151.378366][ T8775] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  151.382541][ T8775] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  151.396758][ T8775] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  151.476080][ T8775] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.494152][ T8775] 8021q: adding VLAN 0 to HW filter on device team0
[  151.503195][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.505731][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.528416][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.530895][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.692681][ T8775] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.725380][ T8775] veth0_vlan: entered promiscuous mode
[  151.730318][ T8775] veth1_vlan: entered promiscuous mode
[  151.759699][ T8775] veth0_macvtap: entered promiscuous mode
[  151.765351][ T8775] veth1_macvtap: entered promiscuous mode
[  151.775185][ T8775] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.783235][ T8775] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.790645][ T8775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.795322][ T8775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.799326][ T8775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.802460][ T8775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.869811][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.878144][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.890106][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.893012][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.957897][ T8793] ==================================================================
[  151.960680][ T8793] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80
[  151.963119][ T8793] Read of size 8 at addr ffff88801d6880a0 by task khidpd_15c25886/8793
[  151.966779][ T8793] 
[  151.967682][ T8793] CPU: 1 UID: 0 PID: 8793 Comm: khidpd_15c25886 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  151.967692][ T8793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  151.967696][ T8793] Call Trace:
[  151.967700][ T8793]  <TASK>
[  151.967704][ T8793]  dump_stack_lvl+0x189/0x250
[  151.967714][ T8793]  ? __virt_addr_valid+0x1c8/0x5c0
[  151.967724][ T8793]  ? rcu_is_watching+0x15/0xb0
[  151.967732][ T8793]  ? __kasan_check_byte+0x12/0x40
[  151.967741][ T8793]  ? __pfx_dump_stack_lvl+0x10/0x10
[  151.967749][ T8793]  ? rcu_is_watching+0x15/0xb0
[  151.967757][ T8793]  ? lock_release+0x4b/0x3e0
[  151.967764][ T8793]  ? __virt_addr_valid+0x1c8/0x5c0
[  151.967773][ T8793]  ? __virt_addr_valid+0x4a5/0x5c0
[  151.967781][ T8793]  print_report+0xd2/0x2b0
[  151.967788][ T8793]  ? __mutex_lock+0x738/0xe80
[  151.967795][ T8793]  kasan_report+0x118/0x150
[  151.967804][ T8793]  ? __mutex_lock+0x738/0xe80
[  151.967812][ T8793]  __mutex_lock+0x738/0xe80
[  151.967819][ T8793]  ? __mutex_lock+0x51b/0xe80
[  151.967826][ T8793]  ? l2cap_unregister_user+0x6a/0x1b0
[  151.967833][ T8793]  ? __pfx___mutex_lock+0x10/0x10
[  151.967842][ T8793]  ? __pfx___timer_delete_sync+0x10/0x10
[  151.967853][ T8793]  l2cap_unregister_user+0x6a/0x1b0
[  151.967860][ T8793]  hidp_session_thread+0x3c9/0x410
[  151.967868][ T8793]  ? __pfx_hidp_session_thread+0x10/0x10
[  151.967874][ T8793]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  151.967884][ T8793]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  151.967892][ T8793]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  151.967899][ T8793]  ? __kthread_parkme+0x7b/0x200
[  151.967907][ T8793]  ? __kthread_parkme+0x1a1/0x200
[  151.967916][ T8793]  kthread+0x711/0x8a0
[  151.967926][ T8793]  ? __pfx_hidp_session_thread+0x10/0x10
[  151.967932][ T8793]  ? __pfx_kthread+0x10/0x10
[  151.967942][ T8793]  ? _raw_spin_unlock_irq+0x23/0x50
[  151.967951][ T8793]  ? lockdep_hardirqs_on+0x9c/0x150
[  151.967957][ T8793]  ? __pfx_kthread+0x10/0x10
[  151.967966][ T8793]  ret_from_fork+0x3fc/0x770
[  151.967974][ T8793]  ? __pfx_ret_from_fork+0x10/0x10
[  151.967982][ T8793]  ? __switch_to_asm+0x39/0x70
[  151.967990][ T8793]  ? __switch_to_asm+0x33/0x70
[  151.967998][ T8793]  ? __pfx_kthread+0x10/0x10
[  151.968007][ T8793]  ret_from_fork_asm+0x1a/0x30
[  151.968019][ T8793]  </TASK>
[  151.968021][ T8793] 
[  152.043266][ T8793] Allocated by task 8775:
[  152.044755][ T8793]  kasan_save_track+0x3e/0x80
[  152.046292][ T8793]  __kasan_kmalloc+0x93/0xb0
[  152.047819][ T8793]  __kmalloc_noprof+0x27a/0x4f0
[  152.049440][ T8793]  hci_alloc_dev_priv+0x28/0x2040
[  152.051098][ T8793]  vhci_create_device+0x120/0x6e0
[  152.052735][ T8793]  vhci_write+0x3ce/0x4a0
[  152.054093][ T8793]  vfs_write+0x54b/0xa90
[  152.055456][ T8793]  ksys_write+0x145/0x250
[  152.056838][ T8793]  do_syscall_64+0xfa/0x3b0
[  152.058291][ T8793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.060192][ T8793] 
[  152.060975][ T8793] Freed by task 8775:
[  152.062221][ T8793]  kasan_save_track+0x3e/0x80
[  152.063777][ T8793]  kasan_save_free_info+0x46/0x50
[  152.065375][ T8793]  __kasan_slab_free+0x62/0x70
[  152.066915][ T8793]  kfree+0x18e/0x440
[  152.068155][ T8793]  bt_host_release+0x82/0x90
[  152.069696][ T8793]  device_release+0x9c/0x1c0
[  152.071198][ T8793]  kobject_put+0x22b/0x480
[  152.072688][ T8793]  vhci_release+0x88/0xd0
[  152.074130][ T8793]  __fput+0x44c/0xa70
[  152.075458][ T8793]  task_work_run+0x1d4/0x260
[  152.076996][ T8793]  do_exit+0x6b5/0x22e0
[  152.078371][ T8793]  do_group_exit+0x21c/0x2d0
[  152.079879][ T8793]  __x64_sys_exit_group+0x3f/0x40
[  152.081521][ T8793]  x64_sys_call+0x21ba/0x21c0
[  152.083014][ T8793]  do_syscall_64+0xfa/0x3b0
[  152.084534][ T8793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.086467][ T8793] 
[  152.087279][ T8793] Last potentially related work creation:
[  152.089146][ T8793]  kasan_save_stack+0x3e/0x60
[  152.090674][ T8793]  kasan_record_aux_stack+0xbd/0xd0
[  152.092490][ T8793]  insert_work+0x3d/0x330
[  152.094033][ T8793]  __queue_work+0xbd9/0xfe0
[  152.095532][ T8793]  queue_work_on+0x181/0x270
[  152.097057][ T8793]  process_scheduled_works+0xae1/0x17b0
[  152.098859][ T8793]  worker_thread+0x8a0/0xda0
[  152.100328][ T8793]  kthread+0x711/0x8a0
[  152.101677][ T8793]  ret_from_fork+0x3fc/0x770
[  152.103194][ T8793]  ret_from_fork_asm+0x1a/0x30
[  152.104832][ T8793] 
[  152.105643][ T8793] Second to last potentially related work creation:
[  152.107776][ T8793]  kasan_save_stack+0x3e/0x60
[  152.109337][ T8793]  kasan_record_aux_stack+0xbd/0xd0
[  152.111047][ T8793]  insert_work+0x3d/0x330
[  152.112468][ T8793]  __queue_work+0xcfc/0xfe0
[  152.113992][ T8793]  call_timer_fn+0x17e/0x5f0
[  152.115532][ T8793]  __run_timer_base+0x646/0x860
[  152.117329][ T8793]  run_timer_softirq+0xb7/0x180
[  152.118949][ T8793]  handle_softirqs+0x286/0x870
[  152.120527][ T8793]  __irq_exit_rcu+0xca/0x1f0
[  152.122055][ T8793]  irq_exit_rcu+0x9/0x30
[  152.123463][ T8793]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  152.125583][ T8793]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  152.127533][ T8793] 
[  152.128338][ T8793] The buggy address belongs to the object at ffff88801d688000
[  152.128338][ T8793]  which belongs to the cache kmalloc-8k of size 8192
[  152.132670][ T8793] The buggy address is located 160 bytes inside of
[  152.132670][ T8793]  freed 8192-byte region [ffff88801d688000, ffff88801d68a000)
[  152.137095][ T8793] 
[  152.137890][ T8793] The buggy address belongs to the physical page:
[  152.140054][ T8793] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1d688
[  152.142863][ T8793] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  152.145625][ T8793] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  152.148059][ T8793] page_type: f5(slab)
[  152.149395][ T8793] raw: 00fff00000000040 ffff88801a442280 ffffea0000f77c00 dead000000000004
[  152.152168][ T8793] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  152.154996][ T8793] head: 00fff00000000040 ffff88801a442280 ffffea0000f77c00 dead000000000004
[  152.157800][ T8793] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  152.160602][ T8793] head: 00fff00000000003 ffffea000075a201 00000000ffffffff 00000000ffffffff
[  152.163381][ T8793] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  152.166172][ T8793] page dumped because: kasan: bad access detected
[  152.168249][ T8793] page_owner tracks the page as allocated
[  152.170116][ T8793] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5575, tgid 5575 (dhcpcd), ts 32404724582, free_ts 30541906106
[  152.176773][ T8793]  post_alloc_hook+0x240/0x2a0
[  152.178342][ T8793]  get_page_from_freelist+0x21e4/0x22c0
[  152.180161][ T8793]  __alloc_frozen_pages_noprof+0x181/0x370
[  152.181995][ T8793]  alloc_pages_mpol+0x232/0x4a0
[  152.183548][ T8793]  allocate_slab+0x8a/0x3b0
[  152.185016][ T8793]  ___slab_alloc+0xbfc/0x1480
[  152.186522][ T8793]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[  152.188579][ T8793]  kmalloc_reserve+0x136/0x290
[  152.190059][ T8793]  __alloc_skb+0x142/0x2d0
[  152.191530][ T8793]  nl80211_get_wiphy+0x77/0x210
[  152.193142][ T8793]  genl_family_rcv_msg_doit+0x215/0x300
[  152.195175][ T8793]  genl_rcv_msg+0x60e/0x790
[  152.196688][ T8793]  netlink_rcv_skb+0x208/0x470
[  152.198179][ T8793]  genl_rcv+0x28/0x40
[  152.199441][ T8793]  netlink_unicast+0x75b/0x8d0
[  152.200976][ T8793]  netlink_sendmsg+0x805/0xb30
[  152.202573][ T8793] page last free pid 5279 tgid 5279 stack trace:
[  152.204602][ T8793]  __free_frozen_pages+0xc71/0xe70
[  152.206209][ T8793]  __put_partials+0x161/0x1c0
[  152.207724][ T8793]  put_cpu_partial+0x17c/0x250
[  152.209269][ T8793]  __slab_free+0x2f7/0x400
[  152.210697][ T8793]  qlist_free_all+0x97/0x140
[  152.212213][ T8793]  kasan_quarantine_reduce+0x148/0x160
[  152.214145][ T8793]  __kasan_slab_alloc+0x22/0x80
[  152.215737][ T8793]  __kmalloc_cache_noprof+0x1be/0x3d0
[  152.217483][ T8793]  kernfs_fop_open+0x397/0xca0
[  152.219217][ T8793]  do_dentry_open+0xdf3/0x1970
[  152.220849][ T8793]  vfs_open+0x3b/0x340
[  152.222193][ T8793]  path_openat+0x2ee5/0x3830
[  152.223787][ T8793]  do_filp_open+0x1fa/0x410
[  152.225307][ T8793]  do_sys_openat2+0x121/0x1c0
[  152.226861][ T8793]  __x64_sys_openat+0x138/0x170
[  152.228447][ T8793]  do_syscall_64+0xfa/0x3b0
[  152.229956][ T8793] 
[  152.230748][ T8793] Memory state around the buggy address:
[  152.232586][ T8793]  ffff88801d687f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  152.235586][ T8793]  ffff88801d688000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  152.238231][ T8793] >ffff88801d688080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  152.240831][ T8793]                                ^
[  152.242495][ T8793]  ffff88801d688100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  152.245126][ T8793]  ffff88801d688180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  152.247718][ T8793] ==================================================================
[  152.251074][ T8793] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  152.253453][ T8793] CPU: 1 UID: 0 PID: 8793 Comm: khidpd_15c25886 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  152.257964][ T8793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  152.261138][ T8793] Call Trace:
[  152.262326][ T8793]  <TASK>
[  152.263326][ T8793]  dump_stack_lvl+0x99/0x250
[  152.264895][ T8793]  ? __asan_memcpy+0x40/0x70
[  152.266411][ T8793]  ? __pfx_dump_stack_lvl+0x10/0x10
[  152.268122][ T8793]  ? __pfx__printk+0x10/0x10
[  152.269682][ T8793]  panic+0x2db/0x790
[  152.270966][ T8793]  ? __pfx_panic+0x10/0x10
[  152.272426][ T8793]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  152.274716][ T8793]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  152.276771][ T8793]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  152.278771][ T8793]  ? print_memory_metadata+0x314/0x400
[  152.280503][ T8793]  ? __mutex_lock+0x738/0xe80
[  152.282106][ T8793]  check_panic_on_warn+0x89/0xb0
[  152.283749][ T8793]  ? __mutex_lock+0x738/0xe80
[  152.285358][ T8793]  end_report+0x78/0x160
[  152.286786][ T8793]  kasan_report+0x129/0x150
[  152.288313][ T8793]  ? __mutex_lock+0x738/0xe80
[  152.289897][ T8793]  __mutex_lock+0x738/0xe80
[  152.291406][ T8793]  ? __mutex_lock+0x51b/0xe80
[  152.292981][ T8793]  ? l2cap_unregister_user+0x6a/0x1b0
[  152.295035][ T8793]  ? __pfx___mutex_lock+0x10/0x10
[  152.296794][ T8793]  ? __pfx___timer_delete_sync+0x10/0x10
[  152.298640][ T8793]  l2cap_unregister_user+0x6a/0x1b0
[  152.300352][ T8793]  hidp_session_thread+0x3c9/0x410
[  152.302056][ T8793]  ? __pfx_hidp_session_thread+0x10/0x10
[  152.303914][ T8793]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  152.306129][ T8793]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  152.308157][ T8793]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  152.310227][ T8793]  ? __kthread_parkme+0x7b/0x200
[  152.311852][ T8793]  ? __kthread_parkme+0x1a1/0x200
[  152.313502][ T8793]  kthread+0x711/0x8a0
[  152.315174][ T8793]  ? __pfx_hidp_session_thread+0x10/0x10
[  152.317085][ T8793]  ? __pfx_kthread+0x10/0x10
[  152.318626][ T8793]  ? _raw_spin_unlock_irq+0x23/0x50
[  152.320332][ T8793]  ? lockdep_hardirqs_on+0x9c/0x150
[  152.322308][ T8793]  ? __pfx_kthread+0x10/0x10
[  152.323848][ T8793]  ret_from_fork+0x3fc/0x770
[  152.325394][ T8793]  ? __pfx_ret_from_fork+0x10/0x10
[  152.327074][ T8793]  ? __switch_to_asm+0x39/0x70
[  152.328663][ T8793]  ? __switch_to_asm+0x33/0x70
[  152.330239][ T8793]  ? __pfx_kthread+0x10/0x10
[  152.331792][ T8793]  ret_from_fork_asm+0x1a/0x30
[  152.333322][ T8793]  </TASK>
[  152.335179][ T8793] Kernel Offset: disabled
[  152.336672][ T8793] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:27:53  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000007 RBX=0000000000000001 RCX=000000002e9e6a6b RDX=000000002e9e6a6b
RSI=ffff8880203d27d8 RDI=ffff8880203d1cc0 RBP=0000000000000000 RSP=ffffc9000306ed08
R8 =0000000000000000 R9 =ffffffff81729af5 R10=ffffc9000306ef58 R11=ffffffff81acf6a0
R12=0000000000004007 R13=ffff8880203d27b0 R14=ffff8880203d27d8 R15=2e9e6a6b919e55df
RIP=ffffffff819e3d88 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f441c9476c0 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000440200 CR3=0000000111054000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000556609e856a8 0000000000000009 XMM01=0000000000000000 0000556613a42460
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002def370
R8 =ffff888108be8237 R9 =1ffff1102117d046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af7915 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f441c946fc8 CR3=0000000111054000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f441bc11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
