last executing test programs:

1m7.817657839s ago: executing program 4 (id=187):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x20050800) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x20050800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff9}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff9}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x8, 0x6, 0x678, 0x0, 0x370, 0x270, 0xd0, 0x488, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @private2, [], [], 'pimreg0\x00', 'nicvf0\x00'}, 0x0, 0x178, 0x1a0, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {}, 'netpci0\x00', {}, 0x0, 0x15}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'gretap0\x00', {}, 0x0, 0x10}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'dvmrp1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'\x00', <r4=>0x0})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r5, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r5, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14)
getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x4000)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m7.566982563s ago: executing program 4 (id=192):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000000214a1002abd700002dcdfa508000100000000000900020073797a3200b9f12e750946000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800c0504a5fd2145ad2dbdf2507000000", @ANYRES32=0x0], 0x18}}, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000040)=0x3, 0x4)

49.555978331s ago: executing program 4 (id=192):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000000214a1002abd700002dcdfa508000100000000000900020073797a3200b9f12e750946000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800c0504a5fd2145ad2dbdf2507000000", @ANYRES32=0x0], 0x18}}, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000040)=0x3, 0x4)

29.062869556s ago: executing program 4 (id=192):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000000214a1002abd700002dcdfa508000100000000000900020073797a3200b9f12e750946000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800c0504a5fd2145ad2dbdf2507000000", @ANYRES32=0x0], 0x18}}, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000040)=0x3, 0x4)

17.350050928s ago: executing program 4 (id=192):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000000214a1002abd700002dcdfa508000100000000000900020073797a3200b9f12e750946000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800c0504a5fd2145ad2dbdf2507000000", @ANYRES32=0x0], 0x18}}, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000040)=0x3, 0x4)

6.731776933s ago: executing program 4 (id=192):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000000214a1002abd700002dcdfa508000100000000000900020073797a3200b9f12e750946000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800c0504a5fd2145ad2dbdf2507000000", @ANYRES32=0x0], 0x18}}, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000040)=0x3, 0x4)

3.242769404s ago: executing program 3 (id=692):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xc}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x464, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x438, 0x2, [@TCA_U32_SEL={0x434, 0x5, {0x7, 0x5, 0x5, 0x800, 0x0, 0x1, 0x8001, 0x9881, [{0x9e5bd32, 0x1, 0x5, 0xb7}, {0xc57, 0x3, 0x6, 0x9e}, {0xd, 0x0, 0x9, 0x80}, {0x5, 0x6, 0x3ff, 0x8373}, {0x6, 0x80000001, 0x9, 0x1}, {0x8, 0x7, 0x5, 0xf}, {0x6, 0x4280, 0x5, 0x5}, {0x1c0, 0x6, 0xd, 0x6}, {0x177, 0x1, 0x3fe, 0x3}, {0x7fffffff, 0x8, 0x4}, {0x9, 0x8000, 0xffff7fff, 0x5}, {0x68b, 0x6, 0x4, 0x2}, {0x9, 0x401, 0xfff, 0x476c3022}, {0x7, 0x0, 0xffe6, 0x8001}, {0x9, 0x9, 0x7f, 0x26}, {0x0, 0xfffff800, 0x7fffffff, 0x2}, {0xa14e, 0x8c, 0x2, 0x2}, {0x10001, 0x2, 0x3, 0x4}, {0x6, 0x6, 0x1, 0x81}, {0x9, 0x0, 0x8, 0x3}, {0x7, 0x3, 0x1}, {0x4, 0x6, 0xff000, 0x7ab06392}, {0x7, 0x80000001, 0x6, 0xf7}, {0x4, 0x7, 0x45d, 0xe}, {0x7fff, 0x10000, 0x806, 0x3}, {0xffffff18, 0x9, 0x6d1, 0x2}, {0x29b, 0x5, 0x1dd, 0x6}, {0x6, 0xfffffff9, 0x1, 0x11a}, {0x0, 0xc0, 0x5, 0x2}, {0x39, 0x8, 0x18, 0x4}, {0x9a85, 0xfffffffe, 0x400, 0x9}, {0x8, 0x2736, 0x4c, 0x71}, {0x9, 0x2, 0x5, 0x1af6}, {0x7ff, 0x6, 0x0, 0x5}, {0x3, 0x5, 0x8001, 0x7}, {0x2, 0xfffffffd, 0x1, 0x6}, {0xffffff25, 0xfff, 0xf, 0x3}, {0x1800, 0x7c6, 0x7fffffff, 0x1}, {0xd5000000, 0x9, 0x7, 0xcd}, {0x5, 0x8, 0x0, 0x8}, {0x278569b7, 0x80000000, 0xfffffff8, 0x9}, {0x1a, 0x40, 0xffff}, {0x0, 0x5, 0x6, 0xfffffff7}, {0x7, 0x1, 0x7, 0x8000}, {0x439, 0x800, 0x8000, 0x9bfc}, {0x148, 0xa07, 0x6, 0x3}, {0x1b, 0x0, 0x0, 0x16}, {0xf92, 0x80, 0x7}, {0x0, 0x8, 0x1ff, 0x9}, {0x6fc1, 0x5e, 0x3, 0x4}, {0x32, 0x400, 0x8, 0xfffffc01}, {0x6, 0x3, 0x7ff, 0xda}, {0x3, 0xfffffff8, 0x100, 0x10}, {0x3, 0xe9, 0x1, 0x9}, {0xffffffff, 0x1, 0x1, 0x8}, {0xe, 0x3, 0x8, 0x5}, {0x100, 0x5, 0xc138, 0x1000}, {0x9, 0x401, 0x5, 0x800}, {0x3, 0xb, 0x8, 0x3}, {0x4c3, 0x80000001, 0x1, 0x6a049dbf}, {0x5, 0x4, 0xe92e, 0x401}, {0x1000, 0xc0a0, 0x3, 0x100}, {0x9, 0x9, 0x4, 0x3}, {0xfffffffd, 0x80000001, 0xfffffffd, 0x1}, {0x0, 0xaa, 0x2, 0x7}, {0x4, 0x7, 0xfffffffb, 0xfffffffd}]}}]}}]}, 0x464}, 0x1, 0x0, 0x0, 0x4080}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.020694126s ago: executing program 3 (id=695):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000001340)=[{&(0x7f0000000000)="668c95a65ca031b2ba250ba6ef274a30bef8a8bda2659cd814a7d71fb16099a11c02b2fdb7850f6a6ae7e8db3041c51364ab33012f11328768436d08970824ca74107cd1aff5524a5aecd4c1a43d7f58c3af4922a3c15532263e456acb70e1376add8f939a861040eff21ffb088248802bed58fb729d0652af196f29bf06368525347947452910d20cf845c7d54db64dc1e3873762b4e1839a53dd033d84152d39a059acfd4c6e017a9cc2ece794db5e2f6b32a6e143656790e0b6bf00e72986d9c7d09b992149fe4b096e9b0511fd728f05db67a5bbc8168d1b08", 0xdb}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="11f851edace05c2a234ea8", 0xb}, {&(0x7f0000001140)="69b6aa70e02d8f5ba3c22bbcebef16a914db53d54248a491a9dad5e3a679b8f056389bb8490540c1ca84ad9e7f8b5b8657629b904754bcc7cf03a748012c07a13dd3c4592694672023ebcd51aabf1557ee579252ca46bee2be36760b311178fe8c1825a9a8e92cb7cbbf485764890dee9190349f730ab4745332812db2d2e7fd202e31ad446d5680a7da9e00587a09917c243965e123e412b76970262278ef038d416ddb44175cc5cdc6cfc5a24407df", 0xb0}, {&(0x7f0000001200)="b0192adbb04cbaf4001d548ecba581f52450f43c46e0f5939586b2126c7c77a5f8c36b041cdcc8ddf70595688ed9ca256045db855fa74744c55f4bef09f085270b334d7b859b62cab770201bdbb6bccf6614c2de36bae9a3888828b876ffe8fc52edcabb", 0x64}, {&(0x7f0000001280)="0d659f18b724a78d0d016a1a3907f0d12b1ebc1111a28eea4e6f3e93a54851796e1b4f711593f206d99188d315cc6bf25f552d5eeab731a214bed06271f489", 0x3f}, {&(0x7f00000012c0)="712c7f351078f98545d4085066ee2bb4c73bac6de8f8f70ac79a0a7ff03b71e6504ab7c92c71e53058c77010298c1817b16abb4b691865ab8d8c56e4650b6d20a53b23103a698cacbef3950b373991efd5f7236444", 0x55}], 0x7)

1.903661263s ago: executing program 3 (id=697):
r0 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r1 = socket$inet6(0xa, 0x800, 0xfffffdfc)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @local}, 0xc)
recvmmsg(r0, &(0x7f0000004000)=[{{&(0x7f0000000180)=@qipcrtr, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/154, 0x9a}, {&(0x7f00000012c0)=""/232, 0xe8}], 0x3, &(0x7f00000013c0)=""/114, 0x72}, 0x605}, {{&(0x7f0000001440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000002a00)=[{&(0x7f00000014c0)=""/205, 0xcd}, {&(0x7f00000015c0)=""/74, 0x4a}, {&(0x7f0000001640)}, {&(0x7f0000001680)=""/217, 0xd9}, {&(0x7f0000001780)=""/9, 0x9}, {&(0x7f00000017c0)=""/192, 0xc0}, {&(0x7f0000001880)=""/115, 0x73}, {&(0x7f0000001900)=""/250, 0xfa}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x9, &(0x7f0000002ac0)=""/151, 0x97}}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002b80)=""/207, 0xcf}, {&(0x7f0000002c80)=""/73, 0x49}, {&(0x7f0000002d00)=""/147, 0x93}, {&(0x7f0000002dc0)=""/190, 0xbe}, {&(0x7f0000002e80)=""/167, 0xa7}, {&(0x7f0000002f40)}], 0x6, &(0x7f0000003000)=""/4096, 0x1000}, 0x101}], 0x3, 0x40000123, &(0x7f00000040c0))
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = getuid()
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
close(r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet(0x2, 0xe38048bb2c75a565, 0x5)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@loopback, @in6=@mcast2, 0x4e24, 0x8, 0x4e20, 0x38c8, 0xa, 0xa0, 0x80, 0x2b, 0x0, r4}, {0x200, 0x3, 0x7f, 0xefd, 0xfffffffffffffc46, 0x1, 0x4, 0x8}, {0x1, 0xfffffffffffffff7, 0x8000000000000001, 0xfff}, 0xfffff6dc, 0x0, 0x2, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4d6, 0x32}, 0x7, @in=@local, 0x0, 0x0, 0x2, 0x0, 0x80000000, 0x0, 0x1}}, 0xe8)
socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)

1.9028445s ago: executing program 1 (id=698):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_MASK={0x1c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1b}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) (async)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x130, 0x13, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_OBJ_USERDATA={0x62, 0x8, "eea99397d102b8d38c346aaa3896386244b05d669a202686afc1f94eac2b3f51347a509af874d768e5c7ec5855459302a7d33124cf364ea7946b39586d0b871c3425412ff66f3102dbcbb4c063e99644c67c6cb930f5cb2aa3ca200e78a0"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x7f, 0x8, "ead45876051b3aaee6aedfa9fd26dae3f49c937f1b86a72fc53adface4b6145fb235d6377735cd0e38dc5cde89e274b77f34ce4fefdfac8f8a496ec5b6b3f2513a3e06812b33171f07adddacc81f3eee262de14b19659e59665576653a44d7470246f67cba77bfef4d0786e4a6be21ef446cea16f0bd2d106bb19e"}]}, 0x130}}, 0x48000)

1.859997645s ago: executing program 2 (id=699):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000600)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x14, 0x0, 0x2, 0x1e, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_x_sec_ctx={0x15, 0x18, 0xf3, 0x8, 0x9c, "b56ab12ee5fc4c99b2c72965cc02ee7a8ad0a78ef86a954865bca94a3d983ad21caff9a6943251b3af62ea34db74fa960887d61141af120a50b6d04a7d9872fb9d2b8c2651e31122f9a508a3288a44fb0dcea4cc07460c4eef1011eaec7a474560ccead04cabdadc3cf8739359362baaf4bb4de1f51777b9c7be14070d162786889b9b740ef76d94ab60c95a065a8552074e8791240a6c6843b19e09"}, @sadb_sa={0x2, 0x1, 0xfffffffd, 0x0, 0x0, 0x8}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0xf0}, 0x1, 0x7}, 0x0)

1.800485768s ago: executing program 3 (id=700):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x268, 0x1, 0x5, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x6}, 0x81, 0x0, 0x7, 0x800, 0x8, 'syz1\x00', "ba34d459039550206fca97d92ad8b1f4fd02ffa5ac236232a2ae9313642c7c52", "2e5153c04c59cd6a8ce8f4758ba1d83532000000008c0c00", [{0x6, 0xf0c6, {0x0, 0x2844}}, {0x1, 0x1, {0x0, 0x9}}, {0x90, 0x7d, {0x2, 0x9}}, {0xffff, 0xff, {0x3, 0xb31}}, {0x0, 0x85ec, {0x1, 0x3000}}, {0x100, 0xcf, {0x2, 0xff}}, {0x8ffe, 0xbe20, {0x2, 0xd9}}, {0x3, 0x1, {0x3, 0x89a}}, {0x1, 0x6, {0x3, 0x7fff}}, {0x1, 0x4, {0x0, 0x8}}, {0x5, 0x1, {0x0, 0x78cc8ffb}}, {0x6, 0x1, {0x2}}, {0x5, 0x3, {0x3, 0xb5c7}}, {0x1, 0x4, {0x2, 0x1}}, {0x7, 0x2, {0x0, 0x7fffffff}}, {0x6, 0x0, {0x1, 0x9}}, {0x8fd, 0x8, {0x1, 0x158}}, {0xfa, 0x2, {0x3, 0x6}}, {0x3, 0x9, {0x3, 0x3ff}}, {0x8, 0xffff, {0x3, 0x9}}, {0x0, 0xa, {0x2, 0x3}}, {0x4, 0x5, {0x1, 0xe}}, {0x2e, 0xae, {0x3, 0xcdc}}, {0xfffe, 0x100, {0x3, 0x5}}, {0x95, 0x7, {0x3, 0x10001}}, {0x6, 0x0, {0x3, 0x100}}, {0x5, 0x2, {0x0, 0x3}}, {0x7, 0x9, {0x0, 0x3}}, {0x2, 0x5, {0x1, 0x80000000}}, {0xfa, 0x8, {0x3, 0x2}}, {0x4, 0x800, {0x3, 0x9}}, {0x3, 0x4, {0x2, 0x8000}}, {0xfffd, 0x10, {0x1, 0x5}}, {0x0, 0x1d07, {0x1, 0x6}}, {0x2, 0xe6, {0x1}}, {0x7fff, 0xec, {0x0, 0x1}}, {0x7, 0x3, {0x2, 0x2189}}, {0x401, 0x9, {0x3, 0x4}}, {0x401, 0xa, {0x0, 0x3}}, {0x4, 0x1, {0x3, 0x3}}]}}}]}, 0x268}}, 0x40880)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in6=@private0}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x170}}, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000000))

1.727040908s ago: executing program 1 (id=702):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x49}, @TCA_IFE_METALST={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
listen(r3, 0x5) (async)
r4 = accept4(r3, 0x0, 0x0, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[], 0x0, 0x36, 0x0, 0x0, 0x3, 0x0, @void, @value}, 0x28) (async)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async)
getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000001440)={0x0, 0x8, 0x10000, 0x2, 0xfffe, 0x8001, 0x8, 0x3, {0x0, @in={{0x2, 0x4e23, @loopback}}, 0x5, 0x800, 0x3, 0x4, 0xffff}}, &(0x7f0000000180)=0xb0) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x40, 0x25dfdbfb, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x0)

1.725706614s ago: executing program 2 (id=703):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$sock_int(r0, 0x28, 0x1, 0x0, &(0x7f0000000080))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={0x14, r2, 0xcc071acbf25dbf8f}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)

1.65864495s ago: executing program 3 (id=704):
r0 = socket(0x11, 0x800000003, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0xfffffffffffffe10, &(0x7f0000000400)="e6", 0x9, 0x49, 0x46d, 0xa0f, 0x0, 0x2, 0x7, 'syz1\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x4}, {0xc}}}, 0x24}}, 0x40004)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4)
r4 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x9a3, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet6_udp_int(r4, 0x11, 0xb, &(0x7f00000001c0)=0x200, 0x4)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'vxcan0\x00', <r5=>0x0})
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r5}, 0x10)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
accept$unix(r7, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x40)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0xec0, 0x2c, 0xd27, 0x30bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0xe94, 0x2, [@TCA_BPF_ACT={0x4}, @TCA_BPF_ACT={0xe84, 0x1, [@m_mirred={0x30, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x2, 0x5, 0x4, 0x7fffffff}, 0x5, 0x9}, [{0x6, 0x0, 0x7, 0x3, 0x10000, 0x4}, {0x5, 0x10000000, 0x3, 0x5, 0xd, 0x5}, {0xb, 0xfffff800, 0x5, 0x2, 0xe, 0x8}, {0x986f, 0x9, 0x8, 0x401, 0x20a, 0x7f}, {0x8, 0x6, 0x6, 0x7fff, 0x38000000, 0x3}, {0x7, 0xfff, 0x4, 0x9, 0x3ff, 0x6}, {0x8, 0x1, 0x8, 0x6, 0x3, 0x4}, {0x1, 0x100, 0x81, 0x7}, {0x4, 0x0, 0x8, 0x8, 0x100, 0x3d6}, {0x2, 0x0, 0x3d, 0x80000000, 0x5, 0x80000000}, {0x5, 0x81, 0x7, 0x1000, 0x7, 0xc3d}, {0x1, 0x0, 0x1, 0xbb, 0x5, 0x7}, {0x1, 0x4, 0x8, 0x8, 0x7, 0xfffff000}, {0x8b6b, 0x8f2e, 0xfffff7b4, 0x7f, 0x21c7, 0x2000}, {0xfff, 0xffffffff, 0x1, 0x5, 0x100, 0x5}, {0x81, 0x5, 0xd799, 0x7fff, 0x9, 0x7}, {0x1000, 0x401, 0x5, 0x7, 0x7fff, 0xfffffffc}, {0x40, 0x8001, 0x2, 0x3, 0x7, 0x7fff}, {0xfcc8, 0x600, 0x9fe, 0x9bbd, 0x8, 0x6}, {0x566c, 0x49, 0x2, 0xd, 0x3ff, 0x5}, {0x1, 0x7ff, 0xfffffffb, 0x2, 0x6, 0x5}, {0xce, 0x3, 0xf, 0x5, 0x8001, 0x4}, {0x9, 0x6, 0x0, 0x5, 0x2, 0x3}, {0x4, 0x800000, 0x1, 0x1, 0x7, 0xbc}, {0x80000000, 0x1, 0x0, 0x18000000, 0x0, 0x6}, {0x7, 0x59, 0x5, 0xb211, 0xf4d7, 0x6}, {0x5, 0x200, 0x7fe00000, 0x6, 0x80000000, 0x8c9}, {0xfffffffe, 0x5, 0x2, 0x1, 0xec, 0x7ff}, {0x73, 0x1, 0x7, 0x66, 0x9, 0x10}, {0x4, 0x7fffffff, 0x4, 0x401, 0x3, 0xffffffd9}, {0x170b, 0x9, 0x8, 0xc, 0x8, 0x10}, {0x1000, 0x4b5b, 0x7019, 0x0, 0x8, 0xff}, {0x10000, 0x7, 0x9, 0xefd, 0x7, 0x10000}, {0x55, 0x8, 0x0, 0x2, 0x8, 0x7fff}, {0x1000, 0x3, 0x8, 0x3c, 0x7ff, 0x1ff}, {0xfa9, 0x9, 0x80000001, 0x2, 0x872, 0x9}, {0x0, 0xf, 0xfff, 0x0, 0x1, 0x2}, {0x6, 0x3, 0x0, 0x7, 0x9, 0x40}, {0x6, 0x7, 0x6, 0x8, 0x4, 0xf2}, {0x3, 0x3, 0xfffffff7, 0x8, 0x5, 0x4}, {0x9, 0x6, 0x8, 0x3, 0x1ff, 0x79}, {0x5, 0x80000001, 0x2c00000, 0x80000000, 0xf3}, {0x401, 0x10, 0x7fff, 0x1000, 0x6, 0xffffffff}, {0x1, 0x80000000, 0xfffffffd, 0x4, 0x0, 0x2}, {0x1, 0x10001, 0x0, 0x7, 0x6, 0x80000000}, {0xffff7014, 0x1, 0x56b, 0x2, 0x8001, 0x7}, {0xf7, 0x9, 0x6, 0x400, 0xe}, {0x4, 0x2, 0x4, 0x53, 0x1, 0x81}, {0xb0ea, 0x9, 0x3, 0x9, 0x9, 0x8}, {0x5, 0xffffffff, 0x2, 0x3, 0x80000001, 0x8000}, {0x9, 0xf, 0x3, 0x81, 0x2, 0x6}, {0x7, 0x1, 0x3f4, 0x3, 0xb, 0x6}, {0x8, 0x7ff, 0xffffffff, 0x550, 0x2, 0x5}, {0x4, 0x8, 0xc22, 0x400, 0x3, 0xffff}, {0x82, 0x5dc, 0x5, 0x7, 0x2, 0x2}, {0x9, 0x8, 0x2, 0x4, 0x1, 0x400}, {0xfffffff5, 0x7, 0xfffffff7, 0xc, 0x6, 0x55f6}, {0xdf7, 0x10001, 0x4, 0x8, 0x8, 0x7}, {0x1, 0x5, 0xfffffffe, 0x7, 0x2, 0x2}, {0x7, 0xfffffffc, 0x96, 0xfffffffc, 0x9, 0x200}, {0xfffffff8, 0x71, 0x6, 0x9a0000, 0x516, 0xad9b}, {0x8, 0x1, 0x5277b744, 0x888, 0x3, 0x1}, {0x6, 0x1, 0x9, 0x2, 0x2}, {0x4, 0x7, 0xf6eb, 0x5, 0x4, 0xf}, {0xbb1, 0x0, 0xffffffff, 0x7, 0x5, 0x964}, {0x6, 0x9f07, 0x6, 0x8, 0x3, 0xd}, {0xbbe0, 0x5, 0x401, 0x8, 0xfff, 0x401}, {0x9, 0x2, 0x221, 0xf7a, 0x7fff, 0x80000000}, {0x8, 0x7, 0x7, 0x9, 0x401, 0x3}, {0x5, 0x7, 0x1, 0x0, 0x1, 0x3}, {0x8000, 0x2, 0x800, 0x9, 0xfff, 0xfffff801}, {0x81, 0x7, 0x0, 0x1, 0x3}, {0xfffffffd, 0xfff, 0xfffffffc, 0x8000, 0x0, 0x9}, {0x5, 0x40, 0x4, 0x7, 0xffffff01, 0x7}, {0x8, 0x3, 0x800, 0x4774, 0x8, 0xfffffff8}, {0x2, 0x6ae7e612, 0xb, 0x3ff, 0xb5, 0x8001}, {0x0, 0x1, 0x2, 0x200, 0x9e, 0x1000}, {0x6, 0x10, 0x2, 0x6, 0xbd, 0x4}, {0x3, 0x0, 0xa27, 0x4, 0x9, 0x3}, {0xd, 0x9ca7, 0x3cfd, 0x4, 0x8, 0x43}, {0xc, 0x91f, 0x8, 0xd9b, 0xac73, 0x8}, {0x4, 0x8, 0xa3fa, 0x800, 0x4, 0x200}, {0x8000, 0x6, 0x829, 0x9, 0x2, 0x7}, {0x6, 0x9db2, 0xd, 0x6, 0x6, 0x40000}, {0x1, 0xfffff509, 0x34f5, 0x7, 0x8, 0x5}, {0x13e0, 0x4, 0x84, 0x200, 0x7f, 0x2}, {0x7, 0x1, 0x0, 0x7, 0x5, 0x7}, {0x8, 0x1, 0x6, 0x6, 0x10, 0x5}, {0x8, 0x3, 0xf0, 0xb, 0x2, 0x1}, {0x7, 0x10, 0x3, 0x0, 0x6, 0xffffffff}, {0x9cb, 0x8000, 0xf, 0x9816, 0x8000, 0xfffffffc}, {0x6, 0x1, 0x5, 0x7f, 0x8, 0x7fff}, {0x0, 0x2, 0x6, 0x5, 0x8, 0x9}, {0x3, 0xf, 0xa663, 0xcf, 0x8000, 0x6}, {0x40, 0x5, 0x6070dfb8, 0xe, 0x1, 0x8}, {0x3, 0xfffffff1, 0x2, 0x3, 0x3, 0x6a0c}, {0xe, 0x3, 0x6, 0x5, 0xf, 0x3}, {0x3, 0x9, 0x6, 0x2, 0x3, 0x8}, {0x2, 0x6, 0x0, 0x8, 0x400, 0x100}, {0x401, 0xd9d2, 0x101, 0x80000000, 0xab26, 0x9}, {0x9, 0x400, 0x1520, 0x4, 0x1, 0xd}, {0x39f720c4, 0x56e, 0x3, 0xff, 0x8c, 0x2}, {0x2, 0x81, 0x4, 0x0, 0x1, 0x1}, {0x947, 0x4, 0xffffff01, 0x9, 0x4, 0x1}, {0x8, 0x5, 0x1, 0xff, 0x518, 0x4}, {0x6, 0x3, 0x6, 0x4, 0x8, 0x6}, {0xfe, 0x5, 0xff, 0xf, 0xff, 0x5c3}, {0x800, 0x2e, 0x9, 0x7fffffff, 0x2}, {0x4, 0x80000001, 0x400, 0x100, 0x6b, 0x8}, {0x3, 0x49e5, 0xfffffff2, 0x8001, 0xddae, 0xa}, {0x4, 0x855, 0x401, 0xff, 0x8, 0x4}, {0x2, 0x8, 0x4, 0x6, 0x0, 0x8}, {0xc2, 0xb7c, 0xd, 0x8d, 0x2, 0x3}, {0x5, 0x3, 0xa, 0x3, 0x4, 0x3}, {0x4, 0x3ff, 0x8, 0x101, 0x0, 0x1db7429d}, {0x7, 0x7, 0x7ff, 0x3, 0x10001, 0x1}, {0x9, 0x10001, 0x989, 0xa617, 0x3, 0xd372}, {0x5, 0x5, 0x9, 0x869, 0x3, 0x7fd}, {0x6, 0xea01, 0x86, 0x80000001, 0x0, 0x1}, {0x0, 0x2, 0x6, 0x2, 0x0, 0x10000}, {0x9, 0x40, 0x4, 0x81, 0x3}, {0xfffffffa, 0x0, 0x76d3c5fd, 0xe6, 0x6, 0x6}, {0x7, 0x4, 0x1cbe, 0x400, 0x8, 0x2}, {0x7, 0xc, 0xbc8, 0x5, 0x2d2a, 0x4}, {0x6, 0xfffffffd, 0x80000001, 0x0, 0xed, 0x3}, {0x80, 0x80000001, 0x3, 0x78ae, 0x31e0, 0x4}, {0x0, 0x6, 0x3ff, 0x45, 0x8, 0x7}, {0x6, 0x3, 0x0, 0xd2, 0x8, 0x7}], [{0x4}, {0x3, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x7}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {}, {}, {0x4}, {0x4}, {0x3}, {0x2}, {0x4, 0x1}, {0x1, 0x2}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x6ecfc73dd306b8f1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x3}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x3acf810dfce504a0}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x72782a7e8684aecc}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x4}, {}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x7}, {0x4}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x2}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FD={0x8}]}}]}, 0xec0}, 0x1, 0x0, 0x0, 0x10}, 0x4048884)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'sit0\x00', <r10=>0x0, 0x10, 0x8, 0x24, 0x7fff, {{0x14, 0x4, 0x0, 0x5, 0x50, 0x65, 0x0, 0xc, 0x29, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x23, 0xdf, [@rand_addr=0x64010102, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @multicast1, @rand_addr=0x64010101, @local]}, @rr={0x7, 0x13, 0x7c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @remote]}, @generic={0x44, 0x4, "065d"}]}}}}})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="660a00000000000061117100000000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000980)={'batadv0\x00', <r11=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000c80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f00000016c0)={0x24c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000000)

1.604480234s ago: executing program 1 (id=705):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xc}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x464, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x438, 0x2, [@TCA_U32_SEL={0x434, 0x5, {0x7, 0x5, 0x5, 0x800, 0x0, 0x1, 0x8001, 0x9881, [{0x9e5bd32, 0x1, 0x5, 0xb7}, {0xc57, 0x3, 0x6, 0x9e}, {0xd, 0x0, 0x9, 0x80}, {0x5, 0x6, 0x3ff, 0x8373}, {0x6, 0x80000001, 0x9, 0x1}, {0x8, 0x7, 0x5, 0xf}, {0x6, 0x4280, 0x5, 0x5}, {0x1c0, 0x6, 0xd, 0x6}, {0x177, 0x1, 0x3fe, 0x3}, {0x7fffffff, 0x8, 0x4}, {0x9, 0x8000, 0xffff7fff, 0x5}, {0x68b, 0x6, 0x4, 0x2}, {0x9, 0x401, 0xfff, 0x476c3022}, {0x7, 0x0, 0xffe6, 0x8001}, {0x9, 0x9, 0x7f, 0x26}, {0x0, 0xfffff800, 0x7fffffff, 0x2}, {0xa14e, 0x8c, 0x2, 0x2}, {0x10001, 0x2, 0x3, 0x4}, {0x6, 0x6, 0x1, 0x81}, {0x9, 0x0, 0x8, 0x3}, {0x7, 0x3, 0x1}, {0x4, 0x6, 0xff000, 0x7ab06392}, {0x7, 0x80000001, 0x6, 0xf7}, {0x4, 0x7, 0x45d, 0xe}, {0x7fff, 0x10000, 0x806, 0x3}, {0xffffff18, 0x9, 0x6d1, 0x2}, {0x29b, 0x5, 0x1dd, 0x6}, {0x6, 0xfffffff9, 0x1, 0x11a}, {0x0, 0xc0, 0x5, 0x2}, {0x39, 0x8, 0x18, 0x4}, {0x9a85, 0xfffffffe, 0x400, 0x9}, {0x8, 0x2736, 0x4c, 0x71}, {0x9, 0x2, 0x5, 0x1af6}, {0x7ff, 0x6, 0x0, 0x5}, {0x3, 0x5, 0x8001, 0x7}, {0x2, 0xfffffffd, 0x1, 0x6}, {0xffffff25, 0xfff, 0xf, 0x3}, {0x1800, 0x7c6, 0x7fffffff, 0x1}, {0xd5000000, 0x9, 0x7, 0xcd}, {0x5, 0x8, 0x0, 0x8}, {0x278569b7, 0x80000000, 0xfffffff8, 0x9}, {0x1a, 0x40, 0xffff}, {0x0, 0x5, 0x6, 0xfffffff7}, {0x7, 0x1, 0x7, 0x8000}, {0x439, 0x800, 0x8000, 0x9bfc}, {0x148, 0xa07, 0x6, 0x3}, {0x1b, 0x0, 0x0, 0x16}, {0xf92, 0x80, 0x7}, {0x0, 0x8, 0x1ff, 0x9}, {0x6fc1, 0x5e, 0x3, 0x4}, {0x32, 0x400, 0x8, 0xfffffc01}, {0x6, 0x3, 0x7ff, 0xda}, {0x3, 0xfffffff8, 0x100, 0x10}, {0x3, 0xe9, 0x1, 0x9}, {0xffffffff, 0x1, 0x1, 0x8}, {0xe, 0x3, 0x8, 0x5}, {0x100, 0x5, 0xc138, 0x1000}, {0x9, 0x401, 0x5, 0x800}, {0x3, 0xb, 0x8, 0x3}, {0x4c3, 0x80000001, 0x1, 0x6a049dbf}, {0x5, 0x4, 0xe92e, 0x401}, {0x1000, 0xc0a0, 0x3, 0x100}, {0x9, 0x9, 0x4, 0x3}, {0xfffffffd, 0x80000001, 0xfffffffd, 0x1}, {0x0, 0xaa, 0x2, 0x7}, {0x4, 0x7, 0xfffffffb, 0xfffffffd}]}}]}}]}, 0x464}, 0x1, 0x0, 0x0, 0x4080}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.503989063s ago: executing program 2 (id=706):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = getpid()
ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000180)=r3) (async)
sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)="6786550c", 0x4}], 0x1}, 0x11) (async)
setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000100)=0x4f, 0x4) (async)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_buf(r4, 0x6, 0xb, &(0x7f0000000000)=""/22, &(0x7f0000000040)=0x16) (async)
ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000c40))
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000005c0)) (rerun: 64)
getsockopt$inet_tcp_buf(r4, 0x6, 0xe, &(0x7f00000000c0)=""/11, &(0x7f0000000140)=0xb)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4)

1.39539552s ago: executing program 2 (id=707):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) (async)
r1 = accept4(r0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000001640), 0x4) (async)
sendmsg$unix(r2, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x40) (async)
listen(r2, 0x0) (async)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) (async)
recvmmsg(r1, &(0x7f0000000a00)=[{{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/38, 0x26}, {&(0x7f0000000140)=""/233, 0xe9}, {&(0x7f00000002c0)=""/204, 0xcc}, {&(0x7f00000003c0)=""/92, 0x5c}], 0x4, &(0x7f0000000480)=""/156, 0x9c}, 0x3}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000000580)=""/22, 0x16}, {&(0x7f0000000600)=""/150, 0x96}, {&(0x7f00000006c0)=""/219, 0xdb}, {&(0x7f00000007c0)=""/58, 0x3a}, {&(0x7f0000000800)=""/141, 0x8d}], 0x6, &(0x7f0000000940)=""/137, 0x89}}], 0x2, 0x0, &(0x7f0000000a80)={0x0, 0x3938700}) (async)
sendmmsg$unix(r1, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x10, 0x117, 0x2}}], 0x10, 0x840}}], 0x1, 0x30004800)

1.274458484s ago: executing program 1 (id=708):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1ff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0)
sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00'})
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[], 0x44}}, 0x0)

1.26294422s ago: executing program 0 (id=709):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={[0x6]}, 0x8})
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000055003d0902000000fcdbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010301000700000000000000000000000000000008"], 0x38}}, 0x4000000)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6a}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "5664a1a47b0490e0828ed714a72bca3f"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x58}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "c63b2e8b0e8f936b656c1cf056e631f5"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4004)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x90}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r7=>0x0})
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x3c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x30, r5, 0x200, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "ced67e75c6458b0b9c55e4a35ed2aaae"}]}, 0x30}}, 0x44800)

1.139956016s ago: executing program 2 (id=710):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.055121147s ago: executing program 1 (id=711):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@map, 0xffffffffffffffff, 0x1d, 0x0, 0x0, @void, @value}, 0x20)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0)

1.001450216s ago: executing program 2 (id=712):
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000180)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x9cdc2384056b48b8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x58)

939.769212ms ago: executing program 3 (id=713):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f00000027c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r4, 0x70f, 0x0, 0x0, {{}, {@void, @val={0x8, 0xe}, @val={0xc, 0x99, {0x0, 0x39}}}}}, 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r2, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x4, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x9, 0x9, 0x0, 0x9, 0xac6d]}}]}]}]}, 0x38}}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x78, 0x3, 0x7, 0x801, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5e}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffff9}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x4804}, 0x40040)
socket$rds(0x15, 0x5, 0x0)

813.307581ms ago: executing program 1 (id=714):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x20, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffffff, 0x5}]}}}}}}}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0xffe}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MTU={0x8, 0x4, 0x8}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4010}, 0x0)

787.955114ms ago: executing program 0 (id=715):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0x11, 0x148, 0x0, 0x10, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x11, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xfffc, 0x0, 0x0, 'syz0\x00', 'syz1\x00', {0x9}}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'veth1_to_hsr\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x510)
r1 = socket(0x10, 0x3, 0x400000)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000580)={r2, 0x7fff, 0x5, 0x401})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)
getpeername$packet(r1, &(0x7f0000000540)={0x11, 0x0, <r3=>0x0}, &(0x7f0000000640)=0x24)
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={r3, @empty, @broadcast}, 0xc)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r4}, 0x8)

552.054254ms ago: executing program 32 (id=714):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x20, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffffff, 0x5}]}}}}}}}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0xffe}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MTU={0x8, 0x4, 0x8}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4010}, 0x0)

503.699167ms ago: executing program 0 (id=717):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
clock_gettime(0x0, &(0x7f0000000280))
recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x2000, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000e14012508003c0005000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x844}, 0x4000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd)
close(r1)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
shutdown(r3, 0x0)
recvmsg$unix(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {<r4=>0x0}}}, @cred={{0x1c}}], 0x40}, 0x60c2)
syz_open_procfs$namespace(r4, 0x0)
pipe(&(0x7f0000000180)={<r5=>0xffffffffffffffff})
sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = getpid()
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r8, &(0x7f0000000340)='FREEZING\x00', 0x9)
syz_open_procfs$namespace(r6, &(0x7f0000000040)='ns/time_for_children\x00')
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
gettid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f00000001c0)=0xc)
getgid()
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002680)={0x1}, 0x4)
gettid()
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in=@local, @in=@remote}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f00000027c0)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002800), &(0x7f0000002840)=0xc)

403.772906ms ago: executing program 0 (id=718):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xc}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x464, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x438, 0x2, [@TCA_U32_SEL={0x434, 0x5, {0x7, 0x5, 0x5, 0x800, 0x0, 0x1, 0x8001, 0x9881, [{0x9e5bd32, 0x1, 0x5, 0xb7}, {0xc57, 0x3, 0x6, 0x9e}, {0xd, 0x0, 0x9, 0x80}, {0x5, 0x6, 0x3ff, 0x8373}, {0x6, 0x80000001, 0x9, 0x1}, {0x8, 0x7, 0x5, 0xf}, {0x6, 0x4280, 0x5, 0x5}, {0x1c0, 0x6, 0xd, 0x6}, {0x177, 0x1, 0x3fe, 0x3}, {0x7fffffff, 0x8, 0x4}, {0x9, 0x8000, 0xffff7fff, 0x5}, {0x68b, 0x6, 0x4, 0x2}, {0x9, 0x401, 0xfff, 0x476c3022}, {0x7, 0x0, 0xffe6, 0x8001}, {0x9, 0x9, 0x7f, 0x26}, {0x0, 0xfffff800, 0x7fffffff, 0x2}, {0xa14e, 0x8c, 0x2, 0x2}, {0x10001, 0x2, 0x3, 0x4}, {0x6, 0x6, 0x1, 0x81}, {0x9, 0x0, 0x8, 0x3}, {0x7, 0x3, 0x1}, {0x4, 0x6, 0xff000, 0x7ab06392}, {0x7, 0x80000001, 0x6, 0xf7}, {0x4, 0x7, 0x45d, 0xe}, {0x7fff, 0x10000, 0x806, 0x3}, {0xffffff18, 0x9, 0x6d1, 0x2}, {0x29b, 0x5, 0x1dd, 0x6}, {0x6, 0xfffffff9, 0x1, 0x11a}, {0x0, 0xc0, 0x5, 0x2}, {0x39, 0x8, 0x18, 0x4}, {0x9a85, 0xfffffffe, 0x400, 0x9}, {0x8, 0x2736, 0x4c, 0x71}, {0x9, 0x2, 0x5, 0x1af6}, {0x7ff, 0x6, 0x0, 0x5}, {0x3, 0x5, 0x8001, 0x7}, {0x2, 0xfffffffd, 0x1, 0x6}, {0xffffff25, 0xfff, 0xf, 0x3}, {0x1800, 0x7c6, 0x7fffffff, 0x1}, {0xd5000000, 0x9, 0x7, 0xcd}, {0x5, 0x8, 0x0, 0x8}, {0x278569b7, 0x80000000, 0xfffffff8, 0x9}, {0x1a, 0x40, 0xffff}, {0x0, 0x5, 0x6, 0xfffffff7}, {0x7, 0x1, 0x7, 0x8000}, {0x439, 0x800, 0x8000, 0x9bfc}, {0x148, 0xa07, 0x6, 0x3}, {0x1b, 0x0, 0x0, 0x16}, {0xf92, 0x80, 0x7}, {0x0, 0x8, 0x1ff, 0x9}, {0x6fc1, 0x5e, 0x3, 0x4}, {0x32, 0x400, 0x8, 0xfffffc01}, {0x6, 0x3, 0x7ff, 0xda}, {0x3, 0xfffffff8, 0x100, 0x10}, {0x3, 0xe9, 0x1, 0x9}, {0xffffffff, 0x1, 0x1, 0x8}, {0xe, 0x3, 0x8, 0x5}, {0x100, 0x5, 0xc138, 0x1000}, {0x9, 0x401, 0x5, 0x800}, {0x3, 0xb, 0x8, 0x3}, {0x4c3, 0x80000001, 0x1, 0x6a049dbf}, {0x5, 0x4, 0xe92e, 0x401}, {0x1000, 0xc0a0, 0x3, 0x100}, {0x9, 0x9, 0x4, 0x3}, {0xfffffffd, 0x80000001, 0xfffffffd, 0x1}, {0x0, 0xaa, 0x2, 0x7}, {0x4, 0x7, 0xfffffffb, 0xfffffffd}]}}]}}]}, 0x464}, 0x1, 0x0, 0x0, 0x4080}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

323.117259ms ago: executing program 0 (id=719):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a00)={0x74, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={{{}, {}, @broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x2, [{0x1}, {0x1b}]}, @void, @void, @val={0x6, 0x2, 0x1}, @val={0x2d, 0x1a}, @void, @void}}]}, 0x74}}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x20}}, 0x84)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
writev(r4, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000480)="672a65b775e19823d096145eb641c6bd22f498c8036aa132b4f24a6f7687f4026ed56f5113b91f226a6efc213d3ac896b488b9b640b32b10e6c7e378e7c44872b7c205719ca650349fe26b1891552822be62375a544be37c89c4db45371f9fe9028adb3d4c045d9a96f461b49b1772286397703f75fd5d2109f97d8d4d88592ef15a854b49d6", 0x86}, {&(0x7f0000000540)="fc618b0f9e49bd548b24922c3ef045b81fc94b1ac3fa804cf20ac6d4d2abdd0944b5a9100e186faad53f9c2da88f0a283860b5933ecde86205bab662fdb559715dda118083a15120cf931385179eed6007faedb1bd7d44366f7a7525cf2af7357ea741263907990dc7e0232ae28b2092da303e95a5c75cae1c7551fab995dba4d2873204805d50d490fab75b35b5c6cd8888b720b36f70380fbb2817e9766dff6ab21886e7a283a6eeb2c52f1916", 0xae}, {&(0x7f0000000240)}, {&(0x7f0000000640)="fc8af0cab351cc55952e7b63add7d74860b07389e7d9431fa9919cc324419cd927128dd62ab33cf53c8f62680bfeddc64e9081df62b29d", 0x37}, {&(0x7f0000000680)="705fe406108636b20d", 0x9}, {0x0, 0x3f}, {0x0}, {&(0x7f00000007c0)="fb651be2faf412f01c533ce4774c4ca2883842388083b451a5661d99f5f2b2ca7ed0", 0x22}, {&(0x7f0000000840)="e63dacfa0f9bda4fdf8c3bfccd56cb2574d569ebb380a5fa996390cd7e883d449ec34e47911418edac921fcb3ef56d4841add8a26478a5aa19dd4bfa09ba5ca2b4ab29288b93fd1bf79d1ad80263b3c98814c59e71696e4c8fe7e1123d56c0b61d23cfd63221431c8726d2a16ff7146410261a9df6eb815ac54479d5444fca7d33406ca5ac45bc30f0352db070137402f67becc4fdbc3dcb24775e98e2a266b639a6c6ae116dd964792625916ef9ee67299c22cd396cdea68ff527f1c77292d5946692146f8759d80608527f3fd9d8e8e807c5fde91e6cb7134aeffb3c24ae913cf62bccf6a33b1deab6986f72bbb46a91a01f2588", 0xf5}], 0xa)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$kcm(0xa, 0x3, 0x3a)
r8 = socket$inet6(0xa, 0x3, 0x2c)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598)
sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0xd}}, 0x80, &(0x7f0000000080)=[{&(0x7f00000007c0)="6adbd077272f3960a187", 0xa}], 0x1, 0x0, 0x0, 0x900}, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x436}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r9, 0x84, 0x4, &(0x7f0000000040)=0xa, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100200, 0x0)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
r10 = socket$igmp6(0xa, 0x3, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x15, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000001c0), &(0x7f0000000a80), 0x8, 0x56, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10)
setsockopt$MRT6_DEL_MIF(r10, 0x29, 0xcb, &(0x7f0000000600)={0xffffffffffffffff, 0x1, 0x5, r11}, 0xc)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, 0x0)
close(r5)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r12, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000003c0)={0x34, r13, 0x1, 0x70bd29, 0x0, {0x45}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x20000091)

0s ago: executing program 0 (id=720):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0xc8, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x74, 0x2, [@TCA_HTB_INIT={0xf}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}]}}, @qdisc_kind_options=@q_fq_codel={{}, {0x0, 0x2, [@TCA_FQ_CODEL_INTERVAL]}}]}, 0xc8}}, 0x0)
socket$packet(0x11, 0x2, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0xc8, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x74, 0x2, [@TCA_HTB_INIT={0xf}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}]}}, @qdisc_kind_options=@q_fq_codel={{}, {0x0, 0x2, [@TCA_FQ_CODEL_INTERVAL]}}]}, 0xc8}}, 0x0) (async)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.45' (ED25519) to the list of known hosts.
[   83.798821][ T5818] cgroup: Unknown subsys name 'net'
[   83.930856][ T5818] cgroup: Unknown subsys name 'cpuset'
[   83.940389][ T5818] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   85.652020][ T5818] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   89.523418][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   89.535127][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   89.543613][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   89.551722][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   89.557203][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   89.570971][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   89.585415][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   89.593254][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   89.612591][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   89.629886][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   89.637262][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   89.640569][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   89.645093][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   89.652679][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   89.660821][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   89.667402][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   89.674744][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   89.690238][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   89.699080][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   89.707326][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   89.716112][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   89.727239][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   89.743318][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   89.751165][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   89.762034][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   90.474941][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   90.503453][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   90.608047][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   90.733716][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   90.762143][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   90.923641][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.932290][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.940161][ T5842] bridge_slave_0: entered allmulticast mode
[   90.948340][ T5842] bridge_slave_0: entered promiscuous mode
[   90.970474][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.978266][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.985424][ T5828] bridge_slave_0: entered allmulticast mode
[   90.994644][ T5828] bridge_slave_0: entered promiscuous mode
[   91.048850][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.056111][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.064995][ T5842] bridge_slave_1: entered allmulticast mode
[   91.072474][ T5842] bridge_slave_1: entered promiscuous mode
[   91.085376][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.092684][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.099940][ T5828] bridge_slave_1: entered allmulticast mode
[   91.107638][ T5828] bridge_slave_1: entered promiscuous mode
[   91.114686][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.122097][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.129993][ T5829] bridge_slave_0: entered allmulticast mode
[   91.137910][ T5829] bridge_slave_0: entered promiscuous mode
[   91.146314][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.153681][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.161104][ T5829] bridge_slave_1: entered allmulticast mode
[   91.168707][ T5829] bridge_slave_1: entered promiscuous mode
[   91.305514][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.315520][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.323547][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.331450][ T5836] bridge_slave_0: entered allmulticast mode
[   91.339744][ T5836] bridge_slave_0: entered promiscuous mode
[   91.349295][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.357308][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.364566][ T5836] bridge_slave_1: entered allmulticast mode
[   91.372530][ T5836] bridge_slave_1: entered promiscuous mode
[   91.382378][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.408786][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.421125][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.448623][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.474832][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.524290][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.531952][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.540204][ T5838] bridge_slave_0: entered allmulticast mode
[   91.548556][ T5838] bridge_slave_0: entered promiscuous mode
[   91.588632][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.613960][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.621592][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.629172][ T5838] bridge_slave_1: entered allmulticast mode
[   91.637327][ T5838] bridge_slave_1: entered promiscuous mode
[   91.660392][ T5829] team0: Port device team_slave_0 added
[   91.669523][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.684216][ T5842] team0: Port device team_slave_0 added
[   91.707397][ T5828] team0: Port device team_slave_0 added
[   91.715990][ T5829] team0: Port device team_slave_1 added
[   91.738449][ T5842] team0: Port device team_slave_1 added
[   91.757643][ T5835] Bluetooth: hci3: command tx timeout
[   91.784080][ T5828] team0: Port device team_slave_1 added
[   91.825124][ T5836] team0: Port device team_slave_0 added
[   91.834162][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.836953][ T5835] Bluetooth: hci4: command tx timeout
[   91.849992][ T5846] Bluetooth: hci1: command tx timeout
[   91.850000][ T5835] Bluetooth: hci0: command tx timeout
[   91.850153][ T5835] Bluetooth: hci2: command tx timeout
[   91.861951][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.941247][ T5836] team0: Port device team_slave_1 added
[   91.964411][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.972313][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.000185][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.014151][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.022170][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.048506][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.062497][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.069605][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.097244][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.111436][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.118749][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.145262][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.173593][ T5838] team0: Port device team_slave_0 added
[   92.180706][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.188411][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.221192][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.245330][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.253135][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.264568][ T1209] cfg80211: failed to load regulatory.db
[   92.287297][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.314663][ T5838] team0: Port device team_slave_1 added
[   92.366271][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.373731][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.400085][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.462998][ T5828] hsr_slave_0: entered promiscuous mode
[   92.470109][ T5828] hsr_slave_1: entered promiscuous mode
[   92.479534][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.487371][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.513580][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.544725][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.551944][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.578057][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.590819][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.598105][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.625204][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.733076][ T5829] hsr_slave_0: entered promiscuous mode
[   92.740463][ T5829] hsr_slave_1: entered promiscuous mode
[   92.748030][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.755782][ T5829] Cannot create hsr debugfs directory
[   92.824284][ T5836] hsr_slave_0: entered promiscuous mode
[   92.831288][ T5836] hsr_slave_1: entered promiscuous mode
[   92.838357][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.845958][ T5836] Cannot create hsr debugfs directory
[   92.864599][ T5838] hsr_slave_0: entered promiscuous mode
[   92.871143][ T5838] hsr_slave_1: entered promiscuous mode
[   92.879269][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.887118][ T5838] Cannot create hsr debugfs directory
[   92.898495][ T5842] hsr_slave_0: entered promiscuous mode
[   92.905040][ T5842] hsr_slave_1: entered promiscuous mode
[   92.911454][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.919179][ T5842] Cannot create hsr debugfs directory
[   93.484155][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   93.503994][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   93.533352][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   93.543704][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   93.618940][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   93.646082][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   93.660666][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   93.695385][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   93.765312][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   93.776480][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   93.800074][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   93.811465][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   93.837634][ T5835] Bluetooth: hci3: command tx timeout
[   93.918726][   T56] Bluetooth: hci1: command tx timeout
[   93.924296][   T56] Bluetooth: hci0: command tx timeout
[   93.930436][ T5846] Bluetooth: hci4: command tx timeout
[   93.936010][ T5835] Bluetooth: hci2: command tx timeout
[   93.967002][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.982048][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   93.993313][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   94.029376][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   94.043274][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   94.090737][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   94.136174][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.143696][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.155784][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.163133][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.249943][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.257794][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   94.272193][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   94.283750][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   94.297569][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   94.386992][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   94.419966][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.444207][  T196] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.451434][  T196] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.478782][  T196] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.485914][  T196] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.541826][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   94.615482][  T196] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.622678][  T196] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.670869][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.713938][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.721165][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.793000][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   94.812753][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.835504][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   94.853719][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.861079][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.901892][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.909192][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.936727][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.943907][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.995908][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.003172][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.041612][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.143502][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.195241][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   95.233603][ T5828] veth0_vlan: entered promiscuous mode
[   95.298390][ T5828] veth1_vlan: entered promiscuous mode
[   95.435067][ T5828] veth0_macvtap: entered promiscuous mode
[   95.466402][ T5828] veth1_macvtap: entered promiscuous mode
[   95.562970][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.590642][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.684223][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.748788][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.760237][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.773922][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.783328][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.826413][ T5829] veth0_vlan: entered promiscuous mode
[   95.835841][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.865321][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.895793][ T5829] veth1_vlan: entered promiscuous mode
[   95.930657][ T5835] Bluetooth: hci3: command tx timeout
[   95.965328][ T5829] veth0_macvtap: entered promiscuous mode
[   96.000886][ T5835] Bluetooth: hci2: command tx timeout
[   96.006977][   T56] Bluetooth: hci0: command tx timeout
[   96.007437][ T5846] Bluetooth: hci4: command tx timeout
[   96.013101][   T56] Bluetooth: hci1: command tx timeout
[   96.036499][ T5829] veth1_macvtap: entered promiscuous mode
[   96.060621][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.069497][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.103128][ T5842] veth0_vlan: entered promiscuous mode
[   96.139835][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.151312][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.165216][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.195132][ T5842] veth1_vlan: entered promiscuous mode
[   96.201420][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.211398][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.224851][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.236579][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.249923][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.272849][ T5836] veth0_vlan: entered promiscuous mode
[   96.285308][ T5838] veth0_vlan: entered promiscuous mode
[   96.308279][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.318536][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.327585][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.336306][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.386101][ T5838] veth1_vlan: entered promiscuous mode
[   96.402938][ T5836] veth1_vlan: entered promiscuous mode
[   96.405827][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   96.445048][ T5842] veth0_macvtap: entered promiscuous mode
[   96.457061][ T5842] veth1_macvtap: entered promiscuous mode
[   96.578792][ T5836] veth0_macvtap: entered promiscuous mode
[   96.592031][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.604159][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.615533][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.628853][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.644177][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.681149][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.693374][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.705603][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.724976][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.726645][ T5914] Zero length message leads to an empty skb
[   96.737865][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.763833][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.771438][ T5838] veth0_macvtap: entered promiscuous mode
[   96.784347][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.785932][ T5836] veth1_macvtap: entered promiscuous mode
[   96.813169][ T5838] veth1_macvtap: entered promiscuous mode
[   96.857170][ T5842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.872350][ T5842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.893327][ T5842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.911135][ T5842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.018803][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.030988][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.042166][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.053143][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.063473][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.074720][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.108400][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.121093][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.135576][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.161860][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.175240][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.186152][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.199398][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.213156][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.225473][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.238337][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.263262][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.288691][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.303384][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.315808][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.317765][ T5930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7'.
[   97.331379][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.345231][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.359021][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.369826][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.382457][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.412823][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.425571][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.443567][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.455683][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.496702][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.526580][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.548546][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.560120][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.571998][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.622837][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.636995][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.645766][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.654691][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.686366][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.696870][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.705692][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.721923][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.796049][ T5938] dvmrp0: entered allmulticast mode
[   97.812125][ T5940] veth0: entered promiscuous mode
[   97.829820][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.854083][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.997374][   T56] Bluetooth: hci3: command tx timeout
[   98.049308][ T5939] veth0: left promiscuous mode
[   98.076866][   T56] Bluetooth: hci1: command tx timeout
[   98.082341][   T56] Bluetooth: hci2: command tx timeout
[   98.087948][ T5142] Bluetooth: hci4: command tx timeout
[   98.092024][ T5835] Bluetooth: hci0: command tx timeout
[   98.111273][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.177145][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.260435][ T5943] block nbd1: NBD_DISCONNECT
[   98.290774][ T5943] block nbd1: Disconnected due to user request.
[   98.302862][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.322995][ T5943] block nbd1: shutting down sockets
[   98.333849][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.503660][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.523635][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.583805][ T5957] netlink: 'syz.4.14': attribute type 1 has an invalid length.
[   98.645100][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.676355][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.884554][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.912443][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.968898][ T5963] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   99.799390][ T5996] netlink: 'syz.1.26': attribute type 2 has an invalid length.
[  100.083985][ T6011] trusted_key: syz.4.29 sent an empty control message without MSG_MORE.
[  101.085570][ T6003] unknown channel width for channel at 909000KHz?
[  101.097132][ T6003] unknown channel width for channel at 909000KHz?
[  101.337121][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'.
[  101.383923][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'.
[  101.431290][ T6021] netlink: 'syz.2.32': attribute type 3 has an invalid length.
[  101.590316][ T6027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.657668][ T6027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.722794][ T6048] netlink: 'syz.3.40': attribute type 20 has an invalid length.
[  101.821809][ T6055] netlink: 'syz.2.39': attribute type 4 has an invalid length.
[  101.830087][ T6055] netlink: 152 bytes leftover after parsing attributes in process `syz.2.39'.
[  101.903814][ T6055] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  102.069794][ T6067] netlink: 412 bytes leftover after parsing attributes in process `syz.4.43'.
[  102.102528][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.43'.
[  102.283952][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.47'.
[  102.509695][ T6082] netlink: 28 bytes leftover after parsing attributes in process `syz.4.50'.
[  102.524695][ T6082] netlink: 28 bytes leftover after parsing attributes in process `syz.4.50'.
[  102.705465][ T6087] netlink: 16 bytes leftover after parsing attributes in process `syz.2.52'.
[  102.721758][ T6087] netlink: 224 bytes leftover after parsing attributes in process `syz.2.52'.
[  103.694152][ T6081] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  103.703476][ T6081] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  103.724881][ T6082] erspan0: entered promiscuous mode
[  103.771163][ T6082] erspan0: left promiscuous mode
[  103.810365][ T6083] netlink: 44 bytes leftover after parsing attributes in process `syz.1.51'.
[  103.933388][ T6091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.54'.
[  104.221453][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.59'.
[  104.224050][ T6105] syz.4.58 uses obsolete (PF_INET,SOCK_PACKET)
[  104.344814][ T6113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.62'.
[  104.472368][ T6123] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  104.695397][ T6127] Bluetooth: MGMT ver 1.23
[  104.897786][ T6142] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  104.945961][ T6141] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  105.014532][ T6150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.74'.
[  105.235996][    T9] IPVS: starting estimator thread 0...
[  105.357843][ T6160] IPVS: using max 29 ests per chain, 69600 per kthread
[  105.523691][ T6167] xt_CT: You must specify a L4 protocol and not use inversions on it
[  105.734574][ T6184] veth1_macvtap: left promiscuous mode
[  105.749015][ T6184] macsec0: entered promiscuous mode
[  105.782536][ T6184] veth1_macvtap: entered promiscuous mode
[  105.802145][ T6184] macsec0: left promiscuous mode
[  105.992889][ T6197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.90'.
[  106.141669][ T6205] veth1_to_bridge: mtu less than device minimum
[  106.245078][ T6213] ieee802154 phy0 wpan0: encryption failed: -22
[  106.509299][ T6216] xt_CT: No such helper "pptp"
[  106.669306][ T6231] bridge_slave_0: left allmulticast mode
[  106.675350][ T6231] bridge_slave_0: left promiscuous mode
[  106.682440][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.710693][ T6231] bridge_slave_1: left allmulticast mode
[  106.749596][ T6231] bridge_slave_1: left promiscuous mode
[  106.757312][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.834926][ T6231] bond0: (slave bond_slave_0): Releasing backup interface
[  106.881968][ T6231] bond0: (slave bond_slave_1): Releasing backup interface
[  106.942149][ T6231] team0: Port device team_slave_0 removed
[  107.031358][ T6231] team0: Port device team_slave_1 removed
[  107.060664][ T6231] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.071398][ T6231] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.094724][ T6231] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.150395][ T6231] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.218252][ T6256] x_tables: unsorted underflow at hook 2
[  107.220968][ T6248] : entered promiscuous mode
[  107.242413][ T6251] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  107.735697][ T6283] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.759314][ T6285] netlink: 'syz.3.118': attribute type 10 has an invalid length.
[  107.816932][ T6282] netlink: 20 bytes leftover after parsing attributes in process `syz.1.115'.
[  107.838451][ T6282] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  107.846115][ T6282] IPv6: NLM_F_CREATE should be set when creating new route
[  107.870712][ T6285] bridge0: port 1(team0) entered blocking state
[  107.898684][ T6285] bridge0: port 1(team0) entered disabled state
[  107.911698][ T6296] netlink: 52 bytes leftover after parsing attributes in process `syz.4.119'.
[  107.938172][ T6285] team0: entered allmulticast mode
[  107.958059][ T6285] team0: entered promiscuous mode
[  107.983634][ T6293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.116'.
[  108.130350][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'.
[  108.144136][ T6304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.122'.
[  108.161617][ T6306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.121'.
[  108.336657][ T6322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.126'.
[  108.462321][ T6325] veth1_macvtap: left promiscuous mode
[  108.498659][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'.
[  108.501963][ T6325] macsec0: entered promiscuous mode
[  108.565001][ T6335] veth1_macvtap: entered promiscuous mode
[  108.574092][ T6334] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  108.599971][ T6335] macsec0: left promiscuous mode
[  108.725639][ T6341] netlink: 'syz.4.130': attribute type 4 has an invalid length.
[  108.787014][ T6341] netlink: 'syz.4.130': attribute type 4 has an invalid length.
[  108.824251][ T6341] x_tables: duplicate underflow at hook 3
[  108.848721][ T6341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.130'.
[  108.919995][ T6349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.984819][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'.
[  109.052753][ T6352] delete_channel: no stack
[  109.123240][ T6356] syzkaller0: create flow: hash 1978814621 index 1
[  109.327850][ T6352] syzkaller0: delete flow: hash 1978814621 index 1
[  109.949946][ T6395] netdevsim netdevsim3 netdevsim1: Unsupported IPsec algorithm
[  110.078875][ T6400] netlink: 'syz.3.148': attribute type 10 has an invalid length.
[  111.004302][ T6400] geneve0: entered promiscuous mode
[  111.016867][ T6400] geneve0: entered allmulticast mode
[  111.037247][ T6400] team0: Port device geneve0 added
[  111.176800][   T54] bridge0: port 1(team0) entered blocking state
[  111.183352][   T54] bridge0: port 1(team0) entered forwarding state
[  111.191805][ T6407] veth0_to_bond: mtu less than device minimum
[  111.485729][ T6433] xt_time: unknown flags 0x4
[  112.539338][ T6506] netlink: 'syz.3.177': attribute type 30 has an invalid length.
[  113.794410][ T6506] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  113.803819][ T6506] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  113.812772][ T6506] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  113.821564][ T6506] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  113.834610][ T6506] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  113.843737][ T6506] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  113.853042][ T6506] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  113.862195][ T6506] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  114.009782][ T6523] x_tables: duplicate underflow at hook 2
[  114.058198][ T6519] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  114.718576][ T6497] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.039853][ T6497] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.180437][ T6497] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.341379][ T6569] __nla_validate_parse: 8 callbacks suppressed
[  115.341401][ T6569] netlink: 68 bytes leftover after parsing attributes in process `syz.1.196'.
[  115.389391][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  115.398724][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  115.414411][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  115.427042][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  115.435658][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  116.531437][ T6497] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.700296][ T6585] netlink: 72 bytes leftover after parsing attributes in process `syz.1.201'.
[  116.726657][ T6585] netlink: 72 bytes leftover after parsing attributes in process `syz.1.201'.
[  117.010381][ T6609] netlink: 'syz.2.208': attribute type 1 has an invalid length.
[  117.019774][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.208'.
[  117.057098][ T6606] netlink: 16 bytes leftover after parsing attributes in process `syz.1.206'.
[  117.183690][ T6497] bridge_slave_1: left allmulticast mode
[  117.204615][ T6497] bridge_slave_1: left promiscuous mode
[  117.221994][ T6497] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.253405][ T6617] Bluetooth: MGMT ver 1.23
[  117.269875][ T6497] bridge_slave_0: left allmulticast mode
[  117.281699][ T6497] bridge_slave_0: left promiscuous mode
[  117.302512][ T6497] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.353155][ T6622] netlink: 'syz.1.212': attribute type 11 has an invalid length.
[  117.368198][ T6622] netlink: 224 bytes leftover after parsing attributes in process `syz.1.212'.
[  117.381912][ T6621] netlink: 'syz.1.212': attribute type 11 has an invalid length.
[  117.421223][ T6621] netlink: 224 bytes leftover after parsing attributes in process `syz.1.212'.
[  117.435834][ T6630] netlink: 'syz.0.215': attribute type 1 has an invalid length.
[  117.530799][ T5835] Bluetooth: hci3: command tx timeout
[  117.933377][ T6497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  117.946016][ T6497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  117.956701][ T6497] bond0 (unregistering): Released all slaves
[  117.985284][ T6630] netlink: 43 bytes leftover after parsing attributes in process `syz.0.215'.
[  118.365164][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.219'.
[  118.388019][ T6663] netlink: 'syz.0.218': attribute type 10 has an invalid length.
[  118.443071][ T5839] hid-generic 0005:0458:0009.0001: unknown main item tag 0x0
[  118.497738][ T5839] hid-generic 0005:0458:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  119.610995][ T5835] Bluetooth: hci3: command tx timeout
[  119.971144][ T6663] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  120.101755][ T6690] netlink: 'syz.0.225': attribute type 1 has an invalid length.
[  120.161081][ T6570] chnl_net:caif_netlink_parms(): no params data found
[  120.205425][ T6692] netlink: 'syz.2.227': attribute type 1 has an invalid length.
[  120.267189][ T6697] sctp: [Deprecated]: syz.3.229 (pid 6697) Use of struct sctp_assoc_value in delayed_ack socket option.
[  120.267189][ T6697] Use struct sctp_sack_info instead
[  120.362779][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'.
[  120.372545][ T6497] hsr_slave_0: left promiscuous mode
[  120.383606][ T6497] hsr_slave_1: left promiscuous mode
[  120.395924][ T6497] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.411379][ T6497] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.423282][ T6497] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.430882][ T6497] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.452834][ T6497] veth1_macvtap: left promiscuous mode
[  120.459197][ T6497] veth0_macvtap: left promiscuous mode
[  120.465292][ T6497] veth1_vlan: left promiscuous mode
[  120.470999][ T6497] veth0_vlan: left promiscuous mode
[  121.061378][ T6497] team0 (unregistering): Port device team_slave_1 removed
[  121.103853][ T6497] team0 (unregistering): Port device team_slave_0 removed
[  121.476287][ T6697] netlink: 'syz.3.229': attribute type 12 has an invalid length.
[  121.484380][ T6697] netlink: 132 bytes leftover after parsing attributes in process `syz.3.229'.
[  121.554015][ T6708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.233'.
[  121.633408][ T6726] sctp: [Deprecated]: syz.3.235 (pid 6726) Use of int in max_burst socket option deprecated.
[  121.633408][ T6726] Use struct sctp_assoc_value instead
[  121.673024][ T6729] netlink: 'syz.1.234': attribute type 29 has an invalid length.
[  121.683259][ T6730] IPv4: Oversized IP packet from 172.20.20.24
[  121.692220][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  121.698920][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  121.705627][ T5835] Bluetooth: hci3: command tx timeout
[  121.803795][ T6730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.236'.
[  122.092320][ T6570] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.108041][ T6570] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.116050][ T6570] bridge_slave_0: entered allmulticast mode
[  122.150416][ T6570] bridge_slave_0: entered promiscuous mode
[  122.171324][ T6570] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.186911][ T6570] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.203754][ T6570] bridge_slave_1: entered allmulticast mode
[  122.226935][ T6570] bridge_slave_1: entered promiscuous mode
[  122.287529][ T6750] netlink: 'syz.0.239': attribute type 3 has an invalid length.
[  122.359624][ T6752] netlink: 48 bytes leftover after parsing attributes in process `syz.1.242'.
[  122.382384][ T6570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.415600][ T6570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  122.449731][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'.
[  122.613089][ T6570] team0: Port device team_slave_0 added
[  122.651756][ T6570] team0: Port device team_slave_1 added
[  122.775132][ T6570] batman_adv: batadv0: Adding interface: batadv_slave_0
[  122.782941][ T6570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.810181][ T6570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  122.826226][ T6570] batman_adv: batadv0: Adding interface: batadv_slave_1
[  122.833907][ T6570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.860546][ T6570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  123.105834][ T6779] xt_socket: unknown flags 0x3c
[  123.757548][ T5835] Bluetooth: hci3: command tx timeout
[  124.392815][ T6570] hsr_slave_0: entered promiscuous mode
[  124.412879][ T6570] hsr_slave_1: entered promiscuous mode
[  124.427774][ T6570] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  124.457695][ T6570] Cannot create hsr debugfs directory
[  124.538339][ T6801] ipt_rpfilter: unknown options
[  124.888923][ T6818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.260'.
[  125.072672][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.264'.
[  125.105407][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'.
[  125.168969][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'.
[  125.739671][ T6852] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  127.046196][ T6860] tipc: Started in network mode
[  127.060794][ T6860] tipc: Node identity 3a2dc0408d98, cluster identity 4711
[  127.079123][ T6860] tipc: Enabled bearer <eth:xfrm0>, priority 10
[  127.091591][ T6861] sch_tbf: peakrate 4 is lower than or equals to rate 5 !
[  127.123262][ T6861] sch_tbf: peakrate 4 is lower than or equals to rate 5 !
[  127.133064][ T6570] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  127.161418][ T6570] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  127.217326][ T6570] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  127.232032][ T6570] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  127.430097][ T6873] tipc: Started in network mode
[  127.435025][ T6873] tipc: Node identity 6e7bb9ad03f1, cluster identity 4711
[  127.445277][ T6873] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.501267][ T6866] tipc: Resetting bearer <eth:syzkaller0>
[  127.658976][ T6885] netlink: 72 bytes leftover after parsing attributes in process `syz.0.279'.
[  127.772927][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.281'.
[  128.210528][   T48] tipc: Node number set to 3082141760
[  128.489907][   T48] tipc: Node number set to 1837808045
[  129.053525][ T6866] tipc: Disabling bearer <eth:syzkaller0>
[  129.068041][ T6888] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  129.341338][ T6570] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.419411][ T6570] 8021q: adding VLAN 0 to HW filter on device team0
[  129.481021][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.488303][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.556912][ T6929] netlink: 'syz.1.286': attribute type 3 has an invalid length.
[  129.559392][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.572149][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.617275][ T6929] netlink: 64 bytes leftover after parsing attributes in process `syz.1.286'.
[  130.048289][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'.
[  130.215054][ T6570] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.436320][ T6965] openvswitch: netlink: Actions may not be safe on all matching packets
[  130.835453][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'.
[  130.888719][ T6570] veth0_vlan: entered promiscuous mode
[  130.933057][ T6570] veth1_vlan: entered promiscuous mode
[  131.061890][ T6570] veth0_macvtap: entered promiscuous mode
[  131.095391][ T6570] veth1_macvtap: entered promiscuous mode
[  131.159130][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.196489][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.228449][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.255459][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.275998][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.296765][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.314075][ T6570] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.338710][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.355770][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.367080][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.386373][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.400301][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.415836][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.428840][ T6570] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.460574][ T6570] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.479500][ T6570] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.498061][ T6570] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.518434][ T6570] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.741233][ T6496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.774916][ T6496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.847673][ T6494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.871113][ T6494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.931568][ T7005] netlink: 204 bytes leftover after parsing attributes in process `syz.2.307'.
[  132.269077][ T7016] netlink: 44 bytes leftover after parsing attributes in process `syz.2.311'.
[  132.512303][ T2989] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.788001][ T2989] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.934691][ T2989] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.038732][ T7025] delete_channel: no stack
[  133.202697][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  133.209366][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  133.258503][ T2989] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.321685][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.316'.
[  133.709062][   T56] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  133.718249][   T56] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  133.727218][   T56] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  133.739934][   T56] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  133.760129][   T56] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  135.746098][ T2989] bridge_slave_1: left allmulticast mode
[  135.762538][ T2989] bridge_slave_1: left promiscuous mode
[  135.771640][ T2989] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.789357][ T2989] bridge_slave_0: left allmulticast mode
[  135.809707][ T2989] bridge_slave_0: left promiscuous mode
[  135.815556][ T2989] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.841183][   T56] Bluetooth: hci3: command tx timeout
[  136.088203][ T7079] x_tables: duplicate entry at hook 1
[  136.490261][ T2989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.503191][ T2989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.514130][ T2989] bond0 (unregistering): Released all slaves
[  136.545460][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.586744][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.611916][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.636778][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.654601][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.665498][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.698097][ T7083] openvswitch: netlink: Tunnel attr 9 has unexpected len 0 expected 2
[  136.727860][ T7081] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.742431][ T7081] batadv_slave_0: entered promiscuous mode
[  136.766700][ T7081] batadv_slave_0: entered allmulticast mode
[  136.981348][ T7092] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  137.030812][ T7099] netlink: 80 bytes leftover after parsing attributes in process `syz.3.331'.
[  137.534238][ T7123] xt_hashlimit: Unknown mode mask 115, kernel too old?
[  137.794601][ T2989] hsr_slave_0: left promiscuous mode
[  137.815866][ T2989] hsr_slave_1: left promiscuous mode
[  137.835078][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.858177][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.889827][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.905806][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.917287][   T56] Bluetooth: hci3: command tx timeout
[  137.947363][ T2989] veth1_macvtap: left promiscuous mode
[  137.952987][ T2989] veth0_macvtap: left promiscuous mode
[  137.959714][ T2989] veth1_vlan: left promiscuous mode
[  137.965073][ T2989] veth0_vlan: left promiscuous mode
[  138.651535][ T7143] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.770349][ T2989] team0 (unregistering): Port device team_slave_1 removed
[  138.821661][ T2989] team0 (unregistering): Port device team_slave_0 removed
[  139.451553][ T7143] veth1_to_hsr: entered promiscuous mode
[  139.465423][ T7142] veth1_to_hsr: left promiscuous mode
[  139.999877][   T56] Bluetooth: hci3: command tx timeout
[  141.081440][ T7148] bridge_slave_0: left allmulticast mode
[  141.102678][ T7148] bridge_slave_0: left promiscuous mode
[  141.122293][ T7148] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.145381][ T7148] bridge_slave_1: left allmulticast mode
[  141.154511][ T7148] bridge_slave_1: left promiscuous mode
[  141.162139][ T7148] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.182956][ T7148] bond0: (slave bond_slave_0): Releasing backup interface
[  141.210918][ T7148] bond0: (slave bond_slave_1): Releasing backup interface
[  141.267905][ T7148] team0: Port device team_slave_0 removed
[  141.299579][ T7148] team0: Port device team_slave_1 removed
[  141.306155][ T7148] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.334269][ T7148] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.348853][ T7148] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.393285][ T7040] chnl_net:caif_netlink_parms(): no params data found
[  141.684241][ T7180] netlink: 20 bytes leftover after parsing attributes in process `syz.1.352'.
[  141.694322][ T7180] netlink: 20 bytes leftover after parsing attributes in process `syz.1.352'.
[  141.829401][ T7040] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.839355][ T7040] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.847319][ T7040] bridge_slave_0: entered allmulticast mode
[  141.856154][ T7040] bridge_slave_0: entered promiscuous mode
[  141.872125][ T7040] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.879685][ T7040] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.887291][ T7040] bridge_slave_1: entered allmulticast mode
[  141.895350][ T7040] bridge_slave_1: entered promiscuous mode
[  142.022038][ T7040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.051945][ T7195] netlink: 'syz.1.356': attribute type 11 has an invalid length.
[  142.065634][ T7195] netlink: 224 bytes leftover after parsing attributes in process `syz.1.356'.
[  142.081330][   T56] Bluetooth: hci3: command tx timeout
[  142.097919][ T7040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.174160][ T7203] xt_CT: No such helper "pptp"
[  142.394372][ T7213] netlink: 165 bytes leftover after parsing attributes in process `syz.2.362'.
[  142.600290][ T7221] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.642324][ T7040] team0: Port device team_slave_0 added
[  143.674292][ T7040] team0: Port device team_slave_1 added
[  143.831747][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_0
[  143.846967][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.896084][ T7040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  143.925291][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_1
[  143.936164][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.963873][ T7040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.991900][ T7240] warning: `syz.0.369' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  144.012684][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.367'.
[  144.081262][ T7040] hsr_slave_0: entered promiscuous mode
[  144.090569][ T7040] hsr_slave_1: entered promiscuous mode
[  144.097859][ T7040] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  144.107917][ T7040] Cannot create hsr debugfs directory
[  144.283489][ T7250] team0: Mode "loadbaance" not found
[  144.326051][ T7250] netlink: 'syz.1.372': attribute type 11 has an invalid length.
[  144.352297][ T7255] netlink: 68 bytes leftover after parsing attributes in process `syz.3.373'.
[  144.502315][ T7259] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  144.584693][ T7257] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.592513][ T7257] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.775079][ T7270] netlink: 16 bytes leftover after parsing attributes in process `syz.2.377'.
[  144.921758][ T7257] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.941962][ T7257] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.960875][ T7257] tipc: Resetting bearer <eth:xfrm0>
[  145.080518][ T7257] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.096831][ T7257] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.110590][ T7257] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.134702][ T7257] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.559698][   T48] IPVS: starting estimator thread 0...
[  145.633383][ T7307] openvswitch: netlink: IP tunnel dst address not specified
[  145.656663][ T7302] IPVS: using max 29 ests per chain, 69600 per kthread
[  147.214738][ T5912] IPVS: starting estimator thread 0...
[  147.255671][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'.
[  147.304396][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.387'.
[  147.313575][ T7338] IPVS: using max 29 ests per chain, 69600 per kthread
[  147.326303][ T7340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.387'.
[  147.355687][ T7337] veth1_vlan: entered allmulticast mode
[  147.367503][ T7337] bridge0: port 3(veth1_vlan) entered blocking state
[  147.374463][ T7337] bridge0: port 3(veth1_vlan) entered disabled state
[  147.443258][ T7347] netlink: 96 bytes leftover after parsing attributes in process `syz.1.389'.
[  147.466101][ T7348] netlink: 'syz.0.390': attribute type 10 has an invalid length.
[  147.495281][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.389'.
[  147.513567][ T7347] netlink: 24 bytes leftover after parsing attributes in process `syz.1.389'.
[  147.809873][ T7040] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  147.852021][ T7040] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  147.901408][ T7040] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  147.930427][ T7040] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  148.146461][ T7370] netlink: 48 bytes leftover after parsing attributes in process `syz.0.394'.
[  148.193673][ T7370] netlink: 24 bytes leftover after parsing attributes in process `syz.0.394'.
[  148.272860][ T7040] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.362864][ T7040] 8021q: adding VLAN 0 to HW filter on device team0
[  148.407305][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.414557][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.463111][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.463795][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'.
[  148.470362][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.531750][ T7384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.397'.
[  149.305026][ T7421] netlink: 'syz.3.405': attribute type 2 has an invalid length.
[  149.333937][ T7421] netlink: 'syz.3.405': attribute type 2 has an invalid length.
[  150.789416][ T7437] netlink: 'syz.2.410': attribute type 1 has an invalid length.
[  151.191897][ T7460] ip6t_srh: unknown srh invflags 5F00
[  151.214623][ T7040] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.501538][ T7484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  151.594114][ T7040] veth0_vlan: entered promiscuous mode
[  151.630802][ T7040] veth1_vlan: entered promiscuous mode
[  151.713755][ T7040] veth0_macvtap: entered promiscuous mode
[  151.740798][ T7040] veth1_macvtap: entered promiscuous mode
[  151.798789][ T7493] nbd: device at index 64 is going down
[  151.845422][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.883090][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.908732][ T7040] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.932558][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.943369][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.959296][ T7040] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.992937][ T7040] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.008367][ T7040] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.017542][ T7040] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.026372][ T7040] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.154232][ T7502] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32
[  152.188741][ T7504] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.193623][ T7502] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32
[  152.229226][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.272956][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.313865][ T6495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.346571][ T6495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.843545][ T7531] __nla_validate_parse: 9 callbacks suppressed
[  152.843567][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'.
[  152.868519][ T7531] netlink: 'syz.3.438': attribute type 30 has an invalid length.
[  152.921865][ T7531] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  152.930832][ T7531] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  152.939732][ T7531] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  152.948653][ T7531] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  152.960377][ T7538] sctp: failed to load transform for md5: -2
[  153.075460][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.192343][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.314204][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.464215][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.443'.
[  153.511175][ T7553] netlink: 'syz.3.443': attribute type 11 has an invalid length.
[  153.543504][ T7551] netlink: 84 bytes leftover after parsing attributes in process `syz.2.442'.
[  153.554067][ T7554] batman_adv: batadv0: Adding interface: dummy0
[  153.560842][ T7554] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.607057][ T7554] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  153.873527][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  153.892821][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  153.901273][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  153.915743][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  153.924762][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  155.183438][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.571783][ T7591] sit1: entered promiscuous mode
[  155.587046][ T7591] sit1: entered allmulticast mode
[  155.774523][ T7607] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  155.902072][   T13] bridge_slave_1: left allmulticast mode
[  155.927120][   T13] bridge_slave_1: left promiscuous mode
[  155.934034][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.964982][ T7611] netlink: 32 bytes leftover after parsing attributes in process `syz.2.459'.
[  155.992177][   T13] bridge_slave_0: left allmulticast mode
[  155.998635][ T5835] Bluetooth: hci3: command tx timeout
[  156.011068][   T13] bridge_slave_0: left promiscuous mode
[  156.026862][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.042822][ T7613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.459'.
[  156.101842][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.461'.
[  156.579928][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  156.596169][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  156.615520][   T13] bond0 (unregistering): Released all slaves
[  156.895864][ T7647] pim6reg1: entered promiscuous mode
[  156.904403][ T7647] pim6reg1: entered allmulticast mode
[  157.016750][ T7571] chnl_net:caif_netlink_parms(): no params data found
[  157.152079][ T7668] tls_set_device_offload_rx: netdev not found
[  157.177916][ T7671] netlink: 80 bytes leftover after parsing attributes in process `syz.1.474'.
[  157.196356][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'.
[  157.219116][ T7672] openvswitch: netlink: nsh attr 8196 is out of range max 3
[  157.225344][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'.
[  157.226690][ T7672] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.273897][ T7671] netlink: 20 bytes leftover after parsing attributes in process `syz.1.474'.
[  157.436727][   T13] hsr_slave_0: left promiscuous mode
[  157.461651][   T13] hsr_slave_1: left promiscuous mode
[  157.468861][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  157.476338][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  157.495056][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  157.507020][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  157.586101][   T13] veth1_macvtap: left promiscuous mode
[  157.595722][   T13] veth0_macvtap: left promiscuous mode
[  157.613825][   T13] veth1_vlan: left promiscuous mode
[  157.622807][   T13] veth0_vlan: left promiscuous mode
[  157.910315][ T7705] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  158.023840][ T7708] __nla_validate_parse: 2 callbacks suppressed
[  158.023860][ T7708] netlink: 24 bytes leftover after parsing attributes in process `syz.3.486'.
[  158.079837][ T5835] Bluetooth: hci3: command tx timeout
[  158.272982][   T13] team0 (unregistering): Port device team_slave_1 removed
[  158.316338][   T13] team0 (unregistering): Port device team_slave_0 removed
[  158.782752][ T7710] pim6reg: entered allmulticast mode
[  158.856250][ T7571] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.874740][ T7571] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.886036][ T7571] bridge_slave_0: entered allmulticast mode
[  158.894117][ T7571] bridge_slave_0: entered promiscuous mode
[  158.926333][ T7571] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.939837][ T7571] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.947805][ T7571] bridge_slave_1: entered allmulticast mode
[  158.957076][ T7571] bridge_slave_1: entered promiscuous mode
[  158.989427][ T7719] macvlan2: entered promiscuous mode
[  158.995028][ T7719] macvlan2: entered allmulticast mode
[  159.083569][ T7729] netlink: 'syz.1.492': attribute type 39 has an invalid length.
[  159.105272][ T7571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  159.140103][ T7571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  159.245620][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.493'.
[  159.264739][ T7735] 8021q: VLANs not supported on ip6_vti0
[  159.290164][ T7571] team0: Port device team_slave_0 added
[  159.298406][ T7735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  159.321732][ T7571] team0: Port device team_slave_1 added
[  159.400882][ T7571] batman_adv: batadv0: Adding interface: batadv_slave_0
[  159.408283][ T7571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.453996][ T7571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  159.454263][ T7737] Driver unsupported XDP return value 0 on prog  (id 104) dev N/A, expect packet loss!
[  159.484466][ T7739] xt_connbytes: Forcing CT accounting to be enabled
[  159.485147][ T7571] batman_adv: batadv0: Adding interface: batadv_slave_1
[  159.491860][ T7740] xt_connbytes: Forcing CT accounting to be enabled
[  159.505212][ T7571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.536456][ T7571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  159.634827][ T7742] xt_hashlimit: size too large, truncated to 1048576
[  159.665537][ T7571] hsr_slave_0: entered promiscuous mode
[  159.673344][ T7571] hsr_slave_1: entered promiscuous mode
[  159.680464][ T7571] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  159.688787][ T7571] Cannot create hsr debugfs directory
[  159.991728][ T7754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.500'.
[  160.042172][ T7753] IPVS: sed: UDP 224.0.0.2:20004 - no destination available
[  160.088909][ T7756] netlink: 1772 bytes leftover after parsing attributes in process `syz.2.501'.
[  160.157492][ T5835] Bluetooth: hci3: command tx timeout
[  160.248617][ T7760] C: renamed from lo
[  160.256036][ T7760] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  160.558057][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.510'.
[  160.576992][ T7784] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  160.585247][ T7784] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.689744][ T7794] netlink: 'syz.0.513': attribute type 16 has an invalid length.
[  160.699850][ T7794] netlink: 'syz.0.513': attribute type 3 has an invalid length.
[  160.730435][ T7794] netlink: 132 bytes leftover after parsing attributes in process `syz.0.513'.
[  161.012988][ T7571] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  161.055643][ T7571] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  161.096441][ T7571] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  161.124579][ T7571] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  161.289360][ T7830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  161.460554][ T7840] x_tables: duplicate underflow at hook 1
[  161.476026][ T7571] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.536221][ T7843] netlink: 'syz.1.523': attribute type 28 has an invalid length.
[  161.559489][ T7571] 8021q: adding VLAN 0 to HW filter on device team0
[  161.576860][ T7843] netlink: 'syz.1.523': attribute type 3 has an invalid length.
[  161.584568][ T7843] netlink: 132 bytes leftover after parsing attributes in process `syz.1.523'.
[  161.604285][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.611627][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.634119][ T7846] sctp: [Deprecated]: syz.3.524 (pid 7846) Use of int in maxseg socket option.
[  161.634119][ T7846] Use struct sctp_assoc_value instead
[  161.653534][ T6493] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.660816][ T6493] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.881908][ T7860] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  162.092921][ T7571] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.191593][ T7875] netlink: 'syz.3.531': attribute type 21 has an invalid length.
[  162.194501][ T7879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.532'.
[  162.254406][   T56] Bluetooth: hci3: command tx timeout
[  162.266385][ T7875] netlink: 'syz.3.531': attribute type 1 has an invalid length.
[  162.582920][ T7891] IPVS: persistence engine module ip_vs_pe_À
 not found
[  162.647181][ T7899] openvswitch: netlink: EtherType 0 is less than min 600
[  162.718187][ T7571] veth0_vlan: entered promiscuous mode
[  162.754926][ T7571] veth1_vlan: entered promiscuous mode
[  162.845045][ T7908] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  162.912483][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.538'.
[  163.018754][ T7917] openvswitch: netlink: Message has -1 unknown bytes.
[  163.020009][ T7571] veth0_macvtap: entered promiscuous mode
[  163.053575][ T7571] veth1_macvtap: entered promiscuous mode
[  163.107909][ T7920] netlink: 24 bytes leftover after parsing attributes in process `syz.0.541'.
[  163.147719][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.181901][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.194439][ T7571] batman_adv: batadv0: Interface activated: batadv_slave_0
[  163.220793][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.231891][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.245099][ T7571] batman_adv: batadv0: Interface activated: batadv_slave_1
[  163.265875][ T7571] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.276074][ T7571] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.289042][ T7571] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.299299][ T7571] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.441068][ T7938] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  163.459610][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.547'.
[  163.489962][ T6493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.514304][ T6493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.594970][ T6494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.604723][ T6494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.707729][ T7949] netlink: 596 bytes leftover after parsing attributes in process `syz.3.551'.
[  163.724461][ T7952] netlink: 596 bytes leftover after parsing attributes in process `syz.3.551'.
[  163.930990][ T7964] netlink: 128 bytes leftover after parsing attributes in process `syz.0.554'.
[  163.941343][ T7964] netlink: 20 bytes leftover after parsing attributes in process `syz.0.554'.
[  163.955458][ T7962] netlink: 128 bytes leftover after parsing attributes in process `syz.0.554'.
[  163.965754][ T7962] netlink: 20 bytes leftover after parsing attributes in process `syz.0.554'.
[  164.079907][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.556'.
[  164.141418][ T7975] netlink: 'syz.2.558': attribute type 1 has an invalid length.
[  164.150790][ T7975] netlink: 228 bytes leftover after parsing attributes in process `syz.2.558'.
[  164.707450][ T6495] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.922952][ T6495] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.092726][ T6495] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.170159][ T6495] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.303039][ T6495] bridge_slave_1: left allmulticast mode
[  165.308815][ T6495] bridge_slave_1: left promiscuous mode
[  165.314555][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.325070][ T6495] bridge_slave_0: left allmulticast mode
[  165.331271][ T6495] bridge_slave_0: left promiscuous mode
[  165.337114][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.869747][   T56] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  165.879324][   T56] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  165.888100][   T56] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  165.911854][   T56] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  165.926857][   T56] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  166.003306][ T6495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  166.014443][ T6495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  166.026322][ T6495] bond0 (unregistering): Released all slaves
[  166.045107][ T8021] team0: Device C is loopback device. Loopback devices can't be added as a team port
[  166.059044][ T8021] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  166.637599][ T8056] netdevsim netdevsim0: Direct firmware load for +. failed with error -2
[  166.677039][ T6495] hsr_slave_0: left promiscuous mode
[  166.683993][ T8056] netdevsim netdevsim0: Falling back to sysfs fallback for: +.
[  166.692447][ T6495] hsr_slave_1: left promiscuous mode
[  166.705930][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  166.724725][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_0
[  166.746049][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  166.755324][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_1
[  166.804362][ T6495] veth1_macvtap: left promiscuous mode
[  166.812202][ T6495] veth0_macvtap: left promiscuous mode
[  166.822858][ T6495] veth1_vlan: left promiscuous mode
[  166.829953][ T6495] veth0_vlan: left promiscuous mode
[  167.583765][ T6495] team0 (unregistering): Port device team_slave_1 removed
[  167.627840][ T6495] team0 (unregistering): Port device team_slave_0 removed
[  168.007102][   T56] Bluetooth: hci3: command tx timeout
[  168.034200][ T8078] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  168.109652][ T8031] chnl_net:caif_netlink_parms(): no params data found
[  168.408218][ T8112] __nla_validate_parse: 5 callbacks suppressed
[  168.408237][ T8112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.596'.
[  168.505036][ T8118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'.
[  168.514149][ T8118] netlink: 'syz.3.595': attribute type 8 has an invalid length.
[  168.560035][ T8117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.597'.
[  168.577175][ T8031] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.604876][ T8031] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.631630][ T8031] bridge_slave_0: entered allmulticast mode
[  168.655897][ T8031] bridge_slave_0: entered promiscuous mode
[  168.699710][ T8031] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.724240][ T8031] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.741934][ T8031] bridge_slave_1: entered allmulticast mode
[  168.755009][ T8031] bridge_slave_1: entered promiscuous mode
[  168.808049][ T8133] team0: entered promiscuous mode
[  168.813178][ T8133] team_slave_0: entered promiscuous mode
[  168.822745][ T8133] team_slave_1: entered promiscuous mode
[  168.832101][ T8133] batadv_slave_1: entered promiscuous mode
[  168.880875][ T8031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.901937][ T8031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  169.005835][ T8031] team0: Port device team_slave_0 added
[  169.032883][ T8031] team0: Port device team_slave_1 added
[  169.145784][ T8031] batman_adv: batadv0: Adding interface: batadv_slave_0
[  169.180985][ T8031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.256186][ T8031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  169.282889][ T8154] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  169.291591][ T8031] batman_adv: batadv0: Adding interface: batadv_slave_1
[  169.301541][ T8031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.317378][ T8156] IPVS: stopping master sync thread 8154 ...
[  169.328033][ T8031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  169.408196][ T8031] hsr_slave_0: entered promiscuous mode
[  169.414965][ T8031] hsr_slave_1: entered promiscuous mode
[  169.422144][ T8031] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  169.430730][ T8031] Cannot create hsr debugfs directory
[  170.078163][   T56] Bluetooth: hci3: command tx timeout
[  170.312516][ T8189] No such timeout policy "syz1"
[  170.446448][ T8031] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  170.468152][ T8195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.539003][ T8031] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  170.577569][ T8031] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  170.651744][ T8031] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  170.724191][ T8200] netlink: 40 bytes leftover after parsing attributes in process `syz.1.621'.
[  170.894287][ T8031] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.940530][ T8031] 8021q: adding VLAN 0 to HW filter on device team0
[  170.955736][ T6495] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.963021][ T6495] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.978193][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.985411][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.993715][ T8214] openvswitch: netlink: Flow actions attr not present in new flow.
[  171.002961][ T8215] netlink: 32 bytes leftover after parsing attributes in process `syz.0.626'.
[  171.281177][ T8228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.629'.
[  171.330044][ T8228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.629'.
[  171.398085][ T8239] netlink: 36 bytes leftover after parsing attributes in process `syz.3.632'.
[  171.518808][ T8031] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.623284][ T8246] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.634'.
[  171.691733][ T8248] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.699860][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.636'.
[  171.886409][ T8248] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.935591][ T8256] vxcan1: Master is either lo or non-ether device
[  172.085778][ T8248] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.157955][   T56] Bluetooth: hci3: command tx timeout
[  172.293759][ T8248] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.419588][ T8283] syzkaller0: entered promiscuous mode
[  172.425264][ T8283] syzkaller0: entered allmulticast mode
[  173.833014][ T8031] veth0_vlan: entered promiscuous mode
[  173.863494][ T8031] veth1_vlan: entered promiscuous mode
[  173.939453][ T8248] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.983143][ T8248] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.064802][ T8248] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.174439][ T8248] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.194418][ T8031] veth0_macvtap: entered promiscuous mode
[  174.236910][   T56] Bluetooth: hci3: command tx timeout
[  174.258309][ T8031] veth1_macvtap: entered promiscuous mode
[  174.283282][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.296460][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.311504][ T8031] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.334031][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.349912][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.368469][ T8031] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.375838][ T8320] __nla_validate_parse: 6 callbacks suppressed
[  174.375855][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.656'.
[  174.391459][ T8320] netlink: 5 bytes leftover after parsing attributes in process `syz.0.656'.
[  174.406117][ T8320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.656'.
[  174.433527][ T8031] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.437407][ T8324] netlink: 108 bytes leftover after parsing attributes in process `syz.2.658'.
[  174.448907][ T8031] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.461718][ T8031] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.471496][ T8031] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.498007][ T8323] C: renamed from team_slave_0
[  174.511877][ T8323] netlink: 'syz.3.657': attribute type 1 has an invalid length.
[  174.521530][ T8323] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  174.675398][ T2989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.690960][ T2989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.736251][ T6494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.754541][ T6494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.795041][ T8334] netlink: 168 bytes leftover after parsing attributes in process `syz.3.662'.
[  174.871960][ T8336] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  174.945402][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.663'.
[  175.370963][ T6497] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.530669][ T6497] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.641952][ T6497] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.748312][ T6497] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.834544][ T6497] bridge_slave_1: left allmulticast mode
[  175.840598][ T6497] bridge_slave_1: left promiscuous mode
[  175.847364][ T6497] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.856971][ T6497] bridge_slave_0: left allmulticast mode
[  175.862637][ T6497] bridge_slave_0: left promiscuous mode
[  175.868528][ T6497] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.166231][ T6497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.179463][ T6497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.189644][ T6497] bond0 (unregistering): Released all slaves
[  176.338691][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'.
[  176.471999][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.673'.
[  176.523478][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.672'.
[  176.533725][ T8389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.673'.
[  176.751800][ T8398] netlink: 'syz.2.675': attribute type 1 has an invalid length.
[  176.790906][ T8398] netlink: 'syz.2.675': attribute type 1 has an invalid length.
[  176.978384][ T6497] hsr_slave_0: left promiscuous mode
[  177.015177][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  177.024984][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  177.034098][ T6497] hsr_slave_1: left promiscuous mode
[  177.043334][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  177.065294][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  177.072759][ T6497] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  177.081282][ T6497] batman_adv: batadv0: Removing interface: batadv_slave_0
[  177.090909][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  177.113326][ T6497] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  177.128885][ T6497] batman_adv: batadv0: Removing interface: batadv_slave_1
[  177.162399][ T6497] veth1_macvtap: left promiscuous mode
[  177.168844][ T6497] veth0_macvtap: left promiscuous mode
[  177.174646][ T6497] veth1_vlan: left promiscuous mode
[  177.181107][ T6497] veth0_vlan: left promiscuous mode
[  177.681707][ T6497] team0 (unregistering): Port device team_slave_1 removed
[  177.725770][ T6497] team0 (unregistering): Port device team_slave_0 removed
[  178.114478][ T8421] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  178.525345][ T8449] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  178.584370][ T8452] netlink: 'syz.2.689': attribute type 7 has an invalid length.
[  178.592702][ T8452] netlink: 'syz.2.689': attribute type 8 has an invalid length.
[  178.620197][ T8452] gretap0: entered promiscuous mode
[  178.630181][ T8452] gretap0: left promiscuous mode
[  179.119612][   T56] Bluetooth: hci3: command tx timeout
[  180.052052][ T8401] chnl_net:caif_netlink_parms(): no params data found
[  180.203808][ T8479] netlink: 'syz.3.700': attribute type 32 has an invalid length.
[  180.273118][ T8481] __nla_validate_parse: 5 callbacks suppressed
[  180.273137][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.702'.
[  180.295836][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.702'.
[  180.307447][ T8481] netlink: 36 bytes leftover after parsing attributes in process `syz.1.702'.
[  180.405107][ T8484] xt_CT: No such helper "pptp"
[  180.433210][ T5881] hid (null): unknown global tag 0xe
[  180.447775][ T8494] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  180.526212][ T8401] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.543565][ T8401] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.558348][ T8401] bridge_slave_0: entered allmulticast mode
[  180.580239][ T8401] bridge_slave_0: entered promiscuous mode
[  180.649106][ T8401] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.674379][ T8401] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.709995][ T8401] bridge_slave_1: entered allmulticast mode
[  180.723991][ T8401] bridge_slave_1: entered promiscuous mode
[  180.813600][ T8513] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present
[  180.826921][ T8513] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1)
[  180.840429][ T8401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  180.865290][ T8401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  181.201941][   T56] Bluetooth: hci3: command tx timeout
[  181.491492][ T8532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.717'.
[  181.757110][ T8536] xt_CT: No such helper "pptp"
[  181.791918][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  181.802654][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  181.811219][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  181.819431][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  181.829428][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  181.884693][ T5881] hid-generic 0005:046D:0A0F.0002: unknown global tag 0xe
[  181.923910][ T5881] hid-generic 0005:046D:0A0F.0002: item 0 2 1 14 parsing failed
[  181.937213][ T5881] hid-generic 0005:046D:0A0F.0002: probe with driver hid-generic failed with error -22
[  181.962348][ T8401] 
[  181.964732][ T8401] ======================================================
[  181.971778][ T8401] WARNING: possible circular locking dependency detected
[  181.978824][ T8401] 6.15.0-rc4-syzkaller-00164-g0093cb194a75 #0 Not tainted
[  181.985924][ T8401] ------------------------------------------------------
[  181.992949][ T8401] syz-executor/8401 is trying to acquire lock:
[  181.999125][ T8401] ffff88805988f840 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}, at: __flush_work+0xd2/0xbc0
[  182.010685][ T8401] 
[  182.010685][ T8401] but task is already holding lock:
[  182.018076][ T8401] ffff88805988fb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  182.026975][ T8401] 
[  182.026975][ T8401] which lock already depends on the new lock.
[  182.026975][ T8401] 
[  182.037400][ T8401] 
[  182.037400][ T8401] the existing dependency chain (in reverse order) is:
[  182.046669][ T8401] 
[  182.046669][ T8401] -> #1 (&conn->lock#2){+.+.}-{4:4}:
[  182.054155][ T8401]        lock_acquire+0x120/0x360
[  182.059191][ T8401]        __mutex_lock+0x182/0xe80
[  182.064218][ T8401]        l2cap_info_timeout+0x60/0xa0
[  182.069602][ T8401]        process_scheduled_works+0xadb/0x17a0
[  182.075679][ T8401]        worker_thread+0x8a0/0xda0
[  182.080788][ T8401]        kthread+0x70e/0x8a0
[  182.085383][ T8401]        ret_from_fork+0x4b/0x80
[  182.090321][ T8401]        ret_from_fork_asm+0x1a/0x30
[  182.095608][ T8401] 
[  182.095608][ T8401] -> #0 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}:
[  182.105868][ T8401]        validate_chain+0xb9b/0x2140
[  182.111159][ T8401]        __lock_acquire+0xaac/0xd20
[  182.116365][ T8401]        lock_acquire+0x120/0x360
[  182.121394][ T8401]        __flush_work+0x6b8/0xbc0
[  182.126421][ T8401]        __cancel_work_sync+0xbe/0x110
[  182.131881][ T8401]        l2cap_conn_del+0x4f0/0x680
[  182.137080][ T8401]        hci_conn_hash_flush+0x10a/0x230
[  182.142711][ T8401]        hci_dev_close_sync+0xaef/0x1330
[  182.148350][ T8401]        hci_unregister_dev+0x206/0x500
[  182.153901][ T8401]        vhci_release+0x80/0xd0
[  182.158768][ T8401]        __fput+0x449/0xa70
[  182.163279][ T8401]        task_work_run+0x1d1/0x260
[  182.168400][ T8401]        do_exit+0x8d6/0x2550
[  182.173081][ T8401]        do_group_exit+0x21c/0x2d0
[  182.178198][ T8401]        __x64_sys_exit_group+0x3f/0x40
[  182.183750][ T8401]        x64_sys_call+0x21ba/0x21c0
[  182.188949][ T8401]        do_syscall_64+0xf6/0x210
[  182.193975][ T8401]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.200390][ T8401] 
[  182.200390][ T8401] other info that might help us debug this:
[  182.200390][ T8401] 
[  182.210613][ T8401]  Possible unsafe locking scenario:
[  182.210613][ T8401] 
[  182.218065][ T8401]        CPU0                    CPU1
[  182.223429][ T8401]        ----                    ----
[  182.228811][ T8401]   lock(&conn->lock#2);
[  182.233078][ T8401]                                lock((work_completion)(&(&conn->info_timer)->work));
[  182.242709][ T8401]                                lock(&conn->lock#2);
[  182.249484][ T8401]   lock((work_completion)(&(&conn->info_timer)->work));
[  182.256518][ T8401] 
[  182.256518][ T8401]  *** DEADLOCK ***
[  182.256518][ T8401] 
[  182.264656][ T8401] 5 locks held by syz-executor/8401:
[  182.269938][ T8401]  #0: ffff888069308d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500
[  182.279880][ T8401]  #1: ffff888069308078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  182.289553][ T8401]  #2: ffffffff8f45a448 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  182.299654][ T8401]  #3: ffff88805988fb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  182.308977][ T8401]  #4: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xd2/0xbc0
[  182.318138][ T8401] 
[  182.318138][ T8401] stack backtrace:
[  182.324045][ T8401] CPU: 1 UID: 0 PID: 8401 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00164-g0093cb194a75 #0 PREEMPT(full) 
[  182.324066][ T8401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  182.324080][ T8401] Call Trace:
[  182.324090][ T8401]  <TASK>
[  182.324098][ T8401]  dump_stack_lvl+0x189/0x250
[  182.324124][ T8401]  ? __pfx_dump_stack_lvl+0x10/0x10
[  182.324146][ T8401]  ? __pfx__printk+0x10/0x10
[  182.324162][ T8401]  ? print_lock_name+0xde/0x100
[  182.324188][ T8401]  print_circular_bug+0x2ee/0x310
[  182.324206][ T8401]  check_noncircular+0x134/0x160
[  182.324223][ T8401]  validate_chain+0xb9b/0x2140
[  182.324237][ T8401]  ? do_raw_spin_lock+0x121/0x290
[  182.324257][ T8401]  ? look_up_lock_class+0x74/0x170
[  182.324275][ T8401]  ? register_lock_class+0x51/0x320
[  182.324299][ T8401]  __lock_acquire+0xaac/0xd20
[  182.324322][ T8401]  ? __flush_work+0xd2/0xbc0
[  182.324336][ T8401]  lock_acquire+0x120/0x360
[  182.324356][ T8401]  ? __flush_work+0xd2/0xbc0
[  182.324374][ T8401]  ? _raw_spin_unlock_irq+0x23/0x50
[  182.324390][ T8401]  ? __flush_work+0xd2/0xbc0
[  182.324405][ T8401]  __flush_work+0x6b8/0xbc0
[  182.324420][ T8401]  ? __flush_work+0xd2/0xbc0
[  182.324437][ T8401]  ? __flush_work+0xd2/0xbc0
[  182.324453][ T8401]  ? __pfx___flush_work+0x10/0x10
[  182.324469][ T8401]  ? __pfx_wq_barrier_func+0x10/0x10
[  182.324499][ T8401]  ? __pfx___cancel_work+0x10/0x10
[  182.324516][ T8401]  ? hci_conn_drop+0x14d/0x280
[  182.324536][ T8401]  __cancel_work_sync+0xbe/0x110
[  182.324554][ T8401]  l2cap_conn_del+0x4f0/0x680
[  182.324570][ T8401]  ? __pfx_l2cap_disconn_cfm+0x10/0x10
[  182.324585][ T8401]  hci_conn_hash_flush+0x10a/0x230
[  182.324603][ T8401]  hci_dev_close_sync+0xaef/0x1330
[  182.324630][ T8401]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  182.324653][ T8401]  ? up_write+0x1c4/0x420
[  182.324671][ T8401]  hci_unregister_dev+0x206/0x500
[  182.324693][ T8401]  vhci_release+0x80/0xd0
[  182.324708][ T8401]  ? __pfx_vhci_release+0x10/0x10
[  182.324722][ T8401]  __fput+0x449/0xa70
[  182.324750][ T8401]  task_work_run+0x1d1/0x260
[  182.324771][ T8401]  ? __pfx_task_work_run+0x10/0x10
[  182.324791][ T8401]  ? kmem_cache_free+0x192/0x3f0
[  182.324812][ T8401]  do_exit+0x8d6/0x2550
[  182.324836][ T8401]  ? __pfx_do_exit+0x10/0x10
[  182.324858][ T8401]  ? _raw_spin_unlock_irq+0x23/0x50
[  182.324872][ T8401]  ? lockdep_hardirqs_on+0x9c/0x150
[  182.324888][ T8401]  do_group_exit+0x21c/0x2d0
[  182.324909][ T8401]  __x64_sys_exit_group+0x3f/0x40
[  182.324928][ T8401]  x64_sys_call+0x21ba/0x21c0
[  182.324942][ T8401]  do_syscall_64+0xf6/0x210
[  182.324960][ T8401]  ? clear_bhb_loop+0x45/0xa0
[  182.324977][ T8401]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.324993][ T8401] RIP: 0033:0x7f8261f8e969
[  182.325013][ T8401] Code: Unable to access opcode bytes at 0x7f8261f8e93f.
[  182.325020][ T8401] RSP: 002b:00007ffc60498bf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  182.325043][ T8401] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f8261f8e969
[  182.325054][ T8401] RDX: 00007f8261f907fc RSI: 0000000000000000 RDI: 0000000000000007
[  182.325063][ T8401] RBP: 0000000000000000 R08: 000000000000000c R09: 0000000000000007
[  182.325072][ T8401] R10: 00007ffc604997e4 R11: 0000000000000246 R12: 0000000000000003
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  182.325081][ T8401] R13: 0000000000000000 R14: 00007f8262ce4670 R15: 0000000000000000
[  182.325098][ T8401]  </TASK>