last executing test programs:

2m21.940380285s ago: executing program 1 (id=1114):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x4003}]}}}, @IFLA_NUM_TX_QUEUES={0x0, 0x1f, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', r4, 0x4, 0x9, 0x66, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7f90, 0x80, 0x9, 0x8}}) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x1410, 0x20, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000226", @ANYBLOB="00000000000000000004e800000008000317"], 0x1c}}, 0x0) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r6, &(0x7f0000000740)='|', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) (async)
shutdown(r6, 0x1) (async)
setsockopt(r6, 0x84, 0x80, &(0x7f0000000080)="1a4f30d089f5bd5b", 0x8) (async, rerun: 64)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @empty}}}, 0x84) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b28, &(0x7f0000000000)={'wlan0\x00'}) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)

2m21.888946159s ago: executing program 1 (id=1115):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140)={@private1, <r3=>0x0}, &(0x7f0000000180)=0x14) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'gre0\x00', <r4=>0x0, 0x80, 0x7, 0x8, 0x8, {{0x9, 0x4, 0x2, 0x2d, 0x24, 0x66, 0x0, 0xad, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@rr={0x7, 0xf, 0xb9, [@private=0xa010101, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop]}}}}})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa8, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfc}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1f}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000040)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x10, 0x6, 0x7, 0x1, 0x8, r5, 0x0, '\x00', r3, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000500)={<r7=>0x0, 0xc306, 0x3, [0xfff, 0x401, 0x5]}, &(0x7f0000000540)=0xe)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000580)={0x9, 0x8009, 0x0, 0x6, r7}, 0x10)
connect$inet6(r6, &(0x7f00000005c0)={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) (async)
r8 = socket$inet_sctp(0x2, 0x4, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000600)={<r9=>r7, 0x80000000}, &(0x7f0000000640)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000680)={r9, 0x5e77, 0x30}, &(0x7f00000006c0)=0xc) (async)
setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000700)={0x9, {{0xa, 0x4e24, 0x9, @mcast1, 0x2}}, 0x0, 0x2, [{{0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7ff}}, {{0xa, 0x4e24, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0xf}, 0x9}}]}, 0x190) (async)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_type(r10, &(0x7f0000000900), 0x2, 0x0) (async)
getsockopt$inet_int(r8, 0x0, 0x17, &(0x7f0000000940), &(0x7f0000000980)=0x4) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000009c0)={'hsr0\x00'}) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r0) (async)
r11 = openat$cgroup(r10, &(0x7f0000000a40)='syz1\x00', 0x200002, 0x0)
ioctl$FS_IOC_GETFSLABEL(r11, 0x81009431, &(0x7f0000000a80)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b80)) (async)
r12 = openat$cgroup_freezer_state(r11, &(0x7f0000000bc0), 0x2, 0x0)
write$cgroup_freezer_state(r12, &(0x7f0000000c00)='FREEZING\x00', 0x9) (async, rerun: 32)
bpf$LINK_DETACH(0x22, &(0x7f0000000c40)=r5, 0x4) (async, rerun: 32)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000c80)=0x10000, 0x4) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000cc0), r0)
socket$inet_smc(0x2b, 0x1, 0x0)

2m21.800501169s ago: executing program 1 (id=1117):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000006800010000000000000000000a000000000000000600070008000000100008800c00010065580a000000000008000500", @ANYRES32=r1], 0x38}}, 0x0)

2m21.748645399s ago: executing program 1 (id=1119):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x17, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}, 0x0, 0x0, 0x4d, 0x0, "e8eb94e33628290046228c8db144b8974951c8357aa975414eacd02afb6c0bd70e1d2b12f90e4aed00ac34713c534c814626d9fafd1e198c36aa24ecc1595e19bf9ebf5e34227a0655e74e27e1c35eea"}, 0xd8)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r6, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x10001, 0x9, 0x8000, 0x2, 0xffffff01, 0x8, 0x3, 0x80000001}})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_emit_ethernet(0xd6, &(0x7f0000000100)={@local, @local, @val={@void}, {@generic={0x86dd, "1b50071b5cfc9e117008c2f7e1106ddeb82b68a95106d54961ab06c9804447c733dcb43743c69008ec159164305b2cb68f83f17291e018b942947117b6f854d8bf8e4156cd43d3a709808e4b9a9d95512076a8d759554d8cd5479a3cb8ea597a91f74c11aa61c0d7351fc37ad1c2fe871757b11416b1e72137ad3730eedc3d450e3347ef75537b33b50aa797f814dbcdc846359b9436743ce343f9ce4813bcd1367358c02cc7362d46104a8aaacf24ad08a4a1a3f33c5f9bfad081e2b5b6d652aafa735b"}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00'}, 0x18)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
listen(r3, 0x0)
syz_extract_tcp_res$synack(&(0x7f00000011c0)={0x41424344, <r7=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000001200)=ANY=[@ANYBLOB="aaaaaaaaaaaaff0d0000000087dd600a8435002c060100000000000003000000000000000001fe80000000000000000000fc4e220000", @ANYRES32=r7, @ANYRES32=0x41424344, @ANYBLOB="b0020000907800001e0dd0080a010102ffff97172801080a00000009fffff779"], 0x0)
syz_emit_ethernet(0x282, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0)

2m21.689256497s ago: executing program 1 (id=1120):
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x4, @loopback}, 0x1c)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="b400000000000000791090000000000063000000000000009500000000000000cb5239a01b5b902367fd5ec1a64e367acb74c7e00c2f2bd72b3a0be2ea96caa37fb3469e8505342e47fc8929a6a015"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="fd", 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="fd", 0x0}, 0x50)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async)
sendmmsg$inet(r3, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) (async)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000))
bind$bt_l2cap(r1, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe)
listen(r1, 0xffffffff)
sendto$inet6(r0, 0x0, 0xffffffac, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000042000b2023ad7000fedbdf250500000008000200050000ad"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) (async)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000042000b2023ad7000fedbdf250500000008000200050000ad"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4)
sendmmsg$inet6(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="a132", 0x2}], 0x1}}], 0x1, 0x1) (async)
sendmmsg$inet6(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="a132", 0x2}], 0x1}}], 0x1, 0x1)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/209, 0xd1, 0x0, &(0x7f0000000240)=""/17, 0x11}, &(0x7f00000002c0)=0x40)

2m21.599885314s ago: executing program 1 (id=1121):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x0, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async)
setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000000)=[{0x3, 0x3, {0x0, 0x0, 0x4}, {0x1}, 0xfe, 0x1}, {0x0, 0x1, {0x2, 0x1}, {0x1, 0x0, 0x7}, 0xfd, 0x1}], 0x40) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f00000003c0)="975c49a232", &(0x7f0000001140)=""/4070, &(0x7f0000000080)="0d60d7cfe61cba3de90eccebf4", &(0x7f00000005c0)="be60bc6aa7ba3aae95a5346de3b847daf2e0e6dc81b22602ab2c20836371a54679a95e00008426e78d9bdba00438909fcb40f01035bbc40ad09ecbf94abc4c72e3c870eeb799cc35e402741878611d331d9e6cc24b00fda269d9377db38eb569313b056028e3644ad3b3c62d6f66fa286c320a74610bf2ad2348e22000"/138, 0x6b, r5, 0x4}, 0x38)
listen(r4, 0x0) (async)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000140), 0x4) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000e3fffffb00000001000000280001801400040000000000000000800000ffffac1414aa060001000a00800008000600035d1be34d2c0c3e7b535d9e1773a79a1d52cca871e22e7255cfb7d0c4435ffdc8e82f8e81951210dc9662c86dfc9761c33357fb106a09e69da3d74e7d17e95b89c4e28bb092ffeb48ff5aa1452f48ac9dcb3632476a7d1d3eb08ffe93dde6b6f3690b54ae57095725ee14c5d748daf8566b65fe43da912017ab5118e36328917648bf6d431bfbd14de996a830b597c3d421afa7c0e3106b4179efd5310aa3c9b248e2fe855931231b373cbc8c69f09de4b6"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000050) (async)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async)
r9 = accept(0xffffffffffffffff, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
sendmsg$AUDIT_USER_AVC(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) (async)
recvfrom(r6, 0x0, 0x0, 0x10000, 0x0, 0x0)

2m5.915817214s ago: executing program 32 (id=1121):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x0, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async)
setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000000)=[{0x3, 0x3, {0x0, 0x0, 0x4}, {0x1}, 0xfe, 0x1}, {0x0, 0x1, {0x2, 0x1}, {0x1, 0x0, 0x7}, 0xfd, 0x1}], 0x40) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f00000003c0)="975c49a232", &(0x7f0000001140)=""/4070, &(0x7f0000000080)="0d60d7cfe61cba3de90eccebf4", &(0x7f00000005c0)="be60bc6aa7ba3aae95a5346de3b847daf2e0e6dc81b22602ab2c20836371a54679a95e00008426e78d9bdba00438909fcb40f01035bbc40ad09ecbf94abc4c72e3c870eeb799cc35e402741878611d331d9e6cc24b00fda269d9377db38eb569313b056028e3644ad3b3c62d6f66fa286c320a74610bf2ad2348e22000"/138, 0x6b, r5, 0x4}, 0x38)
listen(r4, 0x0) (async)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000140), 0x4) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000e3fffffb00000001000000280001801400040000000000000000800000ffffac1414aa060001000a00800008000600035d1be34d2c0c3e7b535d9e1773a79a1d52cca871e22e7255cfb7d0c4435ffdc8e82f8e81951210dc9662c86dfc9761c33357fb106a09e69da3d74e7d17e95b89c4e28bb092ffeb48ff5aa1452f48ac9dcb3632476a7d1d3eb08ffe93dde6b6f3690b54ae57095725ee14c5d748daf8566b65fe43da912017ab5118e36328917648bf6d431bfbd14de996a830b597c3d421afa7c0e3106b4179efd5310aa3c9b248e2fe855931231b373cbc8c69f09de4b6"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000050) (async)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async)
r9 = accept(0xffffffffffffffff, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
sendmsg$AUDIT_USER_AVC(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) (async)
recvfrom(r6, 0x0, 0x0, 0x10000, 0x0, 0x0)

1m11.792253142s ago: executing program 0 (id=986):
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0xfcff, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}, @NHA_BLACKHOLE={0x4}]}, 0x2c}}, 0x40)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) (async)
close(r1)
r2 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r3 = socket(0x10, 0x2, 0x0)
getsockopt$netlink(r3, 0x10e, 0xa, 0x0, &(0x7f0000000000)) (async)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000380)={0x3, 0x4, 0x2, 0x400, 0x2, [0x6, 0x200, 0x3, 0xfffffc01]})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c340", 0x8d}], 0x1}], 0x1, 0x40800)
r5 = socket(0x10, 0x3, 0x0) (async, rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
r7 = socket(0x10, 0x803, 0x2) (async)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0218000014000000000000000000000005000600000000000a00000200000000000000000000000000000000000000000000000000000000080012000000000000000000000000003000000000000000000000000000000002000000000000000000000000000000fe80000080000000000000000000000005000500000000000a"], 0xa0}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) (async)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5], 0x3c}}, 0x24008845) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x100, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r9, {0xf, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xb, 0x2, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000000}, 0x50) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0x8}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}}, 0x0)
listen(r4, 0x0) (async)
syz_emit_ethernet(0x220, &(0x7f0000000740)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, 'd!!', 0x1ea, 0xff, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x2a}, {[@srh={0x33, 0xa, 0x4, 0x5, 0x81, 0x0, 0x8, [@private1, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x9}, @private1, @private1]}, @srh={0x4, 0x6, 0x4, 0x3, 0xea, 0x20, 0xf, [@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00']}, @dstopts={0x2, 0x6, '\x00', [@hao={0xc9, 0x10, @private1}, @ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0x8000}, @calipso={0x7, 0x10, {0x2, 0x2, 0x4, 0xf, [0x6]}}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x8}]}, @fragment={0x3c, 0x0, 0x10, 0x1, 0x0, 0x6, 0x64}, @routing={0xff, 0xa, 0x1, 0x8, 0x0, [@private1, @mcast1, @dev={0xfe, 0x80, '\x00', 0x42}, @private0={0xfc, 0x0, '\x00', 0x1}, @local]}, @hopopts={0x76, 0x0, '\x00', [@pad1]}], "e097c551ee5c0f3d03dc06ded4f4b748c3ff1b90c0a09cf2a79f09bad18b27227768e6bad854aa8b5a5ce5189e205d3506688f1cb69edccded72c1b7c5c7de58949904241c5309dac17221798568f99086e8988cde913c66769c8af5107fbc0d5eaacc9bc994421903dd9cd3b948ffd012148c137132cf56442c5da71df569e73165bd82385025b5ea0e54bbc3e31fe0791b0e4c68f2ab45dc5156e1907d848f31c6385442a49dee37f9"}}}}}, 0x0) (async, rerun: 32)
r10 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="c3ff0000008009fe0000626f6e64000000001400028008000f00ff0000000500010006000000"], 0x44}}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000002060500000000000000000007000000140007800800114000000000080012400000ffff0500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a69700053cf33316aee72fd7a8e6cf207ecbc97ec87371e34ea4d52951e0e3ab2aa7dbbe04e150dae1e6ae6b8965da50b762cb266ee8a578a8c96a65363ce9f"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)

1m2.171944255s ago: executing program 0 (id=986):
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0xfcff, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}, @NHA_BLACKHOLE={0x4}]}, 0x2c}}, 0x40)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) (async)
close(r1)
r2 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r3 = socket(0x10, 0x2, 0x0)
getsockopt$netlink(r3, 0x10e, 0xa, 0x0, &(0x7f0000000000)) (async)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000380)={0x3, 0x4, 0x2, 0x400, 0x2, [0x6, 0x200, 0x3, 0xfffffc01]})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c340", 0x8d}], 0x1}], 0x1, 0x40800)
r5 = socket(0x10, 0x3, 0x0) (async, rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
r7 = socket(0x10, 0x803, 0x2) (async)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0218000014000000000000000000000005000600000000000a00000200000000000000000000000000000000000000000000000000000000080012000000000000000000000000003000000000000000000000000000000002000000000000000000000000000000fe80000080000000000000000000000005000500000000000a"], 0xa0}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) (async)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5], 0x3c}}, 0x24008845) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x100, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r9, {0xf, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xb, 0x2, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000000}, 0x50) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0x8}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}}, 0x0)
listen(r4, 0x0) (async)
syz_emit_ethernet(0x220, &(0x7f0000000740)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, 'd!!', 0x1ea, 0xff, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x2a}, {[@srh={0x33, 0xa, 0x4, 0x5, 0x81, 0x0, 0x8, [@private1, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x9}, @private1, @private1]}, @srh={0x4, 0x6, 0x4, 0x3, 0xea, 0x20, 0xf, [@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00']}, @dstopts={0x2, 0x6, '\x00', [@hao={0xc9, 0x10, @private1}, @ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0x8000}, @calipso={0x7, 0x10, {0x2, 0x2, 0x4, 0xf, [0x6]}}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x8}]}, @fragment={0x3c, 0x0, 0x10, 0x1, 0x0, 0x6, 0x64}, @routing={0xff, 0xa, 0x1, 0x8, 0x0, [@private1, @mcast1, @dev={0xfe, 0x80, '\x00', 0x42}, @private0={0xfc, 0x0, '\x00', 0x1}, @local]}, @hopopts={0x76, 0x0, '\x00', [@pad1]}], "e097c551ee5c0f3d03dc06ded4f4b748c3ff1b90c0a09cf2a79f09bad18b27227768e6bad854aa8b5a5ce5189e205d3506688f1cb69edccded72c1b7c5c7de58949904241c5309dac17221798568f99086e8988cde913c66769c8af5107fbc0d5eaacc9bc994421903dd9cd3b948ffd012148c137132cf56442c5da71df569e73165bd82385025b5ea0e54bbc3e31fe0791b0e4c68f2ab45dc5156e1907d848f31c6385442a49dee37f9"}}}}}, 0x0) (async, rerun: 32)
r10 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="c3ff0000008009fe0000626f6e64000000001400028008000f00ff0000000500010006000000"], 0x44}}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000002060500000000000000000007000000140007800800114000000000080012400000ffff0500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a69700053cf33316aee72fd7a8e6cf207ecbc97ec87371e34ea4d52951e0e3ab2aa7dbbe04e150dae1e6ae6b8965da50b762cb266ee8a578a8c96a65363ce9f"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)

48.19008681s ago: executing program 0 (id=986):
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0xfcff, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}, @NHA_BLACKHOLE={0x4}]}, 0x2c}}, 0x40)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) (async)
close(r1)
r2 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r3 = socket(0x10, 0x2, 0x0)
getsockopt$netlink(r3, 0x10e, 0xa, 0x0, &(0x7f0000000000)) (async)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000380)={0x3, 0x4, 0x2, 0x400, 0x2, [0x6, 0x200, 0x3, 0xfffffc01]})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c340", 0x8d}], 0x1}], 0x1, 0x40800)
r5 = socket(0x10, 0x3, 0x0) (async, rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
r7 = socket(0x10, 0x803, 0x2) (async)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0218000014000000000000000000000005000600000000000a00000200000000000000000000000000000000000000000000000000000000080012000000000000000000000000003000000000000000000000000000000002000000000000000000000000000000fe80000080000000000000000000000005000500000000000a"], 0xa0}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) (async)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5], 0x3c}}, 0x24008845) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x100, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r9, {0xf, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xb, 0x2, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000000}, 0x50) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0x8}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}}, 0x0)
listen(r4, 0x0) (async)
syz_emit_ethernet(0x220, &(0x7f0000000740)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, 'd!!', 0x1ea, 0xff, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x2a}, {[@srh={0x33, 0xa, 0x4, 0x5, 0x81, 0x0, 0x8, [@private1, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x9}, @private1, @private1]}, @srh={0x4, 0x6, 0x4, 0x3, 0xea, 0x20, 0xf, [@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00']}, @dstopts={0x2, 0x6, '\x00', [@hao={0xc9, 0x10, @private1}, @ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0x8000}, @calipso={0x7, 0x10, {0x2, 0x2, 0x4, 0xf, [0x6]}}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x8}]}, @fragment={0x3c, 0x0, 0x10, 0x1, 0x0, 0x6, 0x64}, @routing={0xff, 0xa, 0x1, 0x8, 0x0, [@private1, @mcast1, @dev={0xfe, 0x80, '\x00', 0x42}, @private0={0xfc, 0x0, '\x00', 0x1}, @local]}, @hopopts={0x76, 0x0, '\x00', [@pad1]}], "e097c551ee5c0f3d03dc06ded4f4b748c3ff1b90c0a09cf2a79f09bad18b27227768e6bad854aa8b5a5ce5189e205d3506688f1cb69edccded72c1b7c5c7de58949904241c5309dac17221798568f99086e8988cde913c66769c8af5107fbc0d5eaacc9bc994421903dd9cd3b948ffd012148c137132cf56442c5da71df569e73165bd82385025b5ea0e54bbc3e31fe0791b0e4c68f2ab45dc5156e1907d848f31c6385442a49dee37f9"}}}}}, 0x0) (async, rerun: 32)
r10 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="c3ff0000008009fe0000626f6e64000000001400028008000f00ff0000000500010006000000"], 0x44}}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000002060500000000000000000007000000140007800800114000000000080012400000ffff0500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a69700053cf33316aee72fd7a8e6cf207ecbc97ec87371e34ea4d52951e0e3ab2aa7dbbe04e150dae1e6ae6b8965da50b762cb266ee8a578a8c96a65363ce9f"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)

37.797269828s ago: executing program 0 (id=986):
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0xfcff, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}, @NHA_BLACKHOLE={0x4}]}, 0x2c}}, 0x40)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) (async)
close(r1)
r2 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r3 = socket(0x10, 0x2, 0x0)
getsockopt$netlink(r3, 0x10e, 0xa, 0x0, &(0x7f0000000000)) (async)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000380)={0x3, 0x4, 0x2, 0x400, 0x2, [0x6, 0x200, 0x3, 0xfffffc01]})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c340", 0x8d}], 0x1}], 0x1, 0x40800)
r5 = socket(0x10, 0x3, 0x0) (async, rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
r7 = socket(0x10, 0x803, 0x2) (async)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0218000014000000000000000000000005000600000000000a00000200000000000000000000000000000000000000000000000000000000080012000000000000000000000000003000000000000000000000000000000002000000000000000000000000000000fe80000080000000000000000000000005000500000000000a"], 0xa0}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) (async)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5], 0x3c}}, 0x24008845) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x100, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r9, {0xf, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xb, 0x2, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000000}, 0x50) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0x8}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}}, 0x0)
listen(r4, 0x0) (async)
syz_emit_ethernet(0x220, &(0x7f0000000740)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, 'd!!', 0x1ea, 0xff, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x2a}, {[@srh={0x33, 0xa, 0x4, 0x5, 0x81, 0x0, 0x8, [@private1, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x9}, @private1, @private1]}, @srh={0x4, 0x6, 0x4, 0x3, 0xea, 0x20, 0xf, [@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00']}, @dstopts={0x2, 0x6, '\x00', [@hao={0xc9, 0x10, @private1}, @ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0x8000}, @calipso={0x7, 0x10, {0x2, 0x2, 0x4, 0xf, [0x6]}}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x8}]}, @fragment={0x3c, 0x0, 0x10, 0x1, 0x0, 0x6, 0x64}, @routing={0xff, 0xa, 0x1, 0x8, 0x0, [@private1, @mcast1, @dev={0xfe, 0x80, '\x00', 0x42}, @private0={0xfc, 0x0, '\x00', 0x1}, @local]}, @hopopts={0x76, 0x0, '\x00', [@pad1]}], "e097c551ee5c0f3d03dc06ded4f4b748c3ff1b90c0a09cf2a79f09bad18b27227768e6bad854aa8b5a5ce5189e205d3506688f1cb69edccded72c1b7c5c7de58949904241c5309dac17221798568f99086e8988cde913c66769c8af5107fbc0d5eaacc9bc994421903dd9cd3b948ffd012148c137132cf56442c5da71df569e73165bd82385025b5ea0e54bbc3e31fe0791b0e4c68f2ab45dc5156e1907d848f31c6385442a49dee37f9"}}}}}, 0x0) (async, rerun: 32)
r10 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="c3ff0000008009fe0000626f6e64000000001400028008000f00ff0000000500010006000000"], 0x44}}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000002060500000000000000000007000000140007800800114000000000080012400000ffff0500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a69700053cf33316aee72fd7a8e6cf207ecbc97ec87371e34ea4d52951e0e3ab2aa7dbbe04e150dae1e6ae6b8965da50b762cb266ee8a578a8c96a65363ce9f"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)

17.580539601s ago: executing program 0 (id=986):
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0xfcff, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}, @NHA_BLACKHOLE={0x4}]}, 0x2c}}, 0x40)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) (async)
close(r1)
r2 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r3 = socket(0x10, 0x2, 0x0)
getsockopt$netlink(r3, 0x10e, 0xa, 0x0, &(0x7f0000000000)) (async)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000380)={0x3, 0x4, 0x2, 0x400, 0x2, [0x6, 0x200, 0x3, 0xfffffc01]})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c340", 0x8d}], 0x1}], 0x1, 0x40800)
r5 = socket(0x10, 0x3, 0x0) (async, rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
r7 = socket(0x10, 0x803, 0x2) (async)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0218000014000000000000000000000005000600000000000a00000200000000000000000000000000000000000000000000000000000000080012000000000000000000000000003000000000000000000000000000000002000000000000000000000000000000fe80000080000000000000000000000005000500000000000a"], 0xa0}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) (async)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="c46599d414964f8c2c0862dfeb2301e40e6e6f37a748c1aa77967bd0c1f4e79404cbfe7ecfc2b3938e53366969aca9ed22a3cbedc57918bb5a66ca444af670d90c5d7384c591d4ac69ad9d6734cfbadaa8dacf78003db223892c74e2811a8372d1b9de9cc208aa9ae3ad79597cae8344a4e9be07639b96f999e2356388c211e1b6f9611147372b3576025ba641623ddee69a27cb68068a9291343e2ff3fbfaafa84fec47aced23acfae92cbd2036e4393f7dc2182d301730f5951f09dc261d54ffbc67df127dca2ad30941d0c762ac5a18c53701f3f649adcad6ae37d81daf964aacd5f3c85a39d793baaa73e6f2f48629afd3e6ac90d2ebd682fea678", @ANYRESOCT=r5], 0x3c}}, 0x24008845) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x100, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r9, {0xf, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xb, 0x2, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000000}, 0x50) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0x8}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}}, 0x0)
listen(r4, 0x0) (async)
syz_emit_ethernet(0x220, &(0x7f0000000740)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, 'd!!', 0x1ea, 0xff, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x2a}, {[@srh={0x33, 0xa, 0x4, 0x5, 0x81, 0x0, 0x8, [@private1, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x9}, @private1, @private1]}, @srh={0x4, 0x6, 0x4, 0x3, 0xea, 0x20, 0xf, [@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00']}, @dstopts={0x2, 0x6, '\x00', [@hao={0xc9, 0x10, @private1}, @ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0x8000}, @calipso={0x7, 0x10, {0x2, 0x2, 0x4, 0xf, [0x6]}}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x8}]}, @fragment={0x3c, 0x0, 0x10, 0x1, 0x0, 0x6, 0x64}, @routing={0xff, 0xa, 0x1, 0x8, 0x0, [@private1, @mcast1, @dev={0xfe, 0x80, '\x00', 0x42}, @private0={0xfc, 0x0, '\x00', 0x1}, @local]}, @hopopts={0x76, 0x0, '\x00', [@pad1]}], "e097c551ee5c0f3d03dc06ded4f4b748c3ff1b90c0a09cf2a79f09bad18b27227768e6bad854aa8b5a5ce5189e205d3506688f1cb69edccded72c1b7c5c7de58949904241c5309dac17221798568f99086e8988cde913c66769c8af5107fbc0d5eaacc9bc994421903dd9cd3b948ffd012148c137132cf56442c5da71df569e73165bd82385025b5ea0e54bbc3e31fe0791b0e4c68f2ab45dc5156e1907d848f31c6385442a49dee37f9"}}}}}, 0x0) (async, rerun: 32)
r10 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="c3ff0000008009fe0000626f6e64000000001400028008000f00ff0000000500010006000000"], 0x44}}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000002060500000000000000000007000000140007800800114000000000080012400000ffff0500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a69700053cf33316aee72fd7a8e6cf207ecbc97ec87371e34ea4d52951e0e3ab2aa7dbbe04e150dae1e6ae6b8965da50b762cb266ee8a578a8c96a65363ce9f"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)

6.322938531s ago: executing program 0 (id=986):
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0xfcff, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}, @NHA_BLACKHOLE={0x4}]}, 0x2c}}, 0x40)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) (async)
close(r1)
r2 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r3 = socket(0x10, 0x2, 0x0)
getsockopt$netlink(r3, 0x10e, 0xa, 0x0, &(0x7f0000000000)) (async)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000380)={0x3, 0x4, 0x2, 0x400, 0x2, [0x6, 0x200, 0x3, 0xfffffc01]})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c340", 0x8d}], 0x1}], 0x1, 0x40800)
r5 = socket(0x10, 0x3, 0x0) (async, rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
r7 = socket(0x10, 0x803, 0x2) (async)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0218000014000000000000000000000005000600000000000a00000200000000000000000000000000000000000000000000000000000000080012000000000000000000000000003000000000000000000000000000000002000000000000000000000000000000fe80000080000000000000000000000005000500000000000a"], 0xa0}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) (async)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5], 0x3c}}, 0x24008845) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x100, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r9, {0xf, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xb, 0x2, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000000}, 0x50) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0x8}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}}, 0x0)
listen(r4, 0x0) (async)
syz_emit_ethernet(0x220, &(0x7f0000000740)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, 'd!!', 0x1ea, 0xff, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x2a}, {[@srh={0x33, 0xa, 0x4, 0x5, 0x81, 0x0, 0x8, [@private1, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x9}, @private1, @private1]}, @srh={0x4, 0x6, 0x4, 0x3, 0xea, 0x20, 0xf, [@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00']}, @dstopts={0x2, 0x6, '\x00', [@hao={0xc9, 0x10, @private1}, @ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0x8000}, @calipso={0x7, 0x10, {0x2, 0x2, 0x4, 0xf, [0x6]}}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x8}]}, @fragment={0x3c, 0x0, 0x10, 0x1, 0x0, 0x6, 0x64}, @routing={0xff, 0xa, 0x1, 0x8, 0x0, [@private1, @mcast1, @dev={0xfe, 0x80, '\x00', 0x42}, @private0={0xfc, 0x0, '\x00', 0x1}, @local]}, @hopopts={0x76, 0x0, '\x00', [@pad1]}], "e097c551ee5c0f3d03dc06ded4f4b748c3ff1b90c0a09cf2a79f09bad18b27227768e6bad854aa8b5a5ce5189e205d3506688f1cb69edccded72c1b7c5c7de58949904241c5309dac17221798568f99086e8988cde913c66769c8af5107fbc0d5eaacc9bc994421903dd9cd3b948ffd012148c137132cf56442c5da71df569e73165bd82385025b5ea0e54bbc3e31fe0791b0e4c68f2ab45dc5156e1907d848f31c6385442a49dee37f9"}}}}}, 0x0) (async, rerun: 32)
r10 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="c3ff0000008009fe0000626f6e64000000001400028008000f00ff0000000500010006000000"], 0x44}}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000002060500000000000000000007000000140007800800114000000000080012400000ffff0500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a69700053cf33316aee72fd7a8e6cf207ecbc97ec87371e34ea4d52951e0e3ab2aa7dbbe04e150dae1e6ae6b8965da50b762cb266ee8a578a8c96a65363ce9f"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)

3.883425189s ago: executing program 3 (id=1691):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) (async)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 64)
r1 = socket$key(0xf, 0x3, 0x2) (rerun: 64)
sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e20, 0xe3d, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)

3.468234987s ago: executing program 3 (id=1693):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x5, 0xe, 0x0, &(0x7f0000000000)="251200d800"/14, 0x0, 0x7ff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

3.317887149s ago: executing program 3 (id=1694):
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="07000000040000000800000001000000000000007a01681c2b3240dca1b8711f09871ed7ae89775dbbdeb0c1c02a15144cee6ae1bc073496c283bb32042f0bc45ae6b92d0844e4b25d05cb6d1036deecdb7d77df15ec8948360663710dbe048f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c)
listen(r3, 0x6)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = accept(r2, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r7, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004800}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
recvfrom(r4, 0x0, 0x0, 0x3e8, 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), 0x0}, 0x20)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r5)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='netlink_extack\x00', r10}, 0x18)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b04000000000000000002000004380004803400018009000100686173680000000024000280080007400000000108000440fdfffff70800024000000010080006402f0000080900010073797a30000000000900020073797a32"], 0x8c}}, 0x0)

2.408195516s ago: executing program 3 (id=1700):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x5, 0xe, 0x0, &(0x7f0000000000)="251200d800"/14, 0x0, 0x7ff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2.229452058s ago: executing program 3 (id=1702):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x2082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x800, 0x1007)
sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4004001}, 0x40)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x81}, 0x8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x4}, 0x94)
r4 = socket$unix(0x1, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000950fa5a8859a40ec40f4df43fea01c9823000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='scmi_xfer_response_wait\x00', r3, 0x0, 0x1}, 0xfb)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)="390000002e0003470fbb65e1c3e4ffff060060001600000056000000250000001900130004000f0007fd17e5ff8e0606040020000000000000", 0x39}], 0x1)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'vlan0\x00', <r6=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000081000000040000000080000016000000", @ANYRES32], 0x48)
close(r3)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYRESHEX=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="2f0000002030000004000000", @ANYRES32=0x0, @ANYBLOB="bf8099bdf4f719cc4d555f70bef8ff3be9ad7dddbcb7e20af824a19ea8f29be5b611497120ede96638f2d356e8b4738c", @ANYRES64=r5], 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
accept4$ax25(0xffffffffffffffff, &(0x7f0000000540)={{0x3, @bcast}, [@rose, @remote, @netrom, @bcast, @default, @remote, @null, @netrom]}, &(0x7f00000005c0)=0x48, 0x800)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3)
r9 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r9, &(0x7f0000000000)={0xa, 0xfffd, 0x4, @private1, 0x8f4}, 0x1c)
sendto$inet(r8, &(0x7f00000000c0)="32525a51e4", 0x5, 0x0, 0x0, 0x0)
shutdown(r8, 0x1)

1.677024534s ago: executing program 2 (id=1706):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r1})
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
syz_emit_ethernet(0x7a, &(0x7f00000008c0)=ANY=[@ANYBLOB="0180c2000003a21428c6c085d2f7129fa905b5db88a81c008100040086dd61004ed6003c6cfefc020d00000000000000d623ef33b8d3d85ab62bf54300000000000100bc550000000000000000000000000d0000001f78f7fe9bd149db520e0081d80ee9666c2a262909ba82a7ca79eae679c76c62b5def4f4fc4001a31b6f65965969ba782b9bd0bf00000000000000"], 0x0)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1)
close(0x3)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56561, 0x804, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0xff, 0x8, 0x0, 0x5, 0x8}}, {0x4}}]}]}, 0x54}}, 0x4040010)
sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYRES16=r8, @ANYRESDEC, @ANYBLOB="00032dbd7000fddbdf251600000008000300", @ANYRESHEX=r4, @ANYBLOB="0a000600ffffffffffff00000a00060008021100000100000a001a00ffffffffffff00000a0006000802110000000000000a000600ffffffffffff00000a00060008fa1000000100000a000600ffffffffffff00"/96, @ANYRESHEX=r5], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x408c0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r10 = socket$alg(0x26, 0x5, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
bind$alg(r10, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)=""/163, 0x12f, 0xa3, 0x0, 0x80000000}, 0x28)
close(r10)

1.389307921s ago: executing program 2 (id=1707):
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x41)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000061c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003e80)=""/168, 0xa8}, 0x80000000}], 0x1, 0x836b, 0x0)
connect$bt_l2cap(r1, 0x0, 0x0)
sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x4c, 0x2, 0x8, 0x201, 0x0, 0x0, {0x8440a8fc14029499, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6005}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6007}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000040)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x20, 0x13, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x44)
sendto$inet(r4, &(0x7f0000000d40)="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", 0xfffffffffffffdd2, 0x4000805, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0)

489.20783ms ago: executing program 2 (id=1708):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, &(0x7f00000001c0))
r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2711, @host}, 0x10, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd, 0x50, r2, 0x56cd000)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c)
sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000240)={@mcast2, 0x0, 0x2, 0x2, 0xd, 0x9}, 0x20)
setsockopt$inet6_udp_int(r3, 0x88, 0x1, &(0x7f0000000080), 0x4)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000300)=@ethtool_stats={0x1d, 0x7, [0x1, 0x0, 0x7f, 0x38a2, 0x21, 0x0, 0x1]}})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x5c}}, 0x20040840)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x5, 0xe, 0x0, &(0x7f0000000000)="251200d800"/14, 0x0, 0x7ff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x12, r7, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='f2fs_destroy_extent_tree\x00', r7, 0x0, 0x92}, 0x18)
writev(r8, &(0x7f0000000780)=[{&(0x7f00000002c0)="9b8c41f0dc0cf195d3bf3099461c1ec5b39466b90509ef6f0dc6d8ab69f22d6b122019634fe025a6e50933fab434d42d1abeb0b25587f19231b6f7dd46bd1b4708719b86c34928d626ade7403acc5a054c281a002b3213fe30417b44d916c73149336f34850bb6f6e4ecae16c3285f99928f4305de7ece3008f6fc43e54df7a843c65ef447d1c01ec87b007eb84efbd1d6874ce1db896a228283821ca1218d30179f4e7a0c02fda99acf0b4d4840b5ab5e00c2526f3da4eeda780d19090185d551a325d7cf", 0xc5}, {&(0x7f00000003c0)="8a8cf92d05adeb1f9458515e7a5d65c89a62416cabff1f179f8aa82e9d61bf779824a5fde4b52d4d1d2982821b2c8ded352ef0da1d72917c6f13b8184adb6319e3f0", 0x42}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000000440)="67d5fbb852ad3b243a1177cdece8441c063912e21fc0bf52e9b3f0042298bc4f7a268bc44b18deb559b319e32478cce0b1c62f3a97674a3ae4abfdccf4cc1cc885c20e8257ce17c017e14a5a1b31f13a2b2b50069b55af2e97fb9b8eb2819a1e8729c6f4a9b1a2a394d88d2c5ed9ccb1728ee5faf2c8dacca03e46216a5c8e07d8d96e2ee59a67856a1c5e3c4d3a03f24266205b91cf41e6675957aa8513113d284cc23710cbb35869c26fd61f99a4bde545e58de3d95a9cf5d7b87de9192190248b332315b57b738d4ec1e24fe7", 0xce}, {&(0x7f0000000540)="71fb8350198230639c0b27b65b1df5b673e3f14891978022d717b8f146c4d933f2e11c32a63682aa5105f4871814023cdd0f744cc3d7ad33ad39b0327249be1016a33b35971b963b3d489622c5d0d469cb3b7fd230caf78920a1a3c9d17710a0020bbc1aff44cea889e261887d827e9affd37ab234f14e5f3b6bf56dec3e2fb38869c458c185cf89713b922ddc36395a376fee6dbd8d5c239e96001dea3b1e110a581a96b038c348ba8cf2e05a341370f837d7c857bbf47f3f6e63213ac064", 0xbf}, {&(0x7f0000000680)="f898ec238dad719bbb9d01f75acf310d79a47299a4ba877134475a4ae752fdc4706bcc315d1442aee3dd846410ea12ede34f3b9e5d472773cb8b4d4a61d65cbe133f84cbd50a783249cef9b169a3902be36876762761d888a147214746733b427e197880b73d6d8878609e3149fbfbcda718e4f278a2611a9c6df4c570d890dc57511e36047b46dbb7cc12e462345a69c6cd43038eb8b7cb58a1fcb2f751ae295eb0a4f2090d1abf183ced738ce772e93ee7a77709bd67d6d9a46e085f155d7b12", 0xc1}], 0x6)
socket$can_bcm(0x1d, 0x2, 0x2)

229.445927ms ago: executing program 2 (id=1709):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
listen(r0, 0x312)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback=<r1=>r0, 0xb, 0x0, 0x71, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], <r2=>0x0}, 0x40) (async, rerun: 64)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) (rerun: 64)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x6, 0x2004, 0x0, @value=r3, @void, @void, @void, r2}, 0x20)
socket$kcm(0x29, 0x0, 0x0) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r3) (async)
sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000200)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x3}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000240)="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", 0xfe}, {&(0x7f0000000340)="1d04", 0x2}, {&(0x7f0000000380)="fcc8ff798c08db5d1bc89942717fc010fab89ac57991facd3e45524c1d6e9f34f853078fa1a5d2c8e658e019a87101caab989e9a411df2c0e3ac8113256417f25ccf927728447ffcf045c55c99edafcb0dee94aa90b377aecdab7e3607aa1394c67d482845483eccc9b25c86756f9ecbf59cfa5c28ec70a063cfc012213a05e7090f61371fd118f35716391a87a866fb005808b4d5156b2dc3e57b5cd48c63de333ea2de61934769093b9e47184505a41e89", 0xb2}, {&(0x7f0000000440)="56927eba056ccea076c3561cd6018b033e076ca64cf74f5774feb02af514589f35798a9ee3bb4e9efd0fce5ac09810bb332ecd0a7aeb46a04b4c16a3f4ac7af3a838fe1f4b3d5c0a07956bbd7f2ebeb601f80cd1db2dc2f2e95d7dd5600247f77a35dc5c0f967428dfe6b018c4cb4e7ebd67b8cbbc0a3b4188dd9142952f42b22d02699a", 0x84}, {&(0x7f0000000500)="7c333bb297d80ec017ae2b27a80c8c7cf34a302d73be0631a18a4433fbd7582acb4ab0318ac7", 0x26}, {&(0x7f0000000540)="3550e5c38c02e41f075cfc9d4a61a97693be86aa882e268adabeb3e1260613701e6a74e8bda568dec6c3d62f689b7b794a1c", 0x32}, {&(0x7f0000000580)="0a17bfb83f2c4b3a7b0a6d4e1e35f3503cdca92dbf663074ea62c926511f5d0939d03fdd9980a381e4a779f887ad1f15a18aac349c0912881d92017be64d10613bd31431490afe31dd6e5111f82ab0b1bb84bfabcae7c98956872755ba9e4c0213b5621c5c5707e1fcea38ff1c32e504e59437ab3801c849f8feab2ca61a7cdc929dc3210a3fb0b8ba149f096779e4ccae51a0eb7a95736ed17c86224e24100509ba9baeb811f34dedb8468a46cb3ac1c81c2db7f0adfc09d70358e507d5cbaa2a912115fc2df57338923a7de760fc9519caa98c5aabe9258db0d82d028e2a16d8", 0xe1}, {&(0x7f0000000680)}, {&(0x7f00000006c0)="a4d9024f485ca5df8ba1d7978ba46a4b80c0483162df4d2169d1cacdf6b920a5c2dfc3c0f9470dfcc23ea4056f834c1bdfe50cbde4fdece172864487bdc185e4789c30aa08f21ad2b990ae3fdda88f1d", 0x50}, {&(0x7f0000000740)="93ea98ea7ce027c2c5b11ba619", 0xd}], 0xa, &(0x7f0000000840)="196f3d644a7cc27c7a2c4a6206e5b384bc3ebc102c0e9011238afd266c68b71a6fbec4d9eb492bfb68c07be02ecc8141ca7dd73852d3850bfb0155d7c9d4fb3cb3984d66732cea12c2d13535c410594a1994055d9f1b4c4eb0bad4550b7f8cafb4f058", 0x63, 0xc001}, 0x14)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, r1, 0x1, 0x3, 0x3}, 0x50)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000980)={<r5=>r3, 0xffffffffffffff80, 0x3, 0x4}) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000bc0)={'gre0\x00', &(0x7f0000000b40)={'syztnl0\x00', <r6=>0x0, 0x8000, 0x7800, 0xd3, 0x8, {{0x10, 0x4, 0x2, 0x5, 0x40, 0x68, 0x0, 0x5, 0x29, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x24, 0x70, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x44}}, {@private=0xa010102, 0x6}, {@empty, 0xc000}, {@remote, 0xe}]}, @lsrr={0x83, 0x7, 0x43, [@empty]}]}}}}}) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r3, <r7=>0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)=r3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x13, 0x22, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x7}, @jmp={0x5, 0x0, 0xd, 0x1, 0x5, 0x71fd1b1a5aef4787, 0xfffffffffffffff0}, @generic={0xef, 0x1, 0x5, 0x0, 0x9}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @alu={0x7, 0x0, 0xb, 0x8, 0x3, 0xffffffffffffffe0, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b00)='GPL\x00', 0x9fc, 0x0, 0x0, 0x41100, 0x4, '\x00', r6, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000d00)=[r7], 0x0, 0x10, 0xf12}, 0x94)
socket$key(0xf, 0x3, 0x2) (async)
r8 = socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 32)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) (async, rerun: 32)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000e80)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4, 0x3}, 0x20) (async)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x138, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000ec0), {[{{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0xc, 0x6c, 'snmp\x00', 'syz0\x00', {0x4}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x41}, @mcast2, [0xff, 0xff, 0xff], [0xff000000, 0xff, 0xffffffff, 0xffffffff], 'veth1_to_hsr\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x2c, 0x5, 0x2, 0x3b}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x5, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) (async)
write$cgroup_subtree(r1, &(0x7f0000001280)={[{0x2d, 'cpuset'}, {0x2b, 'io'}, {0x2d, 'cpu'}, {0x2d, 'freezer'}, {0x2d, 'blkio'}, {0x2d, 'rlimit'}, {0x2b, 'cpuacct'}]}, 0x32) (async, rerun: 64)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000012c0)={'bridge_slave_1\x00', 0x8000}) (rerun: 64)
ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000001300)='vlan1\x00') (async, rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000013c0)={'ip6tnl0\x00', &(0x7f0000001340)={'syztnl1\x00', <r9=>r6, 0x0, 0x1, 0x1, 0x0, 0x78, @loopback, @empty, 0x10, 0x7, 0x100, 0x9}}) (async, rerun: 32)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001440), r5)
sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f00000015c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001480)={0xdc, r10, 0xc00, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x40}}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @remote, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd84}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x46901ede}]}, @TIPC_NLA_PUBL={0x4}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4008014}, 0x44000) (async)
connect$inet6(r8, &(0x7f0000001600)={0xa, 0x4e20, 0x3, @empty, 0x4}, 0x1c)
sendmsg$nl_route(r5, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001780)={&(0x7f0000001680)=@dellink={0xec, 0x11, 0x0, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x4050, 0x42}, [@IFLA_GROUP={0x8, 0x1b, 0xfffffff7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xfffffffd}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8000}, @IFLA_PHYS_PORT_ID={0x16, 0x22, "cba3f2a90a7245e848d1f82f95aa088d82cf"}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_VF_PORTS={0x68, 0x18, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8, 0x1, 0x8}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xa, 0x2, 'vlan1\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c0afc615244c143dd20421d8c87dc333"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1f6822575802e4e85420fd2257a76384"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "9f533ecd85e553646a870a3d262f09fe"}]}]}, @IFLA_IFNAME={0x14, 0x3, 'pim6reg\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x6c}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x67d7}]}, 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x4c004) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)=@gettclass={0x24, 0x2a, 0x8, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0xf}, {0x5, 0xffff}, {0xe, 0x7}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x1)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
bpf$ITER_CREATE(0x21, &(0x7f0000001900)={r3}, 0x8) (rerun: 64)

139.635204ms ago: executing program 2 (id=1710):
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="4d7e00c30000000000001f000000080002"], 0x1c}, 0x4, 0x700000000000000}, 0x0)
ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000280)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}})
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x3)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x48190)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000300)={'broute\x00', 0x0, 0x3, 0x0, [0x3, 0x0, 0xffff, 0x92d7, 0xe, 0x6], 0x0, 0x0, 0x0}, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10009, 0x52}]}}}}}}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x52}]}}}}}}}, 0x0)

137.062412ms ago: executing program 3 (id=1711):
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$netlink(r0, &(0x7f0000000200)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0xd5f810af1735f624}, 0xc, &(0x7f0000000180)=[{&(0x7f0000000440)={0xf8, 0x24, 0x0, 0x70bd2a, 0x25dfdbfe, "", [@nested={0xe8, 0x6e, 0x0, 0x1, [@generic="f535ddd9f0500c832d54b020017ca27e3ec7e9a3135b6b29ebfa2b84b340c8d871e9b6bcfcd128defb68fb1548a6b5cb1d48d0cbc2dac7c73ff129177e77e01c1be3185b88efc283a994a13100f7ae9f5d383ab34eaf401bd438b7d48be85c487f0d6bd4b46b1bb1474c63a4888a79a2f3da641f56eb9988ddfbba48bb65d2b9f1f3b25c0fa5a13595", @nested={0x4, 0x83}, @typed={0x8, 0xf3, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x14, 0x27, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="ab27ca9cf0a301502506d626c963ddfc7076400794eab24cb707765b9ddd863ed23b41ce2b80a8bdabcff428f027fe8f99ca9490c5aac3074bccf0"]}]}, 0xf8}], 0x1, 0x0, 0x0, 0x80}, 0x41)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000021c0)=ANY=[@ANYBLOB="181600002400e5ff25bd7000fedbdf25051600800c00010002"], 0x1618}], 0x1}, 0x0) (async)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000021c0)=ANY=[@ANYBLOB="181600002400e5ff25bd7000fedbdf25051600800c00010002"], 0x1618}], 0x1}, 0x0)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x100, @multicast2}, 0x69)
connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)
sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r8, 0x0, 0xc, &(0x7f0000000040)=0x3, 0x2)
recvmmsg(r8, &(0x7f0000005100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/17, 0x11}, 0xa65}], 0x1, 0x45833af92e4b39ff, 0x0)
getsockopt$netrom_NETROM_T4(r7, 0x103, 0x6, 0x0, &(0x7f0000000080))
sendmsg$nl_route(r5, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a00000000000000000c000008001900", @ANYBLOB="06a4000000230000"], 0x2c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000b0000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000000000000c39a04fe41000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r4], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000b0000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000000000000c39a04fe41000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r4], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r3, 0x201, 0x70bd26, 0xfffffffe, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x31}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x4c}, 0x8, 0x3000000000002}, 0x844)
accept4(r1, 0x0, 0x0, 0x0) (async)
r9 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$unix(r9, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="00301d0000000009cb10014a98956b45a81b9a4400000000", 0x18}, {&(0x7f00000001c0)='\f', 0x1}], 0x2}}], 0x1, 0x20040050)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe0}}, 0x0) (async)
sendmsg$NFT_BATCH(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe0}}, 0x0)
socket(0x10, 0x803, 0x0) (async)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (async)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)

0s ago: executing program 2 (id=1712):
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000600)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000000)=0x1, 0x4)

kernel console output (not intermixed with test programs):

1 - 0
[  173.242548][ T9891] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.246281][ T9891] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  173.251121][ T9891] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  173.330850][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.334353][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.375790][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.379373][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.612836][ T9940] wg1 speed is unknown, defaulting to 1000
[  173.615832][ T9940] lo speed is unknown, defaulting to 1000
[  173.659829][ T9940] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1155'.
[  173.791446][ T9946] syzkaller0: entered allmulticast mode
[  173.797548][ T9945] syzkaller0: left allmulticast mode
[  173.866444][ T9953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1159'.
[  173.906221][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1160'.
[  174.786581][ T9960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1161'.
[  174.789861][ T9960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1161'.
[  175.039607][ T9974] Cannot find add_set index 2 as target
[  175.083644][ T9976] netlink: 'syz.2.1165': attribute type 21 has an invalid length.
[  175.087136][ T9976] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1165'.
[  175.143627][ T9978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1166'.
[  175.216081][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1166'.
[  175.224529][ T9978] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  175.227378][ T9978] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  175.230424][ T9978] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  175.233384][ T9978] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  175.243184][ T9978] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  175.245897][ T9978] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  175.248790][ T9978] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  175.251452][ T9978] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  175.453869][ T5863] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.341454][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  176.345483][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  176.349342][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  176.352628][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  176.355721][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  176.391688][T10000] wg1 speed is unknown, defaulting to 1000
[  176.395604][T10000] lo speed is unknown, defaulting to 1000
[  176.519580][T10000] chnl_net:caif_netlink_parms(): no params data found
[  176.572462][T10000] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.574896][T10000] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.577238][T10000] bridge_slave_0: entered allmulticast mode
[  176.580506][T10000] bridge_slave_0: entered promiscuous mode
[  176.583976][T10000] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.586420][T10000] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.589140][T10000] bridge_slave_1: entered allmulticast mode
[  176.592033][T10000] bridge_slave_1: entered promiscuous mode
[  176.615115][T10000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  176.620796][T10000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  176.643490][T10000] team0: Port device team_slave_0 added
[  176.647454][T10000] team0: Port device team_slave_1 added
[  176.668018][T10000] batman_adv: batadv0: Adding interface: batadv_slave_0
[  176.671596][T10000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.680237][T10000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  176.684963][T10000] batman_adv: batadv0: Adding interface: batadv_slave_1
[  176.687437][T10000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.695940][T10000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  176.724258][T10000] hsr_slave_0: entered promiscuous mode
[  176.726912][T10000] hsr_slave_1: entered promiscuous mode
[  176.729784][T10000] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  176.732125][T10000] Cannot create hsr debugfs directory
[  177.244076][ T5863] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.311400][ T5863] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.379887][ T5863] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.467832][ T5863] bridge_slave_1: left allmulticast mode
[  177.478520][ T5863] bridge_slave_1: left promiscuous mode
[  177.484884][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.492672][ T5863] bridge_slave_0: left allmulticast mode
[  177.494865][ T5863] bridge_slave_0: left promiscuous mode
[  177.497602][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.807476][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  177.817270][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  177.823737][ T5863] bond0 (unregistering): Released all slaves
[  178.073709][T10018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1173'.
[  178.077250][ T5863] hsr_slave_0: left promiscuous mode
[  178.081205][ T5863] hsr_slave_1: left promiscuous mode
[  178.083376][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  178.085859][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  178.090003][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  178.093226][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  178.109826][ T5863] veth1_macvtap: left promiscuous mode
[  178.111778][ T5863] veth0_macvtap: left promiscuous mode
[  178.113647][ T5863] veth1_vlan: left promiscuous mode
[  178.115325][ T5863] veth0_vlan: left promiscuous mode
[  178.240481][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1173'.
[  178.375325][   T54] Bluetooth: hci0: command tx timeout
[  178.502422][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  178.537955][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  179.085825][T10000] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  179.110255][T10000] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  179.125891][T10000] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  179.133967][T10000] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  179.228941][T10000] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.241561][T10000] 8021q: adding VLAN 0 to HW filter on device team0
[  179.247708][ T1371] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.250368][ T1371] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.293344][ T1371] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.295775][ T1371] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.424704][T10000] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.464400][T10000] veth0_vlan: entered promiscuous mode
[  179.471702][T10000] veth1_vlan: entered promiscuous mode
[  179.494889][T10000] veth0_macvtap: entered promiscuous mode
[  179.503185][T10000] veth1_macvtap: entered promiscuous mode
[  179.528585][T10000] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.536774][T10000] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.543482][T10000] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.546470][T10000] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.551210][T10000] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.554015][T10000] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.615472][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1180'.
[  179.622021][ T1371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.624611][ T1371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.646975][ T1371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.651302][ T1371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.603421][T10056] wg1 speed is unknown, defaulting to 1000
[  180.607252][T10056] lo speed is unknown, defaulting to 1000
[  180.761766][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  180.767027][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  180.771078][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  180.776133][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  180.781567][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  180.834840][T10059] wg1 speed is unknown, defaulting to 1000
[  180.839979][T10059] lo speed is unknown, defaulting to 1000
[  180.863586][T10061] No such timeout policy "syz0"
[  181.058815][T10059] chnl_net:caif_netlink_parms(): no params data found
[  181.070805][T10068] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  181.161054][T10059] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.163999][T10059] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.166965][T10059] bridge_slave_0: entered allmulticast mode
[  181.171109][T10059] bridge_slave_0: entered promiscuous mode
[  181.175728][T10059] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.179360][T10059] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.182734][T10059] bridge_slave_1: entered allmulticast mode
[  181.185869][T10059] bridge_slave_1: entered promiscuous mode
[  181.198106][T10077] netlink: 'syz.2.1186': attribute type 16 has an invalid length.
[  181.201923][T10077] netlink: 'syz.2.1186': attribute type 17 has an invalid length.
[  181.262991][T10077] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.267784][T10077] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.273116][T10077] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.276358][T10077] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.280366][T10077] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.292683][T10059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  181.296711][ T5897] lo speed is unknown, defaulting to 1000
[  181.297265][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1186'.
[  181.302771][ T5897] syz2: Port: 1 Link DOWN
[  181.307407][T10059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  181.310690][T10077] IPv6: NLM_F_REPLACE set, but no existing node found!
[  181.341338][T10059] team0: Port device team_slave_0 added
[  181.345150][T10059] team0: Port device team_slave_1 added
[  181.367028][T10059] batman_adv: batadv0: Adding interface: batadv_slave_0
[  181.369910][T10059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.378429][T10059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.383698][T10059] batman_adv: batadv0: Adding interface: batadv_slave_1
[  181.385828][T10059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.393988][T10059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  181.440222][T10059] hsr_slave_0: entered promiscuous mode
[  181.442663][T10059] hsr_slave_1: entered promiscuous mode
[  181.444947][T10059] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  181.449264][T10059] Cannot create hsr debugfs directory
[  181.589155][T10059] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  181.593977][T10059] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  181.600846][T10059] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  181.605700][T10059] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  181.634212][T10059] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.637131][T10059] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.640478][T10059] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.642791][T10059] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.701792][T10059] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.713754][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.716998][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.730535][T10059] 8021q: adding VLAN 0 to HW filter on device team0
[  181.741607][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.743848][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.751304][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.753551][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.838060][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.980212][T10059] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.014069][T10059] veth0_vlan: entered promiscuous mode
[  182.021009][T10059] veth1_vlan: entered promiscuous mode
[  182.043718][T10059] veth0_macvtap: entered promiscuous mode
[  182.048511][T10059] veth1_macvtap: entered promiscuous mode
[  182.061062][T10059] batman_adv: batadv0: Interface activated: batadv_slave_0
[  182.070819][T10059] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.076423][T10059] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.079503][T10059] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.082140][T10059] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.085405][T10059] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.141206][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.143707][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.167092][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.171276][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.771420][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1188'.
[  182.848730][   T54] Bluetooth: hci0: command tx timeout
[  182.892711][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  182.896312][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  182.903940][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  182.911668][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  182.917819][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  182.971353][T10100] wg1 speed is unknown, defaulting to 1000
[  182.974920][T10100] lo speed is unknown, defaulting to 1000
[  182.979036][T10103] netlink: 'syz.3.1190': attribute type 32 has an invalid length.
[  182.982003][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1190'.
[  182.985808][T10103] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  183.145081][T10100] chnl_net:caif_netlink_parms(): no params data found
[  183.212209][T10103] syzkaller1: entered promiscuous mode
[  183.214784][T10103] syzkaller1: entered allmulticast mode
[  183.239110][T10100] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.241626][T10100] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.244645][T10100] bridge_slave_0: entered allmulticast mode
[  183.249961][T10100] bridge_slave_0: entered promiscuous mode
[  183.255757][T10100] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.258091][T10100] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.260940][T10100] bridge_slave_1: entered allmulticast mode
[  183.263920][T10100] bridge_slave_1: entered promiscuous mode
[  183.314355][T10100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  183.321044][T10100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  183.350594][T10100] team0: Port device team_slave_0 added
[  183.354946][T10100] team0: Port device team_slave_1 added
[  183.387809][T10100] batman_adv: batadv0: Adding interface: batadv_slave_0
[  183.390693][T10100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.400390][T10100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  183.406221][T10100] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.409155][T10100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.421817][T10100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  183.465356][T10100] hsr_slave_0: entered promiscuous mode
[  183.469460][T10100] hsr_slave_1: entered promiscuous mode
[  183.471781][T10100] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  183.474417][T10100] Cannot create hsr debugfs directory
[  183.702871][T10121] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5)
[  183.733131][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.803469][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.874666][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.014541][   T13] bridge_slave_1: left allmulticast mode
[  184.016858][   T13] bridge_slave_1: left promiscuous mode
[  184.026787][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.031679][   T13] bridge_slave_0: left allmulticast mode
[  184.033507][   T13] bridge_slave_0: left promiscuous mode
[  184.035489][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.309020][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  184.315125][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  184.320425][   T13] bond0 (unregistering): Released all slaves
[  184.757234][   T13] hsr_slave_0: left promiscuous mode
[  184.762607][   T13] hsr_slave_1: left promiscuous mode
[  184.764829][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.767053][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.772847][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.778272][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.793422][   T13] veth1_macvtap: left promiscuous mode
[  184.795193][   T13] veth0_macvtap: left promiscuous mode
[  184.796909][   T13] veth1_vlan: left promiscuous mode
[  184.798726][   T13] veth0_vlan: left promiscuous mode
[  184.928734][ T5837] Bluetooth: hci0: command tx timeout
[  185.011872][ T5837] Bluetooth: hci3: command tx timeout
[  185.279483][   T13] team0 (unregistering): Port device team_slave_1 removed
[  185.325273][   T13] team0 (unregistering): Port device team_slave_0 removed
[  185.730414][ T5837] Bluetooth: hci1: command 0x0406 tx timeout
[  185.878806][T10142] wg1 speed is unknown, defaulting to 1000
[  185.881584][T10142] lo speed is unknown, defaulting to 1000
[  186.096459][T10164] wg1 speed is unknown, defaulting to 1000
[  186.104021][T10164] lo speed is unknown, defaulting to 1000
[  186.260268][T10100] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  186.281453][T10100] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  186.295411][T10100] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  186.309258][T10100] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  186.442361][T10100] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.519029][T10100] 8021q: adding VLAN 0 to HW filter on device team0
[  186.536532][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.539232][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.553040][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.556075][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.763368][T10100] 8021q: adding VLAN 0 to HW filter on device batadv0
[  186.802680][T10100] veth0_vlan: entered promiscuous mode
[  186.809864][T10100] veth1_vlan: entered promiscuous mode
[  186.834462][T10100] veth0_macvtap: entered promiscuous mode
[  186.840316][T10100] veth1_macvtap: entered promiscuous mode
[  186.863618][T10100] batman_adv: batadv0: Interface activated: batadv_slave_0
[  186.875326][T10100] batman_adv: batadv0: Interface activated: batadv_slave_1
[  186.886970][T10100] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.890571][T10100] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.894237][T10100] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.897684][T10100] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.942757][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1212'.
[  187.000504][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.005035][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.010585][   T54] Bluetooth: hci0: command tx timeout
[  187.056276][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.059905][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.088778][   T54] Bluetooth: hci3: command tx timeout
[  187.172066][T10199] wg1 speed is unknown, defaulting to 1000
[  187.177333][T10199] lo speed is unknown, defaulting to 1000
[  187.335731][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'.
[  187.390094][T10208] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1216'.
[  187.479280][T10214] syzkaller0: entered promiscuous mode
[  187.481732][T10214] syzkaller0: entered allmulticast mode
[  187.536819][T10214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1218'.
[  189.091614][   T54] Bluetooth: hci0: command tx timeout
[  189.333913][T10224] wg1 speed is unknown, defaulting to 1000
[  189.337749][T10224] lo speed is unknown, defaulting to 1000
[  189.366546][T10222] netlink: 'syz.2.1220': attribute type 1 has an invalid length.
[  189.468098][T10230] xt_l2tp: v2 doesn't support IP mode
[  189.736792][ T5863] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.693286][T10237] wg1 speed is unknown, defaulting to 1000
[  190.697166][T10237] lo speed is unknown, defaulting to 1000
[  190.719969][T10238] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1224'.
[  190.852437][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  190.857216][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  190.864248][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  190.871144][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  190.875247][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  190.920524][T10239] wg1 speed is unknown, defaulting to 1000
[  190.923183][T10239] lo speed is unknown, defaulting to 1000
[  190.952024][ T5863] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.006498][ T5863] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.041908][T10244] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  191.061652][T10245] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  191.150958][ T5863] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.257634][T10239] chnl_net:caif_netlink_parms(): no params data found
[  191.294189][T10253] wg1 speed is unknown, defaulting to 1000
[  191.324179][T10253] lo speed is unknown, defaulting to 1000
[  191.421261][T10267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1229'.
[  191.434673][T10239] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.437824][T10239] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.440843][T10239] bridge_slave_0: entered allmulticast mode
[  191.444058][T10239] bridge_slave_0: entered promiscuous mode
[  191.460636][T10267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1229'.
[  191.473876][T10239] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.476778][T10239] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.482440][T10239] bridge_slave_1: entered allmulticast mode
[  191.486266][T10239] bridge_slave_1: entered promiscuous mode
[  191.532306][ T5863] bridge_slave_1: left allmulticast mode
[  191.534374][ T5863] bridge_slave_1: left promiscuous mode
[  191.536917][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.547664][ T5863] bridge_slave_0: left allmulticast mode
[  191.552195][ T5863] bridge_slave_0: left promiscuous mode
[  191.555526][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.920240][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  191.925345][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  191.932587][ T5863] bond0 (unregistering): Released all slaves
[  191.967319][T10239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.002246][T10239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.155843][T10239] team0: Port device team_slave_0 added
[  192.164626][T10239] team0: Port device team_slave_1 added
[  192.166919][T10275] wg1 speed is unknown, defaulting to 1000
[  192.198958][T10275] lo speed is unknown, defaulting to 1000
[  192.229284][T10239] batman_adv: batadv0: Adding interface: batadv_slave_0
[  192.231831][T10239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.242058][T10239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  192.247309][T10239] batman_adv: batadv0: Adding interface: batadv_slave_1
[  192.254713][T10239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.263987][T10239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  192.291379][T10287] syzkaller0: entered promiscuous mode
[  192.293229][T10287] syzkaller0: entered allmulticast mode
[  192.363545][T10239] hsr_slave_0: entered promiscuous mode
[  192.366033][T10239] hsr_slave_1: entered promiscuous mode
[  192.370443][T10239] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  192.373111][T10239] Cannot create hsr debugfs directory
[  192.402928][ T5863] hsr_slave_0: left promiscuous mode
[  192.405084][ T5863] hsr_slave_1: left promiscuous mode
[  192.407147][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.409806][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.412804][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.415226][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.429954][ T5863] veth1_macvtap: left promiscuous mode
[  192.431754][ T5863] veth0_macvtap: left promiscuous mode
[  192.433515][ T5863] veth1_vlan: left promiscuous mode
[  192.435261][ T5863] veth0_vlan: left promiscuous mode
[  192.931180][ T5837] Bluetooth: hci3: command tx timeout
[  193.009126][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  193.045680][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  193.893512][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  193.895949][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  194.218022][T10239] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  194.237268][T10239] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  194.253425][T10239] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  194.262880][T10239] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  194.456551][T10239] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.483250][T10239] 8021q: adding VLAN 0 to HW filter on device team0
[  194.504935][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.507870][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.547095][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.550150][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.906831][T10239] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.962526][T10239] veth0_vlan: entered promiscuous mode
[  194.969938][T10239] veth1_vlan: entered promiscuous mode
[  195.006845][T10239] veth0_macvtap: entered promiscuous mode
[  195.015796][T10239] veth1_macvtap: entered promiscuous mode
[  195.018372][ T5837] Bluetooth: hci3: command tx timeout
[  195.047381][T10239] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.065939][T10239] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.074030][T10239] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.076926][T10239] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.088776][T10239] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.092528][T10239] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.215557][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.218794][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.262128][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.265317][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.335112][T10338] x_tables: duplicate underflow at hook 1
[  195.533655][T10349] wg1 speed is unknown, defaulting to 1000
[  195.536713][T10349] lo speed is unknown, defaulting to 1000
[  195.768634][T10361] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1255'.
[  195.772855][T10361] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  196.672031][T10372] wg1 speed is unknown, defaulting to 1000
[  196.675932][T10372] lo speed is unknown, defaulting to 1000
[  197.012281][T10112] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.955176][T10391] geneve0: entered promiscuous mode
[  197.958142][T10391] geneve0: entered allmulticast mode
[  198.006982][T10394] wg1 speed is unknown, defaulting to 1000
[  198.009895][T10394] lo speed is unknown, defaulting to 1000
[  198.150512][T10112] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.155866][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  198.162533][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  198.166797][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  198.170991][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  198.176276][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  198.244589][T10112] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.272222][T10403] wg1 speed is unknown, defaulting to 1000
[  198.286014][T10403] lo speed is unknown, defaulting to 1000
[  198.308863][T10112] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.381962][T10410] wg1 speed is unknown, defaulting to 1000
[  198.400575][T10410] lo speed is unknown, defaulting to 1000
[  198.591657][T10112] bridge_slave_1: left allmulticast mode
[  198.595354][T10112] bridge_slave_1: left promiscuous mode
[  198.597592][T10112] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.611851][T10112] bridge_slave_0: left allmulticast mode
[  198.614226][T10112] bridge_slave_0: left promiscuous mode
[  198.616414][T10112] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.106100][T10112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  199.115032][T10112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  199.119692][T10112] bond0 (unregistering): Released all slaves
[  199.152092][T10403] chnl_net:caif_netlink_parms(): no params data found
[  199.202881][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1273'.
[  199.206933][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1273'.
[  199.229318][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1273'.
[  199.237638][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1273'.
[  199.261795][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1273'.
[  199.266322][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1273'.
[  199.274296][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1273'.
[  199.279173][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1273'.
[  199.283131][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1273'.
[  199.302397][T10424] bridge_slave_0: left allmulticast mode
[  199.304702][T10424] bridge_slave_0: left promiscuous mode
[  199.307112][T10424] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.315062][T10424] bridge_slave_1: left allmulticast mode
[  199.316837][T10424] bridge_slave_1: left promiscuous mode
[  199.319234][T10424] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.324991][T10424] bond0: (slave bond_slave_0): Releasing backup interface
[  199.332349][T10424] bond0: (slave bond_slave_1): Releasing backup interface
[  199.345263][T10424] team0: Port device team_slave_0 removed
[  199.352610][T10424] team0: Port device team_slave_1 removed
[  199.356743][T10424] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.359647][T10424] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.364989][T10424] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.367290][T10424] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.523983][T10429] wg1 speed is unknown, defaulting to 1000
[  199.527258][T10403] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.543886][T10403] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.546866][T10403] bridge_slave_0: entered allmulticast mode
[  199.552869][T10403] bridge_slave_0: entered promiscuous mode
[  199.556742][T10429] lo speed is unknown, defaulting to 1000
[  199.600409][T10403] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.603224][T10403] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.606346][T10403] bridge_slave_1: entered allmulticast mode
[  199.611972][T10403] bridge_slave_1: entered promiscuous mode
[  199.687330][T10403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.709655][T10403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.733459][T10112] hsr_slave_0: left promiscuous mode
[  199.735881][T10112] hsr_slave_1: left promiscuous mode
[  199.737984][T10112] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.743046][T10112] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.747134][T10112] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.750464][T10112] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.768043][T10112] veth1_macvtap: left promiscuous mode
[  199.770698][T10112] veth0_macvtap: left promiscuous mode
[  199.773071][T10112] veth1_vlan: left promiscuous mode
[  199.775280][T10112] veth0_vlan: left promiscuous mode
[  200.211841][ T5837] Bluetooth: hci3: command tx timeout
[  200.285481][T10112] team0 (unregistering): Port device team_slave_1 removed
[  200.332140][T10112] team0 (unregistering): Port device team_slave_0 removed
[  200.808097][T10403] team0: Port device team_slave_0 added
[  200.863626][T10403] team0: Port device team_slave_1 added
[  200.930479][T10403] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.933458][T10403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.944573][T10403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.953820][T10403] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.956674][T10403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.966792][T10403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.042123][T10403] hsr_slave_0: entered promiscuous mode
[  201.044708][T10403] hsr_slave_1: entered promiscuous mode
[  201.047185][T10403] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  201.051316][T10403] Cannot create hsr debugfs directory
[  201.192502][T10451] __nla_validate_parse: 69 callbacks suppressed
[  201.192520][T10451] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1280'.
[  201.307153][T10457] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1281'.
[  201.319317][T10456] netlink: 'syz.2.1281': attribute type 2 has an invalid length.
[  201.321955][T10456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  201.350657][T10456] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1281'.
[  201.547272][T10468] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1284'.
[  201.551303][T10468] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1284'.
[  201.629146][T10403] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  201.634363][T10403] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  201.638933][T10403] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  201.645447][T10403] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  201.714653][T10473] tproxy_tg6_check: 1 callbacks suppressed
[  201.714693][T10473] xt_TPROXY: Can be used only with -p tcp or -p udp
[  201.751274][T10403] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.782993][T10403] 8021q: adding VLAN 0 to HW filter on device team0
[  201.800544][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.803578][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.836790][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.839151][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  202.025035][T10403] 8021q: adding VLAN 0 to HW filter on device batadv0
[  202.071698][T10403] veth0_vlan: entered promiscuous mode
[  202.077162][T10403] veth1_vlan: entered promiscuous mode
[  202.094952][T10403] veth0_macvtap: entered promiscuous mode
[  202.100436][T10403] veth1_macvtap: entered promiscuous mode
[  202.110280][T10403] batman_adv: batadv0: Interface activated: batadv_slave_0
[  202.117015][T10403] batman_adv: batadv0: Interface activated: batadv_slave_1
[  202.123099][T10403] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  202.125675][T10403] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  202.128468][T10403] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  202.131261][T10403] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.197554][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.209207][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.226068][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.230267][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.326662][T10488] syzkaller0: entered promiscuous mode
[  202.332650][T10488] syzkaller0: entered allmulticast mode
[  202.404099][T10488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1288'.
[  202.720768][T10496] netlink: 'syz.2.1290': attribute type 1 has an invalid length.
[  202.725234][T10496] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.337782][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1293'.
[  204.632241][T10112] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.666155][T10528] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1299'.
[  204.966800][T10112] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.031689][T10112] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.121823][T10112] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.797271][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1301'.
[  205.996938][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  206.000342][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  206.004217][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  206.007347][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  206.010768][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  206.042405][T10540] wg1 speed is unknown, defaulting to 1000
[  206.045426][T10540] lo speed is unknown, defaulting to 1000
[  206.193016][T10112] bridge_slave_1: left allmulticast mode
[  206.196065][T10112] bridge_slave_1: left promiscuous mode
[  206.198523][T10112] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.204840][T10112] bridge_slave_0: left allmulticast mode
[  206.207022][T10112] bridge_slave_0: left promiscuous mode
[  206.213441][T10112] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.571134][T10112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  206.575759][T10112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  206.579726][T10112] bond0 (unregistering): Released all slaves
[  206.593274][T10540] chnl_net:caif_netlink_parms(): no params data found
[  206.792123][T10540] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.794483][T10540] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.796810][T10540] bridge_slave_0: entered allmulticast mode
[  206.805360][T10540] bridge_slave_0: entered promiscuous mode
[  206.846010][T10540] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.855744][T10540] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.858807][T10540] bridge_slave_1: entered allmulticast mode
[  206.867481][T10540] bridge_slave_1: entered promiscuous mode
[  206.937760][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1302'.
[  206.940818][T10555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1302'.
[  206.945512][T10540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  206.952141][T10548] wg1 speed is unknown, defaulting to 1000
[  206.956880][T10540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  206.979213][T10548] lo speed is unknown, defaulting to 1000
[  207.000741][T10540] team0: Port device team_slave_0 added
[  207.013149][T10112] hsr_slave_0: left promiscuous mode
[  207.015569][T10112] hsr_slave_1: left promiscuous mode
[  207.017771][T10112] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.021323][T10112] batman_adv: batadv0: Removing interface: batadv_slave_0
[  207.024650][T10112] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  207.027761][T10112] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.045610][T10112] veth1_macvtap: left promiscuous mode
[  207.047533][T10112] veth0_macvtap: left promiscuous mode
[  207.051461][T10112] veth1_vlan: left promiscuous mode
[  207.053230][T10112] veth0_vlan: left promiscuous mode
[  207.471144][T10112] team0 (unregistering): Port device team_slave_1 removed
[  207.515657][T10112] team0 (unregistering): Port device team_slave_0 removed
[  208.039886][T10540] team0: Port device team_slave_1 added
[  208.058689][ T5837] Bluetooth: hci3: command tx timeout
[  208.102003][T10540] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.104216][T10540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.114906][T10540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.120204][T10540] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.122870][T10540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.134937][T10540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.227664][T10540] hsr_slave_0: entered promiscuous mode
[  208.233841][T10540] hsr_slave_1: entered promiscuous mode
[  208.236767][T10540] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  208.240005][T10540] Cannot create hsr debugfs directory
[  208.313686][T10574] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1309'.
[  208.381310][T10576] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.383834][T10576] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.386350][T10576] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.389425][T10576] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  208.743174][T10540] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  208.747718][T10540] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  208.754351][T10540] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  208.759132][T10540] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  208.811332][T10540] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.824965][T10540] 8021q: adding VLAN 0 to HW filter on device team0
[  208.831648][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.833963][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.840917][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.843193][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.972115][T10540] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.006460][T10540] veth0_vlan: entered promiscuous mode
[  209.012659][T10540] veth1_vlan: entered promiscuous mode
[  209.034951][T10540] veth0_macvtap: entered promiscuous mode
[  209.041440][T10540] veth1_macvtap: entered promiscuous mode
[  209.054567][T10540] batman_adv: batadv0: Interface activated: batadv_slave_0
[  209.063314][T10540] batman_adv: batadv0: Interface activated: batadv_slave_1
[  209.069757][T10540] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.072462][T10540] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.075088][T10540] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.077881][T10540] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.145861][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.156934][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.174162][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.176665][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.565951][T10613] wg1 speed is unknown, defaulting to 1000
[  209.571624][T10613] lo speed is unknown, defaulting to 1000
[  209.843898][T10618] xt_socket: unknown flags 0x8
[  209.916589][T10620] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1321'.
[  209.922789][T10620] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1321'.
[  209.927366][T10620] siw: device registration error -23
[  210.025318][T10625] sctp: [Deprecated]: syz.3.1323 (pid 10625) Use of int in max_burst socket option.
[  210.025318][T10625] Use struct sctp_assoc_value instead
[  211.092845][T10653] syz.3.1327 (10653) used obsolete PPPIOCDETACH ioctl
[  211.241287][T10660] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1329'.
[  211.310887][ T5847] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.710658][T10667] netlink: 'syz.3.1332': attribute type 1 has an invalid length.
[  212.713784][T10667] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1332'.
[  212.792030][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1334'.
[  212.889755][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  212.893860][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  212.896697][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  212.903234][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  212.905978][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  212.985835][T10688] wg1 speed is unknown, defaulting to 1000
[  212.997482][T10688] lo speed is unknown, defaulting to 1000
[  213.164995][ T5847] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.182224][T10706] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1339'.
[  213.186435][T10706] tipc: Invalid UDP bearer configuration
[  213.186478][T10706] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  213.235012][T10706] tipc: Started in network mode
[  213.236795][T10706] tipc: Node identity 4, cluster identity 4711
[  213.239396][T10706] tipc: Node number set to 4
[  213.251313][T10706] xt_cgroup: invalid path, errno=-2
[  213.282442][ T5847] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.294791][T10712] Cannot find del_set index 286 as target
[  213.297196][T10713] Cannot find del_set index 286 as target
[  213.409976][T10716] xt_CT: No such helper "snmp_trap"
[  213.426002][ T5847] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.443950][T10688] chnl_net:caif_netlink_parms(): no params data found
[  213.612329][T10688] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.615291][T10688] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.621158][T10688] bridge_slave_0: entered allmulticast mode
[  213.626596][T10688] bridge_slave_0: entered promiscuous mode
[  213.667008][T10688] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.673953][T10688] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.682161][T10688] bridge_slave_1: entered allmulticast mode
[  213.686165][T10688] bridge_slave_1: entered promiscuous mode
[  213.775748][T10688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  213.804447][T10688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  213.870258][ T5847] bridge_slave_1: left allmulticast mode
[  213.873477][ T5847] bridge_slave_1: left promiscuous mode
[  213.875970][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.885043][ T5847] bridge_slave_0: left allmulticast mode
[  213.887382][ T5847] bridge_slave_0: left promiscuous mode
[  213.890986][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.945701][T10741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1346'.
[  214.023300][T10743] xt_CT: You must specify a L4 protocol and not use inversions on it
[  214.294700][ T5847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  214.304267][ T5847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  214.309580][ T5847] bond0 (unregistering): Released all slaves
[  214.332573][T10688] team0: Port device team_slave_0 added
[  214.364389][T10740] 8021q: adding VLAN 0 to HW filter on device bond0
[  214.367093][T10740] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  214.434072][   T24] lo speed is unknown, defaulting to 1000
[  214.435832][   T24] syz2: Port: 1 Link ACTIVE
[  214.437832][T10688] team0: Port device team_slave_1 added
[  214.494939][T10739] wg1 speed is unknown, defaulting to 1000
[  214.496589][T10688] batman_adv: batadv0: Adding interface: batadv_slave_0
[  214.503437][T10688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.513927][T10688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  214.519308][T10739] lo speed is unknown, defaulting to 1000
[  214.520940][T10688] batman_adv: batadv0: Adding interface: batadv_slave_1
[  214.524467][T10688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.535458][T10688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  214.655033][T10745] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1347'.
[  214.725623][ T5847] hsr_slave_0: left promiscuous mode
[  214.730340][ T5847] hsr_slave_1: left promiscuous mode
[  214.734420][T10746] No such timeout policy "syz0"
[  214.737754][ T5847] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  214.741113][ T5847] batman_adv: batadv0: Removing interface: batadv_slave_0
[  214.744889][ T5847] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  214.747871][ T5847] batman_adv: batadv0: Removing interface: batadv_slave_1
[  214.771326][ T5847] veth1_macvtap: left promiscuous mode
[  214.773613][ T5847] veth0_macvtap: left promiscuous mode
[  214.775935][ T5847] veth1_vlan: left promiscuous mode
[  214.778132][ T5847] veth0_vlan: left promiscuous mode
[  214.928564][   T54] Bluetooth: hci3: command tx timeout
[  215.225278][ T5847] team0 (unregistering): Port device team_slave_1 removed
[  215.272374][ T5847] team0 (unregistering): Port device team_slave_0 removed
[  215.695422][T10688] hsr_slave_0: entered promiscuous mode
[  215.697997][T10688] hsr_slave_1: entered promiscuous mode
[  215.707042][T10688] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  215.710459][T10688] Cannot create hsr debugfs directory
[  216.266111][T10770] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  216.275131][T10770] syzkaller0: entered promiscuous mode
[  216.276992][T10770] syzkaller0: entered allmulticast mode
[  217.010416][   T54] Bluetooth: hci3: command tx timeout
[  217.843096][T10688] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  217.852259][T10688] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  217.861269][T10688] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  217.866499][T10688] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  217.902814][T10787] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1357'.
[  217.906470][T10789] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1357'.
[  217.961876][T10688] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.980697][T10688] 8021q: adding VLAN 0 to HW filter on device team0
[  217.987666][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.989953][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.003464][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.005675][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.052555][T10688] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  218.056842][T10688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  218.073368][T10793] wg1 speed is unknown, defaulting to 1000
[  218.092920][T10793] lo speed is unknown, defaulting to 1000
[  218.225048][T10688] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.281414][T10688] veth0_vlan: entered promiscuous mode
[  218.301607][T10688] veth1_vlan: entered promiscuous mode
[  218.362031][T10688] veth0_macvtap: entered promiscuous mode
[  218.369802][T10688] veth1_macvtap: entered promiscuous mode
[  218.390909][T10688] batman_adv: batadv0: Interface activated: batadv_slave_0
[  218.400517][T10688] batman_adv: batadv0: Interface activated: batadv_slave_1
[  218.406709][T10688] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.409845][T10688] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.412621][T10688] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.415313][T10688] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.474689][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.479901][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.505443][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.510120][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.285907][T10828] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1369'.
[  219.611451][T10840] wg1 speed is unknown, defaulting to 1000
[  219.615247][T10840] lo speed is unknown, defaulting to 1000
[  220.371399][ T5863] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.780727][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1376'.
[  221.792449][ T5863] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.870287][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  221.876183][ T5863] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.882232][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  221.885803][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  221.889334][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  221.893027][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  221.917518][T10860] wg1 speed is unknown, defaulting to 1000
[  221.921758][T10860] lo speed is unknown, defaulting to 1000
[  221.969145][ T5863] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.012076][T10862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1377'.
[  222.017213][T10862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1377'.
[  222.096310][T10860] chnl_net:caif_netlink_parms(): no params data found
[  222.175031][ T5863] bridge_slave_1: left allmulticast mode
[  222.178577][ T5863] bridge_slave_1: left promiscuous mode
[  222.180759][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.185169][ T5863] bridge_slave_0: left allmulticast mode
[  222.187293][ T5863] bridge_slave_0: left promiscuous mode
[  222.192503][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.574743][T10872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1378'.
[  222.609561][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  222.615781][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  222.621493][ T5863] bond0 (unregistering): Released all slaves
[  222.649439][T10873] sch_tbf: burst 0 is lower than device bridge2 mtu (1514) !
[  222.680291][T10872] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  222.714345][T10860] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.717354][T10860] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.720711][T10860] bridge_slave_0: entered allmulticast mode
[  222.725151][T10860] bridge_slave_0: entered promiscuous mode
[  222.741378][T10860] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.744462][T10860] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.747141][T10860] bridge_slave_1: entered allmulticast mode
[  222.751962][T10860] bridge_slave_1: entered promiscuous mode
[  222.863804][T10860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  222.886406][T10860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  222.955836][T10860] team0: Port device team_slave_0 added
[  222.983250][T10860] team0: Port device team_slave_1 added
[  223.018095][ T5863] hsr_slave_0: left promiscuous mode
[  223.021467][ T5863] hsr_slave_1: left promiscuous mode
[  223.023643][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  223.026074][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  223.030758][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  223.033728][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  223.065532][ T5863] veth1_macvtap: left promiscuous mode
[  223.067755][ T5863] veth0_macvtap: left promiscuous mode
[  223.087166][ T5863] veth1_vlan: left promiscuous mode
[  223.089963][ T5863] veth0_vlan: left promiscuous mode
[  223.655010][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  223.668154][T10894] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1384'.
[  223.698345][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  223.979965][   T54] Bluetooth: hci3: command tx timeout
[  224.262085][T10860] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.264353][T10860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.282855][T10860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  224.295994][T10860] batman_adv: batadv0: Adding interface: batadv_slave_1
[  224.315089][T10860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.323458][T10860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.405455][T10888] wg1 speed is unknown, defaulting to 1000
[  224.413941][T10860] hsr_slave_0: entered promiscuous mode
[  224.416567][T10860] hsr_slave_1: entered promiscuous mode
[  224.419771][T10860] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  224.422510][T10860] Cannot create hsr debugfs directory
[  224.424330][T10890] wg1 speed is unknown, defaulting to 1000
[  224.424387][T10888] lo speed is unknown, defaulting to 1000
[  224.442505][T10890] lo speed is unknown, defaulting to 1000
[  224.915366][T10909] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  225.056747][T10911] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1389'.
[  225.094680][T10860] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  225.103288][T10860] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  225.109968][T10860] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  225.124270][T10860] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  225.469359][T10860] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.486860][T10860] 8021q: adding VLAN 0 to HW filter on device team0
[  225.494620][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.496853][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.512762][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.515130][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.622641][T10945] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1395'.
[  225.763175][T10860] 8021q: adding VLAN 0 to HW filter on device batadv0
[  225.823686][T10860] veth0_vlan: entered promiscuous mode
[  225.832462][T10860] veth1_vlan: entered promiscuous mode
[  225.857838][T10860] veth0_macvtap: entered promiscuous mode
[  225.863579][T10860] veth1_macvtap: entered promiscuous mode
[  225.875645][T10860] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.884620][T10860] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.894244][T10860] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.897837][T10860] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.901959][T10860] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.904838][T10860] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.951883][T10969] netlink: 'syz.2.1401': attribute type 16 has an invalid length.
[  225.955885][T10969] netlink: 'syz.2.1401': attribute type 17 has an invalid length.
[  225.962345][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.967327][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.031500][T10969] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.036482][T10969] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.039521][T10969] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.042102][T10969] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.057604][   T10] lo speed is unknown, defaulting to 1000
[  226.060466][   T54] Bluetooth: hci3: command tx timeout
[  226.060812][   T10] syz2: Port: 1 Link DOWN
[  226.068679][T10969] IPv6: NLM_F_REPLACE set, but no existing node found!
[  226.076232][T10970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1401'.
[  226.090072][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.092570][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.712360][T10973] openvswitch: netlink: Key type 4102 is out of range max 32
[  226.838339][T10978] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  226.953729][T10984] x_tables: unsorted underflow at hook 2
[  226.958979][T10984] netlink: 136784 bytes leftover after parsing attributes in process `syz.3.1406'.
[  226.962792][T10984] netlink: zone id is out of range
[  226.964830][T10984] netlink: zone id is out of range
[  226.966788][T10984] netlink: zone id is out of range
[  226.968992][T10984] netlink: zone id is out of range
[  226.970957][T10984] netlink: zone id is out of range
[  226.973042][T10984] netlink: zone id is out of range
[  226.974970][T10984] netlink: zone id is out of range
[  227.203849][T11001] wg1 speed is unknown, defaulting to 1000
[  227.207500][T11001] lo speed is unknown, defaulting to 1000
[  227.775552][T10112] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.304478][T10112] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.484635][T10112] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.515969][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  229.520875][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  229.526878][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  229.531250][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  229.534420][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  229.571029][T10112] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.604778][T11030] wg1 speed is unknown, defaulting to 1000
[  229.608763][T11030] lo speed is unknown, defaulting to 1000
[  229.615871][T11035] x_tables: duplicate underflow at hook 2
[  229.700788][T10112] bridge_slave_1: left allmulticast mode
[  229.702767][T10112] bridge_slave_1: left promiscuous mode
[  229.704761][T10112] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.711864][T10112] bridge_slave_0: left allmulticast mode
[  229.713749][T10112] bridge_slave_0: left promiscuous mode
[  229.716371][T10112] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.002141][T10112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  230.006222][T10112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  230.010501][T10112] bond0 (unregistering): Released all slaves
[  230.154419][T11030] chnl_net:caif_netlink_parms(): no params data found
[  230.281596][T11030] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.284126][T11030] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.286458][T11030] bridge_slave_0: entered allmulticast mode
[  230.291650][T11030] bridge_slave_0: entered promiscuous mode
[  230.298167][T11030] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.301015][T11030] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.303639][T11030] bridge_slave_1: entered allmulticast mode
[  230.306399][T11030] bridge_slave_1: entered promiscuous mode
[  230.349116][T11030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  230.357118][T10112] hsr_slave_0: left promiscuous mode
[  230.359946][T10112] hsr_slave_1: left promiscuous mode
[  230.363268][T10112] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.365747][T10112] batman_adv: batadv0: Removing interface: batadv_slave_0
[  230.370892][T10112] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  230.373202][T10112] batman_adv: batadv0: Removing interface: batadv_slave_1
[  230.386783][T10112] veth1_macvtap: left promiscuous mode
[  230.388657][T10112] veth0_macvtap: left promiscuous mode
[  230.390745][T10112] veth1_vlan: left promiscuous mode
[  230.392548][T10112] veth0_vlan: left promiscuous mode
[  230.485648][T11072] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1428'.
[  230.489712][T11072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1428'.
[  230.539278][T11076] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma?
[  230.963882][T10112] team0 (unregistering): Port device team_slave_1 removed
[  231.005011][T10112] team0 (unregistering): Port device team_slave_0 removed
[  231.344941][T11030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  231.407526][T11030] team0: Port device team_slave_0 added
[  231.412970][T11030] team0: Port device team_slave_1 added
[  231.427315][ T5837] Bluetooth: hci0: command tx timeout
[  231.482393][T11030] batman_adv: batadv0: Adding interface: batadv_slave_0
[  231.485124][T11030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.503254][T11030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  231.510311][T11030] batman_adv: batadv0: Adding interface: batadv_slave_1
[  231.512969][T11030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.528632][T11030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  231.578540][ T5837] Bluetooth: hci3: command tx timeout
[  231.671466][T11030] hsr_slave_0: entered promiscuous mode
[  231.673977][T11030] hsr_slave_1: entered promiscuous mode
[  231.676389][T11030] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  231.680814][T11030] Cannot create hsr debugfs directory
[  232.114701][T11030] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  232.130449][T11030] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  232.136933][T11030] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  232.142646][T11030] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  232.208028][T11030] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.227090][T11030] 8021q: adding VLAN 0 to HW filter on device team0
[  232.236414][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.238735][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.246566][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.249593][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.403349][T11030] 8021q: adding VLAN 0 to HW filter on device batadv0
[  232.447389][T11030] veth0_vlan: entered promiscuous mode
[  232.456154][T11030] veth1_vlan: entered promiscuous mode
[  232.481720][T11030] veth0_macvtap: entered promiscuous mode
[  232.496462][T11030] veth1_macvtap: entered promiscuous mode
[  232.510755][T11030] batman_adv: batadv0: Interface activated: batadv_slave_0
[  232.521860][T11030] batman_adv: batadv0: Interface activated: batadv_slave_1
[  232.527482][T11030] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.533673][T11030] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.536973][T11030] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.543707][T11030] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.636692][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.643740][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.679790][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.683829][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.722600][T11121] sctp: [Deprecated]: syz.2.1439 (pid 11121) Use of struct sctp_assoc_value in delayed_ack socket option.
[  232.722600][T11121] Use struct sctp_sack_info instead
[  232.827254][T11125] wg1 speed is unknown, defaulting to 1000
[  232.830719][T11125] lo speed is unknown, defaulting to 1000
[  233.431836][T11148] sctp: [Deprecated]: syz.2.1445 (pid 11148) Use of int in max_burst socket option deprecated.
[  233.431836][T11148] Use struct sctp_assoc_value instead
[  233.437996][T11149] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:20000
[  233.665113][T11162] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1449'.
[  233.967941][T11173] netlink: 410 bytes leftover after parsing attributes in process `syz.3.1453'.
[  234.015366][T11173] wg1 speed is unknown, defaulting to 1000
[  234.023884][T11173] lo speed is unknown, defaulting to 1000
[  234.223727][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1457'.
[  234.563771][T11205] wg1 speed is unknown, defaulting to 1000
[  234.568514][T11205] lo speed is unknown, defaulting to 1000
[  234.572985][T11206] wg1 speed is unknown, defaulting to 1000
[  234.581812][T11206] lo speed is unknown, defaulting to 1000
[  234.657082][ T5862] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.199726][ T5862] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.201755][T11214] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1466'.
[  236.300699][T11216] xt_hashlimit: size too large, truncated to 1048576
[  236.389395][ T5862] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.427552][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  236.431872][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  236.434735][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  236.438091][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  236.440857][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  236.460322][T11224] syzkaller0: entered promiscuous mode
[  236.462306][T11224] syzkaller0: entered allmulticast mode
[  236.499930][ T5862] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.546657][T11224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1469'.
[  236.553760][T11225] wg1 speed is unknown, defaulting to 1000
[  236.557194][T11225] lo speed is unknown, defaulting to 1000
[  236.689668][T11233] siw: device registration error -23
[  236.709944][ T5862] bridge_slave_1: left allmulticast mode
[  236.711875][ T5862] bridge_slave_1: left promiscuous mode
[  236.713797][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.720194][ T5862] bridge_slave_0: left allmulticast mode
[  236.721904][ T5862] bridge_slave_0: left promiscuous mode
[  236.723664][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.047878][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  237.052613][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  237.056832][ T5862] bond0 (unregistering): Released all slaves
[  237.188870][T11225] chnl_net:caif_netlink_parms(): no params data found
[  238.528895][   T54] Bluetooth: hci3: command tx timeout
[  238.705670][T11251] netlink: 404 bytes leftover after parsing attributes in process `syz.2.1477'.
[  238.712922][T11251] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1477'.
[  238.718899][T11251] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1477'.
[  238.833916][T11225] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.848576][T11225] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.851575][T11225] bridge_slave_0: entered allmulticast mode
[  238.856965][T11225] bridge_slave_0: entered promiscuous mode
[  238.866408][T11225] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.875225][T11225] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.880104][T11225] bridge_slave_1: entered allmulticast mode
[  238.884321][T11225] bridge_slave_1: entered promiscuous mode
[  238.966627][T11225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  238.973515][T11225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  238.992798][ T5862] hsr_slave_0: left promiscuous mode
[  239.001454][ T5862] hsr_slave_1: left promiscuous mode
[  239.004526][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  239.007007][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0
[  239.015480][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  239.022076][T11257] Cannot find add_set index 2 as target
[  239.022238][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1
[  239.033141][T11256] Cannot find add_set index 2 as target
[  239.056025][ T5862] veth1_macvtap: left promiscuous mode
[  239.067162][ T5862] veth0_macvtap: left promiscuous mode
[  239.078732][ T5862] veth1_vlan: left promiscuous mode
[  239.080662][ T5862] veth0_vlan: left promiscuous mode
[  239.626630][ T5862] team0 (unregistering): Port device team_slave_1 removed
[  239.686638][ T5862] team0 (unregistering): Port device team_slave_0 removed
[  240.210678][T11225] team0: Port device team_slave_0 added
[  240.294067][T11225] team0: Port device team_slave_1 added
[  240.364659][T11278] bridge0: port 1(erspan0) entered blocking state
[  240.366761][T11278] bridge0: port 1(erspan0) entered disabled state
[  240.370051][T11278] erspan0: entered allmulticast mode
[  240.372637][T11278] erspan0: entered promiscuous mode
[  240.376882][T11278] bridge0: port 1(erspan0) entered blocking state
[  240.378953][T11278] bridge0: port 1(erspan0) entered forwarding state
[  240.383082][T11225] batman_adv: batadv0: Adding interface: batadv_slave_0
[  240.385778][T11225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  240.396372][T11225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  240.436862][T11281] erspan0: left allmulticast mode
[  240.439412][T11281] erspan0: left promiscuous mode
[  240.441603][T11281] bridge0: port 1(erspan0) entered disabled state
[  240.459854][T11225] batman_adv: batadv0: Adding interface: batadv_slave_1
[  240.462301][T11225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  240.475078][T11225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  240.576019][T11225] hsr_slave_0: entered promiscuous mode
[  240.586766][T11225] hsr_slave_1: entered promiscuous mode
[  240.590273][T11225] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  240.593238][T11225] Cannot create hsr debugfs directory
[  240.608699][   T54] Bluetooth: hci3: command tx timeout
[  240.768439][T11293] netlink: 'syz.2.1491': attribute type 2 has an invalid length.
[  241.076455][T11225] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  241.084607][T11225] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  241.092085][T11225] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  241.097129][T11225] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  241.223707][T11225] 8021q: adding VLAN 0 to HW filter on device bond0
[  241.237106][T11225] 8021q: adding VLAN 0 to HW filter on device team0
[  241.247039][ T1371] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.249301][ T1371] bridge0: port 1(bridge_slave_0) entered forwarding state
[  241.259202][ T1371] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.261740][ T1371] bridge0: port 2(bridge_slave_1) entered forwarding state
[  241.429628][T11225] 8021q: adding VLAN 0 to HW filter on device batadv0
[  241.486240][T11225] veth0_vlan: entered promiscuous mode
[  241.506737][T11225] veth1_vlan: entered promiscuous mode
[  241.532304][T11225] veth0_macvtap: entered promiscuous mode
[  241.537014][T11225] veth1_macvtap: entered promiscuous mode
[  241.552610][T11225] batman_adv: batadv0: Interface activated: batadv_slave_0
[  241.564628][T11312] wg1 speed is unknown, defaulting to 1000
[  241.566615][T11225] batman_adv: batadv0: Interface activated: batadv_slave_1
[  241.573610][T11312] lo speed is unknown, defaulting to 1000
[  241.576333][T11225] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  241.581125][T11225] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  241.583935][T11225] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  241.586792][T11225] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  241.720276][T11314] wg1 speed is unknown, defaulting to 1000
[  241.735343][T11314] lo speed is unknown, defaulting to 1000
[  241.751323][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.753725][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.781249][T11319] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1495'.
[  241.902270][T11326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1495'.
[  241.915058][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.925939][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.164246][T11331] netlink: 'syz.3.1498': attribute type 3 has an invalid length.
[  242.166658][T11331] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1498'.
[  242.182644][T11331] netlink: 'syz.3.1498': attribute type 2 has an invalid length.
[  242.224727][ T5897] IPVS: starting estimator thread 0...
[  242.318473][T11336] IPVS: using max 62 ests per chain, 148800 per kthread
[  242.605318][T11353] siw: device registration error -23
[  242.944906][T11364] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1508'.
[  243.220695][T11368] syzkaller1: entered promiscuous mode
[  243.222408][T11368] syzkaller1: entered allmulticast mode
[  243.231902][T11368] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1510'.
[  243.239673][T11368] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1510'.
[  243.357271][T11366] wg1 speed is unknown, defaulting to 1000
[  243.360686][T11366] lo speed is unknown, defaulting to 1000
[  243.722010][T11378] netlink: 'syz.3.1512': attribute type 11 has an invalid length.
[  243.807771][T11379] netlink: 'syz.3.1512': attribute type 1 has an invalid length.
[  243.968503][T11388] netlink: 'syz.2.1515': attribute type 2 has an invalid length.
[  243.970945][T11388] net_ratelimit: 4058 callbacks suppressed
[  243.970955][T11388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  244.383287][ T5862] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.315447][T11397] netlink: 'syz.2.1518': attribute type 1 has an invalid length.
[  246.317997][T11397] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1518'.
[  246.321272][T11397] netlink: 'syz.2.1518': attribute type 1 has an invalid length.
[  246.324271][T11397] netlink: 'syz.2.1518': attribute type 2 has an invalid length.
[  246.339785][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  246.347417][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  246.363768][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  246.407311][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  246.418150][T11401] wg1 speed is unknown, defaulting to 1000
[  246.433028][T11401] lo speed is unknown, defaulting to 1000
[  246.448976][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  246.503895][T11394] wg1 speed is unknown, defaulting to 1000
[  246.519421][T11394] lo speed is unknown, defaulting to 1000
[  246.754500][T11410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1523'.
[  246.757434][T11410] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1523'.
[  247.003041][ T5862] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.026683][T11394] chnl_net:caif_netlink_parms(): no params data found
[  247.216116][T11394] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.227965][T11394] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.241634][T11394] bridge_slave_0: entered allmulticast mode
[  247.246634][T11394] bridge_slave_0: entered promiscuous mode
[  247.271306][T11394] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.277805][T11394] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.287098][T11394] bridge_slave_1: entered allmulticast mode
[  247.295480][T11394] bridge_slave_1: entered promiscuous mode
[  247.422779][T11394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  247.441371][T11394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  247.597261][T11394] team0: Port device team_slave_0 added
[  247.616059][T11394] team0: Port device team_slave_1 added
[  247.684137][T11419] wg1 speed is unknown, defaulting to 1000
[  247.747418][T11419] lo speed is unknown, defaulting to 1000
[  247.751829][T11394] batman_adv: batadv0: Adding interface: batadv_slave_0
[  247.758445][T11394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.768164][T11394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  247.820576][T11394] batman_adv: batadv0: Adding interface: batadv_slave_1
[  247.824735][T11394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.948723][T11394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  248.126810][ T5862] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.187699][T11394] hsr_slave_0: entered promiscuous mode
[  248.193461][T11394] hsr_slave_1: entered promiscuous mode
[  248.195774][T11394] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  248.198292][T11394] Cannot create hsr debugfs directory
[  248.314534][ T5862] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.528373][   T54] Bluetooth: hci3: command tx timeout
[  248.865584][ T5862] bridge_slave_1: left allmulticast mode
[  248.868148][ T5862] bridge_slave_1: left promiscuous mode
[  248.874383][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.890144][ T5862] bridge_slave_0: left allmulticast mode
[  248.892475][ T5862] bridge_slave_0: left promiscuous mode
[  248.897251][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.325376][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  250.334635][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  250.341968][ T5862] bond0 (unregistering): Released all slaves
[  250.484394][T11446] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1531'.
[  250.541839][T11448] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1532'.
[  250.548443][T11448] netlink: 'syz.3.1532': attribute type 1 has an invalid length.
[  250.552033][T11448] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  250.608551][   T54] Bluetooth: hci3: command tx timeout
[  252.002397][T11461] wg1 speed is unknown, defaulting to 1000
[  252.006146][T11461] lo speed is unknown, defaulting to 1000
[  252.638473][ T5862] hsr_slave_0: left promiscuous mode
[  252.643747][ T5862] hsr_slave_1: left promiscuous mode
[  252.649922][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  252.654526][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0
[  252.680461][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  252.682871][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1
[  252.707193][   T54] Bluetooth: hci3: command tx timeout
[  252.715593][T11470] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1538'.
[  252.741012][ T5862] veth1_macvtap: left promiscuous mode
[  252.742929][ T5862] veth0_macvtap: left promiscuous mode
[  252.744714][ T5862] veth1_vlan: left promiscuous mode
[  252.746338][ T5862] veth0_vlan: left promiscuous mode
[  252.912772][T11474] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1539'.
[  253.448048][ T5862] team0 (unregistering): Port device team_slave_1 removed
[  253.532174][ T5862] team0 (unregistering): Port device team_slave_0 removed
[  254.759194][T11394] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  254.777287][T11394] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  254.780486][   T54] Bluetooth: hci3: command tx timeout
[  254.793828][T11394] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  254.802092][T11394] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  254.947897][T11489] Cannot find add_set index 0 as target
[  255.097880][T11394] 8021q: adding VLAN 0 to HW filter on device bond0
[  255.149510][T11394] 8021q: adding VLAN 0 to HW filter on device team0
[  255.166136][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.169540][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  255.230124][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.232697][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  255.336803][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  255.339660][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  255.436687][  T790] hid-generic 0005:0458:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  255.567799][T11394] 8021q: adding VLAN 0 to HW filter on device batadv0
[  255.612089][T11394] veth0_vlan: entered promiscuous mode
[  255.627262][T11394] veth1_vlan: entered promiscuous mode
[  255.672310][T11394] veth0_macvtap: entered promiscuous mode
[  255.684438][T11394] veth1_macvtap: entered promiscuous mode
[  255.722735][T11394] batman_adv: batadv0: Interface activated: batadv_slave_0
[  255.734331][T11394] batman_adv: batadv0: Interface activated: batadv_slave_1
[  255.750116][T11394] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  255.752913][T11394] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  255.755898][T11394] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  255.768663][T11394] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.911372][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.913894][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.942420][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.944866][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.010769][T11520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1551'.
[  256.195952][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1553'.
[  256.894857][T11548] wg1 speed is unknown, defaulting to 1000
[  256.906672][T11548] lo speed is unknown, defaulting to 1000
[  256.924021][T11551] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1560'.
[  257.627795][T11559] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  257.637036][T11559] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1562'.
[  257.700814][T11561] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1563'.
[  257.700918][T11562] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1563'.
[  257.874050][T11569] tap0: tun_chr_ioctl cmd 1074025678
[  257.875967][T11569] tap0: group set to 0
[  258.070860][T11581] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1567'.
[  258.237758][ T5862] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.714047][ T5862] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.798809][ T5862] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.857973][ T5862] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.981074][ T5862] bridge_slave_1: left allmulticast mode
[  259.983321][ T5862] bridge_slave_1: left promiscuous mode
[  259.987423][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.995764][ T5862] bridge_slave_0: left allmulticast mode
[  259.998041][ T5862] bridge_slave_0: left promiscuous mode
[  260.001801][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.066876][T11596] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1571'.
[  260.083715][T11597] netlink: 'syz.2.1572': attribute type 10 has an invalid length.
[  260.285421][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  260.292680][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  260.298985][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  260.316687][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  260.321871][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  260.604182][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  260.610818][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  260.616105][ T5862] bond0 (unregistering): Released all slaves
[  260.630138][T11596] batadv_slave_1: entered promiscuous mode
[  260.734458][T11600] wg1 speed is unknown, defaulting to 1000
[  260.785981][T11600] lo speed is unknown, defaulting to 1000
[  260.787386][T11603] wg1 speed is unknown, defaulting to 1000
[  260.811379][T11603] lo speed is unknown, defaulting to 1000
[  260.832580][T11608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1573'.
[  260.861827][T11607] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1573'.
[  261.054778][ T5862] hsr_slave_0: left promiscuous mode
[  261.058024][ T5862] hsr_slave_1: left promiscuous mode
[  261.065038][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  261.067952][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0
[  261.075390][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  261.078828][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1
[  261.105726][ T5862] veth1_macvtap: left promiscuous mode
[  261.108040][ T5862] veth0_macvtap: left promiscuous mode
[  261.110579][ T5862] veth1_vlan: left promiscuous mode
[  261.112734][ T5862] veth0_vlan: left promiscuous mode
[  261.668091][ T5862] team0 (unregistering): Port device team_slave_1 removed
[  261.711877][ T5862] team0 (unregistering): Port device team_slave_0 removed
[  262.375056][ T5837] Bluetooth: hci3: command tx timeout
[  262.497823][T11603] chnl_net:caif_netlink_parms(): no params data found
[  262.677793][T11603] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.683055][T11603] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.686154][T11603] bridge_slave_0: entered allmulticast mode
[  262.689941][T11603] bridge_slave_0: entered promiscuous mode
[  262.697475][T11603] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.701105][T11603] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.704018][T11603] bridge_slave_1: entered allmulticast mode
[  262.707455][T11603] bridge_slave_1: entered promiscuous mode
[  262.784694][T11603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  262.800518][T11603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  262.837471][T11603] team0: Port device team_slave_0 added
[  262.850892][T11603] team0: Port device team_slave_1 added
[  262.885693][T11603] batman_adv: batadv0: Adding interface: batadv_slave_0
[  262.887855][T11603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  262.895994][T11603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  262.901787][T11603] batman_adv: batadv0: Adding interface: batadv_slave_1
[  262.903915][T11603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  262.911626][T11603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  262.977902][T11603] hsr_slave_0: entered promiscuous mode
[  262.980469][T11603] hsr_slave_1: entered promiscuous mode
[  262.982675][T11603] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  262.985126][T11603] Cannot create hsr debugfs directory
[  263.037629][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1583'.
[  263.165828][T11651] wg1 speed is unknown, defaulting to 1000
[  263.170935][T11651] lo speed is unknown, defaulting to 1000
[  263.533173][T11603] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  263.539709][T11603] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  263.545306][T11603] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  263.557466][T11603] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  263.650539][T11665] syzkaller0: entered promiscuous mode
[  263.652592][T11665] syzkaller0: entered allmulticast mode
[  263.677272][T11665] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1587'.
[  263.677701][T11603] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.697575][T11603] 8021q: adding VLAN 0 to HW filter on device team0
[  263.705069][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.707453][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  263.715700][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  263.718333][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  263.859621][T11603] 8021q: adding VLAN 0 to HW filter on device batadv0
[  263.893994][T11603] veth0_vlan: entered promiscuous mode
[  263.901533][T11603] veth1_vlan: entered promiscuous mode
[  263.936849][T11603] veth0_macvtap: entered promiscuous mode
[  263.945941][T11603] veth1_macvtap: entered promiscuous mode
[  263.993903][T11603] batman_adv: batadv0: Interface activated: batadv_slave_0
[  264.012857][T11603] batman_adv: batadv0: Interface activated: batadv_slave_1
[  264.024386][T11603] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  264.027600][T11603] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  264.032986][T11603] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  264.036798][T11603] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  264.162706][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.175511][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.212104][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.214916][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.785284][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1589'.
[  268.701506][ T5847] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.543360][ T5847] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.104673][ T5847] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.191797][ T5847] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.385065][ T5847] bridge_slave_1: left allmulticast mode
[  270.387302][ T5847] bridge_slave_1: left promiscuous mode
[  270.390880][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.402194][ T5847] bridge_slave_0: left allmulticast mode
[  270.404129][ T5847] bridge_slave_0: left promiscuous mode
[  270.406095][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.923160][T11718] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  271.063388][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  271.084988][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  271.106164][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  271.110576][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  271.113766][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  271.268068][T11727] netlink: 'syz.2.1602': attribute type 10 has an invalid length.
[  271.301062][ T5847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  271.311164][ T5847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  271.316277][ T5847] bond0 (unregistering): Released all slaves
[  271.854517][T11720] wg1 speed is unknown, defaulting to 1000
[  271.858409][T11720] lo speed is unknown, defaulting to 1000
[  272.223616][ T5847] hsr_slave_0: left promiscuous mode
[  272.231549][ T5847] hsr_slave_1: left promiscuous mode
[  272.234294][ T5847] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  272.237457][ T5847] batman_adv: batadv0: Removing interface: batadv_slave_0
[  272.242671][ T5847] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  272.245174][ T5847] batman_adv: batadv0: Removing interface: batadv_slave_1
[  272.271972][ T5847] veth1_macvtap: left promiscuous mode
[  272.277360][ T5847] veth0_macvtap: left promiscuous mode
[  272.282021][ T5847] veth1_vlan: left promiscuous mode
[  272.285015][ T5847] veth0_vlan: left promiscuous mode
[  273.174399][   T54] Bluetooth: hci3: command tx timeout
[  273.281405][ T5847] team0 (unregistering): Port device team_slave_1 removed
[  273.410710][ T5847] team0 (unregistering): Port device team_slave_0 removed
[  274.707030][T11752] wg1 speed is unknown, defaulting to 1000
[  274.713271][T11752] lo speed is unknown, defaulting to 1000
[  274.995654][T11720] chnl_net:caif_netlink_parms(): no params data found
[  275.248545][   T54] Bluetooth: hci3: command tx timeout
[  275.419563][T11720] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.425642][T11720] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.431739][T11720] bridge_slave_0: entered allmulticast mode
[  275.435962][T11720] bridge_slave_0: entered promiscuous mode
[  275.453787][T11720] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.463257][T11720] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.466255][T11720] bridge_slave_1: entered allmulticast mode
[  275.472234][T11720] bridge_slave_1: entered promiscuous mode
[  275.571832][T11720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  275.583408][T11720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  275.730504][T11720] team0: Port device team_slave_0 added
[  275.741543][T11720] team0: Port device team_slave_1 added
[  275.862078][T11720] batman_adv: batadv0: Adding interface: batadv_slave_0
[  275.864829][T11720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.899200][T11720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  275.924563][T11720] batman_adv: batadv0: Adding interface: batadv_slave_1
[  275.927287][T11720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.957887][T11720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  276.115014][T11720] hsr_slave_0: entered promiscuous mode
[  276.117514][T11720] hsr_slave_1: entered promiscuous mode
[  276.128385][T11720] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  276.130807][T11720] Cannot create hsr debugfs directory
[  276.325769][T11794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1617'.
[  276.361046][T11794] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1617'.
[  276.696410][T11802] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1618'.
[  276.723041][T11802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1618'.
[  277.208323][   T33] audit: type=1800 audit(1752024097.041:2): pid=11807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1620" name="cgroup.controllers" dev="tmpfs" ino=1144 res=0 errno=0
[  277.334791][   T54] Bluetooth: hci3: command tx timeout
[  278.475184][T11830] netlink: 'syz.3.1626': attribute type 2 has an invalid length.
[  278.495066][T11830] : entered promiscuous mode
[  278.597909][T11835] wg1 speed is unknown, defaulting to 1000
[  278.603776][T11835] lo speed is unknown, defaulting to 1000
[  278.892536][T11836] wg1 speed is unknown, defaulting to 1000
[  278.895685][T11836] lo speed is unknown, defaulting to 1000
[  279.408459][   T54] Bluetooth: hci3: command tx timeout
[  281.102088][T11842] wg1 speed is unknown, defaulting to 1000
[  281.105048][T11842] lo speed is unknown, defaulting to 1000
[  283.031256][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  283.445788][T11865] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1634'.
[  283.453833][T11865] netlink: 'syz.2.1634': attribute type 1 has an invalid length.
[  283.501517][T11865] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  283.591941][T11868] netlink: 'syz.2.1635': attribute type 10 has an invalid length.
[  283.595036][T11868] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1635'.
[  283.622685][T11868] bridge0: port 3(dummy0) entered blocking state
[  283.625709][T11868] bridge0: port 3(dummy0) entered disabled state
[  283.633588][T11868] dummy0: entered allmulticast mode
[  283.637367][T11868] dummy0: entered promiscuous mode
[  283.792286][T11869] wg1 speed is unknown, defaulting to 1000
[  283.796235][T11869] lo speed is unknown, defaulting to 1000
[  284.852413][T11883] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1638'.
[  284.855436][T11883] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1638'.
[  284.859103][T11883] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1638'.
[  284.862522][T11883] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1638'.
[  285.111724][T11720] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  285.120833][T11720] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  285.128010][T11720] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  285.138865][T11720] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  285.254339][T11720] 8021q: adding VLAN 0 to HW filter on device bond0
[  285.271131][T11720] 8021q: adding VLAN 0 to HW filter on device team0
[  285.280599][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.283335][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.294789][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.297062][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.577138][T11720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  285.791476][T11891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1639'.
[  285.914722][T11720] 8021q: adding VLAN 0 to HW filter on device batadv0
[  285.976152][T11720] veth0_vlan: entered promiscuous mode
[  285.984101][T11720] veth1_vlan: entered promiscuous mode
[  286.018764][T11720] veth0_macvtap: entered promiscuous mode
[  286.026553][T11720] veth1_macvtap: entered promiscuous mode
[  286.053696][T11720] batman_adv: batadv0: Interface activated: batadv_slave_0
[  286.063556][T11720] batman_adv: batadv0: Interface activated: batadv_slave_1
[  286.074620][T11720] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  286.077837][T11720] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  286.082654][T11720] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  286.085352][T11720] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  286.255301][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  286.257799][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  286.321632][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  286.326307][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  286.406141][T11906] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  286.594960][T11911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1644'.
[  288.085082][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1651'.
[  289.091811][ T5863] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.326358][ T5863] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.412540][ T5863] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.506079][ T5863] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.730459][ T5863] bridge_slave_1: left allmulticast mode
[  290.732687][ T5863] bridge_slave_1: left promiscuous mode
[  290.735119][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.746033][ T5863] bridge_slave_0: left allmulticast mode
[  290.748586][ T5863] bridge_slave_0: left promiscuous mode
[  290.751038][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.423542][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  291.431654][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  291.436026][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  291.439934][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  291.444244][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  291.783902][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  291.799065][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  291.807318][ T5863] bond0 (unregistering): Released all slaves
[  291.896917][T11953] wg1 speed is unknown, defaulting to 1000
[  291.917923][T11953] lo speed is unknown, defaulting to 1000
[  292.326871][T11967] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1656'.
[  293.042670][T11961] wg1 speed is unknown, defaulting to 1000
[  293.078030][T11961] lo speed is unknown, defaulting to 1000
[  293.197103][ T5863] hsr_slave_0: left promiscuous mode
[  293.202808][ T5863] hsr_slave_1: left promiscuous mode
[  293.205126][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  293.207889][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  293.211999][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  293.214288][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  293.228629][ T5863] veth1_macvtap: left promiscuous mode
[  293.230566][ T5863] veth0_macvtap: left promiscuous mode
[  293.232473][ T5863] veth1_vlan: left promiscuous mode
[  293.234125][ T5863] veth0_vlan: left promiscuous mode
[  293.490115][   T54] Bluetooth: hci3: command tx timeout
[  293.665583][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  293.696345][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  294.194939][T11978] wg1 speed is unknown, defaulting to 1000
[  294.201492][T11978] lo speed is unknown, defaulting to 1000
[  294.207215][T11953] chnl_net:caif_netlink_parms(): no params data found
[  294.350202][T11953] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.353044][T11953] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.356290][T11953] bridge_slave_0: entered allmulticast mode
[  294.359775][T11953] bridge_slave_0: entered promiscuous mode
[  294.364014][T11953] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.366808][T11953] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.373441][T11953] bridge_slave_1: entered allmulticast mode
[  294.377023][T11953] bridge_slave_1: entered promiscuous mode
[  294.432743][T11953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  294.442543][T11953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  294.485707][T11953] team0: Port device team_slave_0 added
[  294.491507][T11953] team0: Port device team_slave_1 added
[  294.524437][T11953] batman_adv: batadv0: Adding interface: batadv_slave_0
[  294.527502][T11953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.544937][T11953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  294.556664][T11953] batman_adv: batadv0: Adding interface: batadv_slave_1
[  294.559441][T11953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.571377][T11953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  294.619840][T11953] hsr_slave_0: entered promiscuous mode
[  294.622547][T11953] hsr_slave_1: entered promiscuous mode
[  294.625486][T11953] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  294.627981][T11953] Cannot create hsr debugfs directory
[  295.205939][T11953] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  295.223662][T11953] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  295.237268][T11953] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  295.247590][T11953] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  295.506268][T11953] 8021q: adding VLAN 0 to HW filter on device bond0
[  295.531617][T11953] 8021q: adding VLAN 0 to HW filter on device team0
[  295.542407][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.544906][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  295.556584][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.559015][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  295.568775][   T54] Bluetooth: hci3: command tx timeout
[  295.805533][T11953] 8021q: adding VLAN 0 to HW filter on device batadv0
[  295.863608][T11953] veth0_vlan: entered promiscuous mode
[  295.872506][T11953] veth1_vlan: entered promiscuous mode
[  295.907457][T11953] veth0_macvtap: entered promiscuous mode
[  295.915779][T11953] veth1_macvtap: entered promiscuous mode
[  295.938068][T11953] batman_adv: batadv0: Interface activated: batadv_slave_0
[  295.955871][T11953] batman_adv: batadv0: Interface activated: batadv_slave_1
[  295.966506][T11953] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  295.971522][T11953] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  295.975676][T11953] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  295.983496][T11953] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  297.652413][   T54] Bluetooth: hci3: command tx timeout
[  297.664579][T12043] wg1 speed is unknown, defaulting to 1000
[  297.696845][T12043] lo speed is unknown, defaulting to 1000
[  297.748606][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.758497][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.875167][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.900790][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.312122][T12055] netlink: 'syz.3.1675': attribute type 10 has an invalid length.
[  298.365436][T12055] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  298.607361][T12068] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1678'.
[  298.625313][T12068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1678'.
[  298.637549][T12068] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1678'.
[  298.879825][T12076] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1679'.
[  299.287969][T12081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1681'.
[  299.343355][T12083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1682'.
[  299.565064][T12089] netlink: 'syz.2.1684': attribute type 23 has an invalid length.
[  299.765110][T12093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1686'.
[  300.200469][ T5862] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.260213][T12101] wg1 speed is unknown, defaulting to 1000
[  300.264356][T12101] lo speed is unknown, defaulting to 1000
[  302.876598][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  302.882941][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  302.887844][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  302.893496][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  302.897173][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  303.021909][ T5862] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.081497][T12119] wg1 speed is unknown, defaulting to 1000
[  303.084476][T12119] lo speed is unknown, defaulting to 1000
[  303.174112][T12128] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1694'.
[  303.177597][T12128] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1694'.
[  303.187739][T12128] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1694'.
[  303.243706][T12119] chnl_net:caif_netlink_parms(): no params data found
[  303.455694][T12119] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.463538][T12119] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.470981][T12119] bridge_slave_0: entered allmulticast mode
[  303.479223][T12119] bridge_slave_0: entered promiscuous mode
[  303.494225][T12119] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.503219][T12119] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.508531][T12119] bridge_slave_1: entered allmulticast mode
[  303.516565][T12119] bridge_slave_1: entered promiscuous mode
[  303.627428][T12141] __nla_validate_parse: 1 callbacks suppressed
[  303.627442][T12141] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1697'.
[  303.637481][T12119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  303.644757][T12119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  303.651698][T12141] 0: renamed from hsr0
[  303.666048][T12141] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  303.671557][T12141] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  303.675442][T12141] 0: entered allmulticast mode
[  303.677408][T12141] hsr_slave_0: entered allmulticast mode
[  303.681079][T12143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1697'.
[  303.684584][T12141] hsr_slave_1: entered allmulticast mode
[  303.688041][T12141] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  303.821161][T12119] team0: Port device team_slave_0 added
[  303.834249][T12119] team0: Port device team_slave_1 added
[  303.931079][T12119] batman_adv: batadv0: Adding interface: batadv_slave_0
[  303.933532][T12119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  303.945085][T12147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1699'.
[  303.966341][T12119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  303.985733][T12119] batman_adv: batadv0: Adding interface: batadv_slave_1
[  303.990783][T12119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.002983][T12119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  304.303285][T12119] hsr_slave_0: entered promiscuous mode
[  304.324631][T12119] hsr_slave_1: entered promiscuous mode
[  304.503803][T12163] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma?
[  304.928542][   T54] Bluetooth: hci3: command tx timeout
[  304.958761][ T5862] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.312547][T12193] netlink: 'syz.3.1711': attribute type 1 has an invalid length.
[  306.348911][T12193] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.1711'.
[  306.356952][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1711'.
[  306.428894][ T9811] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  307.010112][   T54] Bluetooth: hci3: command tx timeout
[  307.542586][ T5862] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.908444][ T5862] bridge_slave_1: left allmulticast mode
[  307.910230][ T5862] bridge_slave_1: left promiscuous mode
[  307.912052][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.917183][ T5862] bridge_slave_0: left allmulticast mode
[  307.923104][ T5862] bridge_slave_0: left promiscuous mode
[  307.925318][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.258154][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  308.263993][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  308.269301][ T5862] bond0 (unregistering): Released all slaves
[  308.579872][ T5862] hsr_slave_0: left promiscuous mode
[  308.582619][ T5862] hsr_slave_1: left promiscuous mode
[  308.585335][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  308.588353][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0
[  308.592669][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  308.595524][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1
[  308.620461][ T5862] veth1_macvtap: left promiscuous mode
[  308.622738][ T5862] veth0_macvtap: left promiscuous mode
[  308.625029][ T5862] veth1_vlan: left promiscuous mode
[  308.627123][ T5862] veth0_vlan: left promiscuous mode
[  309.075827][ T5862] team0 (unregistering): Port device team_slave_1 removed
[  309.102820][   T54] Bluetooth: hci3: command tx timeout
[  309.120678][ T5862] team0 (unregistering): Port device team_slave_0 removed
[  309.849859][ T5862] bridge_slave_1: left allmulticast mode
[  309.851854][ T5862] bridge_slave_1: left promiscuous mode
[  309.853756][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.857591][ T5862] bridge_slave_0: left allmulticast mode
[  309.860377][ T5862] bridge_slave_0: left promiscuous mode
[  309.862287][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.965921][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  309.970581][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  309.974526][ T5862] bond0 (unregistering): Released all slaves
[  310.113888][ T5862] hsr_slave_0: left promiscuous mode
[  310.116687][ T5862] hsr_slave_1: left promiscuous mode
[  310.119833][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0
[  310.123304][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1
[  310.294616][ T5862] team0 (unregistering): Port device team_slave_1 removed
[  310.317887][ T5862] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
01:22:06  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffffff81729b12 RCX=d929e271efb70000 RDX=0000000000000000
RSI=ffffffff81729b12 RDI=1ffffffff1c27dcc RBP=ffffffff81729af5 RSP=ffffc90000007578
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc90000007758 R11=ffffffff81acf6a0
R12=0000000000000002 R13=ffffffff8e13ee60 R14=ffffffff8e13ee60 R15=0000000000000000
RIP=ffffffff8223cc86 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f36c5935fc8 CR3=000000003c21e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=b00350d6e0100014 90031d8004148003
XMM02=030fffffffffffff 0416c00302100016 XMM03=0016e00302808080 80808080100016d0
XMM04=0016800401000000 0806060155f00008 XMM05=011c801000168004 0100000008060601
XMM06=55f000080016e003 0280808080808080 XMM07=100016d0030fffff ffffffff0416c003
XMM08=02100016b00350d6 e010001490031d80 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff888136632f58 RCX=1ebe39e153d6b600 RDX=0000000000000000
RSI=ffffffff8be28fa0 RDI=ffffffff8be28f60 RBP=ffffffff81729af5 RSP=ffffc9000329ecd8
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc9000329eeb8 R11=ffffffff81acf6a0
R12=0000000000000002 R13=ffffffff8e13ee60 R14=ffffffff8dbbcc68 R15=dffffc0000000000
RIP=ffffffff81a7237e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8ebfce7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f8ebf1846a3 00007f8ebf1846a3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0108100000046208 0000080001000000
XMM06=08060a016cbc0208 0000030010000100 XMM07=0002080624100020 808082100001c080
XMM08=100000040c0140d8 0891901000188004 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
