last executing test programs:

42.678931442s ago: executing program 3 (id=2016):
socketpair(0x29, 0x80000, 0x7, &(0x7f0000000040))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = socket$inet6(0xa, 0x3, 0xff)
sendto$l2tp6(r2, 0x0, 0x0, 0x80, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local}, 0x20)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="e74e661510000000000000ddff000000000000005a7e46c59266d2c4beb56d354c2be65fa107101d0e4a1e1b4aa21fd997f5e767aedb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r4 = epoll_create1(0x0)
r5 = socket(0x1, 0x80802, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x20002013})
r7 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x401}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x410]}}, 0x5c)
epoll_pwait(r6, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7800000000010904000000000000000002000000240001801400018008000100ac1414bb08000200ac1414aa0c00028005000100000000002400028014000180080001007f00000108000200ac1e00010c0002800500010000000000080007400000dfff130016"], 0x78}}, 0x0)
close(r6)
shutdown(r5, 0x0)
close(r4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, <r9=>0xffffffffffffffff}, 0x4)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r10)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRES16=r11, @ANYBLOB="0100000000000000000004000000080007007f000001080002000000000008000800ac1e00011400060000000000000000000000000000000001"], 0x40}, 0x1, 0x0, 0x0, 0x24040090}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000080)=ANY=[@ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r13}, 0x10)
syz_open_procfs$namespace(0xffffffffffffffff, 0xfffffffffffffffe)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)

5.941177926s ago: executing program 3 (id=2016):
socketpair(0x29, 0x80000, 0x7, &(0x7f0000000040))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = socket$inet6(0xa, 0x3, 0xff)
sendto$l2tp6(r2, 0x0, 0x0, 0x80, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local}, 0x20)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="e74e661510000000000000ddff000000000000005a7e46c59266d2c4beb56d354c2be65fa107101d0e4a1e1b4aa21fd997f5e767aedb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r4 = epoll_create1(0x0)
r5 = socket(0x1, 0x80802, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x20002013})
r7 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x401}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x410]}}, 0x5c)
epoll_pwait(r6, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7800000000010904000000000000000002000000240001801400018008000100ac1414bb08000200ac1414aa0c00028005000100000000002400028014000180080001007f00000108000200ac1e00010c0002800500010000000000080007400000dfff130016"], 0x78}}, 0x0)
close(r6)
shutdown(r5, 0x0)
close(r4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, <r9=>0xffffffffffffffff}, 0x4)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r10)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRES16=r11, @ANYBLOB="0100000000000000000004000000080007007f000001080002000000000008000800ac1e00011400060000000000000000000000000000000001"], 0x40}, 0x1, 0x0, 0x0, 0x24040090}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000080)=ANY=[@ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r13}, 0x10)
syz_open_procfs$namespace(0xffffffffffffffff, 0xfffffffffffffffe)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)

5.940822989s ago: executing program 3 (id=2016):
socketpair(0x29, 0x80000, 0x7, &(0x7f0000000040))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = socket$inet6(0xa, 0x3, 0xff)
sendto$l2tp6(r2, 0x0, 0x0, 0x80, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local}, 0x20)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="e74e661510000000000000ddff000000000000005a7e46c59266d2c4beb56d354c2be65fa107101d0e4a1e1b4aa21fd997f5e767aedb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r4 = epoll_create1(0x0)
r5 = socket(0x1, 0x80802, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x20002013})
r7 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x401}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x410]}}, 0x5c)
epoll_pwait(r6, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7800000000010904000000000000000002000000240001801400018008000100ac1414bb08000200ac1414aa0c00028005000100000000002400028014000180080001007f00000108000200ac1e00010c0002800500010000000000080007400000dfff130016"], 0x78}}, 0x0)
close(r6)
shutdown(r5, 0x0)
close(r4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, <r9=>0xffffffffffffffff}, 0x4)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r10)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRES16=r11, @ANYBLOB="0100000000000000000004000000080007007f000001080002000000000008000800ac1e00011400060000000000000000000000000000000001"], 0x40}, 0x1, 0x0, 0x0, 0x24040090}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000080)=ANY=[@ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r13}, 0x10)
syz_open_procfs$namespace(0xffffffffffffffff, 0xfffffffffffffffe)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)

5.940546678s ago: executing program 3 (id=2016):
socketpair(0x29, 0x80000, 0x7, &(0x7f0000000040))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = socket$inet6(0xa, 0x3, 0xff)
sendto$l2tp6(r2, 0x0, 0x0, 0x80, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local}, 0x20)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="e74e661510000000000000ddff000000000000005a7e46c59266d2c4beb56d354c2be65fa107101d0e4a1e1b4aa21fd997f5e767aedb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r4 = epoll_create1(0x0)
r5 = socket(0x1, 0x80802, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x20002013})
r7 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x401}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x410]}}, 0x5c)
epoll_pwait(r6, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7800000000010904000000000000000002000000240001801400018008000100ac1414bb08000200ac1414aa0c00028005000100000000002400028014000180080001007f00000108000200ac1e00010c0002800500010000000000080007400000dfff130016"], 0x78}}, 0x0)
close(r6)
shutdown(r5, 0x0)
close(r4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, <r9=>0xffffffffffffffff}, 0x4)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r10)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRES16=r11, @ANYBLOB="0100000000000000000004000000080007007f000001080002000000000008000800ac1e00011400060000000000000000000000000000000001"], 0x40}, 0x1, 0x0, 0x0, 0x24040090}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000080)=ANY=[@ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r13}, 0x10)
syz_open_procfs$namespace(0xffffffffffffffff, 0xfffffffffffffffe)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)

5.940297861s ago: executing program 3 (id=2016):
socketpair(0x29, 0x80000, 0x7, &(0x7f0000000040))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = socket$inet6(0xa, 0x3, 0xff)
sendto$l2tp6(r2, 0x0, 0x0, 0x80, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local}, 0x20)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="e74e661510000000000000ddff000000000000005a7e46c59266d2c4beb56d354c2be65fa107101d0e4a1e1b4aa21fd997f5e767aedb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r4 = epoll_create1(0x0)
r5 = socket(0x1, 0x80802, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x20002013})
r7 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x401}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x410]}}, 0x5c)
epoll_pwait(r6, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7800000000010904000000000000000002000000240001801400018008000100ac1414bb08000200ac1414aa0c00028005000100000000002400028014000180080001007f00000108000200ac1e00010c0002800500010000000000080007400000dfff130016"], 0x78}}, 0x0)
close(r6)
shutdown(r5, 0x0)
close(r4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, <r9=>0xffffffffffffffff}, 0x4)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r10)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRES16=r11, @ANYBLOB="0100000000000000000004000000080007007f000001080002000000000008000800ac1e00011400060000000000000000000000000000000001"], 0x40}, 0x1, 0x0, 0x0, 0x24040090}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000080)=ANY=[@ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r13}, 0x10)
syz_open_procfs$namespace(0xffffffffffffffff, 0xfffffffffffffffe)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)

5.940046537s ago: executing program 3 (id=2016):
socketpair(0x29, 0x80000, 0x7, &(0x7f0000000040))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = socket$inet6(0xa, 0x3, 0xff)
sendto$l2tp6(r2, 0x0, 0x0, 0x80, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local}, 0x20)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="e74e661510000000000000ddff000000000000005a7e46c59266d2c4beb56d354c2be65fa107101d0e4a1e1b4aa21fd997f5e767aedb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r4 = epoll_create1(0x0)
r5 = socket(0x1, 0x80802, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x20002013})
r7 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x401}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x410]}}, 0x5c)
epoll_pwait(r6, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7800000000010904000000000000000002000000240001801400018008000100ac1414bb08000200ac1414aa0c00028005000100000000002400028014000180080001007f00000108000200ac1e00010c0002800500010000000000080007400000dfff130016"], 0x78}}, 0x0)
close(r6)
shutdown(r5, 0x0)
close(r4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, <r9=>0xffffffffffffffff}, 0x4)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r10)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRES16=r11, @ANYBLOB="0100000000000000000004000000080007007f000001080002000000000008000800ac1e00011400060000000000000000000000000000000001"], 0x40}, 0x1, 0x0, 0x0, 0x24040090}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000080)=ANY=[@ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r13}, 0x10)
syz_open_procfs$namespace(0xffffffffffffffff, 0xfffffffffffffffe)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)

4.774101397s ago: executing program 1 (id=2994):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0xa}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000001800000000000000940000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000008200008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000840)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) (async)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)

4.523648843s ago: executing program 1 (id=2998):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c35000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a468", 0x8d}], 0x1}, 0x0)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff041, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e1b}, 0x6e)
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x31, 0x0}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x371, &(0x7f0000000380)={&(0x7f0000000040)={0x20, r6, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x3000000}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00'})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000180)={'wpan1\x00', <r10=>0x0})
r11 = getpid()
r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r5)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="000229bd7000fbdbdf250700000008000800ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x84)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r9, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_PID={0x8, 0x1c, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x60, r6, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040005}, 0x850)
accept$ax25(0xffffffffffffffff, &(0x7f0000000600)={{0x3, @bcast}, [@remote, @rose, @rose, @remote, @null, @remote, @null, @rose]}, &(0x7f00000006c0)=0x2e)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100))

3.640436789s ago: executing program 1 (id=3005):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r7, 0x0, 0x1, 0x5)
write$cgroup_subtree(r7, 0x0, 0x0)
sendmsg$nl_route(r6, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r5}, 0x10)
r8 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_int(r8, &(0x7f00000000c0), 0x12)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r9, 0x541b, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0xed74dbbb8a72136, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r12, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r10, 0x0)

3.416799815s ago: executing program 4 (id=3007):
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) (async)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) (async)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket(0x1d, 0x2, 0x6) (async)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x0, @broadcast}]})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) (async)
ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5}, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)}], 0x1}}], 0x1, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r8, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$NFQNL_MSG_CONFIG(r6, 0x0, 0x0) (async)
recvfrom(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)

3.349720797s ago: executing program 2 (id=3008):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, r0, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000814}, 0x4004014)

3.196414854s ago: executing program 4 (id=3009):
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0040000000000000d9fc12800f000100626f6e645f736c61766500000c00058006000500090000001400030067656e6576651706ad02310000000000"], 0x54}}, 0x6000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000d14350100000000f22000200800010000000000"], 0x18}}, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000d14350100000000f22000200800010000000000"], 0x18}}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="38005a80340001800500040003000000140003"], 0x54}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="38005a80340001800500040003000000140003"], 0x54}}, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r7 = socket(0x18, 0x8, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="74050800", @ANYRES16, @ANYBLOB="04002dbd7000ffdbdf253b0000003c003300c0bca500080211000001080211000001080211000001440000008a4018008c185605d001fcf20ac661b13151baae4557c19772ff1af2e2a92f003300e0800700080211000000ffffffffffff080211000001260004000c8000042503018500760601030f000600000800cd000800008004008e00d9043300b03c0400ffffffffffff0802110000005050505050501900000004004700dd82481ab0994285794607025f2a936061dd0eb0b03b5eb58fc956d92dff0abc694fdca996bb237586ff427c5e95d49025b596dc3194ead88417b596742e5cc58bfa516e465e446067f13281528b65c7b92ff5ec49ca8bd7578c82911b139795d598149b6e81a68294009a046d1cb5f0d4e5724e4f2c34bdf6cf54124a01a6e5827b8f2edd173b41804b92aae55aec29620f928b8186831e51d34be6badd69d48912c69d039f3d2c3cc2ededab2c666a130b5062073dc295735eb626b165180d2a9c1c2915626ef7c1fda81059c4f1afb2db68a753db3a64244ddbdf43ab4b385d05743e7789c4444ec533e61891f8684a56c3350e041d0dc252284eba09538c8e53e83f5334d591dd13dece265b6688a4ba2eb75fa6d70def4224a7b6dddcf5ed8d1fba6b424e8f783550ddec6ed0c1d3a835ceeedfc583b5320ea978af707d221a4a7438e85aa2d982cdcc5b4fdd36c3cc04ef15bbf500fcbe0a5c9a8946eab48ff92fd3f0ddddda30c60ac0a2584fa3620c6ec184ceab79ce7586f1d1d77d14576c06c25780866404afec3c4313022e234579e5bfed15ac5ecfeddf73d86ce3ba80dee847ad681c993ae3306f9f6297e716cba2328f3b470889cf7d89c94dc894e3094bc2b4f04eaab11b960283dcd24f32e785bb29503014a93c4d9215b6abe8188206d98f220dfa3333e35fb2ff94800e48cd48ffde6d6659dd641edb16cfa89f7919e5ee94fcd2d9b005f437505bcb27dcc428bded2ec7a3373b84818db49f590c0399d7b600e0060be1f4c7abdb5f1f6a8939d102f3270b26b5ff1061461e0888f8533c72287756876dd53d9478385b690b92b72f56be11e5a46a8dcf06ddde1cbd542b901f6c3aa839f726124588f929ca0bdde4ec2f5a9d4cef0ac6d7936e03012d404d5f9b3b88ae0912fe30f11e78eef4b5c1ca3be68eb259607284ac6b174140a11126891cd55f21366e92d76b6ad9c87cb32f107b450a0de33e69abcc3d36fd58fcf95eb5f0d81979fc52dad8a0d4fff2f590339725318d2f698b7468d14ed3368a00d29e5d24a138316c37d3da2575ddc30a78076d71789c971f4c74090bedcb1993bf998a976f3e1e0d6a34ed779b144562ebe6daa1106166bd3a1e9ec1d1ce46f3b853ea17ec29e090d9bd305075b6f9ab2c3f69e769052364dded4f6db81a852074710cc246704b3b164a4a7b8b2c31cae215c1be7ce8ac0ded1b7c2b95fe7c19786e4924bb8765f856430c0079d2464a82a09e268545cdb0cb47b842402dc1d89e2a5e1f983f95c6723387b7604ff6d74aab06d1245c7368da781ac876828d268bc4c5752565629a6760183efeac6dc01263c014b12f9e65c74948b3f842bef0b3d495ae70f0ac2b309ae8b0ccce82eb308c6eec71e603153158263904a2e1cc76aa285fb174e3703455e7fa310578df4677c9085bb810547f8143410f17a63be8a7cf0860b262c17e044552f655e9114963d760042227592ce8ddc646c561f8ed6ab77460944ddd85eff1e57782404a68a0c2d5416396b34c535e6fea2c8f8bf1687be9146b316c6397bcd31149fbad934c2292ee0fc554fb39df785e05e1cfd74d1119480f89d215d96a595ca1b455fcefd6d85be071fbf01bc30059d8522c77674a02e464383a0418bb366839e78e9d3bc065b6481dbec570f9dfd7a57d4520e99a495cb8dc746c2f4a1e3494000000080057004b05000004008700"], 0x574}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004040)
sendto$inet6(r8, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(r8, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
close(r9)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r10)
r12 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000001f00)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010c29bd7000ffdbdf253700000008000300", @ANYRES32=r13], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x40000)

3.106816082s ago: executing program 2 (id=3010):
syz_emit_ethernet(0x157, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x149, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @rand_addr=0x64010102}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [], "85d36ed6fabeecd095a2625196b4cdd294598da22a78a3ff1c66c1a50fd2757efde803e732b3fd8a89ff3973389e5127f952e804e257d9fc0c4c0abf4e9bbc67b91ae2ff31962e8acb0a27b4e9757acfcd718862c40521e0dd1492edf4bc6189faede338a125ef956ee35f1b2cee86da19a3eb0b0fec1a7380ed6e89a5cacabb2573b92ee95d3c3968a0835ae3921c12ae1d76ed441ddbbc93c10563bb83afd3db0a0c1d56879e0bfc37c3ee486c2729f6c1cc5542afcafbefd620990f786409ba34c92c9296c11bb5ff208a702c9f19c9e6c1be283912177e"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x7, 0xcf, 0x4], "ae890128481495340eaa0d99341c49fb99d3"}, {0x8, 0x88be, 0x81000004}, {}, {0x8, 0x6558, 0x3}}}}}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bb00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'wlan0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}})
r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c 1:2'], 0xa)

2.806420167s ago: executing program 0 (id=3011):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r1)
sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)={0xc4, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xa8, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f8e18f3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4010}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35a5e82d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b670784}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d35835c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43dbdb5c}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x782bc430}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9f44338}]}, {0xfffffffffffffcf7, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x333ba596}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a63d0ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39c38c06}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19c3644a}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x2400c090}, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
ioctl$SIOCSIFHWADDR(r3, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c)
close(r7)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000400)={0x8c, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffffe}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x10'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4a02, 0x0)
sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c00e4003826beb041fcb8cc606d9194a28ade5ae8efe7ace8f9c14f3823c01b39b0cae8475bb2838f115af9138fad128d8df6dac5a2b00292a8af274c10f512be1f371f893ae4dda96963d7324dd6c87eca95d682b048372be861512edf32b65e208f755f317d43cfc69d86f685d7b03d67256a03700b447b39c14c006b9541f7bac6d58b179115fd3d2e0866ec8313f6320ad201e7646f0376b7b8ce674b5da27b9025f77f2b12c2b1dc5d140858d1cc7afdd9aa16789293ee66dc29f3a4d7cb0e4e71721f6528d4d38dc313815842bbc8b0194d83b5ba58b94571fb7c", @ANYRES16, @ANYBLOB="05700000000000000000010000000800020007000000"], 0x7e}}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000004e5c4a181fa428b5665b426c20fd018c15dd422be20a54f49024ab8cfd886863c9b6cb3b7ef7a0c9495f98f0316831afa2f816abec8148b7e3eef93f454da1d862628e2eab88f5a48e5ad2e68f927fbf438442c6a0cfb68f405f2845b96a633e0e825bb925ede37b4495ca8eaba2790daec93aa3c328df5d55ee58714c98fc8a26ec95f4ed1ea2959d031a0d5e0eab5cc3a2ed6728829020201e3e4dee1e5cc450ebd619e8edf1be87abb86056368c9ed77b11106900f087335fa88f526aa56d2f394340b3b283070f50c9ba2cbb3f14cc9779e9", @ANYRES32=0x1, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000000300"/28], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x25, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000005000000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000000bf0900000000000055090100000000009500000000000010bf91000000000000b7020000020000008500000084000000b70000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0xfffffe9a, 0x10, 0x0, 0xffffffffffffff7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c0001802c0001801400030000000000000000000000ffffac1414aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000008000480040003801c000f800800014000000000080002"], 0xb8}}, 0x0)

1.808704488s ago: executing program 2 (id=3012):
r0 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b00000000000000000000000400030000000000000000000000000000000000000000000000000000000000050006000000fb000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f00000000000000000200"], 0xd8}}, 0x0)

1.807437607s ago: executing program 0 (id=3013):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00'}, 0x18)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sendmsg$rds(r2, &(0x7f0000001300)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000011c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000480)=[{&(0x7f0000000780)=""/160, 0xa0}, {&(0x7f0000000880)=""/87, 0x57}, {0x0}], 0x3}}], 0x48}, 0x20054044)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x100000002)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r7)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x2}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94)
r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r7)
sendmsg$NLBL_CIPSOV4_C_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, r8, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0)
pipe(&(0x7f0000000200))
r9 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r9, &(0x7f0000001340)=',', 0x1, 0x0, &(0x7f0000001400)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
sendto$inet6(r9, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
shutdown(r9, 0x1)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x14)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002b00768a7d000000000000c95a00000000762decb52aedee55c536845b74eb2f83f72abd832468d9c212568f4ae1a3f352c93f84f89c3938001958e5a6e7425a8787a049d15e835606b4ced5577d5f3f865b43f18e507dec1c3f2487829130fa76022dfe5f5619684616d0af5ec799ec8e98dcb0866163096742f77d470df0fe5e09e239864657bd1eb8aa6425323774a58dfa2f441db2c205198b6f992a70cbfb19027a712d4b5728808defc0ddb2ca08dfa7a25fc5184f6d931c5605e1be4d57372eb84a2b3a98070c027eba458eeca80d"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x4040801)

1.790839887s ago: executing program 4 (id=3014):
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
bind$qrtr(r1, &(0x7f00000001c0)={0x2a, 0x4, 0x1}, 0x62)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90324fc600b0002400a000000053582c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000162400000003000000fcffffff0000000903000000010000000000000802000000000000000000000202000000002e00"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
setsockopt$ax25_int(r6, 0x101, 0x1, &(0x7f0000000000)=0x2, 0x4)
r7 = socket$packet(0x11, 0x3, 0x300)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'geneve1\x00', <r9=>0x0})
sendto$packet(r7, &(0x7f0000000000)="163c8f3f8a5d66571e583e7c88a8de0688a8", 0x12, 0x0, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @broadcast}, 0x14)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r10)
ioctl$SIOCSIFHWADDR(r10, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x28, r11, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000814}, 0x4004014)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000440)={{0x3b, @local, 0x4e21, 0x1, 'wrr\x00', 0x12, 0x3, 0x63}, {@multicast1, 0x4e22, 0x0, 0x8, 0x0, 0x2}}, 0x44)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r10, 0x65, 0x4, &(0x7f00000000c0), &(0x7f0000000140)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18a395bd2314ed4001e98dbe7e0d2b630000000000000000000010850000018100000095000000ad0da585e25c1618188dee863502eca6210a397f3e0c10499f79c731191adb9022ec18999a398cae227da1e4a27e72c5a44825361e9ce8ac36ffea8800b4978a76adae0de5610b44b9500d41c706a9695a24398e4cb7e02644ba018c1792a1"], &(0x7f0000000540)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
recvmmsg(r5, &(0x7f0000000340)=[{{0x0, 0xfffffffffffffcbb, 0x0, 0xfffffffffffffd58}}], 0x1, 0x2, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r5], 0x94}}, 0x0)

1.728748296s ago: executing program 0 (id=3015):
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0)
socket(0x10, 0x803, 0x0) (async)
r0 = socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0xfe8a, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = socket$alg(0x26, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000002c0)={0x3, 0x4, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) (async)
bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7ff}]}, 0x2c}}, 0x24040080) (async)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7ff}]}, 0x2c}}, 0x24040080)
accept$alg(r1, 0x0, 0x0) (async)
accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r0, &(0x7f0000001140), 0x0, 0xc044)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000", @ANYRES32], 0x48}}, 0x0)

1.712179302s ago: executing program 2 (id=3016):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
listen(r1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x20000094}}, 0x0)
sendmmsg$inet6(r1, &(0x7f0000002000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000009c0)='.', 0x1}], 0x1}}], 0x2, 0x0)

1.484339162s ago: executing program 2 (id=3017):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10)
bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10)
bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
sendmsg$tipc(r4, &(0x7f0000002340)={&(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x1}}, 0x10, 0x0}, 0x0)
splice(r1, 0x0, r3, 0x0, 0x39000, 0x0)
unshare(0x20000400)
unshare(0x400)
socket$inet6_dccp(0xa, 0x6, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x12, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query], &(0x7f0000000140)='GPL\x00', 0x9, 0x1b, &(0x7f0000000180)=""/27, 0x41100, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0x1, 0xffffffff, 0xc}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0x1, r0, 0x1, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x0, 0x3, 0xf, 0x1}, {0x3, 0x4, 0x7, 0x7}, {0x0, 0x3, 0x1, 0x8}, {0x2, 0x4, 0x5, 0x6}, {0x5, 0x4, 0xe, 0x2}, {0x4, 0x2, 0x9}], 0x10, 0x6, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xb, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x0, 0x0, 0xf, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9}, 0x50)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="7e5bbf963463887820599ad7f60d23e02943835010a8175792380499bc32132ba133b436badfa85e79", 0x29)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r8, 0x0)
r9 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x2}, 0x2}, 0x1c)
vmsplice(r9, &(0x7f0000000600), 0x10000112, 0x0)
r10 = socket(0x1, 0x2, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00398b04000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r11, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r10}, 0x20)
r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
readv(r12, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r12, 0x0, 0xe2, 0xcc, &(0x7f0000000500)="68372482af7275c1d0b7f3bce317db1bb50fdc06a0aa5a6ded160572453ea4def39445ed86ee1e54c59898d1a27a4c28e965f4a3429f2e927cd8342064e4d2d8af9338719fe1d071fb8a9bbf388bba1d6f2af4344e306fb9d392759e6c20c0bebd1de6b907d2735bb187eee8a9abd3f06fccad29b9cdd100f4697644c40472401a99a0c4e0fff69700304ff772c9bad399019a67d874f5a2256a631127b254433a459a2fbbb7fcab302447b02520b57e8e16aac56e25cc744c077c2e6009327e5bff690f632197408cd4a3864f70adf859a5630b1a20f246ebad986b9710f8c3680a", &(0x7f0000000680)=""/204, 0x8, 0x0, 0xd3, 0x80, &(0x7f0000000780)="61454e6adee1557ea3bc59985607c247dbc31ff7d2fced1fc09ef0c2af00c37795fb7934a9ff55b70aa1a240a864a340c3563188413b3c66367662018f96e10e38114893f6e67c676b6a69814f71c7bf6611add8c0ba93a90e49c3b7c2bb30ffba53292206782a82794382d86ab17f55595137fcfea1a7a3541db02d1af3b40f7b9f2f61cdcbd697144d37b0360569eabb491af267d98e61a1399bd31bdf5d9bf84a9f0f05d53d69cd120f5ed105becebc420a5817dc2f803ccd00"/211, &(0x7f0000000880)="a5b96feee6442906519f149ee0fdb0cb5d3911d2365d201a189c332fe12b554cc351adfe52dc8b6796ab21f63e96b18fd029f0652d2a5308c8305c3dc4d5093731c64b4735f781724e9a50b6f347750d22185d642a1eb19fb0edba2be86ab3ab5a32382a01536d0670f4affb96bdf3c771db82656fab66c81f30507f0f00a5f1", 0x0, 0x0, 0x40}, 0x50)

1.428903546s ago: executing program 0 (id=3018):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000c80)=@assoc_value={<r1=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={r1, 0x7}, 0x8)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1}, 0x80, &(0x7f0000000480)=[{&(0x7f00000001c0)="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", 0xfe}, {&(0x7f00000002c0)="36153d61b8ba214a69ec2085164b20422f3ffbd921d16ea3d4dd6a3e15076915653a54bf8f82043c8e4deb5d53a47484f750f088d758a2b9bf3524bad2df14adb0f522557029580bc8449add4c39c03992da906ffe2a13e3fdd9bf135ce50ebd3f39ddb0f09932ae5318fd0aafa52a4bbac8c8936a19908dac8c2e363c88037c86ac84a3808313a8cd94a980d8e8aeec414c254b6744e2636b21e45d351deca82306c36ae11bcc6347c2a3a9b856015047302524c75bd677f22f1c47bb153ac33a1f84048fd59aa92ccf5ebee5e9b23bb5329e0d782b9f21d9f49a3044f5d85485a99e3abd069c", 0xe7}, {&(0x7f00000003c0)="efd1d1262ac6d3134ced05ac94fb020cb6477653179b6bed0dea10cdf2387d6e0c51e00326b8e81591eec921af93cd3b81ccf472af85826100be834a8200eb20e6bac931fa212badbad2539565132e7fd677396b04847cdc9c148c8b3116312731a2ce550fd582c843154fe7908fc3b5ba47524a081ceffed7adb18bfe292715e58848540517675f7a9fad02fa1d", 0x8e}], 0x3, &(0x7f00000004c0)=[{0xf0, 0x109, 0x0, "e20ab7170435ce26ec6deb7c88bd232e03c2195db2efe620d5bcf18106d290a982c2c7cb32f25d44b2dae6b0e15f29e0e68fa9c7ede89a8c0514f4990f385c414c746c68361638ad1d3c7c3a160073fb71be90055d1be41e554a2281e7b89e4336b3fd08cb5954bea9a93f8679283f3b2a31cf212c6941900fd8ee765b3747c5a5e198c299994fa5976b002de7887f9198fe837d6ea45982ebef161a36a8de9b7fdea433f1b7bf42893771cdf105b4d501606f118fd6e63e196d92d268c44feacd6349e2c97f58e2245747f008072f6e5e954e2bdf180bb1493d46"}, {0xa8, 0x6, 0xaec, "728d385cebd7f97e1f2ed3079154fa90b2696a51bc1e0922b23e896a79c9907a678aed9e509a23e27d9bcaec3bbf08ae3a9a1ee19fdd2e4c870f8b5df7903b20e10e4ecc1176d0babc65bfa18a464e4253701a208d9250c31294e2c2c5f7983fb750cebd61a2a276d2d920f9976c53c1b19ac328bfba80f60e198b25afdef3cdcc428b6fa73320e225991f1fed298e72aa52cd"}, {0xd8, 0x84, 0x5, "d522989260201e9b7ffea29c1cd3c8dee05565e05ba51fb1eb17542b422a53dc2c89423527a449b844200a3ba0b899ce21fcb51addbc1a6b2bc2ba721dc0fe0161a70c69e041a51e55c9fb7ec966559810f5abf9bfc235fdf318fc609713bd3830f80fd701255b7caef31d80040035fdaf2f4242f80f995ca95b4401201af3ed4c1d2c8bd395180c8e729e87c56c0941f003fc7eec07c93b6426af1394ccf11ede8d5dbd101ce724b52d15dc17d241173fe28629fefe4da4bf275bb9e68cd587138fa3476a"}, {0x60, 0x29, 0x0, "ff9aea9e3505b0e009ec7d848089f1252f6593402e9d164ce6e2e884b928763e1496ffc989bec3924138dca2a5ed6451124a6d414d9102afa673c4efeab055667a5f6227ac87f92f56f7c14a1709"}, {0xa8, 0x73c5000a1db981b9, 0x8, "bc1f24e68813bc47886ec04bdf8d58a88c01568757be39a983f223e0a55e5a643642ab66edec413eed6743f2b7e557569cdc661b6edc178b00efe8b58d16faeca9bd7d84b0fae415826291b3e3ffee1b5c035a4972fb2538f2edbdf2b87ab4c6009f117f5ca47032aac9d38b369a1da5fddc5c784002d1a7358999d32753c5dc0fd16ad2854562c0ac0a2a8fd79a03fadc1120859e48"}, {0x70, 0x1, 0x4, "ea259d3e478a8ced1e2981a3410db2bb9398a450f290479b9b189014522922a4007a2dcffb204b762de53713cdda4d7fb52a142f6f9345856ece4fb7e0d8d88ad50912f29907658eef98608dc1b167b29042f636d784cc721b5d"}, {0x80, 0x116, 0x1, "942437021b7632d73f0d65855576a01bf5a29ee1f767628d172118c750bf2139adf0dd5897ac80958bf82ca0ad1a4c076e7b65d303c38adb84170676f11cdb08b88bb0df69e0444e96e8bc199e95d5d1b0f32538f1afecd4e80aa338d4a124648513b4be0713ea720c9637cf32"}], 0x468}, 0x44805)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000009c0)=@req3={0x7, 0x20000006, 0xfef, 0x0, 0x6, 0x8, 0x75}, 0x1c)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x0, 0xff, 0x1, 0x66}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x2, 0xff, 0x2, 0x0, 0x9}, 0x20)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r7)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000980)={'wg2\x00', <r8=>0x0})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r9, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x0)
setsockopt$inet_int(r9, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4)
bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffff0180c200000308004600002400000000001190780000008b4000000044045e0000014e810000007801000000"], 0x0)
sendto$packet(r5, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14)

1.373976209s ago: executing program 4 (id=3019):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0xfffffffb, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x530e}, 0x50)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x34}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8}]}}]}, 0x44}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r2, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000980)=[0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0], <r6=>0x0, 0x9e, &(0x7f0000000a00)=[{}], 0x8, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0xde, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x2, 0x1, &(0x7f0000000180)=@raw=[@jmp={0x5, 0x0, 0xa, 0xa, 0x7, 0x40, 0x10}], &(0x7f00000001c0)='GPL\x00', 0x8, 0xf9, &(0x7f00000002c0)=""/249, 0x41000, 0x10, '\x00', r5, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0xf, 0xfffffff8, 0x6}, 0x10, r6, r2, 0x0, &(0x7f0000000c40)=[0x1, r1, r1, r0, r1, r0], 0x0, 0x10, 0xaa, @void, @value}, 0x94)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendmsg$alg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), 0xfffffffffffffcf6, 0x80}, 0x24000984)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r8)
sendmsg$nl_generic(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000f00)=ANY=[@ANYBLOB="7c0100002900080026bd7000ffdbdf25100000000a0037005c2e2b293a0000003c00b4800c008800010000000000000008000400070000000400e40014000f00fe8000000000000000000000000000aa0900070049505653000000000800a200", @ANYRES32=0x0, @ANYBLOB='\b\x00m\x00', @ANYRES32=0x0, @ANYBLOB="04000c801400e200fc01000000000000000000000000000008007800", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="45496c62ff44ff7b268f76cc522e6bb74631d8afcadb3bac2141d1ab2468bff4f2c19b3cb572e50d3c6404af5d509ca490de26cf9bdd21f77061c10f46c9ede3ad7c169fad57acb2dc96f4a56805949837c348f4d90eeaf2b86e32e202c522c0d523837f80914ae404b4918a565c9094ebfdcc9ca916f74287377a6fe1f8a5717c294647c21b5bb1d948a1bec500f200e2d3bfaf35c9fd177cb465719624b6d68a245c2ab07c4a98c86b2286b92f05d0ba470dff4d1ced36238247da64414418823734365b52b1b5b9c8c360781841b656b919fb3014af8de62a66b7c4000000"], 0x17c}, 0x1, 0x0, 0x0, 0x2004c050}, 0x400c0d5)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x82}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r11 = openat$cgroup_ro(r10, &(0x7f0000000500)='cgroup.kill\x00', 0x275a, 0x0)
mkdirat$cgroup(r10, &(0x7f0000000040)='syz1\x00', 0x1ff)
write$cgroup_int(r11, &(0x7f0000000280)=0x1, 0x12)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000940)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x2}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0)
socket$alg(0x26, 0x5, 0x0)
r13 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r13, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)

1.330595537s ago: executing program 2 (id=3020):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0)
syz_emit_ethernet(0x76, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x51}, 0x9c)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000001d0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$inet_smc(0x2b, 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
getpeername$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1000, '\x00', r3, 0xffffffffffffffff, 0x1, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800000000000031d300000002", @ANYRES32=0x0, @ANYBLOB="1a0206000000000008001b0000000000"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010004b04000000000000000053f2b0fc657a050000", @ANYRES32=0x0, @ANYBLOB="0003000000000000200012800b00010065727370616e00001000028004001200080005000000"], 0x40}}, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x42, 0x4, 0x328, 0xffffffff, 0x198, 0x198, 0x198, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}}]}, @REJECT={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x2000}}, @common=@ttl={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000b00)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x200000}]}}]}, 0x40}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000175000/0x1000)=nil, 0x1000, 0x0, 0x80010, r7, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
socket$inet(0x2, 0x3, 0x8)

1.247928015s ago: executing program 0 (id=3021):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x40000) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xc8, 0x0, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_MARK={0x0, 0x8, 0x1, 0x0, 0x983}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x350}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x100}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x12}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xf41}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x0, 0x2, 0x1, 0x0, 0x1}]}}, @CTA_SEQ_ADJ_REPLY={0xf, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x0, 0x3, 0x1, 0x0, 0xc6f}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_OFFSET_AFTER={0x0, 0x3, 0x1, 0x0, 0x6b84d107}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xed3}]}, @CTA_SYNPROXY={0x0, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x0, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x0, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x0, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x0, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x0, 0x3, 0x1, 0x0, 0x2}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x44814)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xd, 0xfe7, &(0x7f00000004c0)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.214940104s ago: executing program 0 (id=3022):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x12, 0x9, &(0x7f0000001180)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000050000008500000039000000a70000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe7b, @void, @value}, 0x94)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r1)
sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8011}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000240)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x8000}]}]}, 0x38}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x12, 0x9, &(0x7f0000001180)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000050000008500000039000000a70000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe7b, @void, @value}, 0x94) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r1) (async)
sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8011}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000240)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x8000}]}]}, 0x38}}, 0x0) (async)

597.240515ms ago: executing program 1 (id=3023):
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) (async)
shutdown(0xffffffffffffffff, 0x1) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000000) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x2000}, 0x1c)
listen(r4, 0x0) (async)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000300000000000000010000050000000001000038"], &(0x7f0000000f40)=""/4089, 0x33, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r6}, 0x10)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8)
close(r8) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r9, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r10, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000020000100000014000180060001000200000008000300ac1414aa", @ANYRESDEC=r5], 0x28}}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="147c154cd82558b006f49ab2dc760000", @ANYRES16=r2, @ANYBLOB="0100000000000000000004000000"], 0x14}, 0x1, 0xfcffffff00000000}, 0x0) (async)
syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x32}, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}}}}}}}, 0x0)

465.366008ms ago: executing program 1 (id=3024):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x23c, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}]}, @NL80211_ATTR_IE={0x212, 0x2a, [@ibss={0x6, 0x2, 0x8}, @fast_bss_trans={0x37, 0xb6, {0x0, 0x6, "41da98c27b5b5478997ea8724e4fe789", "10762417f1b5d0c59b69ab5223c1bf092d58dfe136792b05b662be74ca526efc", "fb4b838be5a4e260c560f7c30fc17f2ae30258830ece93fea2d0789443a92b26", [{0x2, 0x2, "a0e7"}, {0x4, 0xc, "9fc6d74c36c9acb161fb9350"}, {0x2, 0x23, "68e5591ae6bb6e517571f7eaae4b20bf263dfbee252b6fb98e3854396e44e2e7870514"}, {0x2, 0x7, "d438c796644a52"}, {0x2, 0x5, "512da08cbd"}, {0x4, 0x1b, "b23bf9d1d49e54cbb72915d6b9857394810c8738785d124b490625"}]}}, @tim={0x5, 0x9, {0x2, 0xca, 0x0, "c918d994bf57"}}, @tim={0x5, 0xbe, {0xf0, 0x78, 0xa, "e887155e37c7246608726058816749b5bd99389a333a4af6ccadf4e94647ea8faca41ef58ecfc8ba96398c74749f81ddb54344250373e87f7f4eb4e6cbe262e59cb79fd5e2451c6a4ab6e5f080be4b9f9066c203329d640da210e5c6905f140e950a897d10b63217b3cd4a00cc51fd7596b09ec3d202bf207bd44604fd7ef9f077852374520ffc226b2b97d672328f7042375d1bfd856fc2365fcc4b2dac3e4385597768bce09fc60bf0547c8bfb223fedfd5582de13c6e620f0d2"}}, @gcr_ga={0xbd, 0x6}, @tim={0x5, 0x75, {0x2, 0xe6, 0x2, "8dcb8b23c6939240bd380d0d7a4c25426918aa85836e0126782c553fd38dfa77c5040b8a681c4154fa90d78e5ebe54d5c5d481186c5b4cb65a7502ee78c1490bd8ceaef82813af19ed4e40b1208bae903c26000067b22d0174aa7f4e1148dcb75998d31c969a1a4073b51ca1dc0be6841fbe"}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0x9}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
pselect6(0x40, &(0x7f0000000480)={0x1, 0x0, 0x100000001, 0x10, 0x487d, 0xf759, 0x80000001, 0x2}, &(0x7f00000004c0)={0x0, 0xfffffffffffffff3, 0x77, 0x6, 0x9, 0x4, 0xfffffffffffffe01, 0x800}, &(0x7f0000000500)={0x9, 0x100000000, 0x7f, 0x77c7, 0xd, 0x6, 0x8}, &(0x7f0000000540)={0x0, 0x3938700}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x9]}, 0x8})
socket$igmp6(0xa, 0x3, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000640)={{0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, {0xa, 0x4e23, 0x2, @private0, 0xffffffff}, 0x1, {[0x400, 0x7fff, 0x9, 0x9, 0x8, 0x4, 0x81, 0x6]}}, 0x5c)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000006c0)={<r3=>r0})
bind$llc(r3, &(0x7f0000000700)={0x1a, 0x32, 0x2, 0xf8, 0xf2, 0x3b, @broadcast}, 0x10)
sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044004}, 0x4000040)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
recvfrom$inet6(r4, &(0x7f0000000840)=""/80, 0x50, 0x10061, &(0x7f00000008c0)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, 0x2}, 0x1c)
socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000900)=0x10001, 0x4)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), r0)
sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4100400}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xf4, r5, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7cf}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5c00000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x874c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa82}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4048094}, 0x40404)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000b40)={@empty, @remote, 0x1, "04683f2c843fdb117239a23cbbe7d728396c068950dc99a2365e52f3f9724942", 0xfffffffc, 0x5, 0x7, 0x4}, 0x3c)
read$alg(r3, &(0x7f0000000b80)=""/10, 0xa)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$pptp(0x18, 0x1, 0x2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r0)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001000)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000c40)={0x374, r7, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x30}}}}, [@NL80211_ATTR_FRAME={0x354, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7000}, @device_a, @device_b, @initial, {0x8, 0x7}, @value=@ver_80211n={0x0, 0x7, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x1080, 0x7, @random=0x9b, @val={0x1, 0x8, [{0x6}, {0x1b, 0x1}, {0xb}, {0x12}, {0x37}, {0x4}, {0x1, 0x1}, {0x3, 0x1}]}, @void, [{0xdd, 0x2b, "60b1d238cd7ad7fcc107603cd79b092defe67c4316c4dc5c3110279c5221b3131c7829ecf2c0f52a46ca00"}, {0xdd, 0x6, "89638f1e895e"}, {0xdd, 0xe7, "97d235059632f36e8a4bbd7c40855e3493aa727a309be0313eaa20e00b2ed2b78f4aed406f0adfe8f3e63ea2718a07332e4ba093a49e7c2baf4bb7a3ccc410c788c95bcb9be1f312fcc9eb374070104d5fb7f67ef839491c640f95b4a81fdee0e484beac5a33b1e7f68610879b37a2fd280ca2375ca1244d3afbc5e12d93085f3e09deecbaf410979415ff87ed8bfdaf5979e0e08401a32f5d1f0de6f00f037db2f5c48c93157cbe929324628591627c3ec710ff06d518e9f60081b2e5e12589d17af70439ba0021740424e8bfae45f086ba4af9cbfce1b115ccfa2f3e96bf34a8a0520bc97b03"}, {0xdd, 0xb0, "0158b6e5527fc3335a4993a2dc7290acbfaf873ee5b96873884dbe6c6ed34a1f2af73f6bbc8a379553fe9be974551855e9cd144de89b51865340c18096eb29cbd965cf7aec7a231f67c7744754bca599c8dacc64a637f7e90573377afcd081fee2f912cf41c69700386304f841f944dc3922f69cd309d4d8364ca173047ceeb4e4a3261dde8bc93f2ad85714562580e61eabc2fc3320baac8a2091654b581ac4f73e4aab0a7289cae5d79ae2b0dfbed6"}, {0xdd, 0x9c, "e54d3e304762f1d9ab81a3f817fecf30a1fe27dc07cc630e4e8f3904c1fa2fa723ca11079275c4af8f750a8cda01441938dd826afecc131ef5c8fd37f8db04e949eafd5d4989909b1b9942e8a340f936dac6da5bc84ca6e129a17647c57f62d89365be0e2f1c688817ef38a7c87478ac8d4c8ca5061b196812eded4dc72ad0a6b630b273d5de7205326250b6c927219a8e24e55d59e78f185c8ac3da"}, {0xdd, 0xb4, "7c945648ab3446031a96fb67d91ec2b5cc8d59d07ec1ea55eada046060a08741219150d899cc05ce95f767cc4402587aa854d066b4475267e881a443260f94f0d1f8d56dd6b68099e236fc490cbe898f35ca30616b5b402fbe0d90fba4d167c3035a73923be49680b88df5ada8a90db26cc532acf626c55b2b23c7e5b38ecba7ef0e81e2ac9ab32697bf3685bf144995664920f21ea9c9d165d4dcaf0552bb2fd821971b8b49eb87082f8c5d13377fc990e7f943"}]}}]}, 0x374}, 0x1, 0x0, 0x0, 0x40880}, 0x40)
bind$netlink(r6, &(0x7f0000001040)={0x10, 0x0, 0x25dfdbff, 0x10}, 0xc)
getpeername$netlink(r6, &(0x7f0000001080), &(0x7f00000010c0)=0xc)
socket$inet(0x2, 0x800, 0x6)

461.464466ms ago: executing program 4 (id=3025):
socketpair(0x1e, 0x4, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
r4 = socket(0x2, 0x80805, 0x0)
unshare(0x24060400)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f00000008c0)={0x2, 0x0, @empty}, 0x10)
sendmmsg$inet(r4, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000300)={r3, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={r3, 0x7236, 0x7, 0x3, 0x1ff, 0x7ff}, 0x14)
getsockopt$inet_tcp_int(r0, 0x6, 0x17, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x9, <r6=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="05000000000000006b110800000000008510000002000000850000000000000095000000000000009500a50500000000389230606378b65aa92ac1ac2a77cdc867e41e3acbda96d4b848d263de77bf1e6d8b17e03ac18017c094eb881e6721800447c053bce13d776a9f2f8bc80fc77125ca0e9d3cc9f63517c6c5a71e2004ceccae75dcc22e558eb718c6b53aa64c55779d8beb5a24d7fcc71ab745ecd2704999caf4de238ef8197223d0deee84b86b71056305a69d8293bd79f8427f51a3359c02d0620a7416679104e9bec7106950d972d0deb2868c36a9f58cfa3f349b00be63e5ca022ca9aae618af"], &(0x7f0000000080)='GPL\x00', 0xfffff2cc, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair(0x1e, 0x4, 0x0, &(0x7f0000000100)) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, &(0x7f0000000040)=0x8) (async)
socket(0x2, 0x80805, 0x0) (async)
unshare(0x24060400) (async)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
socket$rds(0x15, 0x5, 0x0) (async)
bind$rds(r5, &(0x7f00000008c0)={0x2, 0x0, @empty}, 0x10) (async)
sendmmsg$inet(r4, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) (async)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000300)={r3, 0x1}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={r3, 0x7236, 0x7, 0x3, 0x1ff, 0x7ff}, 0x14) (async)
getsockopt$inet_tcp_int(r0, 0x6, 0x17, 0x0, 0x0) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x9}, 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="05000000000000006b110800000000008510000002000000850000000000000095000000000000009500a50500000000389230606378b65aa92ac1ac2a77cdc867e41e3acbda96d4b848d263de77bf1e6d8b17e03ac18017c094eb881e6721800447c053bce13d776a9f2f8bc80fc77125ca0e9d3cc9f63517c6c5a71e2004ceccae75dcc22e558eb718c6b53aa64c55779d8beb5a24d7fcc71ab745ecd2704999caf4de238ef8197223d0deee84b86b71056305a69d8293bd79f8427f51a3359c02d0620a7416679104e9bec7106950d972d0deb2868c36a9f58cfa3f349b00be63e5ca022ca9aae618af"], &(0x7f0000000080)='GPL\x00', 0xfffff2cc, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)

168.373864ms ago: executing program 1 (id=3026):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x6004044)
recvmmsg(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}, {&(0x7f0000000300)=""/92, 0x5c}], 0x2}}], 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
recvfrom$phonet(r2, &(0x7f0000000000)=""/210, 0xd2, 0x0, &(0x7f0000000140)={0x23, 0x40, 0x33, 0x8}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r6, 0x6, 0x1b, 0x0, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000000180)=0x6, 0x4)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0300", @ANYRES32=r3, @ANYBLOB="0600ab0000000000040013000a0006000802110000010000"], 0x34}}, 0x0)

0s ago: executing program 4 (id=3027):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, 0x0, &(0x7f0000000040))
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb4, r3, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ad0d69ef1ed6cd9ac65dfae1cb"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8ffc323fe684a5eb2f2315da4e"}]}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0xe, 0x4, "7c243331d72d99aa9a92"}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "0292ed46b0"}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "c2d2c618f1d2b6da6b00f7bb0f"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "4b83de2b80725d393d2ed56a5e"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010100}, @IFLA_GRE_LINK={0x8, 0x1, r7}]}}}]}, 0x44}}, 0x0)

kernel console output (not intermixed with test programs):

00) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  544.651236][T14132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  544.740614][T14386] tipc: Enabling of bearer <eth:batadv0> rejected, failed to enable media
[  544.775681][T14132] hsr_slave_0: entered promiscuous mode
[  544.819850][T14132] hsr_slave_1: entered promiscuous mode
[  544.965783][ T5155] Bluetooth: hci3: command tx timeout
[  545.183617][T14415] tipc: Enabling of bearer <eth:batadv0> rejected, failed to enable media
[  545.192697][T14412] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2455'.
[  545.214172][T14419] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2455'.
[  545.268527][T14418] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2457'.
[  545.332081][T14423] netlink: 'syz.2.2458': attribute type 10 has an invalid length.
[  545.365239][T14423] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2458'.
[  545.535989][T14441] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2462'.
[  545.708352][T14132] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  545.782294][T14132] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  545.806592][T14132] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  545.829703][T14132] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  545.851470][T14461] netlink: 'syz.2.2469': attribute type 11 has an invalid length.
[  545.990179][T14468] __nla_validate_parse: 2 callbacks suppressed
[  545.990199][T14468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2470'.
[  546.017768][T14467] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2471'.
[  546.088405][T14132] 8021q: adding VLAN 0 to HW filter on device bond0
[  546.144797][T14132] 8021q: adding VLAN 0 to HW filter on device team0
[  546.207319][ T2210] bridge0: port 1(bridge_slave_0) entered blocking state
[  546.214584][ T2210] bridge0: port 1(bridge_slave_0) entered forwarding state
[  546.225385][ T2210] bridge0: port 2(bridge_slave_1) entered blocking state
[  546.232645][ T2210] bridge0: port 2(bridge_slave_1) entered forwarding state
[  546.262351][T14479] infiniband syz0: set active
[  546.281253][T14479] ip6gretap0: left allmulticast mode
[  546.290964][T14479] ip6gretap0: left promiscuous mode
[  546.299464][T14479] bridge0: port 5(ip6gretap0) entered disabled state
[  546.313349][T14479] team0: left allmulticast mode
[  546.318744][T14483] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2474'.
[  546.328400][T14479] team_slave_0: left allmulticast mode
[  546.334281][T14479] team_slave_1: left allmulticast mode
[  546.340836][T14479] bond2: left allmulticast mode
[  546.345910][T14479] bridge2: left allmulticast mode
[  546.351478][T14479] team0: left promiscuous mode
[  546.357489][T14479] team_slave_0: left promiscuous mode
[  546.365925][T14479] team_slave_1: left promiscuous mode
[  546.371658][T14479] bond2: left promiscuous mode
[  546.385806][T14479] bridge2: left promiscuous mode
[  546.391468][T14479] bridge0: port 3(team0) entered disabled state
[  546.403437][T14479] bridge_slave_0: left allmulticast mode
[  546.410059][T14479] bridge_slave_0: left promiscuous mode
[  546.416588][T14479] bridge0: port 1(bridge_slave_0) entered disabled state
[  546.425691][T14479] bridge_slave_1: left allmulticast mode
[  546.434504][T14479] bridge_slave_1: left promiscuous mode
[  546.456455][T14479] bridge0: port 2(bridge_slave_1) entered disabled state
[  546.468004][T14479] bond0: (slave bond_slave_0): Releasing backup interface
[  546.481024][T14448] delete_channel: no stack
[  546.487849][T14479] bond0: (slave bond_slave_1): Releasing backup interface
[  546.527049][T14479] team0: Port device team_slave_0 removed
[  546.542117][T14479] team0: Port device team_slave_1 removed
[  546.567150][T14479] bond0: (slave batadv_slave_0): Releasing backup interface
[  546.586733][T14479] macvlan1: left allmulticast mode
[  546.591910][T14479] macvlan1: left promiscuous mode
[  546.616260][T14479] bridge0: port 4(macvlan1) entered disabled state
[  546.628452][T14479] bond0: (slave netdevsim0): Releasing backup interface
[  546.647863][T14479] bond1: (slave batadv1): Releasing active interface
[  546.670523][T14479] team0: Port device bond2 removed
[  546.688078][T14479] bond0: (slave macvlan8): Releasing backup interface
[  546.710828][T14479] team0: Port device bridge2 removed
[  546.740174][T14316] lo speed is unknown, defaulting to 1000
[  547.055625][ T5155] Bluetooth: hci3: command tx timeout
[  547.172121][T14485] lo speed is unknown, defaulting to 1000
[  547.202086][T14485] lo speed is unknown, defaulting to 1000
[  547.342311][T14132] 8021q: adding VLAN 0 to HW filter on device batadv0
[  547.482474][T14132] veth0_vlan: entered promiscuous mode
[  547.510943][T14132] veth1_vlan: entered promiscuous mode
[  547.673042][T14132] veth0_macvtap: entered promiscuous mode
[  547.694540][T14132] veth1_macvtap: entered promiscuous mode
[  547.730470][T14497] lo speed is unknown, defaulting to 1000
[  547.745314][T14132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  547.776908][T14132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.808991][T14132] batman_adv: batadv0: Interface activated: batadv_slave_0
[  547.869487][T14132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.891114][T14132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.905361][T14132] batman_adv: batadv0: Interface activated: batadv_slave_1
[  547.941983][T14132] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  547.977632][T14132] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  548.004092][T14132] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  548.013835][T14132] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  548.042731][T14506] lo speed is unknown, defaulting to 1000
[  548.103339][T14506] lo speed is unknown, defaulting to 1000
[  548.215933][T14522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2482'.
[  548.234450][ T2210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  548.243003][T14522] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2482'.
[  548.247626][ T2210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  548.288773][T14132] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2
[  548.308589][T14132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  548.331484][ T7985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  548.357239][ T7985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  548.368082][T14522] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9
[  548.426530][T14497] lo speed is unknown, defaulting to 1000
[  548.598632][T14526] ebt_among: dst integrity fail: 101
[  548.618179][T14526] siw: device registration error -23
[  548.734411][T14526] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 40
[  549.749118][ T5932] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.932016][ T5932] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.017636][ T5932] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.108704][ T5932] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.319227][ T5932] bridge_slave_1: left allmulticast mode
[  550.335366][ T5932] bridge_slave_1: left promiscuous mode
[  550.358693][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state
[  550.446331][ T5932] bridge_slave_0: left allmulticast mode
[  550.452042][ T5932] bridge_slave_0: left promiscuous mode
[  550.458036][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.542588][ T5884] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  550.553645][ T5884] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  550.563778][ T5884] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  550.572765][ T5884] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  550.583219][ T5884] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  550.591014][ T5884] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  551.138091][ T5932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  551.150132][ T5932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  551.167047][ T5932] bond0 (unregistering): Released all slaves
[  551.185829][T14542] lo speed is unknown, defaulting to 1000
[  551.297120][T14542] lo speed is unknown, defaulting to 1000
[  551.452161][T14558] netlink: 'syz.4.2491': attribute type 1 has an invalid length.
[  551.636362][T14551] lo speed is unknown, defaulting to 1000
[  551.684702][T14551] lo speed is unknown, defaulting to 1000
[  551.796750][T14567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2495'.
[  552.500148][T14593] netlink: 468 bytes leftover after parsing attributes in process `syz.4.2500'.
[  552.545846][T14593] netlink: 'syz.4.2500': attribute type 2 has an invalid length.
[  552.645843][ T5884] Bluetooth: hci3: command tx timeout
[  552.755032][ T5932] hsr_slave_0: left promiscuous mode
[  552.763555][ T5932] hsr_slave_1: left promiscuous mode
[  552.771106][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  552.779580][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_0
[  552.791094][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  552.799135][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_1
[  552.835955][ T5932] veth1_macvtap: left promiscuous mode
[  552.841810][ T5932] veth0_macvtap: left promiscuous mode
[  552.847711][ T5932] veth1_vlan: left promiscuous mode
[  552.853859][ T5932] veth0_vlan: left promiscuous mode
[  553.472443][ T5932] team0 (unregistering): Port device team_slave_1 removed
[  553.533074][ T5932] team0 (unregistering): Port device team_slave_0 removed
[  554.279571][T14551] chnl_net:caif_netlink_parms(): no params data found
[  554.418157][T14622] dvmrp5: entered allmulticast mode
[  554.469002][T14622] dvmrp5: left allmulticast mode
[  554.579811][T14551] bridge0: port 1(bridge_slave_0) entered blocking state
[  554.615057][T14551] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.629320][T14551] bridge_slave_0: entered allmulticast mode
[  554.648990][T14551] bridge_slave_0: entered promiscuous mode
[  554.678132][T14551] bridge0: port 2(bridge_slave_1) entered blocking state
[  554.697003][T14551] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.713612][T14551] bridge_slave_1: entered allmulticast mode
[  554.722214][T14551] bridge_slave_1: entered promiscuous mode
[  554.726178][ T5884] Bluetooth: hci3: command tx timeout
[  554.825274][T14551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  554.836126][T14644] xt_bpf: check failed: parse error
[  554.837655][T14551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  554.895903][T14646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  554.981632][T14551] team0: Port device team_slave_0 added
[  555.009214][T14551] team0: Port device team_slave_1 added
[  555.105376][T14551] batman_adv: batadv0: Adding interface: batadv_slave_0
[  555.128509][T14551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  555.185825][T14551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  555.212648][T14551] batman_adv: batadv0: Adding interface: batadv_slave_1
[  555.226265][T14551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  555.253139][T14551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  555.296655][T14661] bond0: entered promiscuous mode
[  555.381594][T14551] hsr_slave_0: entered promiscuous mode
[  555.394550][T14551] hsr_slave_1: entered promiscuous mode
[  555.887679][T14551] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  555.901001][T14551] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  555.914016][T14551] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  555.933627][T14551] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  556.148178][T14551] 8021q: adding VLAN 0 to HW filter on device bond0
[  556.198278][T14551] 8021q: adding VLAN 0 to HW filter on device team0
[  556.213836][ T8736] bridge0: port 1(bridge_slave_0) entered blocking state
[  556.221080][ T8736] bridge0: port 1(bridge_slave_0) entered forwarding state
[  556.259703][ T8737] bridge0: port 2(bridge_slave_1) entered blocking state
[  556.266947][ T8737] bridge0: port 2(bridge_slave_1) entered forwarding state
[  556.561839][T14723] netlink: 'syz.2.2538': attribute type 21 has an invalid length.
[  556.580353][T14723] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2538'.
[  556.612237][T14723] netlink: 'syz.2.2538': attribute type 5 has an invalid length.
[  556.649314][T14723] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2538'.
[  556.712367][T14551] 8021q: adding VLAN 0 to HW filter on device batadv0
[  556.739336][T14739] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2542'.
[  556.772672][T14551] veth0_vlan: entered promiscuous mode
[  556.780756][T14741] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2543'.
[  556.783405][T14551] veth1_vlan: entered promiscuous mode
[  556.812315][T14551] veth0_macvtap: entered promiscuous mode
[  556.821872][T14551] veth1_macvtap: entered promiscuous mode
[  556.836377][ T5884] Bluetooth: hci3: command tx timeout
[  556.841725][T14551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  556.852595][T14551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  556.863752][T14551] batman_adv: batadv0: Interface activated: batadv_slave_0
[  556.883762][T14551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  556.894559][T14551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  556.906435][T14551] batman_adv: batadv0: Interface activated: batadv_slave_1
[  556.916831][T14551] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  556.925907][T14551] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  556.935657][T14551] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  556.944377][T14551] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  557.139563][T14748] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2546'.
[  557.158272][ T7985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  557.182923][ T7985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  557.225476][T14551] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2
[  557.246733][T14551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  557.291123][ T2210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  557.316615][ T2210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  557.470464][T14761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2549'.
[  558.028997][T14778] lo speed is unknown, defaulting to 1000
[  558.056886][T14778] lo speed is unknown, defaulting to 1000
[  558.260142][T14781] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2555'.
[  559.482392][ T8734] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.995980][T14830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2567'.
[  560.208206][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  560.218906][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  560.228008][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  560.236543][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  560.248939][ T5155] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  560.258162][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  560.633321][T14836] lo speed is unknown, defaulting to 1000
[  560.660326][T14853] ieee802154 phy1 wpan1: encryption failed: -22
[  560.676637][T14836] lo speed is unknown, defaulting to 1000
[  560.795458][T14859] xt_check_table_hooks: 23 callbacks suppressed
[  560.795480][T14859] x_tables: duplicate underflow at hook 3
[  560.831182][T14858] netlink: 'syz.1.2573': attribute type 1 has an invalid length.
[  560.864110][ T8734] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.949808][T14858] 8021q: adding VLAN 0 to HW filter on device bond8
[  561.032282][T14861] 8021q: adding VLAN 0 to HW filter on device bond8
[  561.042681][T14861] bond8: (slave vcan0): The slave device specified does not support setting the MAC address
[  561.086684][T14861] bond8: (slave vcan0): Error -95 calling set_mac_address
[  561.164348][T14859] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  561.187229][T14859] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  561.227853][T14870] xt_policy: output policy not valid in PREROUTING and INPUT
[  561.237398][T14870] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2577'.
[  561.268515][ T8734] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  561.309258][T14858] 8021q: adding VLAN 0 to HW filter on device batadv0
[  561.330227][T14858] bond8: (slave batadv0): making interface the new active one
[  561.342439][T14858] bond8: (slave batadv0): Enslaving as an active interface with an up link
[  561.422683][ T8734] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  561.507322][T14883] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2580'.
[  561.583967][T14889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2582'.
[  561.683566][T14895] netlink: 'syz.0.2584': attribute type 8 has an invalid length.
[  561.686964][T14889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2582'.
[  561.712890][ T8734] bridge_slave_1: left allmulticast mode
[  561.719473][ T8734] bridge_slave_1: left promiscuous mode
[  561.725482][ T8734] bridge0: port 2(bridge_slave_1) entered disabled state
[  561.749600][T14898] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2584'.
[  561.749841][ T8734] bridge_slave_0: left allmulticast mode
[  561.769451][ T8734] bridge_slave_0: left promiscuous mode
[  561.781203][ T8734] bridge0: port 1(bridge_slave_0) entered disabled state
[  561.802732][T14899] netlink: 'syz.1.2585': attribute type 2 has an invalid length.
[  561.811594][T14899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2585'.
[  561.831411][T14900] netlink: 'syz.1.2585': attribute type 2 has an invalid length.
[  562.304731][ T8734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  562.337211][ T5884] Bluetooth: hci3: command tx timeout
[  562.343878][ T8734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  562.373560][ T8734] bond0 (unregistering): Released all slaves
[  562.616065][T14921] __nla_validate_parse: 1 callbacks suppressed
[  562.616086][T14921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2588'.
[  562.625590][T14916] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2587'.
[  562.686115][T14916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2587'.
[  562.699546][T14916] netlink: 'syz.4.2587': attribute type 5 has an invalid length.
[  562.740552][T14836] chnl_net:caif_netlink_parms(): no params data found
[  562.763715][T14922] netlink: 'syz.4.2587': attribute type 1 has an invalid length.
[  563.128194][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  563.469785][T14836] bridge0: port 1(bridge_slave_0) entered blocking state
[  563.492353][T14836] bridge0: port 1(bridge_slave_0) entered disabled state
[  563.499792][T14836] bridge_slave_0: entered allmulticast mode
[  563.507404][T14836] bridge_slave_0: entered promiscuous mode
[  563.531591][ T8734] hsr_slave_0: left promiscuous mode
[  563.549504][ T8734] hsr_slave_1: left promiscuous mode
[  563.566719][ T8734] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  563.578843][ T8734] batman_adv: batadv0: Removing interface: batadv_slave_0
[  563.597442][ T8734] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  563.600428][T14948] syz.4.2596 uses old SIOCAX25GETINFO
[  563.612421][ T8734] batman_adv: batadv0: Removing interface: batadv_slave_1
[  563.628654][T14950] netlink: 66 bytes leftover after parsing attributes in process `syz.1.2597'.
[  563.722219][ T8734] veth1_macvtap: left promiscuous mode
[  563.736292][ T8734] veth0_macvtap: left promiscuous mode
[  563.745195][ T8734] veth1_vlan: left promiscuous mode
[  563.756082][T14955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2598'.
[  563.760440][ T8734] veth0_vlan: left promiscuous mode
[  564.409258][ T5884] Bluetooth: hci3: command tx timeout
[  564.420253][ T8734] team0 (unregistering): Port device team_slave_1 removed
[  564.479123][ T8734] team0 (unregistering): Port device team_slave_0 removed
[  565.022263][T14836] bridge0: port 2(bridge_slave_1) entered blocking state
[  565.030091][T14836] bridge0: port 2(bridge_slave_1) entered disabled state
[  565.037527][T14836] bridge_slave_1: entered allmulticast mode
[  565.044123][T14836] bridge_slave_1: entered promiscuous mode
[  565.278950][T14836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  565.317078][T14836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  565.347367][T14974] geneve1: entered allmulticast mode
[  565.508995][T14836] team0: Port device team_slave_0 added
[  565.540011][T14836] team0: Port device team_slave_1 added
[  565.623535][T14836] batman_adv: batadv0: Adding interface: batadv_slave_0
[  565.649937][T14836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  565.707695][T14836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  565.733018][T14836] batman_adv: batadv0: Adding interface: batadv_slave_1
[  565.756522][T14836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  565.783101][T14836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  565.844527][T14836] hsr_slave_0: entered promiscuous mode
[  565.868350][T14836] hsr_slave_1: entered promiscuous mode
[  566.130758][T15005] netlink: 'syz.1.2614': attribute type 14 has an invalid length.
[  566.147134][T15003] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2613'.
[  566.244668][T15009] netlink: 'syz.1.2615': attribute type 2 has an invalid length.
[  566.256571][T15009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2615'.
[  566.266137][T15009] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  566.450545][T15015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0
[  566.480177][T15015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  566.509842][ T5884] Bluetooth: hci3: command tx timeout
[  566.802289][T15029] netlink: 'syz.1.2623': attribute type 1 has an invalid length.
[  566.845193][T14836] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  566.873881][T14836] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  566.895068][T15036] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  566.903923][T14836] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  566.924635][T14836] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  566.962570][T15036] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  566.989441][T15036] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  567.016826][T15036] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  567.027743][T15036] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  567.036770][T15036] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  567.074852][T15036] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  567.101432][T15036] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  567.110916][T14836] 8021q: adding VLAN 0 to HW filter on device bond0
[  567.130482][T15036] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  567.158370][T15036] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  567.171673][T15054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2630'.
[  567.181493][T14836] 8021q: adding VLAN 0 to HW filter on device team0
[  567.221370][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state
[  567.228566][ T5955] bridge0: port 1(bridge_slave_0) entered forwarding state
[  567.305168][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state
[  567.314426][ T5955] bridge0: port 2(bridge_slave_1) entered forwarding state
[  567.720089][T14836] 8021q: adding VLAN 0 to HW filter on device batadv0
[  567.781488][T15096] set match dimension is over the limit!
[  567.823713][T14836] veth0_vlan: entered promiscuous mode
[  567.856664][T14836] veth1_vlan: entered promiscuous mode
[  567.913080][T15100] pim6reg: entered allmulticast mode
[  567.994910][T14836] veth0_macvtap: entered promiscuous mode
[  568.030098][T14836] veth1_macvtap: entered promiscuous mode
[  568.067267][T15085] lo speed is unknown, defaulting to 1000
[  568.070044][T14836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  568.095139][T14836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  568.109140][T14836] batman_adv: batadv0: Interface activated: batadv_slave_0
[  568.118585][T15085] lo speed is unknown, defaulting to 1000
[  568.125158][T14836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  568.136314][T14836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  568.159845][T14836] batman_adv: batadv0: Interface activated: batadv_slave_1
[  568.192240][T15106] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2639'.
[  568.194665][T14836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  568.213188][T14836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  568.243062][T14836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  568.297999][T14836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  568.564900][ T8736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  568.573116][ T5884] Bluetooth: hci3: command tx timeout
[  568.594831][ T8736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  568.621028][T14836] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2
[  568.666759][T14836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  568.701346][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  568.725618][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  568.868347][T15126] netlink: 'syz.1.2645': attribute type 1 has an invalid length.
[  568.900609][T15126] erspan1: entered promiscuous mode
[  568.925900][T15126] erspan1: entered allmulticast mode
[  569.209711][T15134] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2646'.
[  569.254181][T15134] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2646'.
[  569.767834][T15162] ip6t_REJECT: ECHOREPLY is not supported
[  569.815763][T15164] netlink: 'syz.4.2655': attribute type 3 has an invalid length.
[  569.836021][T15165] netlink: 'syz.4.2655': attribute type 3 has an invalid length.
[  570.101001][T15180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2659'.
[  570.107772][T15189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2662'.
[  570.202644][ T8736] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.236441][T15189] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2662'.
[  570.289042][T15185] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  570.969931][ T8736] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.033981][ T8736] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.111453][ T8736] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.238829][ T8736] bridge_slave_1: left allmulticast mode
[  571.245133][ T8736] bridge_slave_1: left promiscuous mode
[  571.256012][ T8736] bridge0: port 2(bridge_slave_1) entered disabled state
[  571.305478][ T8736] bridge_slave_0: left allmulticast mode
[  571.311771][ T8736] bridge_slave_0: left promiscuous mode
[  571.329912][ T8736] bridge0: port 1(bridge_slave_0) entered disabled state
[  571.463907][T15214] xt_CT: You must specify a L4 protocol and not use inversions on it
[  571.653547][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  571.665850][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  571.676904][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  571.691740][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  571.704290][ T5155] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  571.717782][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  571.846761][T15231] netlink: 'syz.0.2671': attribute type 4 has an invalid length.
[  571.920800][T15232] netlink: 'syz.0.2671': attribute type 4 has an invalid length.
[  572.216128][ T8736] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  572.228125][T15239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2671'.
[  572.240927][ T8736] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  572.253781][ T8736] bond0 (unregistering): Released all slaves
[  572.265322][T15208] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2668'.
[  572.281550][T15208] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2668'.
[  572.291548][T15208] netlink: 'syz.1.2668': attribute type 6 has an invalid length.
[  572.304046][T15214] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2668'.
[  572.319869][T15214] netlink: 'syz.1.2668': attribute type 6 has an invalid length.
[  572.379389][T15231] infiniband syz0: set down
[  572.399161][T15232] infiniband syz0: set active
[  572.423495][T15236] IPVS: Unknown mcast interface: vcan0
[  572.457327][T15238] IPVS: stopping backup sync thread 15243 ...
[  572.465139][T15243] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0
[  572.491118][T14317] lo speed is unknown, defaulting to 1000
[  572.514233][T14308] lo speed is unknown, defaulting to 1000
[  572.524069][T14335] lo speed is unknown, defaulting to 1000
[  572.582195][T14318] lo speed is unknown, defaulting to 1000
[  572.588581][T15242] IPVS: Unknown mcast interface: vcan0
[  572.621306][T14308] lo speed is unknown, defaulting to 1000
[  572.910571][T15223] lo speed is unknown, defaulting to 1000
[  572.941585][T15223] lo speed is unknown, defaulting to 1000
[  573.221892][T15266] __nla_validate_parse: 3 callbacks suppressed
[  573.221912][T15266] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2681'.
[  573.503342][ T8736] hsr_slave_0: left promiscuous mode
[  573.512807][T15284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2686'.
[  573.522260][ T8736] hsr_slave_1: left promiscuous mode
[  573.532177][ T8736] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  573.540437][ T8736] batman_adv: batadv0: Removing interface: batadv_slave_0
[  573.548667][ T8736] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  573.556531][ T8736] batman_adv: batadv0: Removing interface: batadv_slave_1
[  573.591010][ T8736] veth1_macvtap: left promiscuous mode
[  573.596970][ T8736] veth0_macvtap: left promiscuous mode
[  573.602659][ T8736] veth1_vlan: left promiscuous mode
[  573.608257][ T8736] veth0_vlan: left promiscuous mode
[  573.724429][T15288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2687'.
[  573.857535][ T5155] Bluetooth: hci3: command tx timeout
[  574.490108][ T8736] team0 (unregistering): Port device team_slave_1 removed
[  574.550164][ T8736] team0 (unregistering): Port device team_slave_0 removed
[  575.213984][T15316] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2
[  575.224491][T15317] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2694'.
[  575.246913][T15316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  575.265109][T15317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2694'.
[  575.267538][T15316] vlan6: entered allmulticast mode
[  575.284046][T15317] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2694'.
[  575.342600][T15320] netlink: 'syz.2.2695': attribute type 39 has an invalid length.
[  575.522735][T15223] chnl_net:caif_netlink_parms(): no params data found
[  575.760251][T15223] bridge0: port 1(bridge_slave_0) entered blocking state
[  575.779902][T15223] bridge0: port 1(bridge_slave_0) entered disabled state
[  575.807312][T15223] bridge_slave_0: entered allmulticast mode
[  575.814496][T15223] bridge_slave_0: entered promiscuous mode
[  575.891552][T15223] bridge0: port 2(bridge_slave_1) entered blocking state
[  575.905773][T15223] bridge0: port 2(bridge_slave_1) entered disabled state
[  575.920879][T15223] bridge_slave_1: entered allmulticast mode
[  575.927352][ T5155] Bluetooth: hci3: command tx timeout
[  575.950919][T15223] bridge_slave_1: entered promiscuous mode
[  575.954931][T15343] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma?
[  576.165956][T15347] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2701'.
[  576.223494][T15343] bridge0: port 1(vlan3) entered blocking state
[  576.244085][T15343] bridge0: port 1(vlan3) entered disabled state
[  576.265967][T15343] vlan3: entered allmulticast mode
[  576.286492][T15343] vlan3: left allmulticast mode
[  576.363601][T15223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  576.390855][T15223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  576.401596][T15351] rdma_rxe: rxe_newlink: failed to add lo
[  576.426029][T15350] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  576.436196][T15350] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  576.446401][T15350] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  576.463796][T15350] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  576.474325][T15350] geneve3: entered promiscuous mode
[  576.484893][T15350] geneve3: entered allmulticast mode
[  576.535153][T15350] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0
[  576.545292][T15350] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0
[  576.561406][T15354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2703'.
[  576.563611][T15350] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0
[  576.570829][T15354] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2703'.
[  576.589871][T15350] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0
[  576.677855][T15357] vlan4: entered promiscuous mode
[  576.732923][T15223] team0: Port device team_slave_0 added
[  576.759952][T15223] team0: Port device team_slave_1 added
[  576.819989][T15223] batman_adv: batadv0: Adding interface: batadv_slave_0
[  576.837380][T15223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  576.871235][T15223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  576.885385][T15223] batman_adv: batadv0: Adding interface: batadv_slave_1
[  576.892968][T15223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  576.922439][T15223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  577.037320][T15223] hsr_slave_0: entered promiscuous mode
[  577.050750][T15223] hsr_slave_1: entered promiscuous mode
[  577.638348][T15390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2713'.
[  577.679976][T15390] batman_adv: batadv0: Removing interface: batadv_slave_0
[  577.710870][T15390] batman_adv: batadv0: Removing interface: batadv_slave_1
[  577.821907][T15223] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  577.844916][T15223] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  577.863534][T15223] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  577.888258][T15395] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  577.904312][T15223] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  578.013878][ T5155] Bluetooth: hci3: command tx timeout
[  578.129212][T15223] 8021q: adding VLAN 0 to HW filter on device bond0
[  578.193423][T15223] 8021q: adding VLAN 0 to HW filter on device team0
[  578.251272][ T8734] bridge0: port 1(bridge_slave_0) entered blocking state
[  578.258471][ T8734] bridge0: port 1(bridge_slave_0) entered forwarding state
[  578.306973][ T8734] bridge0: port 2(bridge_slave_1) entered blocking state
[  578.314181][ T8734] bridge0: port 2(bridge_slave_1) entered forwarding state
[  578.420986][T15409] Unsupported ieee802154 address type: 0
[  578.475940][T15413] __nla_validate_parse: 1 callbacks suppressed
[  578.475962][T15413] netlink: 432 bytes leftover after parsing attributes in process `syz.4.2722'.
[  578.665478][T15223] 8021q: adding VLAN 0 to HW filter on device batadv0
[  578.732628][T15223] veth0_vlan: entered promiscuous mode
[  578.744675][T15223] veth1_vlan: entered promiscuous mode
[  578.876038][T15223] veth0_macvtap: entered promiscuous mode
[  578.885299][T15223] veth1_macvtap: entered promiscuous mode
[  578.904455][T15425] netlink: 'syz.4.2723': attribute type 3 has an invalid length.
[  578.931935][T15427] netlink: 'syz.4.2723': attribute type 3 has an invalid length.
[  578.941880][T15223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  578.953702][T15223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  578.968350][T15223] batman_adv: batadv0: Interface activated: batadv_slave_0
[  579.012814][T15223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  579.029782][T15223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  579.043310][T15223] batman_adv: batadv0: Interface activated: batadv_slave_1
[  579.079669][T15223] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  579.090385][T15223] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  579.100540][T15223] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  579.110053][T15223] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  579.122861][T15432] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2
[  579.284272][T15439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2727'.
[  579.300659][ T8734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  579.332018][ T8734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  579.376284][T15223] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2
[  579.395979][T15223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  579.431949][ T8734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  579.441329][T15448] netlink: 'syz.4.2730': attribute type 13 has an invalid length.
[  579.448711][ T8734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  579.483274][T15449] syzkaller0: entered allmulticast mode
[  579.784535][T15465] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2735'.
[  580.023997][T15479] netlink: 'syz.4.2743': attribute type 4 has an invalid length.
[  580.055241][T15479] ip6t_srh: unknown srh match flags  5294
[  580.070673][T15479] siw: device registration error -23
[  580.643852][T15496] infiniband syz0: set active
[  580.664317][T14305] lo speed is unknown, defaulting to 1000
[  580.783913][T15496] team0: Mode changed to "loadbalance"
[  580.886198][ T5955] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.876431][T15515] netlink: 'syz.0.2751': attribute type 7 has an invalid length.
[  581.906818][T15515] net_ratelimit: 11 callbacks suppressed
[  581.906838][T15515] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  581.983507][T15515] sit0: entered promiscuous mode
[  582.014100][T15515] netlink: 'syz.0.2751': attribute type 1 has an invalid length.
[  582.034998][T15521] netlink: 'syz.2.2755': attribute type 7 has an invalid length.
[  582.045513][T15515] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2751'.
[  582.286292][ T5884] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  582.306132][ T5884] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  582.317016][ T5884] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  582.322048][ T5955] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.349977][ T5884] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  582.368941][ T5884] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  582.376841][ T5884] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  582.385836][T15509] lo speed is unknown, defaulting to 1000
[  582.393517][T15509] lo speed is unknown, defaulting to 1000
[  582.749731][T15550] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2762'.
[  582.761498][ T5955] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.788031][T15541] netlink: 'syz.0.2761': attribute type 29 has an invalid length.
[  582.803033][T15546] netlink: 'syz.0.2761': attribute type 29 has an invalid length.
[  582.803694][T15550] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2762'.
[  582.828469][T15534] lo speed is unknown, defaulting to 1000
[  582.914525][ T5955] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.942692][T15534] lo speed is unknown, defaulting to 1000
[  583.026453][T15559] netlink: 'syz.0.2763': attribute type 1 has an invalid length.
[  583.068554][T15561] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2766'.
[  583.194963][ T5955] bridge_slave_1: left allmulticast mode
[  583.208748][ T5955] bridge_slave_1: left promiscuous mode
[  583.225827][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state
[  583.746966][ T5955] bridge_slave_0: left allmulticast mode
[  583.760768][ T5955] bridge_slave_0: left promiscuous mode
[  583.771936][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state
[  584.461525][ T5955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  584.473602][ T5955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  584.485112][ T5955] bond0 (unregistering): Released all slaves
[  584.491552][ T5884] Bluetooth: hci3: command tx timeout
[  584.509133][T15527] lo speed is unknown, defaulting to 1000
[  584.535073][T15568] vlan3: entered allmulticast mode
[  584.541333][T15568] bond0: entered allmulticast mode
[  584.549999][T15568] batadv_slave_0: entered allmulticast mode
[  584.582732][T15568] bond0: left allmulticast mode
[  584.587997][T15568] batadv_slave_0: left allmulticast mode
[  584.640710][T15527] lo speed is unknown, defaulting to 1000
[  584.896454][T15574] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2769'.
[  585.372955][ T5955] hsr_slave_0: left promiscuous mode
[  585.444383][T15607] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2778'.
[  585.463924][ T5955] hsr_slave_1: left promiscuous mode
[  585.498181][ T5955] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  585.507233][ T5955] batman_adv: batadv0: Removing interface: batadv_slave_0
[  585.539068][ T5955] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  585.546630][ T5955] batman_adv: batadv0: Removing interface: batadv_slave_1
[  585.635218][ T5955] veth1_macvtap: left promiscuous mode
[  585.640873][ T5955] veth0_macvtap: left promiscuous mode
[  585.646599][ T5955] veth1_vlan: left promiscuous mode
[  585.651998][ T5955] veth0_vlan: left promiscuous mode
[  586.423291][ T5955] team0 (unregistering): Port device team_slave_1 removed
[  586.487026][ T5955] team0 (unregistering): Port device team_slave_0 removed
[  586.569708][ T5884] Bluetooth: hci3: command tx timeout
[  587.023895][T15589] validate_nla: 2 callbacks suppressed
[  587.023916][T15589] netlink: 'syz.2.2773': attribute type 12 has an invalid length.
[  587.041129][T15527] chnl_net:caif_netlink_parms(): no params data found
[  587.167169][T15635] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2786'.
[  587.323380][T15636] netlink: 'syz.4.2786': attribute type 1 has an invalid length.
[  587.331739][T15636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2786'.
[  587.364435][T15644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2789'.
[  587.408336][T15643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2788'.
[  587.497154][T15527] bridge0: port 1(bridge_slave_0) entered blocking state
[  587.505933][T15527] bridge0: port 1(bridge_slave_0) entered disabled state
[  587.513291][T15527] bridge_slave_0: entered allmulticast mode
[  587.547490][T15527] bridge_slave_0: entered promiscuous mode
[  587.571982][T15643] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  587.586185][T15643] macvlan10: entered allmulticast mode
[  587.655281][T15527] bridge0: port 2(bridge_slave_1) entered blocking state
[  587.664963][T15527] bridge0: port 2(bridge_slave_1) entered disabled state
[  587.672518][T15527] bridge_slave_1: entered allmulticast mode
[  587.681353][T15527] bridge_slave_1: entered promiscuous mode
[  587.789025][T15527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  587.844897][T15527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  588.115771][T15527] team0: Port device team_slave_0 added
[  588.180450][T15527] team0: Port device team_slave_1 added
[  588.258001][T15670] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2794'.
[  588.393804][T15681] netlink: 'syz.4.2797': attribute type 7 has an invalid length.
[  588.418482][T15677] netlink: 'syz.4.2797': attribute type 7 has an invalid length.
[  588.426856][T15677] netlink: 'syz.4.2797': attribute type 8 has an invalid length.
[  588.434756][T15681] netlink: 'syz.4.2797': attribute type 8 has an invalid length.
[  588.443347][T15677] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2797'.
[  588.452697][T15681] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2797'.
[  588.546661][T15527] batman_adv: batadv0: Adding interface: batadv_slave_0
[  588.553661][T15527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  588.627390][T15685] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2799'.
[  588.654316][ T5884] Bluetooth: hci3: command tx timeout
[  588.660078][T15527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  588.677823][T15527] batman_adv: batadv0: Adding interface: batadv_slave_1
[  588.711477][T15527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  588.782335][T15527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  588.795304][T15694] xt_TCPMSS: Only works on TCP SYN packets
[  588.952474][T15527] hsr_slave_0: entered promiscuous mode
[  588.999770][T15527] hsr_slave_1: entered promiscuous mode
[  589.424443][T15715] IPVS: Unknown mcast interface: vcan0
[  589.651307][T15527] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  589.654910][T15722] xt_hashlimit: invalid rate
[  589.668643][T15527] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  589.678662][T15527] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  589.689743][T15527] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  589.817702][T15527] 8021q: adding VLAN 0 to HW filter on device bond0
[  589.834068][T15527] 8021q: adding VLAN 0 to HW filter on device team0
[  589.857363][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state
[  589.864577][ T5932] bridge0: port 1(bridge_slave_0) entered forwarding state
[  589.875933][T15724] FAULT_INJECTION: forcing a failure.
[  589.875933][T15724] name failslab, interval 1, probability 0, space 0, times 0
[  589.915926][T15724] CPU: 0 UID: 0 PID: 15724 Comm: syz.1.2815 Not tainted 6.12.0-rc7-syzkaller-01702-gd7ef9eeef072 #0
[  589.926744][T15724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  589.936835][T15724] Call Trace:
[  589.940141][T15724]  <TASK>
[  589.940265][T15527] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  589.943070][T15724]  dump_stack_lvl+0x241/0x360
[  589.943104][T15724]  ? __pfx_dump_stack_lvl+0x10/0x10
[  589.954075][T15527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  589.958596][T15724]  ? __pfx__printk+0x10/0x10
[  589.958634][T15724]  ? ref_tracker_alloc+0x332/0x490
[  589.958660][T15724]  should_fail_ex+0x3b0/0x4e0
[  589.968534][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state
[  589.974251][T15724]  ? skb_clone+0x20c/0x390
[  589.978946][ T5932] bridge0: port 2(bridge_slave_1) entered forwarding state
[  589.983917][T15724]  should_failslab+0xac/0x100
[  590.012167][T15724]  ? skb_clone+0x20c/0x390
[  590.016619][T15724]  kmem_cache_alloc_noprof+0x6c/0x2a0
[  590.022031][T15724]  skb_clone+0x20c/0x390
[  590.026341][T15724]  __netlink_deliver_tap+0x3cc/0x7f0
[  590.031684][T15724]  ? netlink_deliver_tap+0x2e/0x1b0
[  590.037004][T15724]  netlink_deliver_tap+0x19d/0x1b0
[  590.042130][T15724]  netlink_unicast+0x7c4/0x990
[  590.046904][T15724]  ? __pfx_netlink_unicast+0x10/0x10
[  590.052216][T15724]  ? __virt_addr_valid+0x183/0x530
[  590.057356][T15724]  ? __check_object_size+0x48e/0x900
[  590.062839][T15724]  netlink_sendmsg+0x8e4/0xcb0
[  590.067621][T15724]  ? __pfx_netlink_sendmsg+0x10/0x10
[  590.072909][T15724]  ? aa_sock_msg_perm+0x91/0x160
[  590.077855][T15724]  ? __pfx_netlink_sendmsg+0x10/0x10
[  590.083272][T15724]  __sock_sendmsg+0x221/0x270
[  590.087958][T15724]  ____sys_sendmsg+0x52a/0x7e0
[  590.092749][T15724]  ? __pfx_____sys_sendmsg+0x10/0x10
[  590.098053][T15724]  __sys_sendmsg+0x292/0x380
[  590.102680][T15724]  ? __pfx___sys_sendmsg+0x10/0x10
[  590.107823][T15724]  ? __pfx_vfs_write+0x10/0x10
[  590.112610][T15724]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  590.118949][T15724]  ? do_syscall_64+0x100/0x230
[  590.123734][T15724]  ? do_syscall_64+0xb6/0x230
[  590.128462][T15724]  do_syscall_64+0xf3/0x230
[  590.133001][T15724]  ? clear_bhb_loop+0x35/0x90
[  590.137701][T15724]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.143657][T15724] RIP: 0033:0x7f3c4777e759
[  590.148079][T15724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  590.167708][T15724] RSP: 002b:00007f3c48637038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  590.176171][T15724] RAX: ffffffffffffffda RBX: 00007f3c47935f80 RCX: 00007f3c4777e759
[  590.184147][T15724] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003
[  590.192123][T15724] RBP: 00007f3c48637090 R08: 0000000000000000 R09: 0000000000000000
[  590.200117][T15724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  590.208108][T15724] R13: 0000000000000000 R14: 00007f3c47935f80 R15: 00007fff2a3d8e48
[  590.216186][T15724]  </TASK>
[  590.284727][T15724] IPVS: Unknown mcast interface: vcan0
[  590.504270][T15731] __nla_validate_parse: 5 callbacks suppressed
[  590.504289][T15731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2817'.
[  590.604891][T15738] bridge4: entered promiscuous mode
[  590.618516][T15738] bridge4: entered allmulticast mode
[  590.711660][T15527] 8021q: adding VLAN 0 to HW filter on device batadv0
[  590.737829][ T5884] Bluetooth: hci3: command tx timeout
[  590.892946][T15527] veth0_vlan: entered promiscuous mode
[  590.940755][T15527] veth1_vlan: entered promiscuous mode
[  591.065972][T15527] veth0_macvtap: entered promiscuous mode
[  591.093655][T15527] veth1_macvtap: entered promiscuous mode
[  591.178148][T15527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  591.215659][T15527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  591.237598][T15527] batman_adv: batadv0: Interface activated: batadv_slave_0
[  591.278244][T15527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  591.315831][T15527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  591.344601][T15527] batman_adv: batadv0: Interface activated: batadv_slave_1
[  591.369488][T15769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2825'.
[  591.409389][T15527] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  591.426716][T15527] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  591.436029][T15527] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  591.444943][T15527] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  591.708492][ T5932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  591.716770][ T5932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  591.741467][T15527] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2
[  591.767592][T15527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  591.791054][ T5932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  591.799389][ T5932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  592.113473][T15788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2831'.
[  592.309041][T15796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2834'.
[  592.576738][T15805] SET target dimension over the limit!
[  592.670817][T15803] lo speed is unknown, defaulting to 1000
[  592.697764][T15803] lo speed is unknown, defaulting to 1000
[  593.297911][T15830] netdevsim netdevsim1 netdevsim2: entered promiscuous mode
[  593.333044][T15830] macsec1: entered promiscuous mode
[  593.378400][T15830] macsec1: entered allmulticast mode
[  593.387642][T15830] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[  593.425336][T15830] netdevsim netdevsim1 netdevsim2: left allmulticast mode
[  593.446742][T15830] netdevsim netdevsim1 netdevsim2: left promiscuous mode
[  593.910847][T15851] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.928601][T15851] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  594.116377][T15851] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  594.136076][T15851] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  594.304352][T15851] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  594.315047][T15851] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  594.404895][ T1155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  594.438075][T15851] bond0: (slave netdevsim0): Releasing backup interface
[  594.463020][T15851] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  594.477409][T15851] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  594.519677][ T1155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  594.607594][ T1155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  594.644619][T15851] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  594.661556][T15851] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  594.687640][T15851] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  594.703921][T15851] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  594.748506][ T1155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  594.773357][T15851] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  594.789433][T15851] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  594.817956][T15851] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  594.826626][T15851] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  594.899093][ T1155] bridge_slave_1: left allmulticast mode
[  594.904844][ T1155] bridge_slave_1: left promiscuous mode
[  594.912676][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state
[  594.922285][ T1155] bridge_slave_0: left allmulticast mode
[  594.928585][ T1155] bridge_slave_0: left promiscuous mode
[  594.934326][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state
[  595.552578][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  595.569599][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  595.589466][ T1155] bond0 (unregistering): Released all slaves
[  595.758117][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  595.770888][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  595.783801][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  595.800400][T15887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2855'.
[  595.809575][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  595.825405][ T5155] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  595.835161][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  596.009562][T15898] netlink: 'syz.0.2857': attribute type 8 has an invalid length.
[  596.022797][T15903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2859'.
[  596.023007][T15898] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  596.167073][T15898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2857'.
[  596.192529][T15898] openvswitch: netlink: Flow key attr not present in new flow.
[  596.308183][T15911] sch_tbf: burst 4398 is lower than device lo mtu (17891342) !
[  596.386607][T15914] IPVS: Unknown mcast interface: vcan0
[  596.413575][T15884] lo speed is unknown, defaulting to 1000
[  596.476395][T15884] lo speed is unknown, defaulting to 1000
[  597.044665][T15928] netlink: 'syz.0.2867': attribute type 6 has an invalid length.
[  597.099018][ T1155] hsr_slave_0: left promiscuous mode
[  597.120822][T15940] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2871'.
[  597.158838][ T1155] hsr_slave_1: left promiscuous mode
[  597.165746][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  597.192522][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  597.211326][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  597.219435][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  597.311628][ T1155] veth1_macvtap: left promiscuous mode
[  597.321501][ T1155] veth0_macvtap: left promiscuous mode
[  597.327441][ T1155] veth1_vlan: left promiscuous mode
[  597.332818][ T1155] veth0_vlan: left promiscuous mode
[  597.927421][ T5884] Bluetooth: hci3: command tx timeout
[  597.967411][ T1155] team0 (unregistering): Port device team_slave_1 removed
[  598.021444][ T1155] team0 (unregistering): Port device team_slave_0 removed
[  598.567107][T15955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2873'.
[  598.677095][T15978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2876'.
[  598.872652][T15884] chnl_net:caif_netlink_parms(): no params data found
[  598.970205][T16000] tipc: Trying to set illegal importance in message
[  599.161005][T16009] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2885'.
[  599.172241][T15884] bridge0: port 1(bridge_slave_0) entered blocking state
[  599.181987][T15884] bridge0: port 1(bridge_slave_0) entered disabled state
[  599.212938][T15884] bridge_slave_0: entered allmulticast mode
[  599.231648][T15884] bridge_slave_0: entered promiscuous mode
[  599.267495][T16017] FAULT_INJECTION: forcing a failure.
[  599.267495][T16017] name failslab, interval 1, probability 0, space 0, times 0
[  599.274686][T15884] bridge0: port 2(bridge_slave_1) entered blocking state
[  599.315759][T16017] CPU: 1 UID: 0 PID: 16017 Comm: syz.0.2886 Not tainted 6.12.0-rc7-syzkaller-01702-gd7ef9eeef072 #0
[  599.319973][T15884] bridge0: port 2(bridge_slave_1) entered disabled state
[  599.326543][T16017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  599.326587][T16017] Call Trace:
[  599.326595][T16017]  <TASK>
[  599.326603][T16017]  dump_stack_lvl+0x241/0x360
[  599.326634][T16017]  ? __pfx_dump_stack_lvl+0x10/0x10
[  599.326657][T16017]  ? __pfx__printk+0x10/0x10
[  599.326687][T16017]  ? __kmalloc_cache_noprof+0x44/0x2c0
[  599.326712][T16017]  ? __pfx___might_resched+0x10/0x10
[  599.326743][T16017]  should_fail_ex+0x3b0/0x4e0
[  599.326769][T16017]  should_failslab+0xac/0x100
[  599.326792][T16017]  ? hash_netiface_create+0x2fa/0x1040
[  599.326815][T16017]  __kmalloc_cache_noprof+0x6c/0x2c0
[  599.326844][T16017]  hash_netiface_create+0x2fa/0x1040
[  599.326880][T16017]  ? __pfx_hash_netiface_create+0x10/0x10
[  599.326906][T16017]  ip_set_create+0xa5c/0x1900
[  599.326932][T16017]  ? ip_set_create+0x45e/0x1900
[  599.326955][T16017]  ? __pfx_trace_raw_output_contention_end+0x2/0x10
[  599.326984][T16017]  ? __pfx_ip_set_create+0x10/0x10
[  599.327007][T16017]  ? trace_contention_end+0x3c/0x120
[  599.327055][T16017]  ? nfnetlink_rcv_msg+0x225/0x1180
[  599.360271][T15884] bridge_slave_1: entered allmulticast mode
[  599.360329][T16017]  nfnetlink_rcv_msg+0xbec/0x1180
[  599.370575][T15884] bridge_slave_1: entered promiscuous mode
[  599.375607][T16017]  ? nfnetlink_rcv_msg+0x225/0x1180
[  599.375664][T16017]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  599.375708][T16017]  ? __netlink_deliver_tap+0x56b/0x7f0
[  599.375730][T16017]  ? netlink_deliver_tap+0x19d/0x1b0
[  599.476629][T16017]  ? netlink_unicast+0x7c4/0x990
[  599.481596][T16017]  ? netlink_sendmsg+0x8e4/0xcb0
[  599.486577][T16017]  ? __sock_sendmsg+0x221/0x270
[  599.491462][T16017]  ? ____sys_sendmsg+0x52a/0x7e0
[  599.496432][T16017]  ? __sys_sendmsg+0x292/0x380
[  599.501221][T16017]  ? do_syscall_64+0xf3/0x230
[  599.505924][T16017]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  599.512031][T16017]  netlink_rcv_skb+0x1e3/0x430
[  599.516840][T16017]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  599.522342][T16017]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  599.527683][T16017]  ? apparmor_capable+0x13b/0x1b0
[  599.532735][T16017]  ? bpf_lsm_capable+0x9/0x10
[  599.537419][T16017]  ? security_capable+0x7e/0x2d0
[  599.542377][T16017]  nfnetlink_rcv+0x297/0x2ab0
[  599.547084][T16017]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  599.552823][T16017]  ? __dev_queue_xmit+0x2f4/0x3f50
[  599.557952][T16017]  ? __dev_queue_xmit+0x1775/0x3f50
[  599.563181][T16017]  ? kasan_save_track+0x51/0x80
[  599.568063][T16017]  ? ____sys_sendmsg+0x52a/0x7e0
[  599.573022][T16017]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  599.578148][T16017]  ? __dev_queue_xmit+0x2f4/0x3f50
[  599.583283][T16017]  ? __pfx___dev_queue_xmit+0x10/0x10
[  599.588685][T16017]  ? ref_tracker_free+0x643/0x7e0
[  599.593726][T16017]  ? __asan_memcpy+0x40/0x70
[  599.598320][T16017]  ? __pfx_ref_tracker_free+0x10/0x10
[  599.603718][T16017]  ? netlink_deliver_tap+0x2e/0x1b0
[  599.608932][T16017]  ? skb_clone+0x240/0x390
[  599.613372][T16017]  ? __pfx_lock_release+0x10/0x10
[  599.618415][T16017]  ? __netlink_deliver_tap+0x7aa/0x7f0
[  599.623904][T16017]  ? netlink_deliver_tap+0x2e/0x1b0
[  599.629118][T16017]  netlink_unicast+0x7f6/0x990
[  599.633921][T16017]  ? __pfx_netlink_unicast+0x10/0x10
[  599.639231][T16017]  ? __virt_addr_valid+0x183/0x530
[  599.644348][T16017]  ? __check_object_size+0x48e/0x900
[  599.649652][T16017]  netlink_sendmsg+0x8e4/0xcb0
[  599.654465][T16017]  ? __pfx_netlink_sendmsg+0x10/0x10
[  599.659793][T16017]  ? aa_sock_msg_perm+0x91/0x160
[  599.664737][T16017]  ? __pfx_netlink_sendmsg+0x10/0x10
[  599.670108][T16017]  __sock_sendmsg+0x221/0x270
[  599.674797][T16017]  ____sys_sendmsg+0x52a/0x7e0
[  599.679575][T16017]  ? __pfx_____sys_sendmsg+0x10/0x10
[  599.684892][T16017]  __sys_sendmsg+0x292/0x380
[  599.689518][T16017]  ? __pfx___sys_sendmsg+0x10/0x10
[  599.694674][T16017]  ? __pfx_vfs_write+0x10/0x10
[  599.699495][T16017]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  599.705866][T16017]  ? do_syscall_64+0x100/0x230
[  599.710680][T16017]  ? do_syscall_64+0xb6/0x230
[  599.715394][T16017]  do_syscall_64+0xf3/0x230
[  599.719928][T16017]  ? clear_bhb_loop+0x35/0x90
[  599.724662][T16017]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  599.730592][T16017] RIP: 0033:0x7f15b697e759
[  599.735034][T16017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  599.754671][T16017] RSP: 002b:00007f15b7865038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  599.763122][T16017] RAX: ffffffffffffffda RBX: 00007f15b6b35f80 RCX: 00007f15b697e759
[  599.771127][T16017] RDX: 0000000004040004 RSI: 0000000020000340 RDI: 0000000000000003
[  599.779127][T16017] RBP: 00007f15b7865090 R08: 0000000000000000 R09: 0000000000000000
[  599.787125][T16017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  599.795127][T16017] R13: 0000000000000000 R14: 00007f15b6b35f80 R15: 00007ffdfa2e3f08
[  599.803163][T16017]  </TASK>
[  599.822496][T16021] ipvlan1: renamed from bridge_slave_0 (while UP)
[  599.834445][T16023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2889'.
[  599.943534][T15884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  599.983656][T15884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  600.006858][ T5884] Bluetooth: hci3: command tx timeout
[  600.038255][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2894'.
[  600.057329][T15884] team0: Port device team_slave_0 added
[  600.076877][T15884] team0: Port device team_slave_1 added
[  600.091450][T16041] vxcan1: entered promiscuous mode
[  600.097954][T16041] vxcan1: entered allmulticast mode
[  600.134862][T16043] veth1_macvtap: left promiscuous mode
[  600.140823][T16043] macsec0: entered promiscuous mode
[  600.158052][T16048] veth1_macvtap: entered promiscuous mode
[  600.164098][T16048] macsec0: left promiscuous mode
[  600.214646][T15884] batman_adv: batadv0: Adding interface: batadv_slave_0
[  600.234276][T15884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  600.295044][T15884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  600.331596][T15884] batman_adv: batadv0: Adding interface: batadv_slave_1
[  600.345720][T15884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  600.412259][T15884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  600.433803][T16058] netlink: 'syz.2.2898': attribute type 1 has an invalid length.
[  600.463994][T16058] batadv1: entered promiscuous mode
[  600.470461][T16058] 8021q: adding VLAN 0 to HW filter on device batadv1
[  600.533699][T15884] hsr_slave_0: entered promiscuous mode
[  600.543748][T15884] hsr_slave_1: entered promiscuous mode
[  600.581137][T16068] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2902'.
[  600.682096][T16072] SET target dimension over the limit!
[  600.734221][T16071] xt_CT: No such helper "snmp"
[  601.090743][T16097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2912'.
[  601.266221][T16104] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2915'.
[  601.281665][T15884] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  601.301644][T15884] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  601.349228][T15884] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  601.359299][T16108] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2916'.
[  601.372741][T15884] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  601.595431][T15884] 8021q: adding VLAN 0 to HW filter on device bond0
[  601.626993][T16120] xt_TCPMSS: Only works on TCP SYN packets
[  601.653203][T15884] 8021q: adding VLAN 0 to HW filter on device team0
[  601.697005][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state
[  601.697437][T16122] netlink: 'syz.2.2922': attribute type 10 has an invalid length.
[  601.704114][ T5955] bridge0: port 1(bridge_slave_0) entered forwarding state
[  601.726317][T16120] batadv0: entered promiscuous mode
[  601.734767][ T8736] bridge0: port 2(bridge_slave_1) entered blocking state
[  601.741926][ T8736] bridge0: port 2(bridge_slave_1) entered forwarding state
[  601.790464][T16122] batman_adv: batadv0: Adding interface: wlan0
[  601.807922][T16122] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  601.836670][T16122] batman_adv: batadv0: Interface activated: wlan0
[  601.843171][T16122] batadv0: mtu less than device minimum
[  601.850499][T16122] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  601.863082][T16122] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  601.874643][T16122] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  601.887183][T16122] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  601.899755][T16122] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  601.912259][T16122] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  601.924813][T16122] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  601.937370][T16122] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  601.949807][T16122] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  601.991791][T16118] batadv0: left promiscuous mode
[  602.086902][ T5884] Bluetooth: hci3: command tx timeout
[  602.336984][T16147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2929'.
[  602.430366][T16150] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0
[  602.443626][T15884] 8021q: adding VLAN 0 to HW filter on device batadv0
[  602.589444][T15884] veth0_vlan: entered promiscuous mode
[  602.608246][T15884] veth1_vlan: entered promiscuous mode
[  602.661042][T15884] veth0_macvtap: entered promiscuous mode
[  602.694759][T15884] veth1_macvtap: entered promiscuous mode
[  602.829341][T15884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  602.887838][T15884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  602.938643][T15884] batman_adv: batadv0: Interface activated: batadv_slave_0
[  602.984909][T15884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  603.044960][T15884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  603.093995][T15884] batman_adv: batadv0: Interface activated: batadv_slave_1
[  603.162839][T15884] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  603.205681][T15884] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  603.214428][T15884] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  603.232454][T15884] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  603.377165][T15884] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0
[  603.418822][T15884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  603.440311][T16192] xt_hashlimit: size too large, truncated to 1048576
[  603.455279][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.464319][T16192] xt_hashlimit: max too large, truncated to 1048576
[  603.478186][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  603.513248][T15884] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2
[  603.541232][T15884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  603.560019][ T5932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.577910][ T5932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  603.694806][T16204] netlink: 'syz.1.2942': attribute type 23 has an invalid length.
[  603.719606][T16204] netlink: 'syz.1.2942': attribute type 11 has an invalid length.
[  603.727433][T16208] netlink: 'syz.4.2944': attribute type 10 has an invalid length.
[  603.736219][T16204] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2942'.
[  603.781912][T16207] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  603.782018][T16209] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2943'.
[  604.052596][T16215] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2946'.
[  604.914832][T16263] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2958'.
[  605.280749][ T2210] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.331737][T16250] lo speed is unknown, defaulting to 1000
[  605.346813][T16250] lo speed is unknown, defaulting to 1000
[  605.460492][T16253] Cannot find del_set index 3 as target
[  605.793481][ T2210] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.866638][ T2210] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.924525][ T2210] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  606.006855][ T2210] bridge_slave_1: left allmulticast mode
[  606.012552][ T2210] bridge_slave_1: left promiscuous mode
[  606.018662][ T2210] bridge0: port 2(bridge_slave_1) entered disabled state
[  606.028268][ T2210] bridge_slave_0: left allmulticast mode
[  606.033938][ T2210] bridge_slave_0: left promiscuous mode
[  606.039863][ T2210] bridge0: port 1(bridge_slave_0) entered disabled state
[  606.441896][T16283] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:2
[  606.456134][ T2210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  606.499940][ T2210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  606.530512][ T2210] bond0 (unregistering): Released all slaves
[  606.630479][T16295] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2965'.
[  606.735050][T16306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2966'.
[  606.746189][T16301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2966'.
[  606.847349][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  606.884854][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  606.905371][T16314] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2970'.
[  606.916172][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  606.920194][T16312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2969'.
[  606.932314][T16312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2969'.
[  606.942066][T16312] netlink: 'syz.4.2969': attribute type 15 has an invalid length.
[  606.970809][T16317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2970'.
[  606.981146][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  607.022409][ T5155] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  607.030145][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  607.179913][T16332] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2974'.
[  607.640720][ T2210] hsr_slave_0: left promiscuous mode
[  607.650935][ T2210] hsr_slave_1: left promiscuous mode
[  607.657629][ T2210] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  607.669445][ T2210] batman_adv: batadv0: Removing interface: batadv_slave_0
[  607.690467][ T2210] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  607.726246][ T2210] batman_adv: batadv0: Removing interface: batadv_slave_1
[  607.814702][ T2210] veth1_macvtap: left promiscuous mode
[  607.824537][ T2210] veth0_macvtap: left promiscuous mode
[  607.853394][ T2210] veth1_vlan: left promiscuous mode
[  607.859002][ T2210] veth0_vlan: left promiscuous mode
[  607.880588][T16360] netlink: 'syz.1.2981': attribute type 4 has an invalid length.
[  608.414365][ T2210] team0 (unregistering): Port device team_slave_1 removed
[  608.462771][ T2210] team0 (unregistering): Port device team_slave_0 removed
[  608.938234][T16309] lo speed is unknown, defaulting to 1000
[  608.952420][T16309] lo speed is unknown, defaulting to 1000
[  609.126410][ T5884] Bluetooth: hci3: command tx timeout
[  609.238348][T16309] chnl_net:caif_netlink_parms(): no params data found
[  609.312613][T16309] bridge0: port 1(bridge_slave_0) entered blocking state
[  609.323662][T16309] bridge0: port 1(bridge_slave_0) entered disabled state
[  609.331722][T16309] bridge_slave_0: entered allmulticast mode
[  609.347800][T16309] bridge_slave_0: entered promiscuous mode
[  609.355921][T16309] bridge0: port 2(bridge_slave_1) entered blocking state
[  609.363187][T16309] bridge0: port 2(bridge_slave_1) entered disabled state
[  609.382147][T16309] bridge_slave_1: entered allmulticast mode
[  609.390121][T16309] bridge_slave_1: entered promiscuous mode
[  609.453987][T16309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  609.468079][T16309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  609.541210][T16309] team0: Port device team_slave_0 added
[  609.559052][T16309] team0: Port device team_slave_1 added
[  609.608444][T16309] batman_adv: batadv0: Adding interface: batadv_slave_0
[  609.615506][T16309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  609.643176][T16309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  609.655641][T16309] batman_adv: batadv0: Adding interface: batadv_slave_1
[  609.662880][T16309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  609.689220][T16309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  609.738619][T16309] hsr_slave_0: entered promiscuous mode
[  609.745274][T16309] hsr_slave_1: entered promiscuous mode
[  610.050920][T16309] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  610.061177][T16309] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  610.070283][T16309] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  610.080765][T16309] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  610.137612][T16309] 8021q: adding VLAN 0 to HW filter on device bond0
[  610.156537][T16309] 8021q: adding VLAN 0 to HW filter on device team0
[  610.171394][ T2210] bridge0: port 1(bridge_slave_0) entered blocking state
[  610.178691][ T2210] bridge0: port 1(bridge_slave_0) entered forwarding state
[  610.193302][ T2210] bridge0: port 2(bridge_slave_1) entered blocking state
[  610.200443][ T2210] bridge0: port 2(bridge_slave_1) entered forwarding state
[  610.348572][T16309] 8021q: adding VLAN 0 to HW filter on device batadv0
[  610.382293][T16309] veth0_vlan: entered promiscuous mode
[  610.396942][T16309] veth1_vlan: entered promiscuous mode
[  610.422816][T16309] veth0_macvtap: entered promiscuous mode
[  610.433029][T16309] veth1_macvtap: entered promiscuous mode
[  610.447234][T16309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  610.459445][T16309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  610.470607][T16309] batman_adv: batadv0: Interface activated: batadv_slave_0
[  610.485386][T16309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  610.496605][T16309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  610.508831][T16309] batman_adv: batadv0: Interface activated: batadv_slave_1
[  610.520113][T16309] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  610.529463][T16309] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  610.539496][T16309] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  610.548684][T16309] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  610.607620][T16309] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0
[  610.618019][T16309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  610.633040][ T8732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  610.645978][ T8732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  610.660929][T16309] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2
[  610.672160][T16309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  610.689420][T12325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  610.697605][T12325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  612.632284][ T8737] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  614.000191][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  614.008983][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  614.018031][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  614.030486][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  614.040627][ T5155] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  614.048290][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  614.091087][ T8737] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  614.127861][ T8737] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  614.197432][ T8737] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  614.220536][T16375] lo speed is unknown, defaulting to 1000
[  614.227336][T16375] lo speed is unknown, defaulting to 1000
[  614.352938][ T8737] bridge_slave_1: left allmulticast mode
[  614.358887][ T8737] bridge_slave_1: left promiscuous mode
[  614.364840][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state
[  614.373717][ T8737] bridge_slave_0: left allmulticast mode
[  614.379663][ T8737] bridge_slave_0: left promiscuous mode
[  614.385313][ T8737] bridge0: port 1(bridge_slave_0) entered disabled state
[  614.782971][ T8737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  614.794074][ T8737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  614.804455][ T8737] bond0 (unregistering): Released all slaves
[  614.940606][T16375] chnl_net:caif_netlink_parms(): no params data found
[  615.043139][T16375] bridge0: port 1(bridge_slave_0) entered blocking state
[  615.050440][T16375] bridge0: port 1(bridge_slave_0) entered disabled state
[  615.058121][T16375] bridge_slave_0: entered allmulticast mode
[  615.064684][T16375] bridge_slave_0: entered promiscuous mode
[  615.076149][T16375] bridge0: port 2(bridge_slave_1) entered blocking state
[  615.084015][T16375] bridge0: port 2(bridge_slave_1) entered disabled state
[  615.091866][T16375] bridge_slave_1: entered allmulticast mode
[  615.099295][T16375] bridge_slave_1: entered promiscuous mode
[  615.152672][T16375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  615.173436][T16375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  615.280467][T16375] team0: Port device team_slave_0 added
[  615.317123][ T8737] hsr_slave_0: left promiscuous mode
[  615.323194][ T8737] hsr_slave_1: left promiscuous mode
[  615.329748][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  615.337528][ T8737] batman_adv: batadv0: Removing interface: batadv_slave_0
[  615.346308][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  615.353731][ T8737] batman_adv: batadv0: Removing interface: batadv_slave_1
[  615.379304][ T8737] veth1_macvtap: left promiscuous mode
[  615.384846][ T8737] veth0_macvtap: left promiscuous mode
[  615.390845][ T8737] veth1_vlan: left promiscuous mode
[  615.396347][ T8737] veth0_vlan: left promiscuous mode
[  615.909705][ T8737] team0 (unregistering): Port device team_slave_1 removed
[  615.968153][ T8737] team0 (unregistering): Port device team_slave_0 removed
[  616.100228][ T5884] Bluetooth: hci3: command tx timeout
[  616.475092][T16375] team0: Port device team_slave_1 added
[  616.512959][T16375] batman_adv: batadv0: Adding interface: batadv_slave_0
[  616.534676][T16375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  616.561377][T16375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  616.574146][T16375] batman_adv: batadv0: Adding interface: batadv_slave_1
[  616.581304][T16375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  616.607327][T16375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  616.655243][T16375] hsr_slave_0: entered promiscuous mode
[  616.670778][T16375] hsr_slave_1: entered promiscuous mode
[  616.964935][T16375] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  616.982256][T16375] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  616.992924][T16375] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  617.002837][T16375] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  617.058824][T16375] 8021q: adding VLAN 0 to HW filter on device bond0
[  617.080386][T16375] 8021q: adding VLAN 0 to HW filter on device team0
[  617.094500][ T8731] bridge0: port 1(bridge_slave_0) entered blocking state
[  617.101658][ T8731] bridge0: port 1(bridge_slave_0) entered forwarding state
[  617.116832][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state
[  617.123956][ T5955] bridge0: port 2(bridge_slave_1) entered forwarding state
[  617.256297][T16375] 8021q: adding VLAN 0 to HW filter on device batadv0
[  617.294234][T16375] veth0_vlan: entered promiscuous mode
[  617.303616][T16375] veth1_vlan: entered promiscuous mode
[  617.330495][T16375] veth0_macvtap: entered promiscuous mode
[  617.340944][T16375] veth1_macvtap: entered promiscuous mode
[  617.356044][T16375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  617.367661][T16375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  617.379008][T16375] batman_adv: batadv0: Interface activated: batadv_slave_0
[  617.393568][T16375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  617.404282][T16375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  617.416319][T16375] batman_adv: batadv0: Interface activated: batadv_slave_1
[  617.427849][T16375] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  617.437774][T16375] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  617.447392][T16375] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  617.456524][T16375] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  617.511747][T16375] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0
[  617.522653][T16375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  617.550943][ T5955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  617.563454][ T5955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  617.578496][T16375] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2
[  617.589508][T16375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  617.604088][ T5955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  617.614789][ T5955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  619.340947][ T8737] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.850902][ T8737] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.866866][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  620.877222][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  620.887865][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  620.896648][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  620.904415][ T5155] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  620.912458][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  620.949173][ T8737] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.031076][ T8737] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.050168][T16388] lo speed is unknown, defaulting to 1000
[  621.057145][T16388] lo speed is unknown, defaulting to 1000
[  621.141072][ T8737] bridge_slave_1: left allmulticast mode
[  621.147237][ T8737] bridge_slave_1: left promiscuous mode
[  621.152966][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state
[  621.161943][ T8737] bridge_slave_0: left allmulticast mode
[  621.168288][ T8737] bridge_slave_0: left promiscuous mode
[  621.174067][ T8737] bridge0: port 1(bridge_slave_0) entered disabled state
[  621.550081][ T8737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  621.562240][ T8737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  621.573031][ T8737] bond0 (unregistering): Released all slaves
[  621.724092][T16388] chnl_net:caif_netlink_parms(): no params data found
[  621.777606][T16388] bridge0: port 1(bridge_slave_0) entered blocking state
[  621.784746][T16388] bridge0: port 1(bridge_slave_0) entered disabled state
[  621.792511][T16388] bridge_slave_0: entered allmulticast mode
[  621.799229][T16388] bridge_slave_0: entered promiscuous mode
[  621.810401][T16388] bridge0: port 2(bridge_slave_1) entered blocking state
[  621.817671][T16388] bridge0: port 2(bridge_slave_1) entered disabled state
[  621.824981][T16388] bridge_slave_1: entered allmulticast mode
[  621.832484][T16388] bridge_slave_1: entered promiscuous mode
[  621.887863][T16388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  621.898984][T16388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  621.946697][T16388] team0: Port device team_slave_0 added
[  621.965465][T16388] team0: Port device team_slave_1 added
[  622.028872][T16388] batman_adv: batadv0: Adding interface: batadv_slave_0
[  622.043738][T16388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  622.079834][T16388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  622.108701][T16388] batman_adv: batadv0: Adding interface: batadv_slave_1
[  622.122697][T16388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  622.153422][T16388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  622.176611][ T8737] hsr_slave_0: left promiscuous mode
[  622.182476][ T8737] hsr_slave_1: left promiscuous mode
[  622.193028][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  622.204192][ T8737] batman_adv: batadv0: Removing interface: batadv_slave_0
[  622.213205][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  622.221133][ T8737] batman_adv: batadv0: Removing interface: batadv_slave_1
[  622.246808][ T8737] veth1_macvtap: left promiscuous mode
[  622.252482][ T8737] veth0_macvtap: left promiscuous mode
[  622.258322][ T8737] veth1_vlan: left promiscuous mode
[  622.263577][ T8737] veth0_vlan: left promiscuous mode
[  622.701348][ T8737] team0 (unregistering): Port device team_slave_1 removed
[  622.757037][ T8737] team0 (unregistering): Port device team_slave_0 removed
[  622.979755][ T5155] Bluetooth: hci3: command tx timeout
[  623.272653][T16388] hsr_slave_0: entered promiscuous mode
[  623.291404][T16388] hsr_slave_1: entered promiscuous mode
[  623.639625][T16388] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  623.649511][T16388] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  623.659294][T16388] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  623.670168][T16388] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  623.725355][T16388] 8021q: adding VLAN 0 to HW filter on device bond0
[  623.749986][T16388] 8021q: adding VLAN 0 to HW filter on device team0
[  623.762242][ T8737] bridge0: port 1(bridge_slave_0) entered blocking state
[  623.769380][ T8737] bridge0: port 1(bridge_slave_0) entered forwarding state
[  623.791168][ T8737] bridge0: port 2(bridge_slave_1) entered blocking state
[  623.798318][ T8737] bridge0: port 2(bridge_slave_1) entered forwarding state
[  623.934228][T16388] 8021q: adding VLAN 0 to HW filter on device batadv0
[  623.973379][T16388] veth0_vlan: entered promiscuous mode
[  623.983976][T16388] veth1_vlan: entered promiscuous mode
[  624.010423][T16388] veth0_macvtap: entered promiscuous mode
[  624.019537][T16388] veth1_macvtap: entered promiscuous mode
[  624.035081][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  624.046670][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.057699][T16388] batman_adv: batadv0: Interface activated: batadv_slave_0
[  624.071177][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  624.081893][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.093920][T16388] batman_adv: batadv0: Interface activated: batadv_slave_1
[  624.106696][T16388] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  624.115421][T16388] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  624.124381][T16388] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  624.133750][T16388] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  624.190319][T16388] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0
[  624.201670][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.216196][ T8732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  624.224071][ T8732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  624.241198][T16388] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2
[  624.251288][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.266926][ T2210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  624.274798][ T2210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  626.328366][T12325] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  627.899812][ T5884] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  627.911563][ T5884] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  627.920214][ T5884] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  627.934996][ T5884] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  627.942858][ T5884] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  627.951508][ T5884] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  627.999760][T12325] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  628.073456][T12325] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  628.101038][T16401] lo speed is unknown, defaulting to 1000
[  628.107601][T16401] lo speed is unknown, defaulting to 1000
[  628.171233][T12325] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  628.296400][T16401] chnl_net:caif_netlink_parms(): no params data found
[  628.353204][T12325] bridge_slave_1: left allmulticast mode
[  628.359740][T12325] bridge_slave_1: left promiscuous mode
[  628.365389][T12325] bridge0: port 2(bridge_slave_1) entered disabled state
[  628.375020][T12325] bridge_slave_0: left allmulticast mode
[  628.381217][T12325] bridge_slave_0: left promiscuous mode
[  628.387069][T12325] bridge0: port 1(bridge_slave_0) entered disabled state
[  628.788270][T12325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  628.800637][T12325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  628.813247][T12325] bond0 (unregistering): Released all slaves
[  628.843210][T16401] bridge0: port 1(bridge_slave_0) entered blocking state
[  628.851149][T16401] bridge0: port 1(bridge_slave_0) entered disabled state
[  628.858580][T16401] bridge_slave_0: entered allmulticast mode
[  628.865233][T16401] bridge_slave_0: entered promiscuous mode
[  628.883708][T16401] bridge0: port 2(bridge_slave_1) entered blocking state
[  628.891922][T16401] bridge0: port 2(bridge_slave_1) entered disabled state
[  628.899290][T16401] bridge_slave_1: entered allmulticast mode
[  628.907033][T16401] bridge_slave_1: entered promiscuous mode
[  628.983514][T16401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  628.994978][T16401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  629.066131][T16401] team0: Port device team_slave_0 added
[  629.073607][T16401] team0: Port device team_slave_1 added
[  629.095312][T16401] batman_adv: batadv0: Adding interface: batadv_slave_0
[  629.104557][T16401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  629.132270][T16401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  629.154121][T16401] batman_adv: batadv0: Adding interface: batadv_slave_1
[  629.175812][T16401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  629.213412][T16401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  629.332771][T12325] hsr_slave_0: left promiscuous mode
[  629.338835][T12325] hsr_slave_1: left promiscuous mode
[  629.344793][T12325] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  629.361073][T12325] batman_adv: batadv0: Removing interface: batadv_slave_0
[  629.376472][T12325] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  629.383937][T12325] batman_adv: batadv0: Removing interface: batadv_slave_1
[  629.407222][T12325] veth1_macvtap: left promiscuous mode
[  629.412800][T12325] veth0_macvtap: left promiscuous mode
[  629.418467][T12325] veth1_vlan: left promiscuous mode
[  629.423725][T12325] veth0_vlan: left promiscuous mode
[  629.998883][T12325] team0 (unregistering): Port device team_slave_1 removed
[  630.019928][ T5884] Bluetooth: hci3: command tx timeout
[  630.071864][T12325] team0 (unregistering): Port device team_slave_0 removed
[  630.629008][T16401] hsr_slave_0: entered promiscuous mode
[  630.636389][T16401] hsr_slave_1: entered promiscuous mode
[  631.022883][T16401] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  631.031810][T16401] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  631.041657][T16401] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  631.053179][T16401] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  631.111385][T16401] 8021q: adding VLAN 0 to HW filter on device bond0
[  631.131780][T16401] 8021q: adding VLAN 0 to HW filter on device team0
[  631.142425][T12325] bridge0: port 1(bridge_slave_0) entered blocking state
[  631.149527][T12325] bridge0: port 1(bridge_slave_0) entered forwarding state
[  631.161957][ T8731] bridge0: port 2(bridge_slave_1) entered blocking state
[  631.169098][ T8731] bridge0: port 2(bridge_slave_1) entered forwarding state
[  631.209035][T16401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  631.315289][T16401] 8021q: adding VLAN 0 to HW filter on device batadv0
[  631.350499][T16401] veth0_vlan: entered promiscuous mode
[  631.361029][T16401] veth1_vlan: entered promiscuous mode
[  631.386344][T16401] veth0_macvtap: entered promiscuous mode
[  631.395401][T16401] veth1_macvtap: entered promiscuous mode
[  631.411899][T16401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  631.423754][T16401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  631.435255][T16401] batman_adv: batadv0: Interface activated: batadv_slave_0
[  631.450474][T16401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  631.461332][T16401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  631.472342][T16401] batman_adv: batadv0: Interface activated: batadv_slave_1
[  631.486268][T16401] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  631.494991][T16401] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  631.504034][T16401] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  631.513310][T16401] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  631.569559][T16401] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0
[  631.579830][T16401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  631.593340][T12325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  631.606538][T12325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  631.619398][T16401] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2
[  631.629689][T16401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  631.648980][T12325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  631.657335][T12325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  633.479948][ T8737] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  634.953314][ T8737] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  635.023232][ T8737] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  635.108732][ T8737] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  635.226951][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  635.238788][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  635.247035][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  635.254838][ T8737] bridge_slave_1: left allmulticast mode
[  635.257512][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  635.268235][ T8737] bridge_slave_1: left promiscuous mode
[  635.268780][ T5155] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  635.273981][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state
[  635.281892][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  635.300293][ T8737] bridge_slave_0: left allmulticast mode
[  635.306283][ T8737] bridge_slave_0: left promiscuous mode
[  635.312071][ T8737] bridge0: port 1(bridge_slave_0) entered disabled state
[  635.661252][ T8737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  635.673927][ T8737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  635.684081][ T8737] bond0 (unregistering): Released all slaves
[  635.791134][T16414] lo speed is unknown, defaulting to 1000
[  635.797937][T16414] lo speed is unknown, defaulting to 1000
[  636.100036][T16414] chnl_net:caif_netlink_parms(): no params data found
[  636.180303][ T8737] hsr_slave_0: left promiscuous mode
[  636.189602][ T8737] hsr_slave_1: left promiscuous mode
[  636.195348][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  636.203026][ T8737] batman_adv: batadv0: Removing interface: batadv_slave_0
[  636.211064][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  636.218549][ T8737] batman_adv: batadv0: Removing interface: batadv_slave_1
[  636.243925][ T8737] veth1_macvtap: left promiscuous mode
[  636.253705][ T8737] veth0_macvtap: left promiscuous mode
[  636.259543][ T8737] veth1_vlan: left promiscuous mode
[  636.264816][ T8737] veth0_vlan: left promiscuous mode
[  636.713752][ T8737] team0 (unregistering): Port device team_slave_1 removed
[  636.762835][ T8737] team0 (unregistering): Port device team_slave_0 removed
[  637.249605][T16414] bridge0: port 1(bridge_slave_0) entered blocking state
[  637.257070][T16414] bridge0: port 1(bridge_slave_0) entered disabled state
[  637.264372][T16414] bridge_slave_0: entered allmulticast mode
[  637.271553][T16414] bridge_slave_0: entered promiscuous mode
[  637.279620][T16414] bridge0: port 2(bridge_slave_1) entered blocking state
[  637.287512][T16414] bridge0: port 2(bridge_slave_1) entered disabled state
[  637.294741][T16414] bridge_slave_1: entered allmulticast mode
[  637.309452][T16414] bridge_slave_1: entered promiscuous mode
[  637.349525][T16414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  637.361774][T16414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  637.371527][ T5155] Bluetooth: hci3: command tx timeout
[  637.422746][T16414] team0: Port device team_slave_0 added
[  637.435147][T16414] team0: Port device team_slave_1 added
[  637.454155][T16414] batman_adv: batadv0: Adding interface: batadv_slave_0
[  637.461379][T16414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  637.487801][T16414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  637.500180][T16414] batman_adv: batadv0: Adding interface: batadv_slave_1
[  637.507790][T16414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  637.534125][T16414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  637.569266][T16414] hsr_slave_0: entered promiscuous mode
[  637.576908][T16414] hsr_slave_1: entered promiscuous mode
[  637.919706][T16414] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  637.939645][T16414] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  637.949823][T16414] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  637.959972][T16414] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  637.978281][T16414] bridge0: port 2(bridge_slave_1) entered blocking state
[  637.985401][T16414] bridge0: port 2(bridge_slave_1) entered forwarding state
[  637.992761][T16414] bridge0: port 1(bridge_slave_0) entered blocking state
[  637.999891][T16414] bridge0: port 1(bridge_slave_0) entered forwarding state
[  638.048684][T16414] 8021q: adding VLAN 0 to HW filter on device bond0
[  638.061654][ T2210] bridge0: port 1(bridge_slave_0) entered disabled state
[  638.071065][ T2210] bridge0: port 2(bridge_slave_1) entered disabled state
[  638.091193][T16414] 8021q: adding VLAN 0 to HW filter on device team0
[  638.107435][ T2210] bridge0: port 1(bridge_slave_0) entered blocking state
[  638.114543][ T2210] bridge0: port 1(bridge_slave_0) entered forwarding state
[  638.131439][ T8737] bridge0: port 2(bridge_slave_1) entered blocking state
[  638.138621][ T8737] bridge0: port 2(bridge_slave_1) entered forwarding state
[  638.277690][T16414] 8021q: adding VLAN 0 to HW filter on device batadv0
[  638.310120][T16414] veth0_vlan: entered promiscuous mode
[  638.322491][T16414] veth1_vlan: entered promiscuous mode
[  638.342427][T16414] veth0_macvtap: entered promiscuous mode
[  638.353679][T16414] veth1_macvtap: entered promiscuous mode
[  638.373323][T16414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  638.383890][T16414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.395032][T16414] batman_adv: batadv0: Interface activated: batadv_slave_0
[  638.410203][T16414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  638.421486][T16414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.432742][T16414] batman_adv: batadv0: Interface activated: batadv_slave_1
[  638.451881][T16414] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  638.461934][T16414] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  638.471694][T16414] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  638.481177][T16414] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  638.531804][T16414] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0
[  638.542025][T16414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.558802][ T8732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  638.575827][ T8732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  638.592788][T16414] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2
[  638.602978][T16414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.617298][ T2210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  638.625185][ T2210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  640.702608][ T2210] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  642.484257][ T2210] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  642.720937][ T2210] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  642.754341][ T5884] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  642.765446][ T5884] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  642.775190][ T5884] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  642.785050][ T5884] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  642.793846][ T5884] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  642.804039][ T5884] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  642.972169][ T2210] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  643.068556][T16471] netlink: 'syz.0.2995': attribute type 4 has an invalid length.
[  643.101750][T16471] infiniband syz0: set down
[  643.138879][T14311] lo speed is unknown, defaulting to 1000
[  643.146460][T16478] netlink: 'syz.0.2995': attribute type 4 has an invalid length.
[  643.154991][T14317] lo speed is unknown, defaulting to 1000
[  643.161367][T14317] lo speed is unknown, defaulting to 1000
[  643.199726][T16478] infiniband syz0: set active
[  643.204817][T14311] lo speed is unknown, defaulting to 1000
[  643.227792][T14311] lo speed is unknown, defaulting to 1000
[  643.255602][T14311] lo speed is unknown, defaulting to 1000
[  643.274275][ T2210] bridge_slave_1: left allmulticast mode
[  643.296562][ T2210] bridge_slave_1: left promiscuous mode
[  643.304272][ T2210] bridge0: port 2(bridge_slave_1) entered disabled state
[  643.315047][T16480] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2997'.
[  643.332953][T16480] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2997'.
[  643.349980][ T2210] bridge_slave_0: left allmulticast mode
[  643.359607][ T2210] bridge_slave_0: left promiscuous mode
[  643.365364][ T2210] bridge0: port 1(bridge_slave_0) entered disabled state
[  643.415040][T16486] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3000'.
[  643.949242][ T2210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  643.961435][ T2210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  643.972760][ T2210] bond0 (unregistering): Released all slaves
[  643.982911][T16454] lo speed is unknown, defaulting to 1000
[  644.086650][T16454] lo speed is unknown, defaulting to 1000
[  644.565269][T16531] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3009'.
[  644.633931][ T2210] hsr_slave_0: left promiscuous mode
[  644.641204][ T2210] hsr_slave_1: left promiscuous mode
[  644.649693][ T2210] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  644.657259][ T2210] batman_adv: batadv0: Removing interface: batadv_slave_0
[  644.670869][ T2210] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  644.682729][ T2210] batman_adv: batadv0: Removing interface: batadv_slave_1
[  644.707524][ T2210] veth1_macvtap: left promiscuous mode
[  644.713063][ T2210] veth0_macvtap: left promiscuous mode
[  644.724350][ T2210] veth1_vlan: left promiscuous mode
[  644.729742][ T2210] veth0_vlan: left promiscuous mode
[  644.895742][ T5884] Bluetooth: hci3: command tx timeout
[  645.268077][ T2210] team0 (unregistering): Port device team_slave_1 removed
[  645.334149][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3011'.
[  645.355056][ T2210] team0 (unregistering): Port device team_slave_0 removed
[  645.839601][T16534] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3009'.
[  645.856990][T16532] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3009'.
[  645.996914][T16551] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3014'.
[  646.058673][T16454] chnl_net:caif_netlink_parms(): no params data found
[  646.106311][T16553] pimreg: entered allmulticast mode
[  646.117198][T16553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3015'.
[  646.235984][T16564] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20001
[  646.449527][T16454] bridge0: port 1(bridge_slave_0) entered blocking state
[  646.465101][T16454] bridge0: port 1(bridge_slave_0) entered disabled state
[  646.472881][T16454] bridge_slave_0: entered allmulticast mode
[  646.487370][T16454] bridge_slave_0: entered promiscuous mode
[  646.500349][T16572] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  646.511838][T16454] bridge0: port 2(bridge_slave_1) entered blocking state
[  646.529289][T16454] bridge0: port 2(bridge_slave_1) entered disabled state
[  646.542715][T16454] bridge_slave_1: entered allmulticast mode
[  646.553952][T16454] bridge_slave_1: entered promiscuous mode
[  646.563794][T16579] lo: entered allmulticast mode
[  646.570287][T16579] tunl0: entered allmulticast mode
[  646.581045][T16579] gre0: entered allmulticast mode
[  646.590645][T16582] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3020'.
[  646.602827][T16579] gretap0: entered allmulticast mode
[  646.614622][T16579] erspan0: entered allmulticast mode
[  646.624978][T16579] ip_vti0: entered allmulticast mode
[  646.632557][T16579] ip6_vti0: entered allmulticast mode
[  646.640057][T16579] sit0: entered allmulticast mode
[  646.646326][T16579] ip6tnl0: entered allmulticast mode
[  646.657659][T16579] ip6gre0: entered allmulticast mode
[  646.670050][T16579] ip6gretap0: entered allmulticast mode
[  646.679300][T16579] vcan0: entered allmulticast mode
[  646.686460][T16579] bond0: entered allmulticast mode
[  646.691605][T16579] batadv_slave_0: entered allmulticast mode
[  646.700085][T16579] team0: left promiscuous mode
[  646.705040][T16579] team0: entered allmulticast mode
[  646.710712][T16579] wg2: entered allmulticast mode
[  646.719584][T16579] batman_adv: batadv0: Interface deactivated: dummy0
[  646.729247][T16579] dummy0: entered allmulticast mode
[  646.740447][T16579] nlmon0: entered allmulticast mode
[  646.748359][T16579] caif0: entered allmulticast mode
[  646.754589][T16579] batadv0: entered allmulticast mode
[  646.763010][T16579] veth0: entered allmulticast mode
[  646.771402][T16579] veth1: entered allmulticast mode
[  646.784169][T16579] wg1: entered allmulticast mode
[  646.791575][T16579] wg2: left promiscuous mode
[  646.798813][T16579] veth0_to_bridge: entered allmulticast mode
[  646.813335][T16579] veth1_to_bridge: entered allmulticast mode
[  646.821991][T16579] bridge_slave_1: entered allmulticast mode
[  646.830794][T16579] veth0_to_bond: entered allmulticast mode
[  646.843890][T16579] bond_slave_0: entered allmulticast mode
[  646.850716][T16579] veth1_to_bond: entered allmulticast mode
[  646.861332][T16579] bond_slave_1: entered allmulticast mode
[  646.868138][T16579] veth0_to_team: entered allmulticast mode
[  646.876779][T16579] team_slave_0: entered allmulticast mode
[  646.884465][T16579] veth1_to_team: entered allmulticast mode
[  646.892713][T16579] team_slave_1: entered allmulticast mode
[  646.899609][T16579] veth0_to_batadv: entered allmulticast mode
[  646.914345][T16579] veth1_to_batadv: entered allmulticast mode
[  646.923333][T16579] batadv_slave_1: entered allmulticast mode
[  646.933363][T16579] xfrm0: entered allmulticast mode
[  646.940967][T16579] veth0_to_hsr: entered allmulticast mode
[  646.951533][T16579] hsr_slave_0: entered allmulticast mode
[  646.958650][T16579] veth1_to_hsr: entered allmulticast mode
[  646.971757][T16579] hsr_slave_1: entered allmulticast mode
[  646.977806][ T5884] Bluetooth: hci3: command tx timeout
[  646.989986][T16579] veth1_virt_wifi: entered allmulticast mode
[  646.999469][T16579] veth0_virt_wifi: entered allmulticast mode
[  647.010446][T16579] veth1_vlan: entered allmulticast mode
[  647.019778][T16579] veth0_vlan: entered allmulticast mode
[  647.034753][T16579] vlan0: entered allmulticast mode
[  647.040241][T16579] vlan1: entered allmulticast mode
[  647.045436][T16579] macvlan0: entered allmulticast mode
[  647.056081][T16579] macvlan1: entered allmulticast mode
[  647.064478][T16579] ipvlan0: entered allmulticast mode
[  647.070512][T16579] : entered allmulticast mode
[  647.081733][T16579] veth1_macvtap: entered allmulticast mode
[  647.090389][T16579] veth0_macvtap: entered allmulticast mode
[  647.103357][T16579] macvtap0: entered allmulticast mode
[  647.111309][T16579] macsec0: entered allmulticast mode
[  647.122591][T16579] geneve0: entered allmulticast mode
[  647.136735][T16579] batman_adv: batadv0: Interface deactivated: wlan0
[  647.151059][T16579] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  647.161004][T16579] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode
[  647.168525][T16579] vlan2: entered allmulticast mode
[  647.174030][T16579] macvlan2: entered allmulticast mode
[  647.180617][T16579] syztnl1: entered allmulticast mode
[  647.190218][T16579] gre1: entered allmulticast mode
[  647.198101][T16579] vxlan0: entered allmulticast mode
[  647.204005][T16579] veth2: entered allmulticast mode
[  647.209812][T16579] veth3: entered allmulticast mode
[  647.219678][T16579] macvlan3: entered allmulticast mode
[  647.229812][T16579] veth4: entered allmulticast mode
[  647.235171][T16579] veth5: entered allmulticast mode
[  647.246827][T16579] macvlan4: entered allmulticast mode
[  647.263143][T16579] bridge1: entered allmulticast mode
[  647.284237][T16579] bond1: entered allmulticast mode
[  647.312971][T16579] bond2: entered allmulticast mode
[  647.356712][T16579] bridge2: entered allmulticast mode
[  647.372617][T16579] syztnl0: entered allmulticast mode
[  647.383862][T16579] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  647.402959][T16579] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  647.413490][T16579] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  647.441009][T16579] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  647.466598][T16579] geneve2: entered allmulticast mode
[  647.486512][T16579] veth6: entered allmulticast mode
[  647.491801][T16579] veth7: entered allmulticast mode
[  647.547879][T16579] syzkaller0: entered allmulticast mode
[  647.567182][T16579] macvlan5: entered allmulticast mode
[  647.578795][T16579] macvlan6: entered allmulticast mode
[  647.588133][T16579] sit1: entered allmulticast mode
[  647.593948][T16579] erspan1: entered allmulticast mode
[  647.606412][T16579] bond3: entered allmulticast mode
[  647.611811][T16579] vxcan2: entered allmulticast mode
[  647.618548][T16579] vxcan3: entered allmulticast mode
[  647.648882][T16579] sit2: entered allmulticast mode
[  647.683603][T16579] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  647.702890][T16579] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  647.725491][T16579] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  647.745117][T16579] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  647.754599][T16579] geneve3: entered allmulticast mode
[  647.771771][T16579] syztnl2: entered allmulticast mode
[  647.781017][T16579] gretap1: entered allmulticast mode
[  647.791119][T16579] bridge0: entered allmulticast mode
[  647.799284][T16579] netdevsim netdevsim2 eth0: entered allmulticast mode
[  647.806933][T16579] netdevsim netdevsim2 eth1: entered allmulticast mode
[  647.813924][T16579] netdevsim netdevsim2 eth2: entered allmulticast mode
[  647.821111][T16579] netdevsim netdevsim2 eth3: entered allmulticast mode
[  647.829508][T16579] bond4: entered allmulticast mode
[  647.836786][T16579] ------------[ cut here ]------------
[  647.842746][T16579] nicvf0: Failed check-sdata-in-driver check, flags: 0x0
[  647.850602][T16579] WARNING: CPU: 1 PID: 16579 at net/mac80211/driver-ops.c:114 drv_remove_interface+0x35d/0x590
[  647.861401][T16579] Modules linked in:
[  647.865501][T16579] CPU: 1 UID: 0 PID: 16579 Comm: syz.2.3020 Not tainted 6.12.0-rc7-syzkaller-01702-gd7ef9eeef072 #0
[  647.876886][T16579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  647.887303][T16579] RIP: 0010:drv_remove_interface+0x35d/0x590
[  647.893316][T16579] Code: 00 48 85 c0 48 0f 44 d9 42 0f b6 44 2d 00 84 c0 0f 85 f3 00 00 00 41 8b 14 24 48 c7 c7 80 75 2a 8d 48 89 de e8 94 26 24 f6 90 <0f> 0b 90 90 e9 e3 fd ff ff e8 15 30 63 f6 c6 05 00 88 d5 04 01 90
[  647.913386][T16579] RSP: 0018:ffffc90002f56828 EFLAGS: 00010246
[  647.919805][T16579] RAX: 33255c31d0833600 RBX: ffff88803349c120 RCX: 0000000000040000
[  647.928009][T16579] RDX: ffffc9000c90a000 RSI: 000000000003ffff RDI: 0000000000040000
[  647.936210][T16579] RBP: 1ffff11006693ae5 R08: ffffffff8155e312 R09: fffffbfff1cf9fd0
[  647.944214][T16579] R10: dffffc0000000000 R11: fffffbfff1cf9fd0 R12: ffff88803349d728
[  647.952754][T16579] R13: dffffc0000000000 R14: ffff888061ca8e40 R15: ffff88803349cd80
[  647.960984][T16579] FS:  00007f253dcff6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  647.970397][T16579] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  647.977240][T16579] CR2: 000000110c37b27d CR3: 0000000049788000 CR4: 00000000003526f0
[  647.985244][T16579] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  647.993387][T16579] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  648.001485][T16579] Call Trace:
[  648.004777][T16579]  <TASK>
[  648.008409][T16579]  ? __warn+0x168/0x4e0
[  648.012593][T16579]  ? drv_remove_interface+0x35d/0x590
[  648.018080][T16579]  ? report_bug+0x2b3/0x500
[  648.022612][T16579]  ? drv_remove_interface+0x35d/0x590
[  648.028368][T16579]  ? handle_bug+0x60/0x90
[  648.032726][T16579]  ? exc_invalid_op+0x1a/0x50
[  648.037767][T16579]  ? asm_exc_invalid_op+0x1a/0x20
[  648.042929][T16579]  ? __warn_printk+0x292/0x360
[  648.048102][T16579]  ? drv_remove_interface+0x35d/0x590
[  648.053520][T16579]  ? drv_remove_interface+0x35c/0x590
[  648.059036][T16579]  ieee80211_do_stop+0x1b95/0x23d0
[  648.064282][T16579]  ? __pfx_ieee80211_do_stop+0x10/0x10
[  648.070145][T16579]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  648.076186][T16579]  ? lockdep_hardirqs_on+0x99/0x150
[  648.081418][T16579]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  648.088327][T16579]  ? wiphy_work_cancel+0x1f0/0x3e0
[  648.093494][T16579]  ieee80211_stop+0x436/0x4a0
[  648.098465][T16579]  ? __pfx_ieee80211_stop+0x10/0x10
[  648.103672][T16579]  __dev_close_many+0x219/0x300
[  648.108861][T16579]  ? __pfx___dev_close_many+0x10/0x10
[  648.114278][T16579]  ? dev_set_rx_mode+0x233/0x2e0
[  648.119322][T16579]  __dev_change_flags+0x30e/0x6f0
[  648.124382][T16579]  ? __pfx___dev_change_flags+0x10/0x10
[  648.130340][T16579]  ? validate_linkmsg+0x825/0xa30
[  648.135379][T16579]  ? netdev_state_change+0xa8/0x1a0
[  648.140691][T16579]  ? __pfx_netdev_state_change+0x10/0x10
[  648.146684][T16579]  ? __pfx_validate_linkmsg+0x10/0x10
[  648.152107][T16579]  dev_change_flags+0x8b/0x1a0
[  648.157395][T16579]  do_setlink+0xc90/0x4210
[  648.161851][T16579]  ? __pfx_do_setlink+0x10/0x10
[  648.167144][T16579]  ? __mutex_lock+0x9a1/0xd70
[  648.171857][T16579]  ? __pfx_lock_release+0x10/0x10
[  648.176947][T16579]  ? do_raw_spin_lock+0x14f/0x370
[  648.182023][T16579]  ? do_raw_spin_unlock+0x13c/0x8b0
[  648.187542][T16579]  ? __mutex_lock+0x9ab/0xd70
[  648.192247][T16579]  ? __mutex_lock+0x52a/0xd70
[  648.197065][T16579]  ? rtnl_newlink+0xd04/0x24f0
[  648.201871][T16579]  ? __pfx___mutex_lock+0x10/0x10
[  648.207365][T16579]  ? ns_capable+0x8a/0xf0
[  648.211732][T16579]  ? rtnl_link_get_net_capable+0x168/0x340
[  648.217758][T16579]  rtnl_newlink+0x1520/0x24f0
[  648.222448][T16579]  ? __pfx_rtnl_newlink+0x10/0x10
[  648.227834][T16579]  ? netlink_unicast+0x7c4/0x990
[  648.232796][T16579]  ? __pfx_validate_chain+0x10/0x10
[  648.238092][T16579]  ? __sys_sendmsg+0x292/0x380
[  648.242886][T16579]  ? do_syscall_64+0xf3/0x230
[  648.247879][T16579]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.254007][T16579]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  648.260269][T16579]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  648.267026][T16579]  ? mark_lock+0x9a/0x360
[  648.271472][T16579]  ? __lock_acquire+0x1384/0x2050
[  648.276870][T16579]  ? __pfx_lock_release+0x10/0x10
[  648.282100][T16579]  ? __pfx_rtnl_newlink+0x10/0x10
[  648.287397][T16579]  rtnetlink_rcv_msg+0x791/0xcf0
[  648.292335][T16579]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  648.297565][T16579]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  648.303057][T16579]  ? ref_tracker_free+0x643/0x7e0
[  648.308675][T16579]  netlink_rcv_skb+0x1e3/0x430
[  648.313468][T16579]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  648.319003][T16579]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  648.324395][T16579]  ? netlink_deliver_tap+0x2e/0x1b0
[  648.329950][T16579]  netlink_unicast+0x7f6/0x990
[  648.334741][T16579]  ? __pfx_netlink_unicast+0x10/0x10
[  648.340261][T16579]  ? __virt_addr_valid+0x183/0x530
[  648.345382][T16579]  ? __check_object_size+0x48e/0x900
[  648.350904][T16579]  netlink_sendmsg+0x8e4/0xcb0
[  648.355782][T16579]  ? __pfx_netlink_sendmsg+0x10/0x10
[  648.361306][T16579]  ? aa_sock_msg_perm+0x91/0x160
[  648.366808][T16579]  ? __pfx_netlink_sendmsg+0x10/0x10
[  648.372134][T16579]  __sock_sendmsg+0x221/0x270
[  648.376946][T16579]  ____sys_sendmsg+0x52a/0x7e0
[  648.381751][T16579]  ? __pfx_____sys_sendmsg+0x10/0x10
[  648.387380][T16579]  __sys_sendmsg+0x292/0x380
[  648.392004][T16579]  ? __pfx___sys_sendmsg+0x10/0x10
[  648.397473][T16579]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  648.403845][T16579]  ? do_syscall_64+0x100/0x230
[  648.408811][T16579]  ? do_syscall_64+0xb6/0x230
[  648.413504][T16579]  do_syscall_64+0xf3/0x230
[  648.418151][T16579]  ? clear_bhb_loop+0x35/0x90
[  648.422863][T16579]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.429387][T16579] RIP: 0033:0x7f253cf7e759
[  648.433829][T16579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  648.453687][T16579] RSP: 002b:00007f253dcff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  648.462467][T16579] RAX: ffffffffffffffda RBX: 00007f253d136058 RCX: 00007f253cf7e759
[  648.470786][T16579] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000006
[  648.478877][T16579] RBP: 00007f253cff175e R08: 0000000000000000 R09: 0000000000000000
[  648.487451][T16579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  648.495441][T16579] R13: 0000000000000000 R14: 00007f253d136058 R15: 00007ffebac8af28
[  648.503536][T16579]  </TASK>
[  648.506870][T16579] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  648.514160][T16579] CPU: 1 UID: 0 PID: 16579 Comm: syz.2.3020 Not tainted 6.12.0-rc7-syzkaller-01702-gd7ef9eeef072 #0
[  648.524913][T16579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  648.535042][T16579] Call Trace:
[  648.538328][T16579]  <TASK>
[  648.541257][T16579]  dump_stack_lvl+0x241/0x360
[  648.545945][T16579]  ? __pfx_dump_stack_lvl+0x10/0x10
[  648.551158][T16579]  ? __pfx__printk+0x10/0x10
[  648.555852][T16579]  ? vscnprintf+0x5d/0x90
[  648.560200][T16579]  panic+0x349/0x880
[  648.564114][T16579]  ? __warn+0x177/0x4e0
[  648.568280][T16579]  ? __pfx_panic+0x10/0x10
[  648.572738][T16579]  __warn+0x34b/0x4e0
[  648.576735][T16579]  ? drv_remove_interface+0x35d/0x590
[  648.582115][T16579]  report_bug+0x2b3/0x500
[  648.586440][T16579]  ? drv_remove_interface+0x35d/0x590
[  648.591813][T16579]  handle_bug+0x60/0x90
[  648.595973][T16579]  exc_invalid_op+0x1a/0x50
[  648.600482][T16579]  asm_exc_invalid_op+0x1a/0x20
[  648.605335][T16579] RIP: 0010:drv_remove_interface+0x35d/0x590
[  648.611318][T16579] Code: 00 48 85 c0 48 0f 44 d9 42 0f b6 44 2d 00 84 c0 0f 85 f3 00 00 00 41 8b 14 24 48 c7 c7 80 75 2a 8d 48 89 de e8 94 26 24 f6 90 <0f> 0b 90 90 e9 e3 fd ff ff e8 15 30 63 f6 c6 05 00 88 d5 04 01 90
[  648.630941][T16579] RSP: 0018:ffffc90002f56828 EFLAGS: 00010246
[  648.637021][T16579] RAX: 33255c31d0833600 RBX: ffff88803349c120 RCX: 0000000000040000
[  648.644996][T16579] RDX: ffffc9000c90a000 RSI: 000000000003ffff RDI: 0000000000040000
[  648.653052][T16579] RBP: 1ffff11006693ae5 R08: ffffffff8155e312 R09: fffffbfff1cf9fd0
[  648.661034][T16579] R10: dffffc0000000000 R11: fffffbfff1cf9fd0 R12: ffff88803349d728
[  648.669020][T16579] R13: dffffc0000000000 R14: ffff888061ca8e40 R15: ffff88803349cd80
[  648.677087][T16579]  ? __warn_printk+0x292/0x360
[  648.681858][T16579]  ? drv_remove_interface+0x35c/0x590
[  648.687251][T16579]  ieee80211_do_stop+0x1b95/0x23d0
[  648.692379][T16579]  ? __pfx_ieee80211_do_stop+0x10/0x10
[  648.697844][T16579]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  648.703734][T16579]  ? lockdep_hardirqs_on+0x99/0x150
[  648.708935][T16579]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  648.715263][T16579]  ? wiphy_work_cancel+0x1f0/0x3e0
[  648.720379][T16579]  ieee80211_stop+0x436/0x4a0
[  648.725070][T16579]  ? __pfx_ieee80211_stop+0x10/0x10
[  648.730279][T16579]  __dev_close_many+0x219/0x300
[  648.735135][T16579]  ? __pfx___dev_close_many+0x10/0x10
[  648.740594][T16579]  ? dev_set_rx_mode+0x233/0x2e0
[  648.745538][T16579]  __dev_change_flags+0x30e/0x6f0
[  648.750577][T16579]  ? __pfx___dev_change_flags+0x10/0x10
[  648.756293][T16579]  ? validate_linkmsg+0x825/0xa30
[  648.761315][T16579]  ? netdev_state_change+0xa8/0x1a0
[  648.766523][T16579]  ? __pfx_netdev_state_change+0x10/0x10
[  648.772150][T16579]  ? __pfx_validate_linkmsg+0x10/0x10
[  648.777528][T16579]  dev_change_flags+0x8b/0x1a0
[  648.782298][T16579]  do_setlink+0xc90/0x4210
[  648.786730][T16579]  ? __pfx_do_setlink+0x10/0x10
[  648.791583][T16579]  ? __mutex_lock+0x9a1/0xd70
[  648.796321][T16579]  ? __pfx_lock_release+0x10/0x10
[  648.801344][T16579]  ? do_raw_spin_lock+0x14f/0x370
[  648.806369][T16579]  ? do_raw_spin_unlock+0x13c/0x8b0
[  648.811580][T16579]  ? __mutex_lock+0x9ab/0xd70
[  648.816268][T16579]  ? __mutex_lock+0x52a/0xd70
[  648.820944][T16579]  ? rtnl_newlink+0xd04/0x24f0
[  648.825706][T16579]  ? __pfx___mutex_lock+0x10/0x10
[  648.830750][T16579]  ? ns_capable+0x8a/0xf0
[  648.835080][T16579]  ? rtnl_link_get_net_capable+0x168/0x340
[  648.840886][T16579]  rtnl_newlink+0x1520/0x24f0
[  648.845576][T16579]  ? __pfx_rtnl_newlink+0x10/0x10
[  648.850593][T16579]  ? netlink_unicast+0x7c4/0x990
[  648.855615][T16579]  ? __pfx_validate_chain+0x10/0x10
[  648.860806][T16579]  ? __sys_sendmsg+0x292/0x380
[  648.865571][T16579]  ? do_syscall_64+0xf3/0x230
[  648.870253][T16579]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.876336][T16579]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  648.882408][T16579]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  648.888746][T16579]  ? mark_lock+0x9a/0x360
[  648.893070][T16579]  ? __lock_acquire+0x1384/0x2050
[  648.898114][T16579]  ? __pfx_lock_release+0x10/0x10
[  648.903148][T16579]  ? __pfx_rtnl_newlink+0x10/0x10
[  648.908172][T16579]  rtnetlink_rcv_msg+0x791/0xcf0
[  648.913109][T16579]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  648.918224][T16579]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  648.923683][T16579]  ? ref_tracker_free+0x643/0x7e0
[  648.928711][T16579]  netlink_rcv_skb+0x1e3/0x430
[  648.933666][T16579]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  648.939310][T16579]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  648.944611][T16579]  ? netlink_deliver_tap+0x2e/0x1b0
[  648.949809][T16579]  netlink_unicast+0x7f6/0x990
[  648.955014][T16579]  ? __pfx_netlink_unicast+0x10/0x10
[  648.960297][T16579]  ? __virt_addr_valid+0x183/0x530
[  648.965412][T16579]  ? __check_object_size+0x48e/0x900
[  648.970698][T16579]  netlink_sendmsg+0x8e4/0xcb0
[  648.975471][T16579]  ? __pfx_netlink_sendmsg+0x10/0x10
[  648.980763][T16579]  ? aa_sock_msg_perm+0x91/0x160
[  648.985704][T16579]  ? __pfx_netlink_sendmsg+0x10/0x10
[  648.990998][T16579]  __sock_sendmsg+0x221/0x270
[  648.995763][T16579]  ____sys_sendmsg+0x52a/0x7e0
[  649.000538][T16579]  ? __pfx_____sys_sendmsg+0x10/0x10
[  649.005833][T16579]  __sys_sendmsg+0x292/0x380
[  649.010423][T16579]  ? __pfx___sys_sendmsg+0x10/0x10
[  649.015573][T16579]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  649.021911][T16579]  ? do_syscall_64+0x100/0x230
[  649.026675][T16579]  ? do_syscall_64+0xb6/0x230
[  649.031349][T16579]  do_syscall_64+0xf3/0x230
[  649.035853][T16579]  ? clear_bhb_loop+0x35/0x90
[  649.040528][T16579]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  649.046416][T16579] RIP: 0033:0x7f253cf7e759
[  649.050827][T16579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  649.070430][T16579] RSP: 002b:00007f253dcff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  649.078848][T16579] RAX: ffffffffffffffda RBX: 00007f253d136058 RCX: 00007f253cf7e759
[  649.086815][T16579] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000006
[  649.094779][T16579] RBP: 00007f253cff175e R08: 0000000000000000 R09: 0000000000000000
[  649.102745][T16579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  649.110717][T16579] R13: 0000000000000000 R14: 00007f253d136058 R15: 00007ffebac8af28
[  649.118698][T16579]  </TASK>
[  649.121844][T16579] Kernel Offset: disabled
[  649.126244][T16579] Rebooting in 86400 seconds..