last executing test programs:

59.699733929s ago: executing program 1 (id=170):
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x26, 0x0, 0x0, @void, @value}, 0x10)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x108, 0x3, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x74, 0xc, "3e01f98a069f057f18ff40bf714e09f904783a58f08b157e562c005fed57017f81ce054b80c8875bb1655691692b1e7de5c2a80cba99b537b61f6d3d1c5c627498f009b76f9ba4f8249f86e04debb939fc0b971374cdd0404d323970e696da99557cad50109e4884f08031411b1c1f3b"}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6eb7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xef}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xd3}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0xf4, 0xb, 0xa, 0x903, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_USERDATA={0x2c, 0xd, 0x1, 0x0, "1250c412dc9d3af23fc552adbcff183b4e06c0b3d27e5b8516932449e25d1d8f97862202552d14b0"}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}, @NFTA_SET_EXPRESSIONS={0x6c, 0x12, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf8000000}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}]}]}, @NFT_MSG_NEWTABLE={0x204, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x1f, 0x6, "e580d1e28a2f6477befa82ed5e9a24733cb993f78aab55ada76048"}, @NFTA_TABLE_USERDATA={0xad, 0x6, "d80b049a669061bfccba99195a55d1d90e743ef89bbf0dddfd08155b316003588710c0b20e1343a36739804f3a08bfc565b282c964331e5102cc77ca3124c4d17ca1f536cfa9bcf26cc9937ec9bc8d8e6c2ff01957d1b30ced1a167ecd0409faea5029f3d4719e6ce3e9cd681a7ee18998ecb3654722ee749ce69b7f5b2a93d0833ea0237a9e92e925d3d9339a3e250b323ff5a075d3d4cd462ec3ef5d83611d16a85c585cedc22b8f"}, @NFTA_TABLE_USERDATA={0xea, 0x6, "f240ef736dd656c34263a2a991a343474df63a725cb33013b27d05acc9c86ca8c2f9a814e7a59ec342bf69d8cf1ab42101319b5a5d4c53a1e5c08f7c10aeebaad37f9e8a479fc6c5bb35c0ddf5aa8ad0dedcdae7c9e5452e834a535a07aff3d0ac9c942f325876e6c7947088edab974c2be12076ce0dcbeefa00c4b62a4be2b2ab149cfdff11ecd1091ea1ba2026d216805d75991f1043e76dc630fecbdc0345d07702067f9034b61b371aef4b2990a9dcd9b631d007cf5b34f14af7ff5685cf3ad4d7e08612824682070558421e3b8751c99bafcd7ab87ccf0bb44bac3c9c7d561e6a51bacd"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x60, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x31}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xf9}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xcc}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xf9}]}}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x568}, 0x1, 0x0, 0x0, 0x20048801}, 0x40090)
sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002200014f00012cbd7000fcdbdf2502041408780000050400"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20048000)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x2a, 0x821, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1=0xcac0f00}]}, 0x1c}, 0x1, 0x3000000, 0x0, 0x11}, 0x0)

58.757166485s ago: executing program 2 (id=315):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
r1 = socket(0x200000000000011, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x1000000, [{0xd, 0x4, 0x1000000}]}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x37, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28)
r2 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @broadcast, @multicast1}, {0x17, 0x0, 0x0, @loopback}}}}}, 0x0)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

47.628829487s ago: executing program 1 (id=170):
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x26, 0x0, 0x0, @void, @value}, 0x10)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x108, 0x3, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x74, 0xc, "3e01f98a069f057f18ff40bf714e09f904783a58f08b157e562c005fed57017f81ce054b80c8875bb1655691692b1e7de5c2a80cba99b537b61f6d3d1c5c627498f009b76f9ba4f8249f86e04debb939fc0b971374cdd0404d323970e696da99557cad50109e4884f08031411b1c1f3b"}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6eb7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xef}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xd3}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0xf4, 0xb, 0xa, 0x903, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_USERDATA={0x2c, 0xd, 0x1, 0x0, "1250c412dc9d3af23fc552adbcff183b4e06c0b3d27e5b8516932449e25d1d8f97862202552d14b0"}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}, @NFTA_SET_EXPRESSIONS={0x6c, 0x12, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf8000000}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}]}]}, @NFT_MSG_NEWTABLE={0x204, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x1f, 0x6, "e580d1e28a2f6477befa82ed5e9a24733cb993f78aab55ada76048"}, @NFTA_TABLE_USERDATA={0xad, 0x6, "d80b049a669061bfccba99195a55d1d90e743ef89bbf0dddfd08155b316003588710c0b20e1343a36739804f3a08bfc565b282c964331e5102cc77ca3124c4d17ca1f536cfa9bcf26cc9937ec9bc8d8e6c2ff01957d1b30ced1a167ecd0409faea5029f3d4719e6ce3e9cd681a7ee18998ecb3654722ee749ce69b7f5b2a93d0833ea0237a9e92e925d3d9339a3e250b323ff5a075d3d4cd462ec3ef5d83611d16a85c585cedc22b8f"}, @NFTA_TABLE_USERDATA={0xea, 0x6, "f240ef736dd656c34263a2a991a343474df63a725cb33013b27d05acc9c86ca8c2f9a814e7a59ec342bf69d8cf1ab42101319b5a5d4c53a1e5c08f7c10aeebaad37f9e8a479fc6c5bb35c0ddf5aa8ad0dedcdae7c9e5452e834a535a07aff3d0ac9c942f325876e6c7947088edab974c2be12076ce0dcbeefa00c4b62a4be2b2ab149cfdff11ecd1091ea1ba2026d216805d75991f1043e76dc630fecbdc0345d07702067f9034b61b371aef4b2990a9dcd9b631d007cf5b34f14af7ff5685cf3ad4d7e08612824682070558421e3b8751c99bafcd7ab87ccf0bb44bac3c9c7d561e6a51bacd"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x60, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x31}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xf9}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xcc}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xf9}]}}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x568}, 0x1, 0x0, 0x0, 0x20048801}, 0x40090)
sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002200014f00012cbd7000fcdbdf2502041408780000050400"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20048000)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x2a, 0x821, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1=0xcac0f00}]}, 0x1c}, 0x1, 0x3000000, 0x0, 0x11}, 0x0)

46.759125125s ago: executing program 2 (id=315):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
r1 = socket(0x200000000000011, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x1000000, [{0xd, 0x4, 0x1000000}]}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x37, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28)
r2 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @broadcast, @multicast1}, {0x17, 0x0, 0x0, @loopback}}}}}, 0x0)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

36.103350772s ago: executing program 2 (id=315):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
r1 = socket(0x200000000000011, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x1000000, [{0xd, 0x4, 0x1000000}]}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x37, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28)
r2 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @broadcast, @multicast1}, {0x17, 0x0, 0x0, @loopback}}}}}, 0x0)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

36.055613253s ago: executing program 1 (id=170):
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x26, 0x0, 0x0, @void, @value}, 0x10)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x108, 0x3, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x74, 0xc, "3e01f98a069f057f18ff40bf714e09f904783a58f08b157e562c005fed57017f81ce054b80c8875bb1655691692b1e7de5c2a80cba99b537b61f6d3d1c5c627498f009b76f9ba4f8249f86e04debb939fc0b971374cdd0404d323970e696da99557cad50109e4884f08031411b1c1f3b"}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6eb7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xef}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xd3}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0xf4, 0xb, 0xa, 0x903, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_USERDATA={0x2c, 0xd, 0x1, 0x0, "1250c412dc9d3af23fc552adbcff183b4e06c0b3d27e5b8516932449e25d1d8f97862202552d14b0"}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}, @NFTA_SET_EXPRESSIONS={0x6c, 0x12, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf8000000}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}]}]}, @NFT_MSG_NEWTABLE={0x204, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x1f, 0x6, "e580d1e28a2f6477befa82ed5e9a24733cb993f78aab55ada76048"}, @NFTA_TABLE_USERDATA={0xad, 0x6, "d80b049a669061bfccba99195a55d1d90e743ef89bbf0dddfd08155b316003588710c0b20e1343a36739804f3a08bfc565b282c964331e5102cc77ca3124c4d17ca1f536cfa9bcf26cc9937ec9bc8d8e6c2ff01957d1b30ced1a167ecd0409faea5029f3d4719e6ce3e9cd681a7ee18998ecb3654722ee749ce69b7f5b2a93d0833ea0237a9e92e925d3d9339a3e250b323ff5a075d3d4cd462ec3ef5d83611d16a85c585cedc22b8f"}, @NFTA_TABLE_USERDATA={0xea, 0x6, "f240ef736dd656c34263a2a991a343474df63a725cb33013b27d05acc9c86ca8c2f9a814e7a59ec342bf69d8cf1ab42101319b5a5d4c53a1e5c08f7c10aeebaad37f9e8a479fc6c5bb35c0ddf5aa8ad0dedcdae7c9e5452e834a535a07aff3d0ac9c942f325876e6c7947088edab974c2be12076ce0dcbeefa00c4b62a4be2b2ab149cfdff11ecd1091ea1ba2026d216805d75991f1043e76dc630fecbdc0345d07702067f9034b61b371aef4b2990a9dcd9b631d007cf5b34f14af7ff5685cf3ad4d7e08612824682070558421e3b8751c99bafcd7ab87ccf0bb44bac3c9c7d561e6a51bacd"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x60, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x31}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xf9}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xcc}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xf9}]}}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x568}, 0x1, 0x0, 0x0, 0x20048801}, 0x40090)
sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002200014f00012cbd7000fcdbdf2502041408780000050400"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20048000)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x2a, 0x821, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1=0xcac0f00}]}, 0x1c}, 0x1, 0x3000000, 0x0, 0x11}, 0x0)

27.734622196s ago: executing program 2 (id=315):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
r1 = socket(0x200000000000011, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x1000000, [{0xd, 0x4, 0x1000000}]}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x37, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28)
r2 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @broadcast, @multicast1}, {0x17, 0x0, 0x0, @loopback}}}}}, 0x0)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

24.885672256s ago: executing program 1 (id=170):
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x26, 0x0, 0x0, @void, @value}, 0x10)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x108, 0x3, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x74, 0xc, "3e01f98a069f057f18ff40bf714e09f904783a58f08b157e562c005fed57017f81ce054b80c8875bb1655691692b1e7de5c2a80cba99b537b61f6d3d1c5c627498f009b76f9ba4f8249f86e04debb939fc0b971374cdd0404d323970e696da99557cad50109e4884f08031411b1c1f3b"}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6eb7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xef}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xd3}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0xf4, 0xb, 0xa, 0x903, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_USERDATA={0x2c, 0xd, 0x1, 0x0, "1250c412dc9d3af23fc552adbcff183b4e06c0b3d27e5b8516932449e25d1d8f97862202552d14b0"}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}, @NFTA_SET_EXPRESSIONS={0x6c, 0x12, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf8000000}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}]}]}, @NFT_MSG_NEWTABLE={0x204, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x1f, 0x6, "e580d1e28a2f6477befa82ed5e9a24733cb993f78aab55ada76048"}, @NFTA_TABLE_USERDATA={0xad, 0x6, "d80b049a669061bfccba99195a55d1d90e743ef89bbf0dddfd08155b316003588710c0b20e1343a36739804f3a08bfc565b282c964331e5102cc77ca3124c4d17ca1f536cfa9bcf26cc9937ec9bc8d8e6c2ff01957d1b30ced1a167ecd0409faea5029f3d4719e6ce3e9cd681a7ee18998ecb3654722ee749ce69b7f5b2a93d0833ea0237a9e92e925d3d9339a3e250b323ff5a075d3d4cd462ec3ef5d83611d16a85c585cedc22b8f"}, @NFTA_TABLE_USERDATA={0xea, 0x6, "f240ef736dd656c34263a2a991a343474df63a725cb33013b27d05acc9c86ca8c2f9a814e7a59ec342bf69d8cf1ab42101319b5a5d4c53a1e5c08f7c10aeebaad37f9e8a479fc6c5bb35c0ddf5aa8ad0dedcdae7c9e5452e834a535a07aff3d0ac9c942f325876e6c7947088edab974c2be12076ce0dcbeefa00c4b62a4be2b2ab149cfdff11ecd1091ea1ba2026d216805d75991f1043e76dc630fecbdc0345d07702067f9034b61b371aef4b2990a9dcd9b631d007cf5b34f14af7ff5685cf3ad4d7e08612824682070558421e3b8751c99bafcd7ab87ccf0bb44bac3c9c7d561e6a51bacd"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x60, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x31}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xf9}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xcc}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xf9}]}}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x568}, 0x1, 0x0, 0x0, 0x20048801}, 0x40090)
sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002200014f00012cbd7000fcdbdf2502041408780000050400"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20048000)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x2a, 0x821, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1=0xcac0f00}]}, 0x1c}, 0x1, 0x3000000, 0x0, 0x11}, 0x0)

17.446352454s ago: executing program 2 (id=315):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
r1 = socket(0x200000000000011, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x1000000, [{0xd, 0x4, 0x1000000}]}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x37, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28)
r2 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @broadcast, @multicast1}, {0x17, 0x0, 0x0, @loopback}}}}}, 0x0)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

15.021565934s ago: executing program 1 (id=170):
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x26, 0x0, 0x0, @void, @value}, 0x10)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x108, 0x3, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x74, 0xc, "3e01f98a069f057f18ff40bf714e09f904783a58f08b157e562c005fed57017f81ce054b80c8875bb1655691692b1e7de5c2a80cba99b537b61f6d3d1c5c627498f009b76f9ba4f8249f86e04debb939fc0b971374cdd0404d323970e696da99557cad50109e4884f08031411b1c1f3b"}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6eb7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xef}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xd3}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0xf4, 0xb, 0xa, 0x903, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_USERDATA={0x2c, 0xd, 0x1, 0x0, "1250c412dc9d3af23fc552adbcff183b4e06c0b3d27e5b8516932449e25d1d8f97862202552d14b0"}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}, @NFTA_SET_EXPRESSIONS={0x6c, 0x12, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf8000000}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}]}]}, @NFT_MSG_NEWTABLE={0x204, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x1f, 0x6, "e580d1e28a2f6477befa82ed5e9a24733cb993f78aab55ada76048"}, @NFTA_TABLE_USERDATA={0xad, 0x6, "d80b049a669061bfccba99195a55d1d90e743ef89bbf0dddfd08155b316003588710c0b20e1343a36739804f3a08bfc565b282c964331e5102cc77ca3124c4d17ca1f536cfa9bcf26cc9937ec9bc8d8e6c2ff01957d1b30ced1a167ecd0409faea5029f3d4719e6ce3e9cd681a7ee18998ecb3654722ee749ce69b7f5b2a93d0833ea0237a9e92e925d3d9339a3e250b323ff5a075d3d4cd462ec3ef5d83611d16a85c585cedc22b8f"}, @NFTA_TABLE_USERDATA={0xea, 0x6, "f240ef736dd656c34263a2a991a343474df63a725cb33013b27d05acc9c86ca8c2f9a814e7a59ec342bf69d8cf1ab42101319b5a5d4c53a1e5c08f7c10aeebaad37f9e8a479fc6c5bb35c0ddf5aa8ad0dedcdae7c9e5452e834a535a07aff3d0ac9c942f325876e6c7947088edab974c2be12076ce0dcbeefa00c4b62a4be2b2ab149cfdff11ecd1091ea1ba2026d216805d75991f1043e76dc630fecbdc0345d07702067f9034b61b371aef4b2990a9dcd9b631d007cf5b34f14af7ff5685cf3ad4d7e08612824682070558421e3b8751c99bafcd7ab87ccf0bb44bac3c9c7d561e6a51bacd"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x60, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x31}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xf9}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xcc}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xf9}]}}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x568}, 0x1, 0x0, 0x0, 0x20048801}, 0x40090)
sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002200014f00012cbd7000fcdbdf2502041408780000050400"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20048000)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x2a, 0x821, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1=0xcac0f00}]}, 0x1c}, 0x1, 0x3000000, 0x0, 0x11}, 0x0)

7.906513592s ago: executing program 2 (id=315):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
r1 = socket(0x200000000000011, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x1000000, [{0xd, 0x4, 0x1000000}]}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x37, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28)
r2 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @broadcast, @multicast1}, {0x17, 0x0, 0x0, @loopback}}}}}, 0x0)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

6.405742213s ago: executing program 1 (id=170):
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x26, 0x0, 0x0, @void, @value}, 0x10)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x108, 0x3, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x74, 0xc, "3e01f98a069f057f18ff40bf714e09f904783a58f08b157e562c005fed57017f81ce054b80c8875bb1655691692b1e7de5c2a80cba99b537b61f6d3d1c5c627498f009b76f9ba4f8249f86e04debb939fc0b971374cdd0404d323970e696da99557cad50109e4884f08031411b1c1f3b"}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6eb7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xef}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xd3}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0xf4, 0xb, 0xa, 0x903, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_USERDATA={0x2c, 0xd, 0x1, 0x0, "1250c412dc9d3af23fc552adbcff183b4e06c0b3d27e5b8516932449e25d1d8f97862202552d14b0"}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}, @NFTA_SET_EXPRESSIONS={0x6c, 0x12, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf8000000}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}]}]}, @NFT_MSG_NEWTABLE={0x204, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x1f, 0x6, "e580d1e28a2f6477befa82ed5e9a24733cb993f78aab55ada76048"}, @NFTA_TABLE_USERDATA={0xad, 0x6, "d80b049a669061bfccba99195a55d1d90e743ef89bbf0dddfd08155b316003588710c0b20e1343a36739804f3a08bfc565b282c964331e5102cc77ca3124c4d17ca1f536cfa9bcf26cc9937ec9bc8d8e6c2ff01957d1b30ced1a167ecd0409faea5029f3d4719e6ce3e9cd681a7ee18998ecb3654722ee749ce69b7f5b2a93d0833ea0237a9e92e925d3d9339a3e250b323ff5a075d3d4cd462ec3ef5d83611d16a85c585cedc22b8f"}, @NFTA_TABLE_USERDATA={0xea, 0x6, "f240ef736dd656c34263a2a991a343474df63a725cb33013b27d05acc9c86ca8c2f9a814e7a59ec342bf69d8cf1ab42101319b5a5d4c53a1e5c08f7c10aeebaad37f9e8a479fc6c5bb35c0ddf5aa8ad0dedcdae7c9e5452e834a535a07aff3d0ac9c942f325876e6c7947088edab974c2be12076ce0dcbeefa00c4b62a4be2b2ab149cfdff11ecd1091ea1ba2026d216805d75991f1043e76dc630fecbdc0345d07702067f9034b61b371aef4b2990a9dcd9b631d007cf5b34f14af7ff5685cf3ad4d7e08612824682070558421e3b8751c99bafcd7ab87ccf0bb44bac3c9c7d561e6a51bacd"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x60, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x31}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xf9}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xcc}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xf9}]}}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x568}, 0x1, 0x0, 0x0, 0x20048801}, 0x40090)
sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002200014f00012cbd7000fcdbdf2502041408780000050400"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20048000)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x2a, 0x821, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1=0xcac0f00}]}, 0x1c}, 0x1, 0x3000000, 0x0, 0x11}, 0x0)

3.840209643s ago: executing program 4 (id=1010):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000780)='sys_enter\x00', r1}, 0x18)
socket(0xa, 0x3, 0x4)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2, 0x0, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1", 0x5, 0x1, 0x0, 0x0)
splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0)

2.682747019s ago: executing program 3 (id=1019):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000c00801000600000000000000080000000e0703006269746d61703a69700000000500040000000000040019"], 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000010000000000b"], 0x28}}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240100003b0007010000000000000000047c0000040000000c00018006000600800a000000010280f90014"], 0x124}}, 0xc000)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000005c0)={'raw\x00', 0x0, [0x3, 0x6, 0xe, 0x80000000, 0x6]}, &(0x7f0000000540)=0x54)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x80)
setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000180)=@req={0x83, 0x7, 0x8, 0x3}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e})
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000002c0)={0x3, 0x4, 0x0, 0x0, @vifc_lcl_addr=@local, @remote}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000640)=@newtaction={0x14, 0x30, 0x216822a75a8bd92b, 0x0, 0x25dfdbfd}, 0x14}}, 0x4084000)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000f8ffffff000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000f00c0000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000000000000008006966623000000000000000000000000064756d6d79300000000000000000000069705f76746930000000000000000000697036746e6c30000000000000000000aaaaaaaaaabb0400000000000182c20000000000000000000000b8000000b8000000e80000006970000000000000000000000000000000000000000000a823c565625b8d720020000000000000007f00004dab14140000000000000000000084200400000000000000000000000041554449540000bcb92dfff07fca0000004600f58f5dc8438b000000000000000800"/376]}, 0x1f0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, 0x0, 0x7fe, 0x70b92a, 0x25dfdbfc}, 0x14}}, 0x4000000)

2.48161669s ago: executing program 0 (id=1020):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x100800)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000000000000e0021001400000002800000121f", 0xfffffffffffffe58}], 0x1}, 0x0)

2.411077107s ago: executing program 0 (id=1021):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149)
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000080))
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="ac8e343c63d1feadcd79e199834a0165671dc6aedba634c10634a5e7efebd8f01afb8a0cca2fa4379e4f054e88d9aa10d4b857fbce9e2a5d42eff810135337372ab0a444e47456ec8aa2eb1eafb1a0ca93ed8aaf54fcf6e0da9480b7fb349445934d3c774460734891482904e1dfa403", @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@loopback, @initdev, <r6=>0x0}, &(0x7f00000001c0)=0xc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x14, r8, 0x1}, 0x14}}, 0x0)
r9 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000640), 0x2, 0x0)
write$cgroup_type(r9, &(0x7f0000000680), 0x9)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000200)={0x3a4, r0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xc0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '(\xe1@])\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x287a}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x40, 0x4, "5f121b1d0ba09417cbe2ba91a47509f83ca5f0fad0d7ae4a050b0ecbb50c883c80d6cf06d819a265332680b9717ab3f02797dba4cee75923cf087ee1"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x288, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc1, 0x5, "96467ec86023e890faa733645bc8ee126cb099789024abb65580b916ba5460d95a4e80addc9f3ad3425e26d5f11c42c63e23fe6d40c55c4e45ec13774489a165c25e2bd63c1d1e0d1985cc9a208a0290af819ad04e479c4953e98674d82daa6634c2c213ec8ca0f307f94be7f3de6ade62be30b82eb27c3a8e77870d90da24bb8c5af14a017e6cd9275d093b40ecbfb940a8a81745e4ba13abadec952c4c01d104dcb08eeee104d1253851f329812d4ad79dfc5bfad97e20aef0249db5"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xf3, 0x4, "5cc4591455f1e7c32c1c933c888752a5ba4499a5ad70cce509e1369f2fb1c408805330117904971867d9633addadcf557725488ba4f7cb2a901d33db42cc825a2bb467dce134b98c26585de0dae4c48fedc6b2983f3272dff92bc1ba298c96f984a46ee4bce2e65b9221eeff0571a194defa2a3c256272064870952f1681e00aa629f7cef0ab982cb5afb8fb9edbc29bb84d14167245e2f3b227d1ef998d5fb75ae768eca2b738953abbf15844cab69c7834d4c393c896b3ac1c1cc618901f00f61b45a7b26d2b1a64abcb9afee2dea723711d5c634d51120fb5a6c66787b293b40fbb0a1228f2bc022b3b6efa8d10"}, @ETHTOOL_A_BITSET_MASK={0xc5, 0x5, "a7b6e3d03322fe9a0ff98db22f45a7e00d90a04159691e7ca327db4f6fdf7620f585ff8e0ed725e1fe914be25f359475841e17ea15ef01543b390089562336e993a6fd4b8e591dab5861bf7c0e01ec5a8b50eff9999b153131c3df96795b7c1d6f9fcfebbef9f548a7aeee2d076858358004b6c6920be9a586fb15713e22a4dea9ed7dcfd4ee897b23b09c2bc65a3d94f90605983894b300d1e10184f85ad78b86f216f516d3a18b9982f50014150228def57c6b434c7ca6ee0d19cd143cc8c5fd"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x4040084}, 0x10)

2.151909557s ago: executing program 0 (id=1022):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2}]}]}]}, 0x3c}}, 0x0)

2.147629482s ago: executing program 0 (id=1023):
r0 = socket$kcm(0x25, 0x1, 0x0)
recvmsg$kcm(r0, &(0x7f0000000540)={0x0, 0xfffffffffffffe76, 0x0}, 0x170)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
shutdown(0xffffffffffffffff, 0x0)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)
socket$key(0xf, 0x3, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c0044"], 0x154}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0xff, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f00000012c0)=@ethtool_gstrings={0x1b, 0x6}})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f00000008c0)=""/241, 0xf1, <r9=>0x0, &(0x7f00000009c0)=""/202, 0xca}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_lsm={0x1d, 0x21, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @jmp={0x5, 0x0, 0xc, 0x0, 0x1, 0x2}, @alu={0x4, 0x1, 0xd, 0x1, 0x0, 0x50, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x7f, 0x14, &(0x7f0000000340)=""/20, 0x41100, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0x9, 0x9, 0x6}, 0x10, r9, 0x0, 0x4, &(0x7f0000000ac0)=[r7, r7, r7, r7, r4, r7, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b00)=[{0x2, 0x4, 0xe, 0x2}, {0x1, 0x2, 0xd, 0x1}, {0x5, 0x1, 0xf, 0x6}, {0x4, 0x4, 0xa, 0xb}], 0x10, 0xf, @void, @value}, 0x94)

2.074133365s ago: executing program 3 (id=1024):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00', <r2=>0x0})
r3 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r3, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f0302fe0f000000000007000000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}}, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)

1.847932213s ago: executing program 3 (id=1025):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1.764610838s ago: executing program 0 (id=1026):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond_slave_1\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000", @ANYRES32=r1], 0x50}}, 0x0)

1.696144636s ago: executing program 3 (id=1027):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x0, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}}, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
close(r2) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0)

723.419598ms ago: executing program 4 (id=1028):
r0 = epoll_create(0x10000e9) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r2, 0x10d, 0xe7, &(0x7f00000002c0), &(0x7f0000000280)=0x4)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000013c0), r1) (async)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) (async, rerun: 64)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 64)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) (async)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, r4, 0xa09, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "d2c1f7f9"}]}]}, 0x20}}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000001100)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x4f, 0x0, "39be251d1eabe5d383b83d7b7e3d8a239273c82b1fc06d23d50e17e69c6ee2848410590f6c0e2a534af6bf6748eb4c584401b16c30a714c496c77ddfd4e196378b7ab3ef23a522d8b89388ab4e3fb8d0"}, 0xd8)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000080)) (async)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r3)

655.41511ms ago: executing program 4 (id=1029):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/\x00\x00\x00'], 0x20)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x24, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xfffffffb}, &(0x7f0000000040)=0x8)
recvmsg(r3, &(0x7f0000000700)={&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)=""/174, 0xae}, {&(0x7f0000000400)=""/8, 0x8}, {&(0x7f0000000440)=""/66, 0x42}, {&(0x7f00000004c0)=""/72, 0x48}, {&(0x7f0000000600)=""/202, 0xca}], 0x5}, 0x2042)
getsockopt$nfc_llcp(r1, 0x118, 0x0, &(0x7f0000000100)=""/206, 0xce)

638.94484ms ago: executing program 0 (id=1030):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000780)='sys_enter\x00', r1}, 0x18)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2, 0x0, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0)

495.838362ms ago: executing program 4 (id=1031):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20008040)

495.068662ms ago: executing program 3 (id=1032):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'pim6reg1\x00'})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB="08000600", @ANYRES32], 0x24}}, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r4, &(0x7f00000001c0), 0x2, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_pid(r5, &(0x7f0000000080), 0x12)

290.309966ms ago: executing program 4 (id=1033):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x46, &(0x7f00000004c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff}}}}}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x25}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x57, 0x7, 0x1, 0x0, "a8d88d5614d0e9cdf84839e00f2f2d5f2d0c9ab438c56a2b91cad48447f9cb8701ca67aa078bab49cbc6d440a86a1f925e013bf44504653034dd71c8325785ad5418ab414ef020ccfb5a4d1905e39c2850c05e"}]}], {0x14}}, 0xcc}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x4)
r2 = socket(0xa, 0x801, 0x0)
getsockopt$bt_BT_SECURITY(r2, 0x6, 0x25, 0x0, 0x20000000)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000b80)=@gcm_128={{0x303, 0x37}, "0200010800", "bd140400f8686bc1910092f94413582b", '\x00', "0e67cb72f328ac2f"}, 0x28)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000300)="cd084bab645382fd1c93e60e96e9654d56f9f049ca0a251ca21bcdaa02d73cb48037eb98c3cba3cc6912067b68bcd64d6860105b0854f284dec303ef8ce67c1bf3ae158b82f123c3bfe2f4dbb2c2a61653d37b4d2d6e4f7c33c4e4242906b7c8442429795bbecc44ae4f0074330ad572177130ac", 0x74}], 0x1)
syz_emit_ethernet(0x7e, &(0x7f0000000580)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6000000000483a0020010000000000000000000000000000ff020050b08868d27998dd0000000001010490787f00000060e1f588000700dfff020000000000000000000000000001ff02000000000000000000000000be000000000000007bf354a4d44f873e000000000000000000002ecb58a0d80a3af77c65921f1d0bf53b3827b6325bd3ff2184307dc1f4bf57f47fe49f6a5d8d45e8dc3673b4fb227d77e6b3b74510e1b13061e546723ede846fe3480281bd5ad1b85e69d1934ecd10916af5faf249"], 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_emit_ethernet(0x46, &(0x7f00000004c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff}}}}}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x25}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x57, 0x7, 0x1, 0x0, "a8d88d5614d0e9cdf84839e00f2f2d5f2d0c9ab438c56a2b91cad48447f9cb8701ca67aa078bab49cbc6d440a86a1f925e013bf44504653034dd71c8325785ad5418ab414ef020ccfb5a4d1905e39c2850c05e"}]}], {0x14}}, 0xcc}}, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) (async)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x4) (async)
socket(0xa, 0x801, 0x0) (async)
getsockopt$bt_BT_SECURITY(r2, 0x6, 0x25, 0x0, 0x20000000) (async)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000b80)=@gcm_128={{0x303, 0x37}, "0200010800", "bd140400f8686bc1910092f94413582b", '\x00', "0e67cb72f328ac2f"}, 0x28) (async)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000300)="cd084bab645382fd1c93e60e96e9654d56f9f049ca0a251ca21bcdaa02d73cb48037eb98c3cba3cc6912067b68bcd64d6860105b0854f284dec303ef8ce67c1bf3ae158b82f123c3bfe2f4dbb2c2a61653d37b4d2d6e4f7c33c4e4242906b7c8442429795bbecc44ae4f0074330ad572177130ac", 0x74}], 0x1) (async)
syz_emit_ethernet(0x7e, &(0x7f0000000580)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6000000000483a0020010000000000000000000000000000ff020050b08868d27998dd0000000001010490787f00000060e1f588000700dfff020000000000000000000000000001ff02000000000000000000000000be000000000000007bf354a4d44f873e000000000000000000002ecb58a0d80a3af77c65921f1d0bf53b3827b6325bd3ff2184307dc1f4bf57f47fe49f6a5d8d45e8dc3673b4fb227d77e6b3b74510e1b13061e546723ede846fe3480281bd5ad1b85e69d1934ecd10916af5faf249"], 0x0) (async)

274.340749ms ago: executing program 3 (id=1034):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x7e}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r3 = socket(0x10, 0x3, 0x0)
syz_emit_ethernet(0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000002bbbbbbbbbbbb88a8300081004500884700000000000003008e6e95af2549c403416bfb77019c3985c1d86bac0ff4876dc1c60fc6da3eaff16e7f04c940e707114202fdc1eff9333ac9c55838244258de8f44a4649f3ec43049a71e4258d1a77a0ddecaebd93058bde8997fc800"/128], &(0x7f0000000180)={0x0, 0x4, [0x9be, 0xb8c, 0x21, 0xb1b]})
write(r3, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24)
recvmmsg(r3, &(0x7f0000003080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff6a0af0fff8ffff1971a400fe00000000b7060000080000001e6400000000000045040300010000001704000001000a00b7040000ff010000720a8dfe000000008500000049000000b700000070b2000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d761ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f7604e26f7fcc059c062234d5595f6fbaa187b81d1106000000040f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a8321e056acf27c34bed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb93ce1c0983cdcb48477b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000a08612a29fc691e4f1f7bd053abb880039381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e44c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6bc7c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c16dc91142a4ea260532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f67906a5963d4fa3e26cc05972c162f223f000000d699e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c460880000000000000000000000000000007a4604baa70bda5d5f18f54e9638350a6dd81a55ab5528efd1ef5a564908db7cce99e5c569c2947763b90e03b6d1a53b590e4ff4867f0d86b9af58244866b9df33634c8d85ce1b3bfa3e5bec6989c907c2f46b9a837676e07d87bb7dba3f34694ceb5b9faf10eece00bcfd503ed3f3048782665a848d79e443de4ba97db3a9bde69be7612cb1441c61eadd5bb4494ff2eb189c2ab3a241c12f764c0719650c1b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000000c0)=0x3, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'dummy0\x00', 0x3}, 0x18)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x10, 0x6, 0x838, 0x0, 0x0, 0x628, 0xf0, 0x328, 0x768, 0x768, 0x768, 0x768, 0x768, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe}}}, {{@ipv6={@mcast2, @loopback, [], [], 'pimreg0\x00', 'team0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0xfffd, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}]}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'bridge_slave_1\x00', 'gretap0\x00', {}, {}, 0x87}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x898)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r1, @ANYBLOB="010040000004fb00000001937ea272bbe9732b79"], 0x38}, 0x1, 0x0, 0x0, 0x20020000}, 0x0)

0s ago: executing program 4 (id=1035):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000200), 0x4)

kernel console output (not intermixed with test programs):

 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  153.610854][ T7737] RSP: 002b:00007f8715847038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  153.619286][ T7737] RAX: ffffffffffffffda RBX: 00007f8714b35f80 RCX: 00007f871497dff9
[  153.627265][ T7737] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003
[  153.635228][ T7737] RBP: 00007f8715847090 R08: 0000000000000000 R09: 0000000000000000
[  153.643196][ T7737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  153.651166][ T7737] R13: 0000000000000000 R14: 00007f8714b35f80 R15: 00007ffdb69fcd38
[  153.659155][ T7737]  </TASK>
[  154.013460][ T7758] block nbd0: not configured, cannot reconfigure
[  154.043432][ T7701] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.060817][ T7701] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.077409][ T7701] bridge_slave_0: entered allmulticast mode
[  154.094164][ T7701] bridge_slave_0: entered promiscuous mode
[  154.105233][ T7701] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.124494][ T7701] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.134177][ T7701] bridge_slave_1: entered allmulticast mode
[  154.141416][ T7701] bridge_slave_1: entered promiscuous mode
[  154.175015][ T1116] hsr_slave_0: left promiscuous mode
[  154.191643][ T1116] hsr_slave_1: left promiscuous mode
[  154.198589][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.213652][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.226685][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.234253][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1
[  154.275920][ T1116] veth1_macvtap: left promiscuous mode
[  154.293656][ T1116] veth0_macvtap: left promiscuous mode
[  154.299415][ T1116] veth1_vlan: left promiscuous mode
[  154.305742][ T1116] veth0_vlan: left promiscuous mode
[  154.478108][ T5247] Bluetooth: hci1: command tx timeout
[  154.726407][ T1116] team0 (unregistering): Port device team_slave_1 removed
[  154.764247][ T1116] team0 (unregistering): Port device team_slave_0 removed
[  155.249201][ T7701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.264075][ T7777] IPv6: Can't replace route, no match found
[  155.291122][ T7701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.323912][ T7777] __nla_validate_parse: 3 callbacks suppressed
[  155.323931][ T7777] netlink: 76 bytes leftover after parsing attributes in process `syz.0.639'.
[  155.366996][ T5247] Bluetooth: hci2: command tx timeout
[  155.401727][ T7701] team0: Port device team_slave_0 added
[  155.420019][ T7701] team0: Port device team_slave_1 added
[  155.467092][ T7701] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.474091][ T7701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.523116][ T7701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.555175][ T7701] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.575190][ T7701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.602282][ T7701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.624866][ T7722] chnl_net:caif_netlink_parms(): no params data found
[  155.672994][ T7789] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma?
[  155.701275][ T7701] hsr_slave_0: entered promiscuous mode
[  155.714201][ T7701] hsr_slave_1: entered promiscuous mode
[  155.777918][ T7722] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.785089][ T7722] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.798105][ T7722] bridge_slave_0: entered allmulticast mode
[  155.805095][ T7722] bridge_slave_0: entered promiscuous mode
[  155.827582][ T7722] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.834685][ T7722] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.856323][ T7722] bridge_slave_1: entered allmulticast mode
[  155.863020][ T7722] bridge_slave_1: entered promiscuous mode
[  155.974331][ T1116] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.994529][ T7722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  156.017075][ T7801] netlink: 36 bytes leftover after parsing attributes in process `syz.0.645'.
[  156.036803][ T7722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  156.093858][ T1116] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.106136][ T7804] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.646'.
[  156.160831][ T7722] team0: Port device team_slave_0 added
[  156.203380][ T1116] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.227058][ T7722] team0: Port device team_slave_1 added
[  156.296668][ T1116] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.361811][ T7722] batman_adv: batadv0: Adding interface: batadv_slave_0
[  156.368905][ T7722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.395072][ T7722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  156.455359][ T7722] batman_adv: batadv0: Adding interface: batadv_slave_1
[  156.464515][ T7722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.510865][ T7722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  156.556392][ T5247] Bluetooth: hci1: command tx timeout
[  156.579731][ T7825] netlink: 32 bytes leftover after parsing attributes in process `syz.3.653'.
[  156.593922][ T7722] hsr_slave_0: entered promiscuous mode
[  156.620336][ T7722] hsr_slave_1: entered promiscuous mode
[  156.628160][ T7722] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  156.642239][ T7722] Cannot create hsr debugfs directory
[  156.687572][ T1116] bridge_slave_1: left allmulticast mode
[  156.693391][ T1116] bridge_slave_1: left promiscuous mode
[  156.706220][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.725002][ T1116] bridge_slave_0: left allmulticast mode
[  156.731801][ T1116] bridge_slave_0: left promiscuous mode
[  156.737850][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.779590][ T7834] xt_cgroup: invalid path, errno=-2
[  157.069227][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  157.081171][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  157.095318][ T1116] bond0 (unregistering): Released all slaves
[  157.123358][ T7833] FAULT_INJECTION: forcing a failure.
[  157.123358][ T7833] name failslab, interval 1, probability 0, space 0, times 0
[  157.139298][ T7833] CPU: 1 UID: 0 PID: 7833 Comm: syz.3.655 Not tainted 6.12.0-rc3-syzkaller-00158-gd95d9a31aceb #0
[  157.149942][ T7833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  157.160027][ T7833] Call Trace:
[  157.163326][ T7833]  <TASK>
[  157.166278][ T7833]  dump_stack_lvl+0x241/0x360
[  157.170988][ T7833]  ? __pfx_dump_stack_lvl+0x10/0x10
[  157.176208][ T7833]  ? __pfx__printk+0x10/0x10
[  157.178229][ T7836] netlink: 'syz.4.656': attribute type 9 has an invalid length.
[  157.180806][ T7833]  ? kmem_cache_alloc_node_noprof+0x49/0x320
[  157.180841][ T7833]  ? __pfx___might_resched+0x10/0x10
[  157.199715][ T7833]  should_fail_ex+0x3b0/0x4e0
[  157.204407][ T7833]  should_failslab+0xac/0x100
[  157.209085][ T7833]  ? __alloc_skb+0x1c3/0x440
[  157.213673][ T7833]  kmem_cache_alloc_node_noprof+0x71/0x320
[  157.219483][ T7833]  __alloc_skb+0x1c3/0x440
[  157.223902][ T7833]  ? __pfx___alloc_skb+0x10/0x10
[  157.228841][ T7833]  ? netlink_ack_tlv_len+0x6e/0x200
[  157.234036][ T7833]  netlink_ack+0x13f/0xa30
[  157.238447][ T7833]  ? __pfx_lock_acquire+0x10/0x10
[  157.243475][ T7833]  ? __pfx_nl80211_channel_switch+0x10/0x10
[  157.249369][ T7833]  ? __pfx_nl80211_post_doit+0x10/0x10
[  157.254841][ T7833]  netlink_rcv_skb+0x262/0x430
[  157.259605][ T7833]  ? __pfx_genl_rcv_msg+0x10/0x10
[  157.264630][ T7833]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  157.269922][ T7833]  ? __netlink_deliver_tap+0x77e/0x7c0
[  157.275392][ T7833]  genl_rcv+0x28/0x40
[  157.279372][ T7833]  netlink_unicast+0x7f6/0x990
[  157.284142][ T7833]  ? __pfx_netlink_unicast+0x10/0x10
[  157.289423][ T7833]  ? __virt_addr_valid+0x183/0x530
[  157.294538][ T7833]  ? __check_object_size+0x48e/0x900
[  157.299825][ T7833]  netlink_sendmsg+0x8e4/0xcb0
[  157.304596][ T7833]  ? __pfx_netlink_sendmsg+0x10/0x10
[  157.309879][ T7833]  ? aa_sock_msg_perm+0x91/0x160
[  157.314819][ T7833]  ? __pfx_netlink_sendmsg+0x10/0x10
[  157.320097][ T7833]  __sock_sendmsg+0x221/0x270
[  157.324779][ T7833]  ____sys_sendmsg+0x52a/0x7e0
[  157.329548][ T7833]  ? __pfx_____sys_sendmsg+0x10/0x10
[  157.334841][ T7833]  __sys_sendmsg+0x292/0x380
[  157.339431][ T7833]  ? __pfx___sys_sendmsg+0x10/0x10
[  157.344547][ T7833]  ? __pfx_vfs_write+0x10/0x10
[  157.349326][ T7833]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  157.355657][ T7833]  ? do_syscall_64+0x100/0x230
[  157.360424][ T7833]  ? do_syscall_64+0xb6/0x230
[  157.365102][ T7833]  do_syscall_64+0xf3/0x230
[  157.369603][ T7833]  ? clear_bhb_loop+0x35/0x90
[  157.374282][ T7833]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.380176][ T7833] RIP: 0033:0x7f3caa77dff9
[  157.384588][ T7833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  157.404189][ T7833] RSP: 002b:00007f3cab493038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  157.412605][ T7833] RAX: ffffffffffffffda RBX: 00007f3caa935f80 RCX: 00007f3caa77dff9
[  157.420571][ T7833] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003
[  157.428538][ T7833] RBP: 00007f3cab493090 R08: 0000000000000000 R09: 0000000000000000
[  157.436508][ T7833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  157.444563][ T7833] R13: 0000000000000000 R14: 00007f3caa935f80 R15: 00007ffd200d6ae8
[  157.452546][ T7833]  </TASK>
[  157.460877][ T5247] Bluetooth: hci2: command tx timeout
[  157.687564][ T7847] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.660'.
[  157.815185][ T7852] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[  157.837983][ T7853] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.661'.
[  157.848937][ T7849] xt_CT: No such helper "netbios-ns"
[  157.933954][ T7701] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  157.949685][ T7855] FAULT_INJECTION: forcing a failure.
[  157.949685][ T7855] name failslab, interval 1, probability 0, space 0, times 0
[  157.964345][ T7701] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  157.973823][ T7852] netlink: 52 bytes leftover after parsing attributes in process `syz.0.662'.
[  157.983036][ T7855] CPU: 1 UID: 0 PID: 7855 Comm: syz.4.663 Not tainted 6.12.0-rc3-syzkaller-00158-gd95d9a31aceb #0
[  157.993674][ T7855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  158.003742][ T7855] Call Trace:
[  158.007032][ T7855]  <TASK>
[  158.009978][ T7855]  dump_stack_lvl+0x241/0x360
[  158.014668][ T7855]  ? __pfx_dump_stack_lvl+0x10/0x10
[  158.019858][ T7855]  ? __pfx__printk+0x10/0x10
[  158.024441][ T7855]  ? kmem_cache_alloc_node_noprof+0x49/0x320
[  158.030438][ T7855]  ? __pfx___might_resched+0x10/0x10
[  158.035745][ T7855]  should_fail_ex+0x3b0/0x4e0
[  158.040434][ T7855]  should_failslab+0xac/0x100
[  158.045136][ T7855]  ? __alloc_skb+0x1c3/0x440
[  158.049748][ T7855]  kmem_cache_alloc_node_noprof+0x71/0x320
[  158.055581][ T7855]  __alloc_skb+0x1c3/0x440
[  158.060002][ T7855]  ? __pfx___alloc_skb+0x10/0x10
[  158.064940][ T7855]  ? netlink_ack_tlv_len+0x6e/0x200
[  158.070144][ T7855]  netlink_ack+0x13f/0xa30
[  158.074562][ T7855]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  158.080034][ T7855]  netlink_rcv_skb+0x262/0x430
[  158.084804][ T7855]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  158.090269][ T7855]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  158.095575][ T7855]  ? netlink_deliver_tap+0x2e/0x1b0
[  158.100774][ T7855]  netlink_unicast+0x7f6/0x990
[  158.105543][ T7855]  ? __pfx_netlink_unicast+0x10/0x10
[  158.110829][ T7855]  ? __virt_addr_valid+0x183/0x530
[  158.115945][ T7855]  ? __check_object_size+0x48e/0x900
[  158.121242][ T7855]  netlink_sendmsg+0x8e4/0xcb0
[  158.126014][ T7855]  ? __pfx_netlink_sendmsg+0x10/0x10
[  158.131300][ T7855]  ? aa_sock_msg_perm+0x91/0x160
[  158.136243][ T7855]  ? __pfx_netlink_sendmsg+0x10/0x10
[  158.141520][ T7855]  __sock_sendmsg+0x221/0x270
[  158.146200][ T7855]  ____sys_sendmsg+0x52a/0x7e0
[  158.150969][ T7855]  ? __pfx_____sys_sendmsg+0x10/0x10
[  158.156262][ T7855]  __sys_sendmmsg+0x3ab/0x730
[  158.160939][ T7855]  ? __pfx___sys_sendmmsg+0x10/0x10
[  158.166145][ T7855]  ? __pfx_lock_release+0x10/0x10
[  158.171169][ T7855]  ? kstrtouint_from_user+0x128/0x190
[  158.176558][ T7855]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  158.182449][ T7855]  ? ksys_write+0x229/0x2b0
[  158.186958][ T7855]  ? __pfx_lock_release+0x10/0x10
[  158.191987][ T7855]  ? vfs_write+0x7bf/0xc90
[  158.196412][ T7855]  ? kmem_cache_free+0x1a2/0x420
[  158.201357][ T7855]  ? __mutex_unlock_slowpath+0x21d/0x750
[  158.206995][ T7855]  ? __fget_files+0x3f3/0x470
[  158.211677][ T7855]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  158.217672][ T7855]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  158.224171][ T7855]  ? do_syscall_64+0x100/0x230
[  158.228939][ T7855]  __x64_sys_sendmmsg+0xa0/0xb0
[  158.233988][ T7855]  do_syscall_64+0xf3/0x230
[  158.238573][ T7855]  ? clear_bhb_loop+0x35/0x90
[  158.243246][ T7855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.249141][ T7855] RIP: 0033:0x7f5b5477dff9
[  158.253550][ T7855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.273153][ T7855] RSP: 002b:00007f5b5556e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  158.281570][ T7855] RAX: ffffffffffffffda RBX: 00007f5b54935f80 RCX: 00007f5b5477dff9
[  158.289540][ T7855] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004
[  158.297507][ T7855] RBP: 00007f5b5556e090 R08: 0000000000000000 R09: 0000000000000000
[  158.305479][ T7855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  158.313448][ T7855] R13: 0000000000000000 R14: 00007f5b54935f80 R15: 00007fff94de9e18
[  158.321429][ T7855]  </TASK>
[  158.372577][ T1116] hsr_slave_0: left promiscuous mode
[  158.381723][ T1116] hsr_slave_1: left promiscuous mode
[  158.391101][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.414240][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0
[  158.423384][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  158.445119][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1
[  158.472046][ T1116] veth1_macvtap: left promiscuous mode
[  158.479228][ T1116] veth0_macvtap: left promiscuous mode
[  158.485299][ T1116] veth1_vlan: left promiscuous mode
[  158.495358][ T1116] veth0_vlan: left promiscuous mode
[  158.637472][ T5247] Bluetooth: hci1: command tx timeout
[  158.867972][ T1116] team0 (unregistering): Port device team_slave_1 removed
[  158.913492][ T1116] team0 (unregistering): Port device team_slave_0 removed
[  159.251875][ T7701] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  159.265493][ T7701] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  159.306004][ T7863] netlink: 32 bytes leftover after parsing attributes in process `syz.0.664'.
[  159.468803][ T7872] netlink: 20 bytes leftover after parsing attributes in process `syz.0.668'.
[  159.531878][ T5247] Bluetooth: hci2: command tx timeout
[  159.596908][ T7876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.669'.
[  159.621874][ T7876] 8021q: adding VLAN 0 to HW filter on device bond1
[  159.646981][ T7878] 8021q: adding VLAN 0 to HW filter on device bond1
[  159.674942][ T7878] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address
[  159.712826][ T7878] bond1: (slave ip6tnl1): Error -95 calling set_mac_address
[  159.807884][ T7701] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.814853][ T7884] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  159.835262][ T7701] 8021q: adding VLAN 0 to HW filter on device team0
[  159.880829][ T2550] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.888098][ T2550] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.954786][ T2550] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.961992][ T2550] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.033611][ T7898] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  160.323006][ T7722] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  160.349717][ T7722] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  160.374859][ T7722] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  160.402624][ T7722] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  160.449133][ T7929] __nla_validate_parse: 1 callbacks suppressed
[  160.449155][ T7929] netlink: 32 bytes leftover after parsing attributes in process `syz.3.678'.
[  160.630087][ T7940] netlink: 'syz.0.679': attribute type 1 has an invalid length.
[  160.662484][ T7701] 8021q: adding VLAN 0 to HW filter on device batadv0
[  160.717582][ T5247] Bluetooth: hci1: command tx timeout
[  160.807816][ T7951] netlink: 'syz.0.681': attribute type 27 has an invalid length.
[  160.822098][ T7951] netlink: 152 bytes leftover after parsing attributes in process `syz.0.681'.
[  160.833090][ T7951] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  160.863551][ T7722] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.882561][ T7701] veth0_vlan: entered promiscuous mode
[  160.897147][ T7722] 8021q: adding VLAN 0 to HW filter on device team0
[  160.918715][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.925850][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.944943][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.952163][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.979701][ T7701] veth1_vlan: entered promiscuous mode
[  161.150318][ T7701] veth0_macvtap: entered promiscuous mode
[  161.194554][ T7701] veth1_macvtap: entered promiscuous mode
[  161.196549][ T7969] netlink: 20 bytes leftover after parsing attributes in process `syz.4.685'.
[  161.254292][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.285450][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.305939][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.327290][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.350114][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.372957][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.410046][ T7701] batman_adv: batadv0: Interface activated: batadv_slave_0
[  161.464517][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.505807][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.531147][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.552051][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.572325][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.592485][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.602898][ T5247] Bluetooth: hci2: command tx timeout
[  161.615624][ T7701] batman_adv: batadv0: Interface activated: batadv_slave_1
[  161.663941][ T7701] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.673381][ T7701] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.690090][ T7701] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.699127][ T7701] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.757321][ T7990] netlink: 32 bytes leftover after parsing attributes in process `syz.4.690'.
[  161.782899][ T7722] 8021q: adding VLAN 0 to HW filter on device batadv0
[  161.847055][ T7993] FAULT_INJECTION: forcing a failure.
[  161.847055][ T7993] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  161.905204][ T7993] CPU: 1 UID: 0 PID: 7993 Comm: syz.3.691 Not tainted 6.12.0-rc3-syzkaller-00158-gd95d9a31aceb #0
[  161.915855][ T7993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  161.925932][ T7993] Call Trace:
[  161.929224][ T7993]  <TASK>
[  161.932155][ T7993]  dump_stack_lvl+0x241/0x360
[  161.936837][ T7993]  ? __pfx_dump_stack_lvl+0x10/0x10
[  161.942033][ T7993]  ? __pfx__printk+0x10/0x10
[  161.946718][ T7993]  ? snprintf+0xda/0x120
[  161.951008][ T7993]  should_fail_ex+0x3b0/0x4e0
[  161.955706][ T7993]  _copy_to_user+0x2f/0xb0
[  161.960129][ T7993]  simple_read_from_buffer+0xca/0x150
[  161.965506][ T7993]  proc_fail_nth_read+0x1e9/0x250
[  161.970537][ T7993]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  161.976096][ T7993]  ? rw_verify_area+0x55e/0x6f0
[  161.980954][ T7993]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  161.986503][ T7993]  vfs_read+0x201/0xbc0
[  161.990669][ T7993]  ? __pfx_lock_release+0x10/0x10
[  161.995699][ T7993]  ? __pfx_vfs_read+0x10/0x10
[  162.000384][ T7993]  ? __fget_files+0x3f3/0x470
[  162.005072][ T7993]  ? fdget_pos+0x24e/0x320
[  162.009488][ T7993]  ksys_read+0x183/0x2b0
[  162.013730][ T7993]  ? __pfx_ksys_read+0x10/0x10
[  162.018491][ T7993]  ? do_syscall_64+0x100/0x230
[  162.023256][ T7993]  ? do_syscall_64+0xb6/0x230
[  162.027935][ T7993]  do_syscall_64+0xf3/0x230
[  162.032436][ T7993]  ? clear_bhb_loop+0x35/0x90
[  162.037112][ T7993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.043018][ T7993] RIP: 0033:0x7f3caa77ca3c
[  162.047434][ T7993] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  162.067043][ T7993] RSP: 002b:00007f3cab493030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  162.075463][ T7993] RAX: ffffffffffffffda RBX: 00007f3caa935f80 RCX: 00007f3caa77ca3c
[  162.083436][ T7993] RDX: 000000000000000f RSI: 00007f3cab4930a0 RDI: 0000000000000004
[  162.091404][ T7993] RBP: 00007f3cab493090 R08: 0000000000000000 R09: 0000000000000000
[  162.099375][ T7993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  162.107344][ T7993] R13: 0000000000000000 R14: 00007f3caa935f80 R15: 00007ffd200d6ae8
[  162.115327][ T7993]  </TASK>
[  162.148430][ T2550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.173505][ T2550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.245700][ T2550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.256273][ T7722] veth0_vlan: entered promiscuous mode
[  162.268853][ T2550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.292888][ T7722] veth1_vlan: entered promiscuous mode
[  162.389378][ T7722] veth0_macvtap: entered promiscuous mode
[  162.437367][ T7722] veth1_macvtap: entered promiscuous mode
[  162.550585][ T7722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.572197][ T7722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.583948][ T7722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.594599][ T7722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.604580][ T7722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.615115][ T7722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.625180][ T7722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.635754][ T7722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.667310][ T7722] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.708001][ T7722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.730577][ T7722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.744300][ T7722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.760616][ T7722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.770512][ T7722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.788720][ T7722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.801393][ T7722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.812172][ T7722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.824323][ T7722] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.866861][ T7722] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.875620][ T7722] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.916015][ T7722] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.927635][ T7722] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.946960][ T8028] syzkaller1: entered promiscuous mode
[  162.952477][ T8028] syzkaller1: entered allmulticast mode
[  163.030438][ T8023] syz.4.703 (8023) used greatest stack depth: 18352 bytes left
[  163.360914][ T8045] netlink: 9 bytes leftover after parsing attributes in process `syz.0.710'.
[  163.376408][ T8045] 0·: renamed from hsr_slave_1 (while UP)
[  163.384378][ T8045] 0·: entered allmulticast mode
[  163.390222][ T8045] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  163.474397][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.539711][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.547821][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.573548][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.582758][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.612904][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.853389][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.911175][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.003654][   T11] bridge_slave_1: left allmulticast mode
[  164.010001][   T11] bridge_slave_1: left promiscuous mode
[  164.015681][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.028681][   T11] bridge_slave_0: left allmulticast mode
[  164.034380][   T11] bridge_slave_0: left promiscuous mode
[  164.040405][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.266618][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'.
[  164.354473][ T8072] FAULT_INJECTION: forcing a failure.
[  164.354473][ T8072] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  164.406032][ T8072] CPU: 1 UID: 0 PID: 8072 Comm: syz.4.715 Not tainted 6.12.0-rc3-syzkaller-00158-gd95d9a31aceb #0
[  164.416867][ T8072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  164.426934][ T8072] Call Trace:
[  164.430219][ T8072]  <TASK>
[  164.433145][ T8072]  dump_stack_lvl+0x241/0x360
[  164.437913][ T8072]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.443109][ T8072]  ? __pfx__printk+0x10/0x10
[  164.447706][ T8072]  should_fail_ex+0x3b0/0x4e0
[  164.452389][ T8072]  _copy_from_user+0x2f/0xe0
[  164.456979][ T8072]  move_addr_to_kernel+0x82/0x150
[  164.462006][ T8072]  __sys_bind+0x162/0x2d0
[  164.466340][ T8072]  ? __pfx___sys_bind+0x10/0x10
[  164.471200][ T8072]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  164.477535][ T8072]  ? do_syscall_64+0x100/0x230
[  164.482304][ T8072]  __x64_sys_bind+0x7a/0x90
[  164.486831][ T8072]  do_syscall_64+0xf3/0x230
[  164.491359][ T8072]  ? clear_bhb_loop+0x35/0x90
[  164.496049][ T8072]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.501960][ T8072] RIP: 0033:0x7f5b5477dff9
[  164.506378][ T8072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.525998][ T8072] RSP: 002b:00007f5b5554d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  164.534425][ T8072] RAX: ffffffffffffffda RBX: 00007f5b54936058 RCX: 00007f5b5477dff9
[  164.542416][ T8072] RDX: 0000000000000010 RSI: 0000000020000340 RDI: 0000000000000004
[  164.550386][ T8072] RBP: 00007f5b5554d090 R08: 0000000000000000 R09: 0000000000000000
[  164.558351][ T8072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  164.566315][ T8072] R13: 0000000000000000 R14: 00007f5b54936058 R15: 00007fff94de9e18
[  164.574297][ T8072]  </TASK>
[  164.651272][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  164.670914][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  164.683170][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  164.706163][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  164.716124][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  164.723469][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  164.781091][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  164.793259][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  164.814871][   T11] bond0 (unregistering): Released all slaves
[  164.867593][ T8074] C speed is unknown, defaulting to 1000
[  165.118326][ T8084] netlink: 48 bytes leftover after parsing attributes in process `syz.4.719'.
[  165.216969][ T8082] netdevsim netdevsim3 netdevsim1: Unsupported IPsec algorithm
[  165.257523][ T8090] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.721'.
[  165.369900][ T5247] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  165.391757][ T5247] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  165.405997][ T5247] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  165.436743][ T5247] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  165.456943][ T5247] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  165.464941][ T5247] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  165.547275][ T8098] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.722'.
[  165.622177][   T11] hsr_slave_0: left promiscuous mode
[  165.631452][   T11] hsr_slave_1: left promiscuous mode
[  165.640635][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  165.655969][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  165.692258][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  165.703413][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  165.774964][   T11] veth1_macvtap: left promiscuous mode
[  165.782964][   T11] veth0_macvtap: left promiscuous mode
[  165.789301][   T11] veth1_vlan: left promiscuous mode
[  165.794629][   T11] veth0_vlan: left promiscuous mode
[  166.149927][   T11] team0 (unregistering): Port device team_slave_1 removed
[  166.193362][   T11] team0 (unregistering): Port device team_slave_0 removed
[  166.548085][ T8093] C speed is unknown, defaulting to 1000
[  166.571681][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.724'.
[  166.613132][ T8109] ip_vti0: Master is either lo or non-ether device
[  166.692245][ T8113] GUP no longer grows the stack in syz.4.726 (8113): 20003000-2000a000 (20001000)
[  166.715861][ T8113] CPU: 0 UID: 0 PID: 8113 Comm: syz.4.726 Not tainted 6.12.0-rc3-syzkaller-00158-gd95d9a31aceb #0
[  166.726521][ T8113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  166.736613][ T8113] Call Trace:
[  166.739920][ T8113]  <TASK>
[  166.742875][ T8113]  dump_stack_lvl+0x241/0x360
[  166.747589][ T8113]  ? __pfx_dump_stack_lvl+0x10/0x10
[  166.752823][ T8113]  ? __pfx__printk+0x10/0x10
[  166.757442][ T8113]  ? find_vma+0xf9/0x170
[  166.761741][ T8113]  __get_user_pages+0x4260/0x48d0
[  166.766806][ T8113]  ? __pfx_lock_acquire+0x10/0x10
[  166.771900][ T8113]  ? __pfx___get_user_pages+0x10/0x10
[  166.777317][ T8113]  ? __gup_longterm_locked+0xd11/0x17d0
[  166.782900][ T8113]  ? __pfx_lock_release+0x10/0x10
[  166.787970][ T8113]  ? __pfx_down_read_killable+0x10/0x10
[  166.793581][ T8113]  __gup_longterm_locked+0xed7/0x17d0
[  166.799001][ T8113]  ? sanity_check_pinned_pages+0x12b2/0x13b0
[  166.805033][ T8113]  gup_fast_fallback+0x2748/0x2b60
[  166.810211][ T8113]  ? __pfx_gup_fast_fallback+0x10/0x10
[  166.815696][ T8113]  ? __sys_getsockopt+0x267/0x330
[  166.816268][ T5247] Bluetooth: hci1: command tx timeout
[  166.820724][ T8113]  ? do_syscall_64+0xf3/0x230
[  166.831093][ T8113]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.837238][ T8113]  ? is_valid_gup_args+0x124/0x200
[  166.842389][ T8113]  pin_user_pages_fast+0xcc/0x160
[  166.847445][ T8113]  ? __pfx_pin_user_pages_fast+0x10/0x10
[  166.853101][ T8113]  ? rds_info_getsockopt+0x20c/0x600
[  166.858418][ T8113]  ? rds_info_getsockopt+0x20c/0x600
[  166.863737][ T8113]  ? rds_info_getsockopt+0x20c/0x600
[  166.869049][ T8113]  ? __kmalloc_noprof+0x21a/0x400
[  166.874109][ T8113]  rds_info_getsockopt+0x22e/0x600
[  166.879254][ T8113]  ? __might_fault+0xaa/0x120
[  166.883955][ T8113]  ? __pfx_lock_release+0x10/0x10
[  166.889005][ T8113]  ? __pfx_rds_info_getsockopt+0x10/0x10
[  166.894635][ T8113]  ? __might_fault+0xc6/0x120
[  166.899309][ T8113]  ? rds_getsockopt+0x2e8/0x530
[  166.904159][ T8113]  ? __pfx_rds_getsockopt+0x10/0x10
[  166.909388][ T8113]  do_sock_getsockopt+0x3c4/0x7e0
[  166.914438][ T8113]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  166.919981][ T8113]  ? __fget_files+0x3f3/0x470
[  166.924660][ T8113]  ? __fget_files+0x29/0x470
[  166.929254][ T8113]  __sys_getsockopt+0x267/0x330
[  166.934120][ T8113]  ? __pfx___sys_getsockopt+0x10/0x10
[  166.939522][ T8113]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  166.945886][ T8113]  ? do_syscall_64+0x100/0x230
[  166.950688][ T8113]  __x64_sys_getsockopt+0xb5/0xd0
[  166.955755][ T8113]  do_syscall_64+0xf3/0x230
[  166.960288][ T8113]  ? clear_bhb_loop+0x35/0x90
[  166.965020][ T8113]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.970956][ T8113] RIP: 0033:0x7f5b5477dff9
[  166.975403][ T8113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  166.995042][ T8113] RSP: 002b:00007f5b5556e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  167.003498][ T8113] RAX: ffffffffffffffda RBX: 00007f5b54935f80 RCX: 00007f5b5477dff9
[  167.011509][ T8113] RDX: 000000000000271f RSI: 0000200000000114 RDI: 0000000000000004
[  167.019514][ T8113] RBP: 00007f5b547f0296 R08: 0000000020000040 R09: 0000000000000000
[  167.027525][ T8113] R10: 0000000020000580 R11: 0000000000000246 R12: 0000000000000000
[  167.035680][ T8113] R13: 0000000000000000 R14: 00007f5b54935f80 R15: 00007fff94de9e18
[  167.043668][ T8113]  </TASK>
[  167.179248][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.729'.
[  167.351082][ T8074] chnl_net:caif_netlink_parms(): no params data found
[  167.475608][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.735'.
[  167.503002][ T8147] netlink: 40 bytes leftover after parsing attributes in process `syz.3.734'.
[  167.516213][ T5247] Bluetooth: hci2: command tx timeout
[  167.616446][ T8155] ax25_connect(): syz.3.736 uses autobind, please contact jreuter@yaina.de
[  167.672241][ T8074] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.692245][ T8074] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.701315][ T8074] bridge_slave_0: entered allmulticast mode
[  167.709128][ T8074] bridge_slave_0: entered promiscuous mode
[  167.727646][ T8093] chnl_net:caif_netlink_parms(): no params data found
[  167.748529][ T8074] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.756674][ T8074] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.764136][ T8074] bridge_slave_1: entered allmulticast mode
[  167.772249][ T8074] bridge_slave_1: entered promiscuous mode
[  167.846282][ T8168] netlink: 40 bytes leftover after parsing attributes in process `syz.4.738'.
[  167.910717][   T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.933457][ T8074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  167.947370][ T8166] C speed is unknown, defaulting to 1000
[  167.977294][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.742'.
[  167.997944][ T8074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.109876][   T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.241718][   T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.269296][ T8074] team0: Port device team_slave_0 added
[  168.282572][ T8074] team0: Port device team_slave_1 added
[  168.288994][ T8191] netlink: 'syz.3.745': attribute type 2 has an invalid length.
[  168.299171][ T8191] netlink: 5 bytes leftover after parsing attributes in process `syz.3.745'.
[  168.309965][ T8093] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.318857][ T8191] netlink: 1780 bytes leftover after parsing attributes in process `syz.3.745'.
[  168.327695][ T8093] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.338488][ T8093] bridge_slave_0: entered allmulticast mode
[  168.345774][ T8093] bridge_slave_0: entered promiscuous mode
[  168.435001][   T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.481048][ T8074] batman_adv: batadv0: Adding interface: batadv_slave_0
[  168.488250][ T8074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.528363][ T8074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  168.540476][ T8093] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.555505][ T8093] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.564884][ T8093] bridge_slave_1: entered allmulticast mode
[  168.572252][ T8093] bridge_slave_1: entered promiscuous mode
[  168.598248][ T8196] netlink: 5312 bytes leftover after parsing attributes in process `syz.0.747'.
[  168.614321][ T8074] batman_adv: batadv0: Adding interface: batadv_slave_1
[  168.622540][ T8074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.649856][ T8074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  168.719488][ T8093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.822300][ T8093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.876423][ T5247] Bluetooth: hci1: command tx timeout
[  168.920865][ T8093] team0: Port device team_slave_0 added
[  168.953113][ T8074] hsr_slave_0: entered promiscuous mode
[  168.968154][ T8074] hsr_slave_1: entered promiscuous mode
[  168.999311][   T11] bridge_slave_1: left allmulticast mode
[  169.004995][   T11] bridge_slave_1: left promiscuous mode
[  169.011192][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.020006][   T11] bridge_slave_0: left allmulticast mode
[  169.026098][   T11] bridge_slave_0: left promiscuous mode
[  169.031808][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.334164][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  169.345095][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  169.355662][   T11] bond0 (unregistering): Released all slaves
[  169.367334][ T8093] team0: Port device team_slave_1 added
[  169.442038][ T8093] batman_adv: batadv0: Adding interface: batadv_slave_0
[  169.454650][ T8093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.484758][ T8093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  169.520189][ T8093] batman_adv: batadv0: Adding interface: batadv_slave_1
[  169.527277][ T8093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.554740][ T8093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  169.597362][ T5247] Bluetooth: hci2: command tx timeout
[  169.690793][ T8093] hsr_slave_0: entered promiscuous mode
[  169.703894][ T8093] hsr_slave_1: entered promiscuous mode
[  169.710568][ T8093] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  169.718323][ T8093] Cannot create hsr debugfs directory
[  169.875580][   T11] hsr_slave_0: left promiscuous mode
[  169.883719][   T11] hsr_slave_1: left promiscuous mode
[  169.917911][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.925620][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  169.951546][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.959543][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  169.983281][   T11] veth1_macvtap: left promiscuous mode
[  169.989014][   T11] veth0_macvtap: left promiscuous mode
[  169.994642][   T11] veth1_vlan: left promiscuous mode
[  170.000165][   T11] veth0_vlan: left promiscuous mode
[  170.238071][   T80] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  170.435314][   T11] team0 (unregistering): Port device team_slave_1 removed
[  170.477308][   T11] team0 (unregistering): Port device team_slave_0 removed
[  170.849459][ T8219] __nla_validate_parse: 1 callbacks suppressed
[  170.849474][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.754'.
[  170.956340][ T5247] Bluetooth: hci1: command tx timeout
[  171.045570][ T8233] FAULT_INJECTION: forcing a failure.
[  171.045570][ T8233] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  171.065361][ T8233] CPU: 1 UID: 0 PID: 8233 Comm: syz.3.758 Not tainted 6.12.0-rc3-syzkaller-00158-gd95d9a31aceb #0
[  171.076002][ T8233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  171.086092][ T8233] Call Trace:
[  171.089367][ T8233]  <TASK>
[  171.092294][ T8233]  dump_stack_lvl+0x241/0x360
[  171.096977][ T8233]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.102176][ T8233]  ? __pfx__printk+0x10/0x10
[  171.106763][ T8233]  ? __pfx_lock_release+0x10/0x10
[  171.111799][ T8233]  should_fail_ex+0x3b0/0x4e0
[  171.116483][ T8233]  _copy_from_iter+0x1ed/0x1d60
[  171.121340][ T8233]  ? __virt_addr_valid+0x183/0x530
[  171.126456][ T8233]  ? __pfx_lock_release+0x10/0x10
[  171.131485][ T8233]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  171.137467][ T8233]  ? __pfx__copy_from_iter+0x10/0x10
[  171.142753][ T8233]  ? __virt_addr_valid+0x183/0x530
[  171.147862][ T8233]  ? __virt_addr_valid+0x183/0x530
[  171.152966][ T8233]  ? __virt_addr_valid+0x45f/0x530
[  171.158073][ T8233]  ? __phys_addr_symbol+0x2f/0x70
[  171.163102][ T8233]  ? __check_object_size+0x48e/0x900
[  171.168393][ T8233]  skb_copy_datagram_from_iter+0xf2/0x6a0
[  171.174121][ T8233]  ? iov_iter_single_seg_count+0xd7/0x300
[  171.179846][ T8233]  tun_get_user+0xec3/0x47e0
[  171.184450][ T8233]  ? __lock_acquire+0x1384/0x2050
[  171.189482][ T8233]  ? __pfx_tun_get_user+0x10/0x10
[  171.194525][ T8233]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  171.199989][ T8233]  ? tun_get+0x1e/0x2f0
[  171.204152][ T8233]  ? __pfx_lock_release+0x10/0x10
[  171.209190][ T8233]  ? tun_get+0x1e/0x2f0
[  171.213345][ T8233]  ? tun_get+0x27d/0x2f0
[  171.217584][ T8233]  tun_chr_write_iter+0x10d/0x1f0
[  171.222609][ T8233]  vfs_write+0xa6d/0xc90
[  171.226853][ T8233]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  171.232400][ T8233]  ? __pfx_vfs_write+0x10/0x10
[  171.237172][ T8233]  ? fdget_pos+0x19a/0x320
[  171.241589][ T8233]  ksys_write+0x183/0x2b0
[  171.245919][ T8233]  ? __pfx_ksys_write+0x10/0x10
[  171.250767][ T8233]  ? do_syscall_64+0x100/0x230
[  171.255528][ T8233]  ? do_syscall_64+0xb6/0x230
[  171.260210][ T8233]  do_syscall_64+0xf3/0x230
[  171.264711][ T8233]  ? clear_bhb_loop+0x35/0x90
[  171.269473][ T8233]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.275370][ T8233] RIP: 0033:0x7f3caa77dff9
[  171.279785][ T8233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.299391][ T8233] RSP: 002b:00007f3cab493038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  171.307804][ T8233] RAX: ffffffffffffffda RBX: 00007f3caa935f80 RCX: 00007f3caa77dff9
[  171.315771][ T8233] RDX: 0000000000000072 RSI: 00000000200004c0 RDI: 0000000000000003
[  171.323738][ T8233] RBP: 00007f3cab493090 R08: 0000000000000000 R09: 0000000000000000
[  171.331712][ T8233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  171.339681][ T8233] R13: 0000000000000000 R14: 00007f3caa935f80 R15: 00007ffd200d6ae8
[  171.347663][ T8233]  </TASK>
[  171.388833][ T8235] netdevsim netdevsim4 netdevsim1: Unsupported IPsec algorithm
[  171.676698][ T5247] Bluetooth: hci2: command tx timeout
[  171.782291][ T8074] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  171.792099][ T8074] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  171.822824][ T8074] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  171.889053][ T8074] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  172.000706][ T8093] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  172.032871][ T8093] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  172.061950][ T8093] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  172.070567][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.764'.
[  172.083813][ T8093] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  172.103296][ T8260] team0: Port device bridge0 added
[  172.115444][ T8258] netlink: 144 bytes leftover after parsing attributes in process `syz.3.764'.
[  172.218015][ T8265] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.766'.
[  172.241256][ T8074] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.278221][ T8093] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.290897][ T8268] netlink: 44 bytes leftover after parsing attributes in process `syz.0.766'.
[  172.312988][ T8265] netlink: 40 bytes leftover after parsing attributes in process `syz.0.766'.
[  172.322452][ T8265] openvswitch: netlink: Message has 712 unknown bytes.
[  172.323491][ T8074] 8021q: adding VLAN 0 to HW filter on device team0
[  172.351649][  T934] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.358822][  T934] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.368515][ T8093] 8021q: adding VLAN 0 to HW filter on device team0
[  172.382795][  T934] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.390002][  T934] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.407678][  T934] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.414836][  T934] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.442971][  T934] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.450167][  T934] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.472353][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.767'.
[  172.781243][ T8074] 8021q: adding VLAN 0 to HW filter on device batadv0
[  172.823924][ T8093] 8021q: adding VLAN 0 to HW filter on device batadv0
[  172.859149][ T8074] veth0_vlan: entered promiscuous mode
[  172.890832][ T8074] veth1_vlan: entered promiscuous mode
[  172.955621][ T8093] veth0_vlan: entered promiscuous mode
[  172.974615][ T8074] veth0_macvtap: entered promiscuous mode
[  172.989048][ T8093] veth1_vlan: entered promiscuous mode
[  173.001500][ T8074] veth1_macvtap: entered promiscuous mode
[  173.031089][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.046810][ T5247] Bluetooth: hci1: command tx timeout
[  173.055498][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.075547][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.093684][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.105341][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.116498][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.128402][ T8074] batman_adv: batadv0: Interface activated: batadv_slave_0
[  173.149275][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.162910][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.173809][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.185797][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.196170][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.206752][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.217687][ T8074] batman_adv: batadv0: Interface activated: batadv_slave_1
[  173.261393][ T8074] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.270524][ T8074] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.280686][ T8074] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  173.289551][ T8074] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  173.303353][ T8093] veth0_macvtap: entered promiscuous mode
[  173.320408][ T8093] veth1_macvtap: entered promiscuous mode
[  173.397122][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.414642][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.425197][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.441683][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.451646][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.463618][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.473585][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.484964][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.517218][ T8093] batman_adv: batadv0: Interface activated: batadv_slave_0
[  173.558370][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.571019][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.582596][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.593277][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.603546][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.614365][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.624596][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.636479][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.647674][ T8093] batman_adv: batadv0: Interface activated: batadv_slave_1
[  173.668216][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.778'.
[  173.683598][ T8093] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.703546][ T8093] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.718945][ T8093] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  173.730063][ T8093] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  173.751044][ T2550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.759248][ T5247] Bluetooth: hci2: command tx timeout
[  173.775358][ T2550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.870091][ T2550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.878107][ T2550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.948820][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.956909][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.015684][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.024988][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.778352][ T8326] openvswitch: netlink: Actions may not be safe on all matching packets
[  174.914131][ T2550] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.190169][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  175.203094][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  175.211700][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  175.221393][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  175.230626][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  175.240820][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  175.268430][ T8336] C speed is unknown, defaulting to 1000
[  175.413266][ T8336] chnl_net:caif_netlink_parms(): no params data found
[  175.459745][ T8336] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.467206][ T8336] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.474365][ T8336] bridge_slave_0: entered allmulticast mode
[  175.483042][ T8336] bridge_slave_0: entered promiscuous mode
[  175.493101][ T8336] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.504049][ T8336] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.511596][ T8336] bridge_slave_1: entered allmulticast mode
[  175.519591][ T8336] bridge_slave_1: entered promiscuous mode
[  175.545744][ T8336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  175.572179][ T2550] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.589441][ T8336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  175.623015][ T8336] team0: Port device team_slave_0 added
[  175.631520][ T8336] team0: Port device team_slave_1 added
[  175.652216][ T8336] batman_adv: batadv0: Adding interface: batadv_slave_0
[  175.660213][ T8336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.700061][ T8336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  175.712425][ T8336] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.719733][ T8336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.757969][ T8336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  175.846145][ T8336] hsr_slave_0: entered promiscuous mode
[  175.857641][ T8336] hsr_slave_1: entered promiscuous mode
[  175.863961][ T8336] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  175.875546][ T8336] Cannot create hsr debugfs directory
[  175.963346][ T2550] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.989115][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  176.002629][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.789'.
[  176.005994][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  176.020080][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  176.028046][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  176.035649][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  176.043831][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  176.124688][ T2550] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.143364][ T8358] SET target dimension over the limit!
[  176.294784][ T8351] C speed is unknown, defaulting to 1000
[  176.385025][ T2550] bridge_slave_1: left allmulticast mode
[  176.391027][ T2550] bridge_slave_1: left promiscuous mode
[  176.398533][ T2550] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.433121][ T2550] bridge_slave_0: left allmulticast mode
[  176.440127][ T2550] bridge_slave_0: left promiscuous mode
[  176.445862][ T2550] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.872677][ T2550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.884253][ T2550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.895532][ T2550] bond0 (unregistering): Released all slaves
[  176.905396][ T8367] netlink: 'syz.3.795': attribute type 9 has an invalid length.
[  177.018499][ T8381] netlink: 'syz.3.799': attribute type 4 has an invalid length.
[  177.026501][ T8381] netlink: 'syz.3.799': attribute type 1 has an invalid length.
[  177.034465][ T8381] netlink: 88156 bytes leftover after parsing attributes in process `syz.3.799'.
[  177.257308][ T8351] chnl_net:caif_netlink_parms(): no params data found
[  177.276477][ T5247] Bluetooth: hci1: command tx timeout
[  177.342972][ T2550] hsr_slave_0: left promiscuous mode
[  177.357200][ T2550] hsr_slave_1: left promiscuous mode
[  177.374310][ T2550] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  177.382122][ T2550] batman_adv: batadv0: Removing interface: batadv_slave_0
[  177.390576][ T2550] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  177.398094][ T2550] batman_adv: batadv0: Removing interface: batadv_slave_1
[  177.421654][ T2550] veth1_macvtap: left promiscuous mode
[  177.436381][ T2550] veth0_macvtap: left promiscuous mode
[  177.442385][ T2550] veth1_vlan: left promiscuous mode
[  177.448024][ T2550] veth0_vlan: left promiscuous mode
[  177.868182][ T2550] team0 (unregistering): Port device team_slave_1 removed
[  177.903571][ T2550] team0 (unregistering): Port device team_slave_0 removed
[  178.157054][ T5247] Bluetooth: hci2: command tx timeout
[  178.243197][ T8336] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  178.253420][ T8336] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  178.269314][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'.
[  178.279812][ T8336] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  178.341647][ T8336] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  178.484778][ T8351] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.504526][ T8351] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.512170][ T8351] bridge_slave_0: entered allmulticast mode
[  178.519341][ T8351] bridge_slave_0: entered promiscuous mode
[  178.527491][ T8351] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.534712][ T8351] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.542493][ T8351] bridge_slave_1: entered allmulticast mode
[  178.550359][ T8351] bridge_slave_1: entered promiscuous mode
[  178.613189][ T8351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  178.648718][ T8351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.708150][ T8351] team0: Port device team_slave_0 added
[  178.729517][ T8351] team0: Port device team_slave_1 added
[  178.784770][ T8351] batman_adv: batadv0: Adding interface: batadv_slave_0
[  178.792758][ T8351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.825755][ T8351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  178.842017][ T8351] batman_adv: batadv0: Adding interface: batadv_slave_1
[  178.849252][ T8351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.876994][ T8351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  178.926965][ T8336] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.937276][ T8351] hsr_slave_0: entered promiscuous mode
[  178.943626][ T8351] hsr_slave_1: entered promiscuous mode
[  178.953213][ T8351] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  178.961571][ T8351] Cannot create hsr debugfs directory
[  179.015178][ T2550] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.074293][ T8336] 8021q: adding VLAN 0 to HW filter on device team0
[  179.094224][ T2550] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.127694][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.134815][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.170116][ T2550] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.186315][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.193393][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.255249][ T2550] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.357601][ T5247] Bluetooth: hci1: command tx timeout
[  179.423021][ T2550] bridge_slave_1: left allmulticast mode
[  179.431366][ T2550] bridge_slave_1: left promiscuous mode
[  179.439537][ T2550] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.457042][ T2550] bridge_slave_0: left allmulticast mode
[  179.462859][ T2550] bridge_slave_0: left promiscuous mode
[  179.470779][ T2550] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.500518][ T8421] netlink: 'syz.4.809': attribute type 1 has an invalid length.
[  179.508626][ T8421] netlink: 636 bytes leftover after parsing attributes in process `syz.4.809'.
[  179.622967][ T8425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.809'.
[  179.724187][ T8432] xt_SECMARK: invalid mode: 0
[  179.741753][ T8432] xt_hashlimit: overflow, rate too high: 0
[  179.973727][ T2550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  179.985433][ T2550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  179.996140][ T2550] bond0 (unregistering): Released all slaves
[  180.089313][ T8336] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.144428][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.813'.
[  180.237082][ T5247] Bluetooth: hci2: command tx timeout
[  180.249700][ T8440] netlink: 'syz.0.813': attribute type 8 has an invalid length.
[  180.259865][ T8440] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  180.454258][ T8336] veth0_vlan: entered promiscuous mode
[  180.505170][ T8336] veth1_vlan: entered promiscuous mode
[  180.581563][ T8336] veth0_macvtap: entered promiscuous mode
[  180.623733][ T8336] veth1_macvtap: entered promiscuous mode
[  180.631855][ T8463] netlink: 20 bytes leftover after parsing attributes in process `syz.4.820'.
[  180.661860][ T8463] nbd: must specify a device to reconfigure
[  180.732282][ T2550] hsr_slave_0: left promiscuous mode
[  180.749010][ T2550] hsr_slave_1: left promiscuous mode
[  180.758734][ T2550] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.774836][ T2550] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.785591][ T2550] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.801845][ T2550] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.845296][ T2550] veth1_macvtap: left promiscuous mode
[  180.854972][ T8478] netlink: 256 bytes leftover after parsing attributes in process `syz.3.826'.
[  180.861240][ T2550] veth0_macvtap: left promiscuous mode
[  180.870561][ T2550] veth1_vlan: left promiscuous mode
[  180.877200][ T2550] veth0_vlan: left promiscuous mode
[  181.262288][ T2550] team0 (unregistering): Port device team_slave_1 removed
[  181.301211][ T2550] team0 (unregistering): Port device team_slave_0 removed
[  181.438792][ T5247] Bluetooth: hci1: command tx timeout
[  181.662766][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.676830][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.688315][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.698897][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.708877][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.723947][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.740287][ T8336] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.808397][ T8351] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  181.829717][ T8490] netlink: 148 bytes leftover after parsing attributes in process `syz.4.829'.
[  181.882625][ T8351] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  181.900453][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.916760][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.927307][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.938915][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.949886][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.970688][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.982576][ T8336] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.006610][ T8351] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  182.037470][ T8351] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  182.074659][ T8336] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.086871][ T8336] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.101149][ T8336] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.110473][ T8336] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.197065][ T8507] netlink: 32 bytes leftover after parsing attributes in process `syz.4.835'.
[  182.315972][ T5247] Bluetooth: hci2: command tx timeout
[  182.405819][ T8524] batadv_slave_1: entered promiscuous mode
[  182.413154][ T8521] netlink: 60 bytes leftover after parsing attributes in process `syz.4.838'.
[  182.433129][ T8520] batadv_slave_1: left promiscuous mode
[  182.472573][ T8526] ip6gre1: entered allmulticast mode
[  182.512500][ T8351] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.527306][ T2550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.535351][ T2550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.578490][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.586408][ T8351] 8021q: adding VLAN 0 to HW filter on device team0
[  182.601311][ T3024] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.608482][ T3024] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.617384][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.627060][ T3024] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.634206][ T3024] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.925207][ T8544] netlink: 32 bytes leftover after parsing attributes in process `syz.0.847'.
[  182.999441][ T8551] netlink: 32 bytes leftover after parsing attributes in process `syz.3.848'.
[  183.077301][ T8351] 8021q: adding VLAN 0 to HW filter on device batadv0
[  183.085425][ T8553] x_tables: duplicate underflow at hook 1
[  183.292737][ T3024] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.320976][ T8351] veth0_vlan: entered promiscuous mode
[  183.342786][ T8351] veth1_vlan: entered promiscuous mode
[  183.377067][ T8569] netlink: 20 bytes leftover after parsing attributes in process `syz.4.852'.
[  183.433318][ T3024] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.491244][ T8351] veth0_macvtap: entered promiscuous mode
[  183.501376][ T8351] veth1_macvtap: entered promiscuous mode
[  183.525792][ T3024] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.541786][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.553470][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.563592][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.574535][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.584586][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.595057][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.605499][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.616604][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.629239][ T8351] batman_adv: batadv0: Interface activated: batadv_slave_0
[  183.640043][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.650576][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.660878][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.671537][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.681531][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.691991][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.701870][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.712477][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.723761][ T8351] batman_adv: batadv0: Interface activated: batadv_slave_1
[  183.751708][ T3024] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.767221][ T8351] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.777415][ T8351] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.786353][ T8351] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.795053][ T8351] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.886520][  T934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.894369][  T934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.903647][ T3024] bridge_slave_1: left allmulticast mode
[  183.909927][ T3024] bridge_slave_1: left promiscuous mode
[  183.915640][ T3024] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.924185][ T3024] bridge_slave_0: left allmulticast mode
[  183.929981][ T3024] bridge_slave_0: left promiscuous mode
[  183.935640][ T3024] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.366012][ T3024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  184.389110][ T3024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  184.399482][ T5247] Bluetooth: hci2: command tx timeout
[  184.424702][ T3024] bond0 (unregistering): Released all slaves
[  184.463902][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  184.466395][ T8577] infiniband syz0: set active
[  184.476500][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  184.484650][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  184.493316][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  184.504705][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  184.512281][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  184.512504][ T8577] bond0: (slave bond_slave_0): Releasing backup interface
[  184.574802][ T8577] bond0: (slave bond_slave_1): Releasing backup interface
[  184.613848][ T8577] team0: Port device team_slave_0 removed
[  184.634172][ T8577] team0: Port device team_slave_1 removed
[  184.641390][ T8577] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.649235][ T8577] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.662442][ T8577] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.670220][ T8577] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.687533][ T8577] bond0: (slave macvlan2): Releasing backup interface
[  184.695503][ T8577] batadv0: left promiscuous mode
[  184.720575][ T8577] team0: Port device bridge0 removed
[  184.732474][ T8580] wg2: entered promiscuous mode
[  184.755761][ T8580] team0: Port device wg2 added
[  184.784588][ T8584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.854'.
[  184.793982][ T8584] netlink: 6 bytes leftover after parsing attributes in process `syz.0.854'.
[  184.818982][    T9] C speed is unknown, defaulting to 1000
[  184.821466][ T2550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.846601][ T2550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.977779][ T8585] C speed is unknown, defaulting to 1000
[  185.086235][ T8602] SET target dimension over the limit!
[  185.103702][ T8598] netlink: 32 bytes leftover after parsing attributes in process `syz.0.860'.
[  185.115397][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.862'.
[  185.328743][ T8610] bond2: entered promiscuous mode
[  185.333882][ T8610] bond2: entered allmulticast mode
[  185.339571][ T8610] 8021q: adding VLAN 0 to HW filter on device bond2
[  185.527762][ T3024] hsr_slave_0: left promiscuous mode
[  185.543061][ T3024] hsr_slave_1: left promiscuous mode
[  185.551913][ T3024] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.565387][ T3024] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.573420][ T3024] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.581258][ T3024] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.610087][ T3024] veth1_macvtap: left promiscuous mode
[  185.616293][ T3024] veth0_macvtap: left promiscuous mode
[  185.622372][ T3024] veth1_vlan: left promiscuous mode
[  185.628695][ T3024] veth0_vlan: left promiscuous mode
[  186.015182][ T3024] team0 (unregistering): Port device team_slave_1 removed
[  186.060842][ T3024] team0 (unregistering): Port device team_slave_0 removed
[  186.475149][ T8629] bridge_slave_1: left allmulticast mode
[  186.482810][ T8629] bridge_slave_1: left promiscuous mode
[  186.494017][ T8629] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.503757][ T8629] bridge_slave_0: left allmulticast mode
[  186.509710][ T8629] bridge_slave_0: left promiscuous mode
[  186.515694][ T8629] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.539125][ T8629] bond0: (slave bridge0): Releasing backup interface
[  186.556352][ T5247] Bluetooth: hci1: command tx timeout
[  186.723075][ T8585] chnl_net:caif_netlink_parms(): no params data found
[  186.791071][ T8585] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.798479][ T8585] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.805847][ T8585] bridge_slave_0: entered allmulticast mode
[  186.813790][ T8585] bridge_slave_0: entered promiscuous mode
[  186.822541][ T8585] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.829968][ T8585] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.840302][ T8585] bridge_slave_1: entered allmulticast mode
[  186.847677][ T8585] bridge_slave_1: entered promiscuous mode
[  186.876907][ T8585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  186.888269][ T8585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.916629][ T8585] team0: Port device team_slave_0 added
[  186.923699][ T8585] team0: Port device team_slave_1 added
[  186.942259][ T8585] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.949846][ T8585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.976478][ T8585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.988954][ T8585] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.996775][ T8585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.022901][ T8585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.133909][ T3024] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.237012][ T8585] hsr_slave_0: entered promiscuous mode
[  187.256336][ T8585] hsr_slave_1: entered promiscuous mode
[  187.432478][ T3024] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.460286][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  187.475678][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  187.483934][ T8653] __nla_validate_parse: 1 callbacks suppressed
[  187.483952][ T8653] netlink: 16 bytes leftover after parsing attributes in process `syz.3.877'.
[  187.487532][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  187.508085][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  187.528888][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  187.541868][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  187.573919][ T3024] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.657471][ T3024] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.733723][ T8672] syzkaller1: entered promiscuous mode
[  187.742724][ T8672] syzkaller1: entered allmulticast mode
[  187.790167][ T8657] C speed is unknown, defaulting to 1000
[  187.804861][ T8674] netlink: 36 bytes leftover after parsing attributes in process `syz.3.884'.
[  188.005606][ T8683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.886'.
[  188.016726][ T3024] bridge_slave_1: left allmulticast mode
[  188.021419][ T8683] netlink: 5288 bytes leftover after parsing attributes in process `syz.4.886'.
[  188.025062][ T3024] bridge_slave_1: left promiscuous mode
[  188.033495][ T8683] openvswitch: netlink: IP tunnel dst address not specified
[  188.044994][ T3024] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.060912][ T3024] bridge_slave_0: left allmulticast mode
[  188.067072][ T3024] bridge_slave_0: left promiscuous mode
[  188.073146][ T3024] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.523054][ T3024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  188.534108][ T3024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  188.544501][ T3024] bond0 (unregistering): Released all slaves
[  188.636019][ T5247] Bluetooth: hci1: command tx timeout
[  188.694264][ T8585] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  188.752914][ T8585] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  188.841082][ T8724] netlink: 'syz.0.898': attribute type 8 has an invalid length.
[  188.857458][ T8585] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  188.875827][ T8657] chnl_net:caif_netlink_parms(): no params data found
[  188.923579][ T8585] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  189.046334][ T8657] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.053479][ T8657] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.062557][ T8657] bridge_slave_0: entered allmulticast mode
[  189.069184][ T8657] bridge_slave_0: entered promiscuous mode
[  189.081586][ T8657] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.089318][ T8657] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.097422][ T8657] bridge_slave_1: entered allmulticast mode
[  189.107014][ T8657] bridge_slave_1: entered promiscuous mode
[  189.184404][ T8657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  189.216076][ T3024] hsr_slave_0: left promiscuous mode
[  189.225356][ T3024] hsr_slave_1: left promiscuous mode
[  189.233764][ T3024] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  189.241678][ T3024] batman_adv: batadv0: Removing interface: batadv_slave_0
[  189.249844][ T3024] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  189.257754][ T3024] batman_adv: batadv0: Removing interface: batadv_slave_1
[  189.284550][ T3024] veth1_macvtap: left promiscuous mode
[  189.291698][ T3024] veth0_macvtap: left promiscuous mode
[  189.297606][ T3024] veth1_vlan: left promiscuous mode
[  189.302976][ T3024] veth0_vlan: left promiscuous mode
[  189.598221][ T5247] Bluetooth: hci2: command tx timeout
[  189.743409][ T3024] team0 (unregistering): Port device team_slave_1 removed
[  189.783904][ T3024] team0 (unregistering): Port device team_slave_0 removed
[  190.143996][ T8657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.220227][ T8657] team0: Port device team_slave_0 added
[  190.274934][ T8657] team0: Port device team_slave_1 added
[  190.366787][ T8657] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.379259][ T8657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.405657][ T8657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.419742][ T8657] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.426900][ T8657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.452951][ T8657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.480234][ T8761] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  190.542382][ T8657] hsr_slave_0: entered promiscuous mode
[  190.564307][ T8657] hsr_slave_1: entered promiscuous mode
[  190.571087][ T8657] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  190.579230][ T8764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.910'.
[  190.621156][ T8657] Cannot create hsr debugfs directory
[  190.626775][ T8767] netlink: 'syz.4.911': attribute type 2 has an invalid length.
[  190.716319][ T5247] Bluetooth: hci1: command tx timeout
[  190.908081][ T8585] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.033531][ T8585] 8021q: adding VLAN 0 to HW filter on device team0
[  191.056124][ T3024] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.063294][ T3024] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.103980][ T8585] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  191.114619][ T8585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  191.144072][ T3024] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.151258][ T3024] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.205285][ T8792] netlink: 20 bytes leftover after parsing attributes in process `syz.3.920'.
[  191.263742][ T8799] netlink: 'syz.0.922': attribute type 11 has an invalid length.
[  191.373554][ T8585] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.488055][ T8585] veth0_vlan: entered promiscuous mode
[  191.502610][ T8585] veth1_vlan: entered promiscuous mode
[  191.566941][ T8810] bridge2: entered promiscuous mode
[  191.572180][ T8810] bridge2: entered allmulticast mode
[  191.579528][ T8810] team0: Device bridge2 is of different type
[  191.672357][ T8585] veth0_macvtap: entered promiscuous mode
[  191.676168][ T5247] Bluetooth: hci2: command tx timeout
[  191.715042][ T8585] veth1_macvtap: entered promiscuous mode
[  191.741179][ T8816] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.782029][ T8816] batadv_slave_1: entered promiscuous mode
[  191.788451][ T8816] batadv_slave_1: entered allmulticast mode
[  191.805659][ T8657] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  191.814689][ T8825] netlink: 56 bytes leftover after parsing attributes in process `syz.0.931'.
[  191.852322][ T8657] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  191.873357][ T8657] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  191.884485][ T8585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.895425][ T8585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.905794][ T8585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.916732][ T8585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.928053][ T8585] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.940419][ T8657] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  191.954624][ T8585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.977078][ T8585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.999124][ T8585] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.034420][ T8585] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.044294][ T8585] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.053341][ T8585] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.062397][ T8585] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.086977][ T8835] FAULT_INJECTION: forcing a failure.
[  192.086977][ T8835] name failslab, interval 1, probability 0, space 0, times 0
[  192.113210][ T8835] CPU: 0 UID: 0 PID: 8835 Comm: syz.3.934 Not tainted 6.12.0-rc3-syzkaller-00158-gd95d9a31aceb #0
[  192.123853][ T8835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  192.133939][ T8835] Call Trace:
[  192.137244][ T8835]  <TASK>
[  192.140197][ T8835]  dump_stack_lvl+0x241/0x360
[  192.144894][ T8835]  ? __pfx_dump_stack_lvl+0x10/0x10
[  192.150090][ T8835]  ? __pfx__printk+0x10/0x10
[  192.154675][ T8835]  ? kmem_cache_alloc_node_noprof+0x49/0x320
[  192.160652][ T8835]  ? __pfx___might_resched+0x10/0x10
[  192.165941][ T8835]  should_fail_ex+0x3b0/0x4e0
[  192.170650][ T8835]  should_failslab+0xac/0x100
[  192.175359][ T8835]  ? __alloc_skb+0x1c3/0x440
[  192.179973][ T8835]  kmem_cache_alloc_node_noprof+0x71/0x320
[  192.185814][ T8835]  __alloc_skb+0x1c3/0x440
[  192.190255][ T8835]  ? __pfx___alloc_skb+0x10/0x10
[  192.195216][ T8835]  ? netlink_autobind+0xd6/0x2f0
[  192.200180][ T8835]  ? netlink_autobind+0x2b0/0x2f0
[  192.205229][ T8835]  netlink_sendmsg+0x638/0xcb0
[  192.210020][ T8835]  ? __pfx_netlink_sendmsg+0x10/0x10
[  192.215331][ T8835]  ? aa_sock_msg_perm+0x91/0x160
[  192.220292][ T8835]  ? __pfx_netlink_sendmsg+0x10/0x10
[  192.225576][ T8835]  __sock_sendmsg+0x221/0x270
[  192.230255][ T8835]  ____sys_sendmsg+0x52a/0x7e0
[  192.235020][ T8835]  ? __pfx_____sys_sendmsg+0x10/0x10
[  192.240311][ T8835]  __sys_sendmsg+0x292/0x380
[  192.244899][ T8835]  ? __pfx___sys_sendmsg+0x10/0x10
[  192.250016][ T8835]  ? __pfx_vfs_write+0x10/0x10
[  192.254792][ T8835]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  192.261127][ T8835]  ? do_syscall_64+0x100/0x230
[  192.265890][ T8835]  ? do_syscall_64+0xb6/0x230
[  192.270572][ T8835]  do_syscall_64+0xf3/0x230
[  192.275073][ T8835]  ? clear_bhb_loop+0x35/0x90
[  192.279752][ T8835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.285645][ T8835] RIP: 0033:0x7f3caa77dff9
[  192.290057][ T8835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  192.309661][ T8835] RSP: 002b:00007f3caa1ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  192.318077][ T8835] RAX: ffffffffffffffda RBX: 00007f3caa936058 RCX: 00007f3caa77dff9
[  192.326053][ T8835] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
[  192.334017][ T8835] RBP: 00007f3caa1ff090 R08: 0000000000000000 R09: 0000000000000000
[  192.341982][ T8835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  192.349947][ T8835] R13: 0000000000000000 R14: 00007f3caa936058 R15: 00007ffd200d6ae8
[  192.357926][ T8835]  </TASK>
[  192.475174][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.493230][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.571932][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.581336][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.617518][ T8657] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.638293][ T8657] 8021q: adding VLAN 0 to HW filter on device team0
[  192.659815][ T3024] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.666991][ T3024] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.683938][ T3024] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.691153][ T3024] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.762298][ T8657] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  192.785768][ T8657] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  192.850604][ T8857] netlink: 20 bytes leftover after parsing attributes in process `syz.0.941'.
[  192.920002][ T8863] xt_hashlimit: invalid rate
[  193.077149][ T8866] veth0_vlan: left promiscuous mode
[  193.082938][ T8866] veth0_vlan: entered promiscuous mode
[  193.102392][ T8866] Unknown options in mask 1f4
[  193.111514][ T8657] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.244974][ T8657] veth0_vlan: entered promiscuous mode
[  193.267714][ T8657] veth1_vlan: entered promiscuous mode
[  193.301708][ T8657] veth0_macvtap: entered promiscuous mode
[  193.312290][ T8657] veth1_macvtap: entered promiscuous mode
[  193.330432][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  193.347912][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.358929][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  193.369659][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.380893][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  193.391735][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.404682][ T8657] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.419261][ T8885] netlink: 'syz.3.951': attribute type 1 has an invalid length.
[  193.428165][ T8886] netlink: 'syz.3.951': attribute type 1 has an invalid length.
[  193.462267][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  193.495035][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.505357][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  193.518178][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.529513][ T8657] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.540496][ T8657] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.549405][ T8657] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.565501][ T8657] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.578488][ T8657] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.633701][   T80] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.718545][ T3024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.732030][ T3024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.754213][ T3024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.763108][ T5247] Bluetooth: hci2: command tx timeout
[  193.764066][ T3024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.204743][   T80] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.362577][   T80] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.408389][   T80] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.596751][ T1264] ieee802154 phy0 wpan0: encryption failed: -22
[  194.742453][   T80] bridge_slave_1: left allmulticast mode
[  194.779622][   T80] bridge_slave_1: left promiscuous mode
[  194.804639][ T8903] xt_CT: No such helper "pptp"
[  194.816136][   T80] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.904395][   T80] bridge_slave_0: left allmulticast mode
[  194.935222][   T80] bridge_slave_0: left promiscuous mode
[  194.959668][   T80] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.015617][ T8912] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  195.114808][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  195.125167][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  195.136056][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  195.148320][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  195.160647][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  195.170127][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  195.243333][ T8919] netlink: 5312 bytes leftover after parsing attributes in process `syz.4.961'.
[  195.270219][ T8919] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  195.447459][   T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  195.461502][   T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  195.471999][   T80] bond0 (unregistering): Released all slaves
[  195.518425][ T8905] C speed is unknown, defaulting to 1000
[  195.950779][   T80] hsr_slave_0: left promiscuous mode
[  195.968535][   T80] hsr_slave_1: left promiscuous mode
[  195.974592][   T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.007149][   T80] batman_adv: batadv0: Removing interface: batadv_slave_0
[  196.027071][   T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.034518][   T80] batman_adv: batadv0: Removing interface: batadv_slave_1
[  196.109514][   T80] veth1_macvtap: left promiscuous mode
[  196.115087][   T80] veth0_macvtap: left promiscuous mode
[  196.131237][   T80] veth1_vlan: left promiscuous mode
[  196.136818][   T80] veth0_vlan: left promiscuous mode
[  196.535660][   T80] team0 (unregistering): Port device team_slave_1 removed
[  196.579479][   T80] team0 (unregistering): Port device team_slave_0 removed
[  196.940062][ T8905] chnl_net:caif_netlink_parms(): no params data found
[  196.999390][ T8905] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.006919][ T8905] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.014086][ T8905] bridge_slave_0: entered allmulticast mode
[  197.020789][ T8905] bridge_slave_0: entered promiscuous mode
[  197.029155][ T8905] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.036735][ T8905] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.043945][ T8905] bridge_slave_1: entered allmulticast mode
[  197.051332][ T8905] bridge_slave_1: entered promiscuous mode
[  197.099857][ T8905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.121355][ T8905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.225355][ T8905] team0: Port device team_slave_0 added
[  197.248940][ T8905] team0: Port device team_slave_1 added
[  197.276436][ T5238] Bluetooth: hci1: command tx timeout
[  197.322864][ T8905] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.346722][ T8905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.347003][ T5247] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  197.389654][ T5247] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  197.391623][ T8905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.411041][ T8944] netlink: 120 bytes leftover after parsing attributes in process `syz.0.966'.
[  197.421255][ T5247] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  197.435397][ T5247] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  197.444226][ T5247] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  197.444670][ T8905] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.458795][ T5247] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  197.463991][ T8905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.501642][ T8905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.578036][ T8905] hsr_slave_0: entered promiscuous mode
[  197.585008][ T8905] hsr_slave_1: entered promiscuous mode
[  197.611499][ T8942] C speed is unknown, defaulting to 1000
[  197.654646][   T80] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.779715][   T80] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.088504][   T80] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.115345][ T8954] C speed is unknown, defaulting to 1000
[  198.182786][   T80] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.367945][ T8962] netdevsim netdevsim4 netdevsim1: Unsupported IPsec algorithm
[  198.401673][   T80] bridge_slave_1: left allmulticast mode
[  198.408065][   T80] bridge_slave_1: left promiscuous mode
[  198.413956][   T80] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.423372][   T80] bridge_slave_0: left allmulticast mode
[  198.429526][   T80] bridge_slave_0: left promiscuous mode
[  198.435334][   T80] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.784615][   T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  198.796115][   T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  198.806698][   T80] bond0 (unregistering): Released all slaves
[  198.985829][ T8968] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  199.026491][ T8942] chnl_net:caif_netlink_parms(): no params data found
[  199.097351][ T8973] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  199.331633][ T8942] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.339195][ T8942] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.346572][ T8942] bridge_slave_0: entered allmulticast mode
[  199.354834][ T8942] bridge_slave_0: entered promiscuous mode
[  199.361363][ T5247] Bluetooth: hci1: command tx timeout
[  199.398295][ T8905] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  199.417259][ T8905] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  199.435059][ T8942] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.446381][ T8942] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.453780][ T8942] bridge_slave_1: entered allmulticast mode
[  199.460688][ T8942] bridge_slave_1: entered promiscuous mode
[  199.472085][   T80] hsr_slave_0: left promiscuous mode
[  199.480420][   T80] hsr_slave_1: left promiscuous mode
[  199.486694][   T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.494128][   T80] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.502104][   T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.509720][   T80] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.529995][   T80] veth1_macvtap: left promiscuous mode
[  199.535517][   T80] veth0_macvtap: left promiscuous mode
[  199.541265][   T80] veth1_vlan: left promiscuous mode
[  199.546751][   T80] veth0_vlan: left promiscuous mode
[  199.596160][ T5247] Bluetooth: hci2: command tx timeout
[  199.916100][   T80] team0 (unregistering): Port device team_slave_1 removed
[  199.973468][   T80] team0 (unregistering): Port device team_slave_0 removed
[  200.078901][ T8991] netlink: 3084 bytes leftover after parsing attributes in process `syz.3.978'.
[  200.088299][ T8991] netlink: 'syz.3.978': attribute type 1 has an invalid length.
[  200.096047][ T8991] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.978'.
[  200.391250][ T8905] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  200.446162][ T8905] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  200.498159][ T8942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.523970][ T8942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.534486][ T8999] netlink: 'syz.4.980': attribute type 2 has an invalid length.
[  200.542619][ T8999] netlink: 'syz.4.980': attribute type 8 has an invalid length.
[  200.554086][ T8999] netlink: 132 bytes leftover after parsing attributes in process `syz.4.980'.
[  200.571643][ T9000] netlink: 24 bytes leftover after parsing attributes in process `syz.3.981'.
[  200.581407][ T9000] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  200.588691][ T9000] IPv6: NLM_F_CREATE should be set when creating new route
[  200.651220][ T8942] team0: Port device team_slave_0 added
[  200.667115][ T8942] team0: Port device team_slave_1 added
[  200.750716][ T8942] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.770413][ T8942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.811729][ T8942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.854224][ T8942] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.866544][ T8942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.894145][ T8942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  200.939037][ T9006] netdevsim netdevsim4 netdevsim1: Unsupported IPsec algorithm
[  201.015832][ T8942] hsr_slave_0: entered promiscuous mode
[  201.023460][ T8942] hsr_slave_1: entered promiscuous mode
[  201.032006][ T8942] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  201.041793][ T8942] Cannot create hsr debugfs directory
[  201.197312][ T9014] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  201.204607][ T9014] IPv6: NLM_F_CREATE should be set when creating new route
[  201.225071][ T9017] ipt_ECN: cannot use operation on non-tcp rule
[  201.240204][ T9017] Timeout policy `syz0' can only be used by L3 protocol number 34984
[  201.380863][ T8905] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.419283][ T8905] 8021q: adding VLAN 0 to HW filter on device team0
[  201.434346][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.441536][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.449170][ T5247] Bluetooth: hci1: command tx timeout
[  201.460353][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.467560][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.651778][ T8942] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  201.669236][ T8942] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  201.676467][ T5247] Bluetooth: hci2: command tx timeout
[  201.688239][ T8942] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  201.702568][ T8942] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  201.734287][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.991'.
[  201.830709][ T8942] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.857791][ T8942] 8021q: adding VLAN 0 to HW filter on device team0
[  201.873343][ T8905] 8021q: adding VLAN 0 to HW filter on device batadv0
[  201.884200][ T3024] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.891397][ T3024] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.914872][ T3024] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.922028][ T3024] bridge0: port 2(bridge_slave_1) entered forwarding state
[  202.003565][ T8905] veth0_vlan: entered promiscuous mode
[  202.024891][ T8905] veth1_vlan: entered promiscuous mode
[  202.061542][ T8905] veth0_macvtap: entered promiscuous mode
[  202.077588][ T8905] veth1_macvtap: entered promiscuous mode
[  202.105559][ T8905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.117055][ T8905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.136380][ T8905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.154228][ T8905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.165490][ T8905] batman_adv: batadv0: Interface activated: batadv_slave_0
[  202.187228][ T8905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  202.200866][ T8905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.212929][ T8905] batman_adv: batadv0: Interface activated: batadv_slave_1
[  202.230560][ T8905] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  202.237135][   T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  202.240266][ T8905] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  202.259154][ T8905] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  202.268016][ T8905] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.281873][ T8942] 8021q: adding VLAN 0 to HW filter on device batadv0
[  202.355230][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.359992][ T8942] veth0_vlan: entered promiscuous mode
[  202.368918][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.375716][ T8942] veth1_vlan: entered promiscuous mode
[  202.413888][  T934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.429544][  T934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.448563][ T8942] veth0_macvtap: entered promiscuous mode
[  202.460297][ T8942] veth1_macvtap: entered promiscuous mode
[  202.485033][ T8942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.500825][ T8942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.511521][ T8942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.522469][ T8942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.532734][ T8942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.543532][ T8942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.554840][ T8942] batman_adv: batadv0: Interface activated: batadv_slave_0
[  202.596468][ T8942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  202.607301][ T8942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.617738][ T8942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  202.636719][ T8942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.659725][ T8942] batman_adv: batadv0: Interface activated: batadv_slave_1
[  202.683187][ T8942] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  202.694236][ T8942] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  202.705169][ T8942] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  202.715075][ T8942] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.810632][ T9053] netlink: 56 bytes leftover after parsing attributes in process `syz.4.995'.
[  202.815367][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.834473][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.858947][   T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.872042][   T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.103068][ T1116] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.377430][ T1116] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.861888][ T1116] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.167173][  T934] wlan0: Trigger new scan to find an IBSS to join
[  204.184849][ T9063] netlink: 16 bytes leftover after parsing attributes in process `syz.4.997'.
[  204.266024][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  204.275315][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  204.290384][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  204.294580][ T9069] xt_hashlimit: Unknown mode mask 115, kernel too old?
[  204.320057][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  204.328085][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  204.335454][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  204.389233][ T1116] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.459009][ T9066] C speed is unknown, defaulting to 1000
[  204.573592][ T1116] bridge_slave_1: left allmulticast mode
[  204.580173][ T1116] bridge_slave_1: left promiscuous mode
[  204.586528][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.608834][ T1116] bridge_slave_0: left allmulticast mode
[  204.624483][ T1116] bridge_slave_0: left promiscuous mode
[  204.631675][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.986486][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  204.997588][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  205.008247][ T1116] bond0 (unregistering): Released all slaves
[  205.163336][ T9066] chnl_net:caif_netlink_parms(): no params data found
[  205.255432][ T9066] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.270379][ T9066] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.278132][ T9066] bridge_slave_0: entered allmulticast mode
[  205.284717][ T9066] bridge_slave_0: entered promiscuous mode
[  205.292673][ T9066] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.300007][ T9066] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.307644][ T9066] bridge_slave_1: entered allmulticast mode
[  205.314642][ T9066] bridge_slave_1: entered promiscuous mode
[  205.348977][ T9066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.362566][ T9066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.397688][ T9066] team0: Port device team_slave_0 added
[  205.406522][ T9066] team0: Port device team_slave_1 added
[  205.431008][ T9066] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.439081][ T9066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.465735][ T9066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.482042][ T1116] hsr_slave_0: left promiscuous mode
[  205.490858][ T1116] hsr_slave_1: left promiscuous mode
[  205.496677][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  205.504157][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0
[  205.512443][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  205.519947][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1
[  205.538245][ T1116] veth1_macvtap: left promiscuous mode
[  205.543798][ T1116] veth0_macvtap: left promiscuous mode
[  205.550313][ T1116] veth1_vlan: left promiscuous mode
[  205.555562][ T1116] veth0_vlan: left promiscuous mode
[  206.030794][ T5247] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  206.049060][ T5247] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  206.057926][ T5247] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  206.067418][ T5247] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  206.084962][ T5247] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  206.096148][ T5247] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  206.154469][ T1116] team0 (unregistering): Port device team_slave_1 removed
[  206.192791][ T1116] team0 (unregistering): Port device team_slave_0 removed
[  206.398991][ T5247] Bluetooth: hci1: command tx timeout
[  206.565824][ T9066] batman_adv: batadv0: Adding interface: batadv_slave_1
[  206.573009][ T9066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.601848][ T9066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  206.627482][ T9086] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  206.638758][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1002'.
[  206.648182][ T9092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.658817][ T9092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.668809][ T9092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.679348][ T9092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.780959][ T9096] C speed is unknown, defaulting to 1000
[  206.801017][ T9066] hsr_slave_0: entered promiscuous mode
[  206.837259][ T9066] hsr_slave_1: entered promiscuous mode
[  207.023008][ T9113] netlink: 'syz.0.1008': attribute type 25 has an invalid length.
[  207.125573][  T934] wlan0: Trigger new scan to find an IBSS to join
[  207.203614][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1011'.
[  207.278694][ T1116] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.307073][ T9119] dvmrp0: entered allmulticast mode
[  207.379434][ T1116] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.402133][ T9096] chnl_net:caif_netlink_parms(): no params data found
[  207.470165][ T1116] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.475529][ T9133] xt_CT: You must specify a L4 protocol and not use inversions on it
[  207.558404][ T1116] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.613897][ T9096] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.621439][ T9096] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.640254][ T9096] bridge_slave_0: entered allmulticast mode
[  207.651766][ T9096] bridge_slave_0: entered promiscuous mode
[  207.665119][ T9096] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.694648][ T9096] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.702213][ T9096] bridge_slave_1: entered allmulticast mode
[  207.710279][ T9096] bridge_slave_1: entered promiscuous mode
[  207.725539][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1015'.
[  207.802346][ T9096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  207.811999][ T9066] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  207.822332][ T9066] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  207.831744][ T9066] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  207.847949][ T9096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.870256][ T9066] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  207.909737][ T9096] team0: Port device team_slave_0 added
[  207.924100][ T9096] team0: Port device team_slave_1 added
[  207.951948][ T9150] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1017'.
[  207.975119][ T9096] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.984226][ T9096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.020946][ T9096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.040846][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1017'.
[  208.053906][ T9096] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.068212][ T9096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.103070][ T9150] netlink: 9392 bytes leftover after parsing attributes in process `syz.3.1017'.
[  208.104178][ T9096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.112820][ T9150] netlink: 'syz.3.1017': attribute type 1 has an invalid length.
[  208.146536][ T1116] bridge_slave_1: left allmulticast mode
[  208.152414][ T1116] bridge_slave_1: left promiscuous mode
[  208.158702][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.166051][ T5247] Bluetooth: hci2: command tx timeout
[  208.186606][ T1116] bridge_slave_0: left allmulticast mode
[  208.192298][ T1116] bridge_slave_0: left promiscuous mode
[  208.204462][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.278886][ T9158] openvswitch: netlink: Actions may not be safe on all matching packets
[  208.479192][ T5247] Bluetooth: hci1: command tx timeout
[  208.591783][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  208.615649][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  208.626967][ T1116] bond0 (unregistering): Released all slaves
[  208.737175][ T9096] hsr_slave_0: entered promiscuous mode
[  208.743779][ T9096] hsr_slave_1: entered promiscuous mode
[  208.753687][ T9096] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  208.765275][ T9096] Cannot create hsr debugfs directory
[  208.863661][ T9171] netdevsim netdevsim0 netdevsim1: Unsupported IPsec algorithm
[  209.317670][ T1116] hsr_slave_0: left promiscuous mode
[  209.323682][ T1116] hsr_slave_1: left promiscuous mode
[  209.329840][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.337540][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.345442][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.357123][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.375859][ T1116] veth1_macvtap: left promiscuous mode
[  209.381662][ T1116] veth0_macvtap: left promiscuous mode
[  209.387451][ T1116] veth1_vlan: left promiscuous mode
[  209.392837][ T1116] veth0_vlan: left promiscuous mode
[  209.766199][ T1116] team0 (unregistering): Port device team_slave_1 removed
[  209.810324][ T1116] team0 (unregistering): Port device team_slave_0 removed
[  210.157380][ T2550] wlan0: Trigger new scan to find an IBSS to join
[  210.212208][ T9182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1026'.
[  210.231336][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1027'.
[  210.244282][ T5238] Bluetooth: hci2: command tx timeout
[  210.268690][ T9185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1027'.
[  210.299744][ T9185] netlink: 'syz.3.1027': attribute type 13 has an invalid length.
[  210.393314][ T9066] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.458190][ T9066] 8021q: adding VLAN 0 to HW filter on device team0
[  210.506269][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.513479][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.561643][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.568367][ T5238] Bluetooth: hci1: command tx timeout
[  210.568825][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.831988][ T9096] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  210.863508][ T9096] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  210.887258][ T9096] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  210.907361][ T9096] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  211.053843][ T9096] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.078320][   T11] wlan0: Creating new IBSS network, BSSID ba:8b:5d:ca:0d:68
[  211.093766][ T9096] 8021q: adding VLAN 0 to HW filter on device team0
[  211.109579][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.111489][    C1] ------------[ cut here ]------------
[  211.116758][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.122475][    C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40
[  211.140610][    C1] WARNING: CPU: 1 PID: 9212 at net/mac80211/rate.c:385 __rate_control_send_low+0x659/0x890
[  211.150688][    C1] Modules linked in:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  211.154609][    C1] CPU: 1 UID: 0 PID: 9212 Comm: syz.3.1034 Not tainted 6.12.0-rc3-syzkaller-00158-gd95d9a31aceb #0
[  211.165332][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  211.175457][    C1] RIP: 0010:__rate_control_send_low+0x659/0x890
[  211.181781][    C1] Code: 8b 14 24 0f 85 de 01 00 00 8b 0a 48 c7 c7 00 6a 2a 8d 48 8b 74 24 10 44 89 f2 44 8b 44 24 1c 44 8b 4c 24 0c e8 58 16 1f f6 90 <0f> 0b 90 90 e9 71 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c db
[  211.201471][    C1] RSP: 0018:ffffc90000a18760 EFLAGS: 00010246
[  211.207625][    C1] RAX: 272b05091b45c100 RBX: 000000000000000c RCX: ffff88802a025a00
[  211.215628][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  211.223673][    C1] RBP: ffff8880678e78e8 R08: ffffffff8155e402 R09: fffffbfff1cf9fd8
[  211.231720][    C1] R10: dffffc0000000000 R11: fffffbfff1cf9fd8 R12: 0000000000000800
[  211.239767][    C1] R13: 000000000000000c R14: 00000000ffffffff R15: dffffc0000000000
[  211.247802][    C1] FS:  00007f3cab4936c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  211.256795][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  211.263422][    C1] CR2: 00007f5b5554cf98 CR3: 000000006af6c000 CR4: 00000000003526f0
[  211.267097][ T9096] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  211.271439][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  211.289820][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  211.297859][    C1] Call Trace:
[  211.301160][    C1]  <IRQ>
[  211.301563][ T9096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  211.304025][    C1]  ? __warn+0x168/0x4e0
[  211.318612][    C1]  ? __rate_control_send_low+0x659/0x890
[  211.324287][    C1]  ? report_bug+0x2b3/0x500
[  211.328865][    C1]  ? __rate_control_send_low+0x659/0x890
[  211.334549][    C1]  ? handle_bug+0x60/0x90
[  211.338961][    C1]  ? exc_invalid_op+0x1a/0x50
[  211.343669][    C1]  ? asm_exc_invalid_op+0x1a/0x20
[  211.348766][    C1]  ? __warn_printk+0x292/0x360
[  211.353572][    C1]  ? __rate_control_send_low+0x659/0x890
[  211.359271][    C1]  rate_control_send_low+0x1a8/0x770
[  211.364696][    C1]  rate_control_get_rate+0x20e/0x5e0
[  211.370056][    C1]  ieee80211_beacon_get_finish+0x49e/0x870
[  211.375935][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  211.382305][    C1]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  211.387995][    C1]  ? __ieee80211_beacon_get+0xa71/0x15c0
[  211.393664][    C1]  __ieee80211_beacon_get+0xf7e/0x15c0
[  211.399192][    C1]  ? __ieee80211_beacon_get+0x36/0x15c0
[  211.404789][    C1]  ieee80211_beacon_get_tim+0xb4/0x320
[  211.410328][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  211.416491][    C1]  mac80211_hwsim_beacon_tx+0x39d/0x850
[  211.422096][    C1]  __iterate_interfaces+0x222/0x510
[  211.427373][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  211.433570][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  211.439730][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x170
[  211.447000][    C1]  ieee80211_iterate_active_interfaces_atomic+0xd8/0x170
[  211.454088][    C1]  mac80211_hwsim_beacon+0xd4/0x1f0
[  211.459386][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  211.465239][    C1]  __hrtimer_run_queues+0x59b/0xd50
[  211.470507][    C1]  ? ktime_get_update_offsets_now+0x3c/0x250
[  211.476598][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  211.482357][    C1]  ? ktime_get_update_offsets_now+0x22d/0x250
[  211.488509][    C1]  hrtimer_run_softirq+0x19a/0x2c0
[  211.493657][    C1]  handle_softirqs+0x2c5/0x980
[  211.498507][    C1]  ? __irq_exit_rcu+0xf4/0x1c0
[  211.503338][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  211.505155][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.508677][    C1]  ? irqtime_account_irq+0xd4/0x1e0
[  211.515736][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.520894][    C1]  __irq_exit_rcu+0xf4/0x1c0
[  211.532737][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  211.538021][    C1]  irq_exit_rcu+0x9/0x30
[  211.542301][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  211.548012][    C1]  </IRQ>
[  211.550971][    C1]  <TASK>
[  211.553921][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  211.559970][    C1] RIP: 0010:_raw_spin_lock_irq+0x4a/0x120
[  211.565732][    C1] Code: 25 28 00 00 00 48 89 44 24 40 49 bf 00 00 00 00 00 fc ff df 4c 8d 74 24 20 48 c7 04 24 b3 8a b5 41 48 c7 44 24 08 96 fe 08 8e <48> c7 44 24 10 40 41 d0 8b 49 89 e5 49 c1 ed 03 48 b8 f1 f1 f1 f1
[  211.585396][    C1] RSP: 0018:ffffc90002f2ee00 EFLAGS: 00000286
[  211.591518][    C1] RAX: 272b05091b45c100 RBX: 0000000000000000 RCX: ffff88802a025a00
[  211.599606][    C1] RDX: ffffc90017dd4000 RSI: 0000000000000300 RDI: ffff888030343160
[  211.607631][    C1] RBP: ffffc90002f2ee90 R08: ffffffff81d95a80 R09: 1ffffffff2039fd5
[  211.615623][    C1] R10: dffffc0000000000 R11: fffffbfff2039fd6 R12: ffff888030343160
[  211.623628][    C1] R13: ffffea0001652300 R14: ffffc90002f2ee20 R15: dffffc0000000000
[  211.631666][    C1]  ? shmem_add_to_page_cache+0x830/0x1690
[  211.637476][    C1]  ? blk_cgroup_congested+0x1b/0x200
[  211.642813][    C1]  ? blk_cgroup_congested+0x1f0/0x200
[  211.648235][    C1]  ? __folio_throttle_swaprate+0xc7/0x1d0
[  211.653982][    C1]  shmem_add_to_page_cache+0x871/0x1690
[  211.659561][    C1]  ? __pfx_shmem_add_to_page_cache+0x10/0x10
[  211.665574][    C1]  ? percpu_ref_put+0x19/0x180
[  211.670410][    C1]  shmem_alloc_and_add_folio+0x96a/0x13d0
[  211.676207][    C1]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  211.682412][    C1]  ? shmem_allowable_huge_orders+0x39f/0x3b0
[  211.688455][    C1]  shmem_get_folio_gfp+0x5a9/0x20a0
[  211.693778][    C1]  ? filemap_map_pages+0x19d0/0x20d0
[  211.699082][    C1]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  211.704826][    C1]  shmem_fault+0x253/0x6f0
[  211.709386][    C1]  ? __pfx_shmem_fault+0x10/0x10
[  211.714354][    C1]  ? __pfx_lock_release+0x10/0x10
[  211.719406][    C1]  ? pte_offset_map_nolock+0x137/0x1f0
[  211.724878][    C1]  ? handle_pte_fault+0x2188/0x6800
[  211.730098][    C1]  __do_fault+0x135/0x460
[  211.734419][    C1]  ? handle_pte_fault+0x2188/0x6800
[  211.739642][    C1]  handle_pte_fault+0x2d1c/0x6800
[  211.744658][    C1]  ? mark_lock+0x9a/0x360
[  211.749046][    C1]  ? mark_lock+0x9a/0x360
[  211.753414][    C1]  ? __pfx_handle_pte_fault+0x10/0x10
[  211.758862][    C1]  ? __lock_acquire+0x1384/0x2050
[  211.763930][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  211.769008][    C1]  ? count_memcg_event_mm+0x94/0x420
[  211.774339][    C1]  ? do_raw_spin_lock+0x14f/0x370
[  211.779402][    C1]  handle_mm_fault+0x1106/0x1bb0
[  211.784352][    C1]  ? __pfx_handle_mm_fault+0x10/0x10
[  211.789690][    C1]  ? follow_page_pte+0x9cc/0x2010
[  211.794738][    C1]  ? __get_user_pages+0x769/0x48d0
[  211.799875][    C1]  ? __get_user_pages+0x774/0x48d0
[  211.804985][    C1]  __get_user_pages+0x1b16/0x48d0
[  211.810040][    C1]  ? __pfx_lock_release+0x10/0x10
[  211.815166][    C1]  ? __pfx___get_user_pages+0x10/0x10
[  211.820655][    C1]  ? __pfx_mt_find+0x10/0x10
[  211.825244][    C1]  populate_vma_page_range+0x264/0x330
[  211.830747][    C1]  ? __pfx_populate_vma_page_range+0x10/0x10
[  211.836786][    C1]  ? userfaultfd_unmap_complete+0x30c/0x360
[  211.842731][    C1]  ? do_mmap+0x958/0x1000
[  211.847112][    C1]  __mm_populate+0x27a/0x460
[  211.851816][    C1]  ? __pfx___mm_populate+0x10/0x10
[  211.856996][    C1]  vm_mmap_pgoff+0x2c3/0x3d0
[  211.861623][    C1]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  211.866787][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  211.873141][    C1]  ? do_syscall_64+0x100/0x230
[  211.877918][    C1]  ? ksys_mmap_pgoff+0xdf/0x720
[  211.882762][    C1]  ? __x64_sys_mmap+0x7f/0x140
[  211.887582][    C1]  do_syscall_64+0xf3/0x230
[  211.892115][    C1]  ? clear_bhb_loop+0x35/0x90
[  211.896835][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.902776][    C1] RIP: 0033:0x7f3caa77dff9
[  211.907233][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  211.926904][    C1] RSP: 002b:00007f3cab493038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  211.935347][    C1] RAX: ffffffffffffffda RBX: 00007f3caa935f80 RCX: 00007f3caa77dff9
[  211.943339][    C1] RDX: 000000000000000c RSI: 0000000000b36000 RDI: 0000000020000000
[  211.951338][    C1] RBP: 00007f3caa7f0296 R08: ffffffffffffffff R09: 0000000000000000
[  211.959332][    C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  211.967358][    C1] R13: 0000000000000000 R14: 00007f3caa935f80 R15: 00007ffd200d6ae8
[  211.975364][    C1]  </TASK>
[  211.978411][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  211.985675][    C1] CPU: 1 UID: 0 PID: 9212 Comm: syz.3.1034 Not tainted 6.12.0-rc3-syzkaller-00158-gd95d9a31aceb #0
[  211.996344][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  212.006413][    C1] Call Trace:
[  212.009694][    C1]  <IRQ>
[  212.012533][    C1]  dump_stack_lvl+0x241/0x360
[  212.017221][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  212.022424][    C1]  ? __pfx__printk+0x10/0x10
[  212.027022][    C1]  ? vscnprintf+0x5d/0x90
[  212.031353][    C1]  panic+0x349/0x880
[  212.035244][    C1]  ? __warn+0x177/0x4e0
[  212.039398][    C1]  ? __pfx_panic+0x10/0x10
[  212.043908][    C1]  __warn+0x34b/0x4e0
[  212.047885][    C1]  ? __rate_control_send_low+0x659/0x890
[  212.053519][    C1]  report_bug+0x2b3/0x500
[  212.057852][    C1]  ? __rate_control_send_low+0x659/0x890
[  212.063484][    C1]  handle_bug+0x60/0x90
[  212.067639][    C1]  exc_invalid_op+0x1a/0x50
[  212.072141][    C1]  asm_exc_invalid_op+0x1a/0x20
[  212.076986][    C1] RIP: 0010:__rate_control_send_low+0x659/0x890
[  212.083225][    C1] Code: 8b 14 24 0f 85 de 01 00 00 8b 0a 48 c7 c7 00 6a 2a 8d 48 8b 74 24 10 44 89 f2 44 8b 44 24 1c 44 8b 4c 24 0c e8 58 16 1f f6 90 <0f> 0b 90 90 e9 71 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c db
[  212.102825][    C1] RSP: 0018:ffffc90000a18760 EFLAGS: 00010246
[  212.108893][    C1] RAX: 272b05091b45c100 RBX: 000000000000000c RCX: ffff88802a025a00
[  212.116863][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  212.124830][    C1] RBP: ffff8880678e78e8 R08: ffffffff8155e402 R09: fffffbfff1cf9fd8
[  212.132797][    C1] R10: dffffc0000000000 R11: fffffbfff1cf9fd8 R12: 0000000000000800
[  212.140762][    C1] R13: 000000000000000c R14: 00000000ffffffff R15: dffffc0000000000
[  212.148734][    C1]  ? __warn_printk+0x292/0x360
[  212.153513][    C1]  rate_control_send_low+0x1a8/0x770
[  212.158800][    C1]  rate_control_get_rate+0x20e/0x5e0
[  212.164089][    C1]  ieee80211_beacon_get_finish+0x49e/0x870
[  212.169903][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  212.176238][    C1]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  212.181781][    C1]  ? __ieee80211_beacon_get+0xa71/0x15c0
[  212.187413][    C1]  __ieee80211_beacon_get+0xf7e/0x15c0
[  212.192869][    C1]  ? __ieee80211_beacon_get+0x36/0x15c0
[  212.198419][    C1]  ieee80211_beacon_get_tim+0xb4/0x320
[  212.203878][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  212.209954][    C1]  mac80211_hwsim_beacon_tx+0x39d/0x850
[  212.215516][    C1]  __iterate_interfaces+0x222/0x510
[  212.220716][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  212.226783][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  212.232849][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x170
[  212.240043][    C1]  ieee80211_iterate_active_interfaces_atomic+0xd8/0x170
[  212.247066][    C1]  mac80211_hwsim_beacon+0xd4/0x1f0
[  212.252259][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  212.258066][    C1]  __hrtimer_run_queues+0x59b/0xd50
[  212.263262][    C1]  ? ktime_get_update_offsets_now+0x3c/0x250
[  212.269258][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  212.274978][    C1]  ? ktime_get_update_offsets_now+0x22d/0x250
[  212.281047][    C1]  hrtimer_run_softirq+0x19a/0x2c0
[  212.286160][    C1]  handle_softirqs+0x2c5/0x980
[  212.290927][    C1]  ? __irq_exit_rcu+0xf4/0x1c0
[  212.295689][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  212.300977][    C1]  ? irqtime_account_irq+0xd4/0x1e0
[  212.306176][    C1]  __irq_exit_rcu+0xf4/0x1c0
[  212.310774][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  212.315990][    C1]  irq_exit_rcu+0x9/0x30
[  212.320240][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  212.325882][    C1]  </IRQ>
[  212.328815][    C1]  <TASK>
[  212.331738][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  212.337728][    C1] RIP: 0010:_raw_spin_lock_irq+0x4a/0x120
[  212.343451][    C1] Code: 25 28 00 00 00 48 89 44 24 40 49 bf 00 00 00 00 00 fc ff df 4c 8d 74 24 20 48 c7 04 24 b3 8a b5 41 48 c7 44 24 08 96 fe 08 8e <48> c7 44 24 10 40 41 d0 8b 49 89 e5 49 c1 ed 03 48 b8 f1 f1 f1 f1
[  212.363049][    C1] RSP: 0018:ffffc90002f2ee00 EFLAGS: 00000286
[  212.369115][    C1] RAX: 272b05091b45c100 RBX: 0000000000000000 RCX: ffff88802a025a00
[  212.377086][    C1] RDX: ffffc90017dd4000 RSI: 0000000000000300 RDI: ffff888030343160
[  212.385068][    C1] RBP: ffffc90002f2ee90 R08: ffffffff81d95a80 R09: 1ffffffff2039fd5
[  212.393033][    C1] R10: dffffc0000000000 R11: fffffbfff2039fd6 R12: ffff888030343160
[  212.401003][    C1] R13: ffffea0001652300 R14: ffffc90002f2ee20 R15: dffffc0000000000
[  212.408979][    C1]  ? shmem_add_to_page_cache+0x830/0x1690
[  212.414708][    C1]  ? blk_cgroup_congested+0x1b/0x200
[  212.419995][    C1]  ? blk_cgroup_congested+0x1f0/0x200
[  212.425367][    C1]  ? __folio_throttle_swaprate+0xc7/0x1d0
[  212.431088][    C1]  shmem_add_to_page_cache+0x871/0x1690
[  212.436643][    C1]  ? __pfx_shmem_add_to_page_cache+0x10/0x10
[  212.442657][    C1]  ? percpu_ref_put+0x19/0x180
[  212.447431][    C1]  shmem_alloc_and_add_folio+0x96a/0x13d0
[  212.453162][    C1]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  212.459316][    C1]  ? shmem_allowable_huge_orders+0x39f/0x3b0
[  212.465383][    C1]  shmem_get_folio_gfp+0x5a9/0x20a0
[  212.470598][    C1]  ? filemap_map_pages+0x19d0/0x20d0
[  212.475887][    C1]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  212.481539][    C1]  shmem_fault+0x253/0x6f0
[  212.485961][    C1]  ? __pfx_shmem_fault+0x10/0x10
[  212.490895][    C1]  ? __pfx_lock_release+0x10/0x10
[  212.495924][    C1]  ? pte_offset_map_nolock+0x137/0x1f0
[  212.501389][    C1]  ? handle_pte_fault+0x2188/0x6800
[  212.506605][    C1]  __do_fault+0x135/0x460
[  212.510930][    C1]  ? handle_pte_fault+0x2188/0x6800
[  212.516121][    C1]  handle_pte_fault+0x2d1c/0x6800
[  212.521147][    C1]  ? mark_lock+0x9a/0x360
[  212.525483][    C1]  ? mark_lock+0x9a/0x360
[  212.529810][    C1]  ? __pfx_handle_pte_fault+0x10/0x10
[  212.535462][    C1]  ? __lock_acquire+0x1384/0x2050
[  212.540527][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  212.545573][    C1]  ? count_memcg_event_mm+0x94/0x420
[  212.550880][    C1]  ? do_raw_spin_lock+0x14f/0x370
[  212.555925][    C1]  handle_mm_fault+0x1106/0x1bb0
[  212.560908][    C1]  ? __pfx_handle_mm_fault+0x10/0x10
[  212.566208][    C1]  ? follow_page_pte+0x9cc/0x2010
[  212.571245][    C1]  ? __get_user_pages+0x769/0x48d0
[  212.576361][    C1]  ? __get_user_pages+0x774/0x48d0
[  212.581484][    C1]  __get_user_pages+0x1b16/0x48d0
[  212.586526][    C1]  ? __pfx_lock_release+0x10/0x10
[  212.591567][    C1]  ? __pfx___get_user_pages+0x10/0x10
[  212.596946][    C1]  ? __pfx_mt_find+0x10/0x10
[  212.601571][    C1]  populate_vma_page_range+0x264/0x330
[  212.607053][    C1]  ? __pfx_populate_vma_page_range+0x10/0x10
[  212.613059][    C1]  ? userfaultfd_unmap_complete+0x30c/0x360
[  212.618980][    C1]  ? do_mmap+0x958/0x1000
[  212.623338][    C1]  __mm_populate+0x27a/0x460
[  212.627944][    C1]  ? __pfx___mm_populate+0x10/0x10
[  212.633113][    C1]  vm_mmap_pgoff+0x2c3/0x3d0
[  212.638146][    C1]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  212.643273][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  212.649607][    C1]  ? do_syscall_64+0x100/0x230
[  212.654366][    C1]  ? ksys_mmap_pgoff+0xdf/0x720
[  212.659219][    C1]  ? __x64_sys_mmap+0x7f/0x140
[  212.663983][    C1]  do_syscall_64+0xf3/0x230
[  212.668482][    C1]  ? clear_bhb_loop+0x35/0x90
[  212.673159][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.679057][    C1] RIP: 0033:0x7f3caa77dff9
[  212.683468][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  212.703073][    C1] RSP: 002b:00007f3cab493038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  212.711486][    C1] RAX: ffffffffffffffda RBX: 00007f3caa935f80 RCX: 00007f3caa77dff9
[  212.719455][    C1] RDX: 000000000000000c RSI: 0000000000b36000 RDI: 0000000020000000
[  212.727428][    C1] RBP: 00007f3caa7f0296 R08: ffffffffffffffff R09: 0000000000000000
[  212.735393][    C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  212.743361][    C1] R13: 0000000000000000 R14: 00007f3caa935f80 R15: 00007ffd200d6ae8
[  212.751344][    C1]  </TASK>
[  212.754488][    C1] Kernel Offset: disabled
[  212.758827][    C1] Rebooting in 86400 seconds..