last executing test programs:

40.257350152s ago: executing program 0 (id=817):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, 0x0, 0x0) (async, rerun: 64)
r3 = epoll_create1(0x0) (rerun: 64)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1)
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x100, r6, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x49}}}}, [@NL80211_ATTR_CQM={0x60, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x4, 0x9, 0xfffffff7, 0x30fb, 0x10, 0x1c0, 0xffffffff, 0x200]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4b}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1ff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5f8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xa}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x60}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2ec}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd42a}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x153}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x366a3dca]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'sit0\x00', <r7=>0x0})
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000df00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0xffffffffffffff53, 0x0, 0x0, 0xc, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$int_out(r9, 0x2, &(0x7f0000000280)) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'nicvf0\x00', @random="ceecd106cc75"})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538"], 0xfdef)

40.174265852s ago: executing program 0 (id=817):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, 0x0, 0x0) (async, rerun: 64)
r3 = epoll_create1(0x0) (rerun: 64)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1)
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x100, r6, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x49}}}}, [@NL80211_ATTR_CQM={0x60, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x4, 0x9, 0xfffffff7, 0x30fb, 0x10, 0x1c0, 0xffffffff, 0x200]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4b}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1ff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5f8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xa}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x60}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2ec}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd42a}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x153}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x366a3dca]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'sit0\x00', <r7=>0x0})
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000df00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0xffffffffffffff53, 0x0, 0x0, 0xc, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$int_out(r9, 0x2, &(0x7f0000000280)) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'nicvf0\x00', @random="ceecd106cc75"})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538"], 0xfdef)

31.940068519s ago: executing program 0 (id=817):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, 0x0, 0x0) (async, rerun: 64)
r3 = epoll_create1(0x0) (rerun: 64)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1)
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x100, r6, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x49}}}}, [@NL80211_ATTR_CQM={0x60, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x4, 0x9, 0xfffffff7, 0x30fb, 0x10, 0x1c0, 0xffffffff, 0x200]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4b}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1ff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5f8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xa}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x60}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2ec}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd42a}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x153}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x366a3dca]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'sit0\x00', <r7=>0x0})
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000df00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0xffffffffffffff53, 0x0, 0x0, 0xc, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$int_out(r9, 0x2, &(0x7f0000000280)) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'nicvf0\x00', @random="ceecd106cc75"})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538"], 0xfdef)

22.371770411s ago: executing program 0 (id=817):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, 0x0, 0x0) (async, rerun: 64)
r3 = epoll_create1(0x0) (rerun: 64)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1)
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x100, r6, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x49}}}}, [@NL80211_ATTR_CQM={0x60, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x4, 0x9, 0xfffffff7, 0x30fb, 0x10, 0x1c0, 0xffffffff, 0x200]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4b}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1ff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5f8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xa}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x60}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2ec}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd42a}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x153}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x366a3dca]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'sit0\x00', <r7=>0x0})
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000df00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0xffffffffffffff53, 0x0, 0x0, 0xc, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$int_out(r9, 0x2, &(0x7f0000000280)) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'nicvf0\x00', @random="ceecd106cc75"})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538"], 0xfdef)

12.397347176s ago: executing program 0 (id=817):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, 0x0, 0x0) (async, rerun: 64)
r3 = epoll_create1(0x0) (rerun: 64)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1)
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x100, r6, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x49}}}}, [@NL80211_ATTR_CQM={0x60, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x4, 0x9, 0xfffffff7, 0x30fb, 0x10, 0x1c0, 0xffffffff, 0x200]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4b}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1ff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5f8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xa}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x60}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2ec}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd42a}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x153}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x366a3dca]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'sit0\x00', <r7=>0x0})
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000df00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0xffffffffffffff53, 0x0, 0x0, 0xc, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$int_out(r9, 0x2, &(0x7f0000000280)) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'nicvf0\x00', @random="ceecd106cc75"})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538"], 0xfdef)

1.741205409s ago: executing program 3 (id=1233):
r0 = socket(0x22, 0x5, 0x0) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$sock(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="c7", 0x1}], 0x1}, 0x0) (async)
recvmmsg(r2, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/119, 0x77}], 0x1}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/228, 0xe4}], 0x1}, 0x5}], 0x2, 0x40010040, 0x0) (async)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0)
r4 = socket$tipc(0x1e, 0x2, 0x0) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r7, &(0x7f00000002c0)={0x28, 0x0, 0x2711, @local, 0x180}, 0x10) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r8)
sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r9, 0x1}, 0x14}}, 0x0) (async)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r8)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r8) (async)
sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESOCT=r6, @ANYRESOCT=r5], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', <r12=>0x0}) (async)
sendmsg$NLBL_CIPSOV4_C_LIST(r6, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000007c0)={0x1f0, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0xe0, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57cc2948}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x635312ec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xebe2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc4d1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3bfd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a2e6246}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x672d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4be8d55}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x550caaf6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7160}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x389c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9828}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a40df75}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e14}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29429e4c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdbe2}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10e71b3c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3087}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2570}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67f80c50}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe515}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1661aeb7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff0a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa283}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xec, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2519}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6493}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50746d1f}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e5f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb615}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72d81ddc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ac41f2c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x698231a4}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48bd5e7f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x57f9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x44a3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40aa7bf7}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43222844}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ee78a15}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c56}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc5ca}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe22a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ff14565}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fe7}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3114d3e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35d98df2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63c0b4d9}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63f43bbb}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2b3b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ea1ced4}]}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0) (async)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r13, 0x303, 0x0, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}]}, 0x1c}}, 0x0) (async)
getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0x8) (async)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="b7079000", @ANYRES16=r3, @ANYBLOB="040026bd7000fcdbdf25080000000800020004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async)
r14 = socket(0x200000100000011, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r15=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001400b59500000000080000000a380000", @ANYRES32=r15, @ANYBLOB="1400020000000000000000000000ffff00000000140006000000000001f0ffff00000000fdffffff3bee41873d936035d2c9268204e4cc23cad44f53f29bcb3d46ffad339ffe3f38bce070bf976bf782eb"], 0x40}}, 0x0)

1.636517017s ago: executing program 4 (id=1234):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)="170000000200", 0x6) (async)
setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r2, 0xffffffffffffffff, 0x1, 0x0, 0x0, @void, @value}, 0x10) (async)
openat$cgroup_ro(r2, &(0x7f0000000140)='blkio.bfq.time\x00', 0x0, 0x0) (async)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2f, 0x8000000, 0x0, @void, @value}, 0x20)

1.576437238s ago: executing program 3 (id=1235):
syz_emit_ethernet(0x180, &(0x7f0000000240)={@random="3f22262ddfc4", @empty, @void, {@ipv4={0x800, @generic={{0x25, 0x4, 0x0, 0x3d, 0x172, 0x65, 0x0, 0x0, 0x16, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x2e}, {[@ssrr={0x89, 0xf, 0xbc, [@empty, @local, @multicast1]}, @timestamp_addr={0x44, 0xc, 0x3a, 0x1, 0xc, [{@rand_addr=0x64010102, 0x2d56}]}, @ssrr={0x89, 0x7, 0x48, [@local]}, @cipso={0x86, 0x3c, 0x3, [{0x2, 0x5, "c7a4b5"}, {0x1, 0xa, "f2bc13385ecdb6cd"}, {0x1, 0x4, "f8f1"}, {0x5, 0x2}, {0x6, 0x8, "71d84c19207f"}, {0x0, 0xa, "0f1d5be16064a4e4"}, {0x0, 0xf, "64cb489624905da5926aff197c"}]}, @rr={0x7, 0x1f, 0xdf, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x16}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, "92bdf2df1962ec9c926c6ccf4fc8339e217bff8759626fdb10597003d335bdc01570cc98ca08a65f25e408643dc6d403ddd15cd94b83a00e7c5f520ce64f87ec917560585bb40d6f380d2222a708d2a6b0b10d75e0ad55e3caf63451161e7ad1b17f628c261ed2eb309376a8c6019a7c2390a04dc322920f71bd645beeedfd69b8645a0d0f146fb4253cee1bb4f842504fc220de2d398d9d093846b9a2f6770e76a2c6cbadb06ca34d75246d6008b6948f5242cc32ead3d812c53241fad044678eb4af49ae41ae42fda51744bae0ddb7e18176fdf45c6df7955809631b86"}}}}, &(0x7f0000000000)={0x1, 0x3, [0x9db, 0xd8, 0xa9a, 0xa63]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf2505000000140001800d0001007564703a73"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf2505000000140001800d0001007564703a73"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$inet6(0xa, 0x3, 0x7) (async)
r3 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$sock_int(r3, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000003000000010000000900010073797a30000000000900030073797a310000000078000000060a010400000000000000000100000008000b4000000000500004804c0001800e000100696d6d656469617465000000380002800800014000001d3ce917e0bbe8d99d00002c00028028000100d0cc81a64646f65f5936c46aae11166795903f167eab1a5932a28eb01733566d2d2361ab0900010073797a3000000000140000001100010000000000000000000000000a"], 0xec}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000001780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050ff740000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000001780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050ff740000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1.460386312s ago: executing program 4 (id=1237):
r0 = socket$netlink(0x10, 0x3, 0x15)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) (async, rerun: 32)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) (async)
recvmmsg(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)=""/180, 0xb4}], 0x1}}], 0x1, 0x0, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00'}) (async, rerun: 32)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x144, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PEERS={0xf4, 0x8, 0x0, 0x1, [{0xf0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x74, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bc9480715edfd2343d44d97ed1fa25a3d186f098d804cf4ecb9694c01ad47bf6"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x144}}, 0x21) (async, rerun: 32)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4)
sendto(r1, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60)

1.410914081s ago: executing program 3 (id=1239):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', <r1=>0x0})
r2 = socket(0x10, 0x2, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x24000000)
r3 = socket(0x10, 0x80002, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b24, &(0x7f0000000000)={'wlan0\x00'})
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8004, 0x0, 0x0, 0x3c0000}, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000140)={0x68, r5, 0x1, 0x80010000, 0xfffffffc, {0xa}, [@ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x7fffffff}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x3}, @ETHTOOL_A_COALESCE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x9}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x8}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x4040084)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
socket$inet(0x2, 0x800, 0x8)

1.265463222s ago: executing program 4 (id=1240):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x30, r2, 0x1, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0x4}]}]}, 0x30}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
unshare(0x22020400)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000080009000d000000", 0x24)

1.160009038s ago: executing program 1 (id=1242):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x80, 0x1405, 0x400, 0x70bd2a, 0x25dfdbfb, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24a0}, 0x20000004)
r3 = socket$inet(0x2, 0x3, 0x5)
getsockopt$MRT(r3, 0x0, 0xcf, 0x0, 0x0) (async)
connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24, 0xfffffffd}, 0x1c) (async)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x17, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4020}, 0x50) (async)
ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) (async)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f0000000840)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='cachefiles_ondemand_cread\x00', r4}, 0x18) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/18, @ANYRES32=0x0], 0x4c}}, 0x0)

1.041255498s ago: executing program 4 (id=1243):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014100000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x6, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd6}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f00000002c0)='GPL\x00', 0xcf, 0x5e, &(0x7f0000000300)=""/94, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0xffffffffffffffff], &(0x7f0000000440)=[{0x1, 0x5, 0x10, 0x6}, {0x1, 0x3, 0x4, 0x7}], 0x10, 0x5, @void, @value}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=r1, 0x34, 0x1, 0x3, &(0x7f0000000540)=[0x0], 0x1, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0}, 0x40)
r7 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0), 0x8)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@cgroup=r7, r0, 0x8, 0x4, r5, @void, @value=r4, @void, @void, r6}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1, <r8=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'macvlan0\x00', <r9=>0x0})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x2, '\x00', r9, r7, 0x1, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
sendmsg(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0)

971.845954ms ago: executing program 3 (id=1245):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0xfffffffc}}, 0x10)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000180), 0x12)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000006, 0x124012, 0xffffffffffffffff, 0x2000)
ioctl$TUNGETDEVNETNS(r1, 0xc0189436, 0x20000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x4000010)
r5 = socket(0xa, 0x3, 0x3a)
sendmsg$kcm(r5, &(0x7f0000000740)={&(0x7f00000001c0)=@x25, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="e096d611c587ffefa61f1a955961e1cd64b447bdde55296c7c09c22700d2f97662ff24c8c8f4760f1207010900000000000000050c9895f70c394801ffff0000000000005dfd2234eb993ecc60dd52d81c93", 0x52}, {&(0x7f0000000300)="95f0d9ccf2d34509dc329f790b5d84fb4b5bf4740bb3a7d9a80bce1a70c7a4d085df5b8f0b557810fe798e668536a4722c80d6deb8fcc6d650c26b38fc3528ecab859e4b3003befff93d86f3a57e1153eeef36f010516718530bf31c59c868f1d185f30279f91b35502d66ed44937d662c318bf1986ccaaa3c0f7c985789962f7ace716450c765198710d1e5a0d4", 0x8e}, {&(0x7f00000003c0)="9a1e41d9a0e2b0871e03fbfc7cfe9e7e39da7cd81c5d8c807c58612421db7d200349c2e5571e02328edc0351ece3f54f6ef3a1f4b4f2ffab9d994054b7d824cde806c5fdd6f3928da417acb2674cacb1f2f263bae3bfc8bfb0b0e8b9c6e51287c61616404973deb6f645bcb043ceaa35aba9b5a95167f02296d92813dc589f33a6298856defaab3c52b611da39e0074c3a61a7dcd850e784f1cd245e5c7544b43c96f727c430f866c21e8c6c404af8312d2159fa6196bc12815e2bf2daa6bafbd71f8c", 0xc3}, {&(0x7f00000004c0)="fed5c7b06fca75918f7adb4ee81f66045693ad1e6ef44e28e2adf7499f5399cdd5ffd76d813e1814ab556383f249ae859d9af704592e7d3d2ce602b2115daa7c1607f6becee583f480cf05593b41b523e1fa94773264a552dec5c6d4e136b1d12df8", 0x62}, {&(0x7f0000000540)="4195b57e4202df22fee0ca4cc63647e68af9e6710bdfb0a54a9c3b43c53db4d79478fd1e08a09c09", 0x28}, {&(0x7f0000000f80)="fc037cf3a2178915236ec49acfa06f7c4842b47bf70fddfd51b674809fdcf5c5cd41bfe022458a95ebcb7f8b3f8bbbaac9d1f0fb8e70d0baaec9a022324b7ddfcca4b2b5b535a301d57d5b4d68a87bd0a2f9bc18f65463680dd9ac48d03f29534a41764dde8dfb9e481b6519bb97c7c1730feb9ef253da683baad4a4125f7db03f307540bccd4e71ddea6e50599cc63fad6161c78f35981faec1098755f4cbaacc4e8e3df2b7e28a412c2b423bef1085d65f062f018e566ae8b2854de2151ba975548dea634df7d6e26f06f66a8ca8cd76ededb0d0fbcd962363b9c84ddb51e7215b5f308cbbbefce1b0cef3788ec88b075b43cf9e6f212860407c43016dafb5c353962254ab05cec1b826e275a93f2e7e1a0778ef1f1627945d484173ebfdfcfcc49b159f19ea5b1e55003766f6fbf8f85c1dc3320e287fe45abe2180f47eba56676b30504649f48896d06520093e0f6c71bb5f671c824fb3c770bf084c67439053aaa5d2bc3976f0d4f0c28919b3080a408733fe215ca6d3f3c41bc30cffb7e40ae914b2ceac7a9be2d45dfaf05929ed92e6861bf5ad56bd174c162c31ecaec49f2e8626ebaaddd3eb5801ae1924c4108e6d1aaa3302dbbb6e4d843c9d85cc9858be3221db351165bfd211868a78197f3d04fdb4d8df8651bebeee15d091ff60240c5ca41f23af441bac581ce7a927e7f9c8e06ea4d06a514433c03d26136626fe5f9cfd1cac4e0f62f28ea0abeac6bdba116507d8a0869dc61262232acc2029129239dc9572f4ed5a312a7725bd2bf43f0cc35735ce689d2034223546c047bf2ea3044d2cf49a8bc30b646b1d30c17f931c43c4c84367fd2932dac29e003b13e9645e76f032a6be7762405f77c9b08644cea1b4afba8b2d65548f9f7ede8149ca21a97988b74872537f04a67eb7c888d405778482895a433b0506a878cf26cd9f479cbcbef682d41965b4bfa8018fa781b725da8a54b8b67f332841d86d6f0587dc4ba8a5d24bf62187081c035ef9db83f6b085fc4370bc3a63e471043bb74af57dc1ca0349bc70bf0e188bdc103e60c1ec9b913d3ed2704ea2014de89275767536bb98512e12977d876faf4daceac52c2e612b5486940094b0d4a3bc55601a4ba475b2feaf83f6a4bc7cefcbf8430e16c26234aa2c9657a7227e06c80cdf86546f987f1632b0186c14acb1fed1c8a202fd41736e5554db07070cd11ad3f31516b570efca960420230ba88401cd7e551b61547e8c18c60307b8d62c5d73c575225a6ebb9e0ad8e02e9cba859a76d6dd678d54b7a2089ca23175fff925380e30f30455bdcd7712f114a12510e7873c9889feaeb83f0eaa4a44d86d0127eb92e251268ae21401448da742bc41f5e177b08cbbda6d054ca63ebb3c4b151bba4204c497a87e3276df5290985dd4cb2d284a317c98b7785a06d4bdd53b4a778ad4dd8f4812873c1a12bdc850511b72aca304e390e0ef9b2dea81e402c30c35194442845e503c6066ec54d2a6375f1bd5d49d1f48594d91840041b493d24d80cb58671a726781585a70b204ff3f66aff0f3d84f35de3c508183f44c2c51d3c564f8c6029ffb5e20bd64b7cd95a7b7bbe190ad267bbd498f5034ca32852ed35122f691e8553ee9f181062034312ffbe988680481e5b1a48907a8f81550d10146e23605806bdb80ac3c9360ad95e01d29e6b8a14c36c91d0035753b23ee64c410229b25fde8759febe6cd21ad8438e4cad772d6b1f3da399ca02ea9e136e23b1f762a42d2363463254dbff9bdbfe3c9cde44317093c1b2b088cba1a589741d6a4f2fbc791cd3857adfb2e20397194e34c07315595b4229ddbf5d191f1f1922a88e1b12ae02f3986c1e6230c09ed1ec76a2ff5c73834e44c7fd12227b7b6183b9ad320ca1be0135d974df5c050cd1eae5dbf2b1a54b604a4c02bcabf54064c27f82566690f0bce306b6218007cbbdc9e7faf2a24f563cb50e4b4bdf967a239630d1cfbdb519b2ebcf91247d887af74facb94300d544a8ae91587d8ad43b338f807c80ebd741965c8d63920140cc201d0d30e843803c2df4ad501179b67ba67fbf01dfbcf57bd2593b405559846cc7265928f78b687516701b8b1e9d4d983b09558904d94311fae794474805d459cbc7db2f55392cf26eed66cc1f0f06ebdb80801db15361c5ffae9a31a7dcebc7da7285de08a84c640867866584672f8a673bccfdee9827c1f96379e1f8278d4ad32870b00923ee6bb9d3ed36725de4954023a82ad33b95fe1b316c35e24b3bf158be369c21d5146b3978cb79e21b2968b179639329dba62673d41bed2e9930fa621bfd39b294afaf0fa695d56e3fd023fc812b8c4f1ae8346a02bb6d1098f9f9e015539e2b91b24abe9bf40f954fb6b5afcf5c524fc4b80bbcce3438639ddac8219e8e9fba15ef35256b549592e6c415d95c634cbd587d8fe20ff073ab8e5310e7223dc80ca224b1506b4e4e9d0871e759fc3888920600cc63b5882bed21e06097e991ec194ce7ae2c43881ed6d96ad179d035fe8fad3feaaa69a1300219d864fdae2efba7d616de57dfa1e1855a1bc2042b74bf906886c3bdf715e3379f3f6308b3d9341b49a76575933d8cdc964afb6e851fd364264751a1fc28b9261e39e2c1dcf1fc5c43df67b0dbba37d797c4a00eb2fd6648aaf1e7f0b4587e5be5b242b6f639d6a88326f850419369064da84a1d1aaa185c60a793377bb508062ecea21073242ad8c2ae267921ffcd9f8c146b8da9c2859acd5fc3808810d36baa4c98a095ab5f13e500185608c0e0e468ee3f9a9120d4f64b069c182c218625aaa281efc15765fefcbeba34e05b4c43320886b727f3fd85c1cbe79d1ffc72bc1583693706b58b99774ab96af51df5b6b16d23e0286622d7f09e8dfab9a72a1027958afe87012e421fe96ddf57c9c2a9b8858ed4acaffeb89d51e9379310074b19c6d2e86d546c3b08edad33d982348075376a7c6e3cde0d6e5ba24d09ea7582a0f006b339b4750c8128a63f18c837b83d0a157351fab34fce19df064b0d5204b36faf229491061e950efa5f7719dce58b70197e73e4186ed045206bda339b9083887b729dcaa33c3acc616714a23755fab40ec5b89e07667eb0c967e557e218cb8d7d19c435e46abf38994c4bf202fe95030e020428c52aca0b73fc61f5ff7a1553505b97dad37995fa0632bdf18fc5f5deaf030b5d9670e73118bcf04d6bd54d3bf8ac0ab61f9f381c7a83912f91b272db23389358f5404182f7879f2d719381899eb26ec81038b725b3f95f4f4a10d43d7ee761d3be76bf9fcb6dcfcb65510cd97ca10274bca0ed5ea25485e1ad0fbcf110df20f5f6724bc55152cc056f5660e5df541e4a562af50c87e5d518b14efd8279e6e93834224c7bd31fe048ca419091f7b3925d9289569c61aeb83c92bc207563caa744317e9558bcf1656a417c14fe88cd57b80f621635bac399570021db7ef70092613ed9739c7e5d8fddd8459fdd85ebc7b4fa5b45e66195121d2f89dd7b9c30172a8e8f5ca7294da4ca5df8a0e7c9f43bead14851b26bc58fcafc3d126f706af5a0273421392181f7b607be9497ff22373636592f1daa4abcbdecf7e9b8b9a26e8050ecef0b9d0294748b4bff0b8bb8d3e27cda5069d900488001da71c1243fe343be6b4f434de02ae564e4c3562d403ec7c2bb3569d4bbb90c1e9759838094a4fffa8e7cc4ebb250f8adc28326382784ac8f6dbcf5304670b1bc20c384c607ba312256b98307418cff28e8e47870f0f8077a440baa4b2ae9a2f282d71f66946391163feb4fd404bebf77ac72f36dd12f138f4a5c329c967399eac6a38f6af70a25c56dcdb882c4ae0ee9a121e22230b5077dcff229cb8725c796154fa540d7d68af4b86514ecaca26421d2e97cae20d11d39139e46f6a06771afd968ca563de85459a19d821e35f92b6b7fc59de21e2598dc6200829046243f1bf272a36db7b03e9cb519e8759f929ed6a87556c27de842eb10157847e8f49773205f0d1d8fd1990d36e5d4663af647fa273dc21cbc0ab6bd54555585fbe1aaab5ac37269389dd548a9ec4e26c50924e16bd3522f8b5ab49f329af7488cd1f2ab10ada65ecb7089ecd0f0b47cdf73e2554daa624734cfda79d97c7d8c6680c7100d16635fe2c4b68e29e3d7180ae64ef40f6c53c079092041f39e8d9459e66bbf34ad93d28ec71585cb0fbd95589be2f05bac82e379415040ba7a45ae67dd6f5dd7339bd91b68e929ca3bc539abdff01936b73768e33579144b54d6b394e9452042585d474575029bde7c4b485c0ab8fdc4c7e187adf5e7b66fe75845a78cf94d46febc9e747f54724ffe7ee020240c74bbdff88f256caa99d29b7b8d87acc228a4240196e99866d247b74eb5eca3428024081901597ab2e16ee94199f605e2751c96be2d025c21faee8d86d78da1e9694ff2b294906ed43e67b79688d382e62ccb148cf49e1bbba17e3e37f9ed016d3eaa2c296f32adfd543d4ac9b4c55f85ccc71ece922a787e35c92cca5da74bf5bbd36343a39eaa8761c393b882c11704e65d82ecf8657903bebeb88a3fe542843e326ad5bb672b568342c04ff4061a4803c3d0728aadba63b70a4d81973b670648424fa48cc122e33d357476e0134ed272f0562ddbdc744ba8ff9b28db724450e19345b62e7659044ce81108d1bbf5f57f914422d881d3bb5584287a1ce3b666aa6f2910fd537bfd146469ba0605f7ba21c45110d055b05162fee778282ffbcea50220c2326806d17a609eadef2d6e431bf8ee5e56e9adc4648ee10777931171523aaa78cc52ab2883fb612dcd0bbccdebdbe3507a44df0b8948502d262b72599ea221e6fadcd106cbb6e67610ee74748d8da739b940dbbb244a11a104bb0d49bd0a992b8a9ce135c29b1ea2b64f41f7508f45cc7c4173f3315e01ba8d8bf5f860b9afb278532a083649a6010711d7fda4dbe8c9913be1182773f73d1f77f86f95be2627a74a78343d3377c9e817f277035ea5af974177b10d210c8c81d66242d1ef441696e50cc63f377d2f72c1de03958f371834f59bdedf5c95b6616daee6412c2437ac29e22465dfc9d6e1fa43143dedfaf23c664ca5c75039a365d5f600e0d90bc9f405cec4acb7d5ab0d01651c010d6f7807b76a92afe6bbd709f9d65c17e3ea660c4cd164344be726bef49c6eb850f748fd4bb72d78727a515de1183179bbc47285d6ff68de14c3ddb4d2fd9b0db2a3b8c09343b34e82f5ac62b43104a885a6b89323f3cd1a1d8baba71a9d825643c8c63dd6cedc145011f6206828ab375341da5cdb15b26ae8e49a9e007212c37546a440840ecb767481afee187f1697d10547fc4f294555724dbc026efdc536a48cb8521fc8be0d69fdd561241dbe5a76a2494e31d8e974a0e99f5d98db589064cc3c8c0fe8bb74f7c1bd14c5561c45f054e28f604c1f119f9c99bc7bb5b2ba11aeaed5668d992ea351510249008b568d8287c35f4979eb4bc719c6a4b878f146f6e7a6785177c437e0a11d516256bf56b39dee60bbb78ac0ff9d930fef55fd5c06c2f7eff826e86cc5f41a655b46ddd161e49c6948db81d23c706745ab3a05dadc94c836285267c59cebfda091a2ad3e74e620c764be13dd20d4c9c1075d0d86d40d9230e8584c0b25033ec88bffbd00cc9518e8ff52d7857ddef1ed2614771aa3bc2f2bd6af0abb161ac6006a00b4f55c3181219ada726cfa928e628cfca44f0abe88d7fa5d8f672342670fb8badfcfc0075533559b492c0ca414a31b7e3d90331e9ab2350a37866", 0x1000}], 0x6, &(0x7f0000000bc0)=ANY=[@ANYBLOB="00010000000000001b000000ffffff7fcb2faf82eb9f62e7078739318ccac11b4eb4b60d04945e94d9acacca66d3978f4c013e9fc3d19c94b0056aae7c848f028e78a58455d8dcca33e80bf31675372fb54f7d5e66ef8837a4f8b04107750fb31f620821193b2ecda046df6b233a7fe5d799924d8d3ae5ad91f102bbb7592566d569c030194d0aa970ad51a3d6099fd62bca2a00ca68cad8b5a14a4cfb43adea02d1f30e7fce05a73a51ca42321d3f7db273440a449b9d0d00677d541d6cbc01a1e9fd04b8d29831e94b4b3ce88caedc3ab67b368be2cd4c4d4d95d78095d56cf7735724af79de28c95146b1b12ca5cf4821f0e98960dde241f69eb5b123d0001800000000000000000000000400000049fe32c20f9700002d73ea8bd56f354b8c809de353560135b3b5369510463908e99564934afe294202694a098f50491e9fa989d4fb5395b8bcf1964c0017b88cf135634ce0b31e66702079508e5000603f2c1994633b066a93ff685d469d432108a952ba5ccabbc38071587a907108b48f5de7847de764af9c1fcbd68729e556e0bb390a86"], 0x118}, 0x44)
setsockopt$MRT6_FLUSH(r5, 0x29, 0xd0, &(0x7f0000000240), 0x4)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
pipe(0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000840)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000880)="0b069196a633311481335f0fee8c016a750a70d9452fa5be2d54c470ed657d2f9f93", 0x22}, {&(0x7f00000008c0)="ecf0cfaee8dfb5fb96bf963aa94ed5942e4e5945d473abdf61a7b47aaf4c0529a8d896a274c495311f505b298e62329ab884a01c23e117b44147aace0556fbb70fc8a40ba866b8f764896385edef44982e8b68e5cd31e5e1c74cc565899decad4e11f901e5182d8f44f1fcb2dbee6dd76f6ef693a141a3251d56d752b99cbd04f6f4af936e6f9d19e2b5a1d8a65895378e3eb8e1959596e4ab799d6bc0f8e2fa5453509133bdec3ca59e1bff4fdeebb4d44c4315e90818914e0bacdaac03d90ac6", 0xc1}], 0x2, &(0x7f0000000a00)="279730783b80669018f95d453de8149cd78dbc3ffc9a220f76ed1432c79f75ccbf8b80c55708b66a9b6b4252fe98e819c3ab102c2bc43c129e21deafde2143bc5653e993e9d3087c5de878cde00745e517950479f52685c2e0f2ce456f55cf5588920de783c0efa97ced4b0914fbd121599b2ec36cde950e3bf4239c743cf94189b680747260f7d8afc7a808b39faeaa7e9282216554cc4fc6a5e6e37b86ac92b834b7d4d5cc946a30d83e779144164162cba0d34f369850e8", 0xb9, 0x800}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000780)={'wlan0\x00'})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000700), 0x0, 0xa)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$FICLONERANGE(r8, 0x4020940d, 0x0)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000100)=<r10=>0x0)
r11 = syz_open_procfs$namespace(r10, &(0x7f00000000c0)='ns/net\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000b00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000008001d00", @ANYRES32=r11, @ANYBLOB="08000102000000004083a6f3a6e3cc65bf4eb7018c0a3bcf291749e8c1344006047d3703060d2c8f277bdc3120e2538afd67e6aeddfdbe660255d947092208f982c5c532fdfe7c8dcac7e319ff11477eaa9782b0b8c2a655cef32edc68ffd3068563f14af28fd4ec667eb72cf2ccc1692e272693a1d90e6b688630f1a157b3d4b055efee0772a70fb3fda2b56b4fda88e1ef"], 0x24}}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)

893.246893ms ago: executing program 2 (id=1246):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e20, @local}}}, 0x84)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001440)={'\x00', 0x52d35ce30131f272})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$cgroup_type(r5, &(0x7f0000000040), 0x9)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0)
ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000080))
close(r3) (async)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYRESOCT=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0920000000000065090100000068d01500000000000000180100002020702500000000002020207b1af8ff00000000bda900000000000037010000f8ffffffb702000008000000b70300000100000014000000060000004e93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYRESOCT=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0920000000000065090100000068d01500000000000000180100002020702500000000002020207b1af8ff00000000bda900000000000037010000f8ffffffb702000008000000b70300000100000014000000060000004e93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x210040, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x210040, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000200)={'team0\x00'})
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r9, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) (async)
connect$llc(r9, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
sendmmsg(r9, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async)
sendmmsg(r9, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
shutdown(r9, 0x1)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x64, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x3}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x64}}, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x64, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x3}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x64}}, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2c, r6, 0x400, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)

868.021901ms ago: executing program 1 (id=1247):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYRES64=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000003180)=@req3={0x801000, 0xfffff4e7, 0x1000, 0x3a, 0x178, 0xf84, 0x3}, 0x1c)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'wlan0\x00', 0x400})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600}) (async)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x12, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b688a8", 0x0, 0x81d, 0x0, 0x20}, 0x28) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x12, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b688a8", 0x0, 0x81d, 0x0, 0x20}, 0x28)

832.036305ms ago: executing program 3 (id=1248):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)
r2 = syz_init_net_socket$ax25(0x3, 0x6, 0x2d42030613ceb5ac)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000200)={0x0, <r3=>0x0, "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", "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"}) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async, rerun: 32)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async, rerun: 32)
sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x1, 0x3, 0x101}, 0x14}}, 0x0) (async, rerun: 32)
ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000001200)={r3, 0x6}) (async, rerun: 32)
syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x20, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, @remote, {[@hopopts={0x2f, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @enc_lim, @ra={0x5, 0x2, 0x453}, @jumbo={0xc2, 0x4, 0xc}, @ra={0x5, 0x2, 0x80}]}]}}}}}, 0x0) (async)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
recvfrom$l2tp6(r5, &(0x7f0000002200)=""/181, 0xb5, 0xf43c666927f3d15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, 0x20)

757.819629ms ago: executing program 2 (id=1249):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async)
socket$packet(0x11, 0x3, 0x300) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x6}]}}}]}, 0x44}}, 0x30040000) (async)
socketpair(0x10, 0x2, 0x4, &(0x7f0000000a00)) (async, rerun: 32)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000d, 0x4016071, 0xffffffffffffffff, 0x75c4a000) (rerun: 32)

705.247468ms ago: executing program 3 (id=1250):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e21, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @encap={0x1c, 0x4, {0x2}}]}, 0x170}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f42fc3199f000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af735ed41793bdf9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbc68223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f00001000000000eeff7c5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729eec082830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d424c14283a94395b64645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d620100000000000000494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd779a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9b0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b58"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x20)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
ioctl$FS_IOC_GETFSUUID(r7, 0x80111500, &(0x7f00000001c0))
connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x10)
sendmsg$NFT_BATCH(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
bind$bt_hci(r8, 0x0, 0x0)
close(0xffffffffffffffff)
r10 = socket$nl_audit(0x10, 0x3, 0x9)
r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000000080)={'wg2\x00', <r12=>0x0})
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="81ab27030000000000000000000000e0c384", @ANYRES32=r12, @ANYBLOB], 0x1c}}, 0x0)

704.841614ms ago: executing program 1 (id=1251):
r0 = socket(0x11, 0x800000003, 0x0)
r1 = socket(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8)
close(r5) (async)
r6 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEYRING(r6, 0x110, 0x2, &(0x7f0000000040)='mqprio\x00', 0x7) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r7 = bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
close(r7) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [], 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b80]}}}}]}, 0x88}}, 0x0)

629.950085ms ago: executing program 1 (id=1252):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg1\x00', 0x7c2}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg1\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x8, 0x9a, 0x10}]})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004004)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = socket$inet_sctp(0x2, 0x800000000000001, 0x84)
sendto$inet(r2, &(0x7f0000000380)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r2, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
sendto$inet(r2, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
shutdown(r2, 0x1)
setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000180)={0x0, 0xd, 0x9, 0x1}, 0x10)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000340)=0x101)
write$cgroup_int(r5, &(0x7f0000000140)=0x40000000000002f, 0x12)
socket$netlink(0x10, 0x3, 0xf) (async)
r6 = socket$netlink(0x10, 0x3, 0xf)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)=ANY=[@ANYBLOB="380000000714010000000000000000000900020073797a300000000008004100727899338a96"], 0x38}}, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)=ANY=[@ANYBLOB="380000000714010000000000000000000900020073797a300000000008004100727899338a96"], 0x38}}, 0x0)
pipe(&(0x7f00000004c0)) (async)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000281b872923b5e7c9ee5104d1707781223d6afc9cbb1725b903de0c8bb29abc33eef57afc", @ANYRES16=r9, @ANYBLOB="01000000000000000000060000000800050003000000"], 0x1c}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000281b872923b5e7c9ee5104d1707781223d6afc9cbb1725b903de0c8bb29abc33eef57afc", @ANYRES16=r9, @ANYBLOB="01000000000000000000060000000800050003000000"], 0x1c}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={0x9c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x53, 0xe, {{{}, {}, @broadcast, @device_b, @initial, {0x0, 0x9}}, 0xd461, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @val={0x6, 0x2, 0x4}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x2, 0x3, 0x0, 0x0, {0x1, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x400, 0x7, 0x80}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe6b4, 0x5, 0x401, 0x84, 0x9, 0x870d, 0x3, 0x3]}}]}]}]}, 0x9c}}, 0x4040)
ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0xfffffffffffffffc)
socket$kcm(0x29, 0x2, 0x0) (async)
r11 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r11, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="4f62819bdda27c993d668ad8c989036f4bb54dd32a917a69e7880701834a0ea44e4842e63a77a17cbcf7039fad5615c2b0c50c54a92929fab8f8858b6d7b6699682c718976c23e7ee32d75b12d9a5cf615ca124b7f6b98c67c24a9e570b389dea8f7be7046bdbb788b77e3b5a001a52b", 0x70}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000008c0)="9b", 0x1}, {&(0x7f0000000180)="2b76428e9112db91315b0b0466f5744f9e27b61638e4eb8a4c63b470eb0045aa4aea1ed2c103d46680acfbe3e88894d4eceaf5b51d07f709284b4dcc4b55a03b067ac2bfbeb2f4e5efe9af64f53126a99c7a1b6a34d4faf6dc7a2447de4161aa6500af60e1fb683f7d45bca31c96a33fe4474ea40bfe5f6cd283baae4cf4e95721166c9a8bbe5b32f6baa47faab1ec305609d980c334cbc16e295a5777d2ac35d50a82736b3610701db92d", 0xab}], 0x2}}], 0x2, 0x4000005)
getsockname(r11, &(0x7f0000000080)=@sco={0x1f, @fixed}, &(0x7f0000000000)=0xfffffffffffffef8)

612.706304ms ago: executing program 2 (id=1253):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000400000022abd8200fddbdf2518000000a58b88bf064720e93614737d4f358c9a"], 0x14}}, 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0xb8, 0x0, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT={0x8}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x25}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20004014}, 0x0)
r1 = socket(0x11, 0x3, 0x0)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000001c0)=0x4, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000080)=0x2, 0x4)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xcc, 0x3, 0x7, 0x702, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xb}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffffffffffffff01}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x11d}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4f3d}, @NFACCT_PKTS={0xc}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xa1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x48b}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x90}, 0x0)
ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000400)={0xc, 0x4, 0x4, 0x6, 0x860, 0x81})

563.78986ms ago: executing program 2 (id=1254):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b008000000000", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=r1, @ANYBLOB], 0x40}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000100)=0xfffffffffffffffb, 0x12)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xfffffffffffffe98)
setsockopt$inet_int(r3, 0x0, 0x1, 0x0, 0x29)
getsockopt$inet_int(r3, 0x0, 0x15, &(0x7f0000000240), &(0x7f0000000280)=0x4)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1}}, @rdma_args={0x48, 0x114, 0xa1, {{}, {0x0}, 0x0}}], 0x90}, 0x0)
listen(r4, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040), 0x4)
bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)

457.299023ms ago: executing program 2 (id=1255):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = accept4(r0, 0x0, 0x0, 0x800)
getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000000)={@broadcast, @multicast2}, &(0x7f0000000040)=0xc)

385.302616ms ago: executing program 2 (id=1256):
unshare(0x68040200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="050000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYBLOB='\x00'/28], 0x48) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b6e7ecff00"/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000ffff00b70400000000000085000000010000009500000000000000", @ANYBLOB="af25f02d713132e1287869864b31a248f2e0052eb77fefaa9aec95c53160d61bbbc3f06aa2cfbae9e9980af4d92dbc77115443fe69493c1f1a957414ce70597cc0277e3843f5c1c40200efd27c4fa1d643b026ac74cdb1ba0a7fc3c9ef11c8804af55979e401c0661d017cb1debea23b39660f48dbd425d8b7c646afc0bdfd5c651cf085a7b998b3818bbd309698aae2a0d4c5c5bfb6d6591f93c498fd1fc25029765ea5909881e1d982d3cf1373da0b6277fc679656b2b83647cea822733b50dbc1e118ded9f2229fb2039fb21204c0a4f44c02fc4db32a833ca27c912e9d86948cc08828e3737a2c671a282406aa46258c8dfdd6e514f837"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x210) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4)
sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000f5ff000000000000000000850000009b000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) (async)
readv(r5, &(0x7f0000000800)=[{&(0x7f00000004c0)=""/224, 0xe0}, {0x0}], 0x2) (async)
r6 = socket$kcm(0x2, 0xa, 0x2) (async)
r7 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async)
syz_emit_ethernet(0x82, &(0x7f0000000380)=ANY=[@ANYRES32=r3], 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000ec0)) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8080) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0xfffffff4, 0x10}, 0xc)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r9, @ANYBLOB="370f000000000000002000"/20, @ANYRESHEX, @ANYRESHEX=r0, @ANYBLOB="04000000040000000300"/28], 0x50) (async)
ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000400))
socket$nl_generic(0x10, 0x3, 0x10)

336.010978ms ago: executing program 1 (id=1257):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback, 0xffffffffffffffff, 0x18, 0x0, 0x0, @void, @value}, 0x20)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x5, 0x0, 0xa, 0xa}, {0x85, 0x0, 0x0, 0x25}}}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0), 0x8)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000020000000000000000000a28000000000a0101000000005e1affd5020000000900010073f97a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES8=r1, @ANYRES16=r0, @ANYBLOB="11339af1b0dd9dbe7327462898c08252320e52edc1aeed653594b28bd77f93bf33dad3df1a976c08ec0585f8e8ee2b46907dd81793c5e99ec0671dbd2a1a8574cae7cb56d8fa3aedcff1e669741dd7c787d74e1f798d2f2600d17b14bd220c8b249a3d251eb00be3ee9221d3edad9d9b3ff15f377fff48dfdab2f43c27f9e3bd3c3d6e5458d3cc894aafdcdddbbc5313184a9a25dea98d66e0c167f6129832d7cb98bc395da5147cbed57843b8a8872aa4ece276316da9e34e8b12024c7c1a28d9253ae32493826401035a1ddb63664420"], 0x7c}}, 0x40885)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000000400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

237.36719ms ago: executing program 1 (id=1258):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000d966000000000000000000000000000000000000000000000000000018e0000000000000feffffff01000000110000000000000081006263736630000002000800000000000073697430000002000000ffff00000000626f6e643000000000000000000000007600000000010000005c121d00000000ffffffffffff0000000000000000000000000000000000000000d0000000d000000000010000766c616e000000ff030000002000000000000000000000000000000000000000080000000000007f0000000000000100766c616e000000000000000000000000000000000000000000000000000000000800000000000000000000000000000041554449540000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff01000000030000000000000000006970365f76746930000000000000000073797a6b616c6c6572300000000000006263736630000000000000000000000076657468305f746f5f7465616d000000aaaaaaaaaacc030000000000aaaaaaaaaaaa00000000000000007000000070000000a8000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000"]}, 0x2b0)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000004000000ff0f000007000000000000", @ANYRES32=0x0, @ANYRES32], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000080)={'gre0\x00', {0x2, 0x0, @broadcast}})
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c1bbdbe3160578f5aa421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e6405c0cf5329cb7f1821ec7ecca1d3f"], 0xb4}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xf, 0x200000005c832, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$can_j1939(0x1d, 0x2, 0x7)
splice(r1, &(0x7f0000000180)=0x7f, r5, &(0x7f00000001c0)=0x81, 0x7d, 0x1)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, 0x0, 0x0)
ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, 0x0)
r8 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
bind$ax25(r8, &(0x7f0000000300)={{0x3, @default}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48)
connect$ax25(r8, &(0x7f0000000280)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x5, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0)

194.902239ms ago: executing program 4 (id=1259):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0xfffffffc, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x0, 0x0, 0xee01}, {0xfffffffffffffffe}}}, 0xb8}}, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f00000001c0)="d5e9fe734e57c2111eefe54ba4299a04c1385f4c849a41e63584afc2e219f5ce68375415afefdd2f98bb841204c9ce350f8aad247b3fbddcdf39bc8f4060bb6e57266249a484c267cd98cca664fcf3", 0x4f, 0x1, &(0x7f0000000140)={0x11, 0xf8, r4, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0)
socket$tipc(0x1e, 0x5, 0x0) (async)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) (async)
socket$tipc(0x1e, 0x5, 0x0) (async)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async)
sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0xfffffffc, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x0, 0x0, 0xee01}, {0xfffffffffffffffe}}}, 0xb8}}, 0x0) (async)
socket(0x2, 0x80805, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)) (async)
sendto$packet(r3, &(0x7f00000001c0)="d5e9fe734e57c2111eefe54ba4299a04c1385f4c849a41e63584afc2e219f5ce68375415afefdd2f98bb841204c9ce350f8aad247b3fbddcdf39bc8f4060bb6e57266249a484c267cd98cca664fcf3", 0x4f, 0x1, &(0x7f0000000140)={0x11, 0xf8, r4, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) (async)

62.033581ms ago: executing program 4 (id=1260):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x11, 0x200000000000007, 0x300)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x15, 0x0, 0x1, 0xff}, 0x14)
setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140)=0x2, 0x4)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x5}, 0x4)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req3={0x101, 0x0, 0x7fffffff, 0x7760, 0x9, 0x67, 0xffffffff}, 0x1c)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r6 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x10)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000100)={r2, 0x0, 0xe95, 0x7})
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r7, &(0x7f0000000e00), 0x12)
bind$x25(r5, &(0x7f0000000080), 0x12)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='cq_process\x00', r2, 0x0, 0x29}, 0x18)
bind$netrom(r8, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000280)={'bond0\x00'})
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
unshare(0x20400)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB="0000000000000000009a00"/20, @ANYRES32=r4, @ANYRES32, @ANYRES32=r9], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)="0895c9a2e116c08ee28a464d99af9c24f5d79c0079a02c27ea9a00d38f33c4fe5a759e1112d9292c6d13c3a9126effed46056df90b50e8e18e3c654c698e6e7d9114912ca057b4574d9909af43ecd5b005d4e7d82c6686e38fe3b056e60b7b6a5e1021e62b9de07c0598cb", &(0x7f0000000200), 0x5, r11}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r11, 0x0, &(0x7f0000000140)=""/75}, 0x20)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r12=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x60, r10, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x10)

0s ago: executing program 0 (id=817):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, 0x0, 0x0) (async, rerun: 64)
r3 = epoll_create1(0x0) (rerun: 64)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1)
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x100, r6, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x49}}}}, [@NL80211_ATTR_CQM={0x60, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x4, 0x9, 0xfffffff7, 0x30fb, 0x10, 0x1c0, 0xffffffff, 0x200]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4b}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1ff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5f8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xa}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x60}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2ec}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd42a}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x153}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x366a3dca]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'sit0\x00', <r7=>0x0})
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000df00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0xffffffffffffff53, 0x0, 0x0, 0xc, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$int_out(r9, 0x2, &(0x7f0000000280)) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'nicvf0\x00', @random="ceecd106cc75"})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538"], 0xfdef)

kernel console output (not intermixed with test programs):

90.614504][ T6832] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.674724][ T6832] bridge_slave_1: left allmulticast mode
[   90.709815][ T6836] netlink: 'syz.4.255': attribute type 10 has an invalid length.
[   90.727822][ T6832] bridge_slave_1: left promiscuous mode
[   90.731086][ T6836] netlink: 2 bytes leftover after parsing attributes in process `syz.4.255'.
[   90.753265][ T6832] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.786418][ T6832] bond0: (slave bond_slave_0): Releasing backup interface
[   90.892381][ T6841] netlink: 92 bytes leftover after parsing attributes in process `syz.1.257'.
[   90.915104][ T6832] bond0: (slave bond_slave_1): Releasing backup interface
[   90.947013][ T6832] team0: Port device team_slave_0 removed
[   90.965586][ T6832] team0: Port device team_slave_1 removed
[   91.010734][ T6833] IPVS: Error joining to the multicast group
[   91.047123][ T6837] 8021q: adding VLAN 0 to HW filter on device bond1
[   91.056436][ T6837] bond0: (slave bond1): Enslaving as an active interface with an up link
[   91.065724][ T6836] team0: entered promiscuous mode
[   91.073908][ T6836] bridge0: port 1(team0) entered blocking state
[   91.080699][ T6836] bridge0: port 1(team0) entered disabled state
[   91.087144][ T6836] team0: entered allmulticast mode
[   91.402303][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.263'.
[   92.022761][ T6882] netlink: 'syz.2.271': attribute type 2 has an invalid length.
[   92.075370][ T6883] openvswitch: netlink: Message has 1 unknown bytes.
[   93.275773][ T6914] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   93.845169][ T6928] netlink: 'syz.2.284': attribute type 2 has an invalid length.
[   93.894130][ T6930] syzkaller1: entered promiscuous mode
[   93.910836][ T6930] syzkaller1: entered allmulticast mode
[   94.684615][ T6950] syzkaller0: entered promiscuous mode
[   94.693844][ T6950] syzkaller0: entered allmulticast mode
[   97.915863][ T6982] __nla_validate_parse: 6 callbacks suppressed
[   97.915880][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'.
[   98.237039][ T6991] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[   98.558664][ T7004] bond1: entered promiscuous mode
[   98.563912][ T7004] bond1: entered allmulticast mode
[   98.569579][ T7004] 8021q: adding VLAN 0 to HW filter on device bond1
[   98.610927][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'.
[   98.921578][ T7024] netlink: 'syz.3.309': attribute type 15 has an invalid length.
[   99.289277][ T7039] netlink: 44 bytes leftover after parsing attributes in process `syz.2.313'.
[   99.292660][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.312'.
[   99.329384][ T7041] xt_TPROXY: Can be used only with -p tcp or -p udp
[   99.548559][ T7056] netlink: 20 bytes leftover after parsing attributes in process `syz.2.317'.
[  100.040011][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'.
[  100.095656][ T7078] netlink: 'syz.2.322': attribute type 10 has an invalid length.
[  101.405622][ T7072] hsr_slave_0: left promiscuous mode
[  101.414125][ T7072] hsr_slave_1: left promiscuous mode
[  101.481542][ T7078] syz_tun: entered promiscuous mode
[  101.510812][ T7078] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  101.565638][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'.
[  101.604554][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'.
[  101.660938][ T7090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.325'.
[  101.899965][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.328'.
[  102.306760][ T7122] ip6gretap0: entered promiscuous mode
[  102.326416][ T7112] bridge0: port 3(hsr0) entered blocking state
[  102.334902][ T7112] bridge0: port 3(hsr0) entered disabled state
[  102.345914][ T7112] hsr0: entered allmulticast mode
[  102.351224][ T7112] hsr_slave_0: entered allmulticast mode
[  102.357164][ T7112] hsr_slave_1: entered allmulticast mode
[  102.379760][ T7112] hsr0: entered promiscuous mode
[  102.387571][ T7112] bridge0: port 3(hsr0) entered blocking state
[  102.394701][ T7112] bridge0: port 3(hsr0) entered forwarding state
[  102.395298][ T7132] netlink: 'syz.3.338': attribute type 13 has an invalid length.
[  102.490522][ T7135] raw_sendmsg: syz.3.338 forgot to set AF_INET. Fix it!
[  102.523101][ T7132] netlink: 'syz.3.338': attribute type 13 has an invalid length.
[  102.582472][ T7138] vlan3: entered promiscuous mode
[  102.587562][ T7138] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode
[  102.687235][ T7138] mac80211_hwsim hwsim7 wlan0: left promiscuous mode
[  102.788642][ T7158] tc_dump_action: action bad kind
[  102.933707][ T7167] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  102.946553][ T7167] netlink: 'syz.2.348': attribute type 1 has an invalid length.
[  102.954646][ T7167] __nla_validate_parse: 8 callbacks suppressed
[  102.954663][ T7167] netlink: 224 bytes leftover after parsing attributes in process `syz.2.348'.
[  102.977735][ T7167] tun0: tun_chr_ioctl cmd 2148553947
[  102.996455][ T7167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.348'.
[  103.053508][ T7171] netlink: 60 bytes leftover after parsing attributes in process `syz.2.348'.
[  103.267608][ T7180] netlink: 276 bytes leftover after parsing attributes in process `syz.2.353'.
[  103.402438][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.351'.
[  103.427886][ T7186] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.445446][ T7186] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.483750][ T7186] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.604729][ T7186] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.626264][ T7194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.357'.
[  104.161464][ T7219] trusted_key: syz.4.363 sent an empty control message without MSG_MORE.
[  104.694551][ T7257] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  104.820797][ T7263] netlink: 'syz.2.376': attribute type 10 has an invalid length.
[  104.837967][ T7263] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  104.865574][ T7263] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  105.193845][ T7271] netlink: 76 bytes leftover after parsing attributes in process `syz.1.380'.
[  105.279768][ T7273] netlink: 32 bytes leftover after parsing attributes in process `syz.1.382'.
[  105.303502][ T7275] Driver unsupported XDP return value 0 on prog  (id 193) dev N/A, expect packet loss!
[  105.515949][ T7286] veth0_to_team: entered promiscuous mode
[  105.538900][ T7286] veth0_to_team: entered allmulticast mode
[  105.675220][ T7286] tap0: tun_chr_ioctl cmd 1074025677
[  105.685510][ T7286] tap0: linktype set to 776
[  105.720926][ T7297] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  105.732089][ T7297] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  105.741943][ T7297] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  105.751130][ T7297] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  105.779218][ T7297] xt_l2tp: v2 sid > 0xffff: 262144
[  105.799638][ T7297] netlink: 16 bytes leftover after parsing attributes in process `syz.0.388'.
[  105.946455][ T7315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.389'.
[  105.957665][ T7315] team0: left allmulticast mode
[  105.965236][ T7315] bridge0: port 1(team0) entered disabled state
[  106.056798][ T7322] xt_TCPMSS: Only works on TCP SYN packets
[  106.444948][ T7340] netlink: 'syz.0.400': attribute type 1 has an invalid length.
[  107.037734][ T7374] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0
[  107.065614][ T7379] macvtap1: entered promiscuous mode
[  107.076814][ T7379] vlan0: entered promiscuous mode
[  107.120352][ T7379] vlan0: left promiscuous mode
[  107.513320][ T7402] netlink: 'syz.3.419': attribute type 1 has an invalid length.
[  107.582746][ T7402] 8021q: adding VLAN 0 to HW filter on device bond2
[  107.695774][ T7407] 8021q: adding VLAN 0 to HW filter on device bond2
[  107.746756][ T7407] bond2: (slave vcan1): The slave device specified does not support setting the MAC address
[  107.769835][ T7407] bond2: (slave vcan1): Error -95 calling set_mac_address
[  107.872343][ T7402] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.886012][ T7402] bond2: (slave batadv0): making interface the new active one
[  107.909078][ T7402] bond2: (slave batadv0): Enslaving as an active interface with an up link
[  108.009698][ T7398] __nla_validate_parse: 9 callbacks suppressed
[  108.009720][ T7398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.417'.
[  108.042151][ T7430] netlink: 32 bytes leftover after parsing attributes in process `syz.0.426'.
[  108.066152][ T7432] netlink: 24 bytes leftover after parsing attributes in process `syz.3.427'.
[  108.211328][ T7441] xt_CT: You must specify a L4 protocol and not use inversions on it
[  108.227160][ T7432] vlan2: entered allmulticast mode
[  108.233277][ T7432] bond0: entered allmulticast mode
[  108.240902][ T7432] bond_slave_0: entered allmulticast mode
[  108.261583][ T7432] bond_slave_1: entered allmulticast mode
[  108.269472][ T7432] bond1: entered allmulticast mode
[  108.512561][ T7446] netlink: 'syz.2.431': attribute type 4 has an invalid length.
[  108.572016][ T7447] netlink: 'syz.2.431': attribute type 4 has an invalid length.
[  108.999466][ T7432] bond0: left allmulticast mode
[  109.006743][ T7432] bond_slave_0: left allmulticast mode
[  109.020751][ T7432] bond_slave_1: left allmulticast mode
[  109.026449][ T7432] bond1: left allmulticast mode
[  109.444441][ T7464] netlink: 5 bytes leftover after parsing attributes in process `syz.2.437'.
[  109.467142][ T7464] netlink: 5 bytes leftover after parsing attributes in process `syz.2.437'.
[  109.514497][ T7464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.437'.
[  109.554247][ T7473] netlink: 32 bytes leftover after parsing attributes in process `syz.3.440'.
[  109.719320][ T7482] netlink: 'syz.1.442': attribute type 5 has an invalid length.
[  109.826311][ T7496] Bluetooth: MGMT ver 1.23
[  109.863243][ T7480] Bluetooth: hci0: Opcode 0x0c20 failed: -112
[  110.242471][ T7534] netlink: 'syz.0.452': attribute type 21 has an invalid length.
[  110.262360][ T7534] netlink: 132 bytes leftover after parsing attributes in process `syz.0.452'.
[  110.411034][ T7539] netlink: 'syz.1.453': attribute type 2 has an invalid length.
[  110.443007][ T7539] netlink: 'syz.1.453': attribute type 1 has an invalid length.
[  110.457094][ T7545] netlink: 20 bytes leftover after parsing attributes in process `syz.3.455'.
[  110.467243][ T7539] netlink: 'syz.1.453': attribute type 1 has an invalid length.
[  110.622431][ T7552] netlink: 36 bytes leftover after parsing attributes in process `syz.0.458'.
[  110.968719][ T7567] netlink: 'syz.4.461': attribute type 1 has an invalid length.
[  111.125040][ T7573] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  111.194893][ T7576] netlink: 'syz.3.463': attribute type 10 has an invalid length.
[  111.312418][ T7581] x_tables: duplicate underflow at hook 3
[  111.344740][ T7576] 8021q: adding VLAN 0 to HW filter on device team0
[  111.362796][ T7576] bond0: (slave team0): Enslaving as an active interface with an up link
[  111.576965][ T7594] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.608309][ T7594] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.650877][ T5851] Bluetooth: hci0: command 0x0c20 tx timeout
[  111.668126][ T5863] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  111.675556][ T7603] x_tables: duplicate underflow at hook 2
[  111.708225][ T7594] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.715896][ T7594] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.762680][ T7608] netlink: 'syz.2.472': attribute type 3 has an invalid length.
[  111.907013][ T7611] netlink: 'syz.0.473': attribute type 27 has an invalid length.
[  112.245208][ T7629] GUP no longer grows the stack in syz.0.477 (7629): 20006000-2000a000 (20005000)
[  112.278135][ T7629] CPU: 1 UID: 0 PID: 7629 Comm: syz.0.477 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0
[  112.288440][ T7629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  112.298548][ T7629] Call Trace:
[  112.301857][ T7629]  <TASK>
[  112.304816][ T7629]  dump_stack_lvl+0x241/0x360
[  112.309713][ T7629]  ? __pfx_dump_stack_lvl+0x10/0x10
[  112.314954][ T7629]  ? __pfx__printk+0x10/0x10
[  112.319582][ T7629]  ? find_vma+0xf9/0x170
[  112.323872][ T7629]  ? vma_is_secretmem+0xd/0x50
[  112.328666][ T7629]  ? check_vma_flags+0x52b/0x5a0
[  112.333624][ T7629]  __get_user_pages+0x4385/0x49e0
[  112.338679][ T7629]  ? 0xffffffffa0000950
[  112.342963][ T7629]  ? __pfx___get_user_pages+0x10/0x10
[  112.348446][ T7629]  __gup_longterm_locked+0x49a/0x17f0
[  112.353829][ T7629]  ? __pfx___might_resched+0x10/0x10
[  112.359137][ T7629]  ? __pfx___gup_longterm_locked+0x10/0x10
[  112.364944][ T7629]  ? down_read+0x82b/0xa40
[  112.369368][ T7629]  ? is_valid_gup_args+0x124/0x200
[  112.374483][ T7629]  pin_user_pages+0x137/0x1f0
[  112.379194][ T7629]  ? __pfx_pin_user_pages+0x10/0x10
[  112.384397][ T7629]  ? __kmalloc_node_noprof+0x247/0x440
[  112.389868][ T7629]  xdp_umem_create+0x978/0xf30
[  112.394644][ T7629]  xsk_setsockopt+0x732/0x950
[  112.399323][ T7629]  ? __pfx_xsk_setsockopt+0x10/0x10
[  112.404526][ T7629]  ? __pfx_lock_acquire+0x10/0x10
[  112.409548][ T7629]  ? aa_sock_opt_perm+0x79/0x120
[  112.414490][ T7629]  ? __pfx_xsk_setsockopt+0x10/0x10
[  112.419689][ T7629]  do_sock_setsockopt+0x3af/0x720
[  112.424724][ T7629]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  112.430278][ T7629]  ? __fget_files+0x395/0x410
[  112.434958][ T7629]  ? __fget_files+0x2a/0x410
[  112.439555][ T7629]  __x64_sys_setsockopt+0x1ee/0x280
[  112.444762][ T7629]  do_syscall_64+0xf3/0x230
[  112.449291][ T7629]  ? clear_bhb_loop+0x35/0x90
[  112.453971][ T7629]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.459868][ T7629] RIP: 0033:0x7f82f6180809
[  112.464285][ T7629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.483892][ T7629] RSP: 002b:00007f82f705c058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  112.492312][ T7629] RAX: ffffffffffffffda RBX: 00007f82f6345fa0 RCX: 00007f82f6180809
[  112.500288][ T7629] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000008
[  112.508285][ T7629] RBP: 00007f82f61f393e R08: 0000000000000020 R09: 0000000000000000
[  112.516253][ T7629] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000
[  112.524223][ T7629] R13: 0000000000000000 R14: 00007f82f6345fa0 R15: 00007ffe95e469e8
[  112.532211][ T7629]  </TASK>
[  112.737215][ T7654] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  113.214011][ T7681] __nla_validate_parse: 9 callbacks suppressed
[  113.214030][ T7681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.488'.
[  113.503284][ T7697] pim6reg: entered allmulticast mode
[  113.527580][ T7697] pim6reg: left allmulticast mode
[  113.679048][ T7714] netlink: 56 bytes leftover after parsing attributes in process `syz.1.492'.
[  113.739012][ T5863] Bluetooth: hci0: command 0x0c20 tx timeout
[  114.005831][ T7728] netlink: 20 bytes leftover after parsing attributes in process `syz.2.499'.
[  114.224891][ T7736] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  114.248664][ T7740] netlink: 340 bytes leftover after parsing attributes in process `syz.1.503'.
[  114.395533][ T7747] netlink: 240 bytes leftover after parsing attributes in process `syz.2.504'.
[  114.407732][ T7749] netlink: 240 bytes leftover after parsing attributes in process `syz.2.504'.
[  114.547889][ T7757] netlink: 28 bytes leftover after parsing attributes in process `syz.4.506'.
[  114.761656][ T7764] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  114.825246][ T7771] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.508'.
[  114.860589][ T7774] netlink: 28 bytes leftover after parsing attributes in process `syz.0.507'.
[  115.298595][ T7801] ipvlan2: entered promiscuous mode
[  115.450647][ T7820] netlink: 'syz.0.517': attribute type 1 has an invalid length.
[  115.529665][ T7820] ip6gre1: entered promiscuous mode
[  115.545282][ T7820] ip6gre1: entered allmulticast mode
[  115.688490][ T7828] netlink: 68 bytes leftover after parsing attributes in process `syz.4.519'.
[  115.812545][ T5863] Bluetooth: hci0: command 0x0c20 tx timeout
[  115.885441][ T7841] netlink: 'syz.3.522': attribute type 1 has an invalid length.
[  115.945224][ T7841] vlan2: entered promiscuous mode
[  115.953998][ T7841] bond0: entered promiscuous mode
[  115.978831][ T7841] bond_slave_0: entered promiscuous mode
[  115.992544][ T7841] bond_slave_1: entered promiscuous mode
[  116.005008][ T7841] bond1: entered promiscuous mode
[  116.018708][ T7841] team0: entered promiscuous mode
[  116.046382][ T7841] team_slave_0: entered promiscuous mode
[  116.069147][ T7841] team_slave_1: entered promiscuous mode
[  116.094568][ T7841] vlan2: entered allmulticast mode
[  116.131374][ T7841] bond0: entered allmulticast mode
[  116.154463][ T7841] bond_slave_0: entered allmulticast mode
[  116.182105][ T7841] bond_slave_1: entered allmulticast mode
[  116.194221][ T7841] bond1: entered allmulticast mode
[  116.199677][ T7841] team0: entered allmulticast mode
[  116.205121][ T7841] team_slave_0: entered allmulticast mode
[  116.212851][ T7841] team_slave_1: entered allmulticast mode
[  116.285496][ T7841] bond0: left allmulticast mode
[  116.290738][ T7841] bond_slave_0: left allmulticast mode
[  116.299153][ T7841] bond_slave_1: left allmulticast mode
[  116.312457][ T7841] bond1: left allmulticast mode
[  116.317968][ T7841] team0: left allmulticast mode
[  116.324495][ T7841] team_slave_0: left allmulticast mode
[  116.333029][ T7841] team_slave_1: left allmulticast mode
[  116.339146][ T7841] bond0: left promiscuous mode
[  116.345615][ T7841] bond_slave_0: left promiscuous mode
[  116.352458][ T7841] bond_slave_1: left promiscuous mode
[  116.363339][ T7841] bond1: left promiscuous mode
[  116.369035][ T7841] team0: left promiscuous mode
[  116.373914][ T7841] team_slave_0: left promiscuous mode
[  116.383443][ T7841] team_slave_1: left promiscuous mode
[  117.530370][ T7928] netlink: 'syz.0.543': attribute type 2 has an invalid length.
[  117.565168][ T7927] netlink: 'syz.4.544': attribute type 10 has an invalid length.
[  117.594325][ T7927] team0: left promiscuous mode
[  117.657429][ T7927] 8021q: adding VLAN 0 to HW filter on device team0
[  117.760009][ T7927] bond0: (slave team0): Enslaving as an active interface with an up link
[  117.834055][ T7927] Bluetooth: MGMT ver 1.23
[  118.082013][ T7963] gtp0: entered promiscuous mode
[  118.101162][ T7963] gtp0: entered allmulticast mode
[  118.287556][ T7936] infiniband syz1: set down
[  118.302509][ T7936] infiniband syz1: added team_slave_0
[  118.327587][ T7936] syz1: rxe_create_cq: returned err = -12
[  118.369590][ T7936] infiniband syz1: Couldn't create ib_mad CQ
[  118.390384][ T7936] infiniband syz1: Couldn't open port 1
[  118.473056][ T7936] RDS/IB: syz1: added
[  118.488837][ T7936] smc: adding ib device syz1 with port count 1
[  118.505923][ T7936] smc:    ib device syz1 port 1 has pnetid 
[  118.748449][ T7988] __nla_validate_parse: 7 callbacks suppressed
[  118.748467][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.553'.
[  119.145726][ T8003] netlink: 52 bytes leftover after parsing attributes in process `syz.1.556'.
[  119.699021][ T8025] netlink: 'syz.3.562': attribute type 1 has an invalid length.
[  119.795030][ T8023] Cannot find del_set index 2 as target
[  119.869448][ T8025] netlink: 40 bytes leftover after parsing attributes in process `syz.3.562'.
[  119.898370][ T8023] 
: renamed from bond0 (while UP)
[  120.120641][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.566'.
[  120.153534][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'.
[  120.192566][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'.
[  120.321678][ T8045] geneve1: entered allmulticast mode
[  120.411976][ T8051] IPVS: length: 60 != 8
[  120.511751][ T8059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.574'.
[  120.521049][ T8058] netlink: 24 bytes leftover after parsing attributes in process `syz.2.574'.
[  121.424750][ T8087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.865885][ T8110] netlink: 'syz.2.588': attribute type 4 has an invalid length.
[  122.395571][ T8132] netlink: 'syz.1.591': attribute type 2 has an invalid length.
[  122.670887][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.595'.
[  122.841564][ T8157] No such timeout policy "syz0"
[  123.460019][ T8178] netlink: 24 bytes leftover after parsing attributes in process `syz.4.606'.
[  124.023764][ T8201] IPVS: length: 215 != 24
[  124.659258][ T8219] __nla_validate_parse: 2 callbacks suppressed
[  124.659279][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.621'.
[  124.901760][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'.
[  124.916439][ T8228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.622'.
[  125.129258][ T8244] netlink: 'syz.3.628': attribute type 10 has an invalid length.
[  125.166962][ T8244] team0: Device ipvlan1 failed to register rx_handler
[  125.307956][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'.
[  125.327623][ T8248] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.346834][ T8248] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.526034][ T8248] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.533969][ T8248] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.622758][ T8264] veth1_macvtap: left promiscuous mode
[  125.655085][ T8264] macsec0: entered allmulticast mode
[  125.664185][ T8265] veth1_macvtap: entered promiscuous mode
[  125.670206][ T8265] veth1_macvtap: entered allmulticast mode
[  125.676213][ T8265] macsec0: left allmulticast mode
[  125.682294][ T8265] veth1_macvtap: left allmulticast mode
[  125.769636][ T8267] netlink: 'syz.4.633': attribute type 4 has an invalid length.
[  125.912013][ T8267] ip6t_srh: unknown srh match flags  5294
[  125.974952][ T8274] netdevsim netdevsim3 netdevsim1: entered promiscuous mode
[  126.001304][ T8274] macsec1: entered promiscuous mode
[  126.016982][ T8274] macsec1: entered allmulticast mode
[  126.033547][ T8274] netdevsim netdevsim3 netdevsim1: entered allmulticast mode
[  126.085273][ T8274] netdevsim netdevsim3 netdevsim1: left allmulticast mode
[  126.103022][ T8274] netdevsim netdevsim3 netdevsim1: left promiscuous mode
[  126.433956][ T7589] IPVS: starting estimator thread 0...
[  126.538397][ T8294] IPVS: using max 23 ests per chain, 55200 per kthread
[  126.841164][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.648'.
[  126.875429][ T8322] netlink: 28 bytes leftover after parsing attributes in process `syz.4.648'.
[  127.181453][ T8340] netlink: 32 bytes leftover after parsing attributes in process `syz.4.654'.
[  127.206145][ T8340] xt_cgroup: invalid path, errno=-2
[  128.119161][ T8379] netlink: 56 bytes leftover after parsing attributes in process `syz.2.660'.
[  128.158599][ T8379] sch_fq: defrate 511 ignored.
[  128.256061][ T8384] netlink: 32 bytes leftover after parsing attributes in process `syz.0.661'.
[  129.056763][ T8422] openvswitch: netlink: Flow actions attr not present in new flow.
[  129.136318][ T8418] netlink: 108 bytes leftover after parsing attributes in process `syz.3.671'.
[  130.103014][ T8457] gtp1: entered promiscuous mode
[  130.114003][ T8457] gtp1: entered allmulticast mode
[  130.294397][ T8466] netlink: 'syz.4.684': attribute type 1 has an invalid length.
[  130.360898][ T8464] vlan2: entered promiscuous mode
[  130.448983][ T8466] 8021q: adding VLAN 0 to HW filter on device bond2
[  130.531528][ T8469] bond2: (slave gretap1): making interface the new active one
[  130.559615][ T8469] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  130.932585][ T8504] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  131.160035][ T8518] pim6reg1: entered promiscuous mode
[  131.165397][ T8518] pim6reg1: entered allmulticast mode
[  131.226073][ T8523] __nla_validate_parse: 2 callbacks suppressed
[  131.226091][ T8523] netlink: 28 bytes leftover after parsing attributes in process `syz.0.701'.
[  131.247019][ T8523] netlink: 28 bytes leftover after parsing attributes in process `syz.0.701'.
[  131.310679][ T8523] bond0: entered promiscuous mode
[  131.326073][ T8523] bond_slave_0: entered promiscuous mode
[  131.336365][ T8523] bond_slave_1: entered promiscuous mode
[  131.354088][ T8523] bond0: left promiscuous mode
[  131.360167][ T8523] bond_slave_0: left promiscuous mode
[  131.368107][ T8523] bond_slave_1: left promiscuous mode
[  131.585750][ T8532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.703'.
[  131.618183][ T8532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.703'.
[  132.077454][ T8565] FAULT_INJECTION: forcing a failure.
[  132.077454][ T8565] name failslab, interval 1, probability 0, space 0, times 1
[  132.130263][ T8565] CPU: 0 UID: 0 PID: 8565 Comm: syz.0.712 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0
[  132.140571][ T8565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  132.150655][ T8565] Call Trace:
[  132.153971][ T8565]  <TASK>
[  132.156934][ T8565]  dump_stack_lvl+0x241/0x360
[  132.161727][ T8565]  ? __pfx_dump_stack_lvl+0x10/0x10
[  132.166953][ T8565]  ? __pfx__printk+0x10/0x10
[  132.171574][ T8565]  ? __kmalloc_noprof+0xb0/0x400
[  132.176546][ T8565]  ? __pfx___might_resched+0x10/0x10
[  132.181868][ T8565]  should_fail_ex+0x3b0/0x4e0
[  132.186571][ T8565]  ? bpf_test_init+0xe1/0x180
[  132.191277][ T8565]  should_failslab+0xac/0x100
[  132.195975][ T8565]  ? bpf_test_init+0xe1/0x180
[  132.200678][ T8565]  __kmalloc_noprof+0xd8/0x400
[  132.205481][ T8565]  bpf_test_init+0xe1/0x180
[  132.210021][ T8565]  bpf_prog_test_run_skb+0x2bb/0x1820
[  132.215439][ T8565]  ? __pfx_lock_release+0x10/0x10
[  132.220512][ T8565]  ? __pfx___might_resched+0x10/0x10
[  132.225840][ T8565]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  132.231683][ T8565]  ? __fget_files+0x2a/0x410
[  132.236301][ T8565]  ? fput+0x21b/0x290
[  132.240305][ T8565]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  132.246314][ T8565]  bpf_prog_test_run+0x2e4/0x360
[  132.251289][ T8565]  __sys_bpf+0x48d/0x810
[  132.255566][ T8565]  ? __pfx___sys_bpf+0x10/0x10
[  132.260388][ T8565]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  132.266550][ T8565]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  132.272921][ T8565]  ? do_syscall_64+0x100/0x230
[  132.277725][ T8565]  __x64_sys_bpf+0x7c/0x90
[  132.282172][ T8565]  do_syscall_64+0xf3/0x230
[  132.286708][ T8565]  ? clear_bhb_loop+0x35/0x90
[  132.291427][ T8565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.297352][ T8565] RIP: 0033:0x7f82f6180809
[  132.301797][ T8565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  132.321431][ T8565] RSP: 002b:00007f82f705c058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  132.329892][ T8565] RAX: ffffffffffffffda RBX: 00007f82f6345fa0 RCX: 00007f82f6180809
[  132.337895][ T8565] RDX: 000000000000004c RSI: 0000000020000240 RDI: 000000000000000a
[  132.345892][ T8565] RBP: 00007f82f705c0a0 R08: 0000000000000000 R09: 0000000000000000
[  132.353890][ T8565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  132.361887][ T8565] R13: 0000000000000000 R14: 00007f82f6345fa0 R15: 00007ffe95e469e8
[  132.369878][ T8565]  </TASK>
[  132.592754][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.718'.
[  132.607491][ T8595] netlink: 16 bytes leftover after parsing attributes in process `syz.3.718'.
[  132.622213][ T8595] ip6gre1: entered allmulticast mode
[  132.665162][ T8598] netlink: 21 bytes leftover after parsing attributes in process `syz.0.720'.
[  132.986724][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.721'.
[  133.192508][ T8624] FAULT_INJECTION: forcing a failure.
[  133.192508][ T8624] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  133.245643][ T8624] CPU: 1 UID: 0 PID: 8624 Comm: syz.4.727 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0
[  133.255940][ T8624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  133.266022][ T8624] Call Trace:
[  133.269331][ T8624]  <TASK>
[  133.272292][ T8624]  dump_stack_lvl+0x241/0x360
[  133.277019][ T8624]  ? __pfx_dump_stack_lvl+0x10/0x10
[  133.282255][ T8624]  ? __pfx__printk+0x10/0x10
[  133.286903][ T8624]  should_fail_ex+0x3b0/0x4e0
[  133.291626][ T8624]  _copy_from_user+0x2f/0xc0
[  133.296258][ T8624]  bpf_test_init+0x11f/0x180
[  133.300903][ T8624]  bpf_prog_test_run_skb+0x2bb/0x1820
[  133.306310][ T8624]  ? __pfx_lock_release+0x10/0x10
[  133.311373][ T8624]  ? __pfx___might_resched+0x10/0x10
[  133.316700][ T8624]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  133.322543][ T8624]  ? __fget_files+0x2a/0x410
[  133.327174][ T8624]  ? fput+0x21b/0x290
[  133.331188][ T8624]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  133.337035][ T8624]  bpf_prog_test_run+0x2e4/0x360
[  133.342014][ T8624]  __sys_bpf+0x48d/0x810
[  133.346376][ T8624]  ? __pfx___sys_bpf+0x10/0x10
[  133.351177][ T8624]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  133.357186][ T8624]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  133.363540][ T8624]  ? do_syscall_64+0x100/0x230
[  133.368339][ T8624]  __x64_sys_bpf+0x7c/0x90
[  133.372784][ T8624]  do_syscall_64+0xf3/0x230
[  133.377313][ T8624]  ? clear_bhb_loop+0x35/0x90
[  133.382018][ T8624]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.387938][ T8624] RIP: 0033:0x7fe2be780809
[  133.392374][ T8624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  133.412006][ T8624] RSP: 002b:00007fe2bf669058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  133.420454][ T8624] RAX: ffffffffffffffda RBX: 00007fe2be945fa0 RCX: 00007fe2be780809
[  133.428455][ T8624] RDX: 000000000000004c RSI: 0000000020000240 RDI: 000000000000000a
[  133.436451][ T8624] RBP: 00007fe2bf6690a0 R08: 0000000000000000 R09: 0000000000000000
[  133.444451][ T8624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  133.452450][ T8624] R13: 0000000000000000 R14: 00007fe2be945fa0 R15: 00007fff26964de8
[  133.460462][ T8624]  </TASK>
[  133.515724][ T8640] netlink: 44 bytes leftover after parsing attributes in process `syz.1.730'.
[  133.705016][ T8653] lo speed is unknown, defaulting to 1000
[  133.714224][ T8653] lo speed is unknown, defaulting to 1000
[  133.721824][ T8653] lo speed is unknown, defaulting to 1000
[  133.773460][ T8653] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  133.787117][ T8653] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  133.819863][ T8653] lo speed is unknown, defaulting to 1000
[  133.929154][ T8653] lo speed is unknown, defaulting to 1000
[  133.950164][ T8653] lo speed is unknown, defaulting to 1000
[  133.956883][ T8653] lo speed is unknown, defaulting to 1000
[  133.967665][ T8664] netlink: 'syz.4.736': attribute type 1 has an invalid length.
[  133.986652][ T8664] netlink: 'syz.4.736': attribute type 2 has an invalid length.
[  134.006546][ T8653] lo speed is unknown, defaulting to 1000
[  134.041622][ T8653] lo speed is unknown, defaulting to 1000
[  134.050619][ T8653] lo speed is unknown, defaulting to 1000
[  134.555618][ T8698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.745'.
[  134.744758][ T8710] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  135.135701][ T8727] geneve2: entered promiscuous mode
[  135.145448][ T8727] geneve2: entered allmulticast mode
[  135.262773][ T8737] syz.0.752 uses old SIOCAX25GETINFO
[  135.670184][ T8767] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  135.694776][ T8767] x_tables: ip_tables: osf match: only valid for protocol 6
[  135.801042][ T8777] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  135.828029][ T8777] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  135.860311][ T8777] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  135.905740][ T8777] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  135.961835][ T8788] netlink: 'syz.4.771': attribute type 12 has an invalid length.
[  136.305075][ T8804] netlink: 'syz.0.777': attribute type 10 has an invalid length.
[  136.419465][ T8804] team0: Port device wlan1 added
[  137.749122][ T8878] __nla_validate_parse: 10 callbacks suppressed
[  137.749141][ T8878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.790'.
[  137.789920][ T8880] netlink: 16 bytes leftover after parsing attributes in process `syz.1.793'.
[  137.812831][ T8884] netlink: 48 bytes leftover after parsing attributes in process `syz.4.795'.
[  138.096292][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.795'.
[  138.153982][ T8909] FAULT_INJECTION: forcing a failure.
[  138.153982][ T8909] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  138.177895][ T8909] CPU: 0 UID: 0 PID: 8909 Comm: syz.3.799 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0
[  138.188205][ T8909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  138.198287][ T8909] Call Trace:
[  138.201585][ T8909]  <TASK>
[  138.204534][ T8909]  dump_stack_lvl+0x241/0x360
[  138.209245][ T8909]  ? __pfx_dump_stack_lvl+0x10/0x10
[  138.214655][ T8909]  ? __pfx__printk+0x10/0x10
[  138.219291][ T8909]  should_fail_ex+0x3b0/0x4e0
[  138.224007][ T8909]  _copy_to_user+0x31/0xb0
[  138.228454][ T8909]  bpf_test_finish+0x27b/0x890
[  138.233254][ T8909]  ? __pfx_bpf_test_finish+0x10/0x10
[  138.238564][ T8909]  ? convert___skb_to_skb+0x41/0x620
[  138.243878][ T8909]  ? convert_skb_to___skb+0x2d3/0x510
[  138.249295][ T8909]  bpf_prog_test_run_skb+0xff0/0x1820
[  138.254723][ T8909]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  138.260558][ T8909]  ? __fget_files+0x2a/0x410
[  138.265179][ T8909]  ? fput+0x21b/0x290
[  138.269182][ T8909]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  138.275019][ T8909]  bpf_prog_test_run+0x2e4/0x360
[  138.280003][ T8909]  __sys_bpf+0x48d/0x810
[  138.284279][ T8909]  ? __pfx___sys_bpf+0x10/0x10
[  138.289085][ T8909]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  138.295127][ T8909]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  138.301483][ T8909]  ? do_syscall_64+0x100/0x230
[  138.306894][ T8909]  __x64_sys_bpf+0x7c/0x90
[  138.311336][ T8909]  do_syscall_64+0xf3/0x230
[  138.315865][ T8909]  ? clear_bhb_loop+0x35/0x90
[  138.320580][ T8909]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.326501][ T8909] RIP: 0033:0x7f3f5d980809
[  138.330940][ T8909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.339485][ T8889] lo speed is unknown, defaulting to 1000
[  138.350546][ T8909] RSP: 002b:00007f3f5b7f6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  138.350582][ T8909] RAX: ffffffffffffffda RBX: 00007f3f5db45fa0 RCX: 00007f3f5d980809
[  138.350597][ T8909] RDX: 000000000000004c RSI: 0000000020000240 RDI: 000000000000000a
[  138.350610][ T8909] RBP: 00007f3f5b7f60a0 R08: 0000000000000000 R09: 0000000000000000
[  138.350622][ T8909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  138.350633][ T8909] R13: 0000000000000000 R14: 00007f3f5db45fa0 R15: 00007fff60b35318
[  138.350661][ T8909]  </TASK>
[  138.799519][ T8921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.802'.
[  138.841781][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.802'.
[  139.030272][ T8921] xt_CT: No such helper "netbios-ns"
[  139.124008][ T8929] can: request_module (can-proto-0) failed.
[  139.141651][ T8932] netlink: 32 bytes leftover after parsing attributes in process `syz.1.804'.
[  139.180579][ T8936] netlink: 20 bytes leftover after parsing attributes in process `syz.0.805'.
[  139.356004][ T8942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.808'.
[  139.468159][ T8944] netlink: 132 bytes leftover after parsing attributes in process `syz.0.808'.
[  139.708036][ T8951] FAULT_INJECTION: forcing a failure.
[  139.708036][ T8951] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  139.738118][ T8951] CPU: 0 UID: 0 PID: 8951 Comm: syz.2.810 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0
[  139.748421][ T8951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  139.758475][ T8951] Call Trace:
[  139.761779][ T8951]  <TASK>
[  139.764707][ T8951]  dump_stack_lvl+0x241/0x360
[  139.769392][ T8951]  ? __pfx_dump_stack_lvl+0x10/0x10
[  139.774588][ T8951]  ? __pfx__printk+0x10/0x10
[  139.779180][ T8951]  should_fail_ex+0x3b0/0x4e0
[  139.783858][ T8951]  _copy_to_user+0x31/0xb0
[  139.788271][ T8951]  bpf_test_finish+0x212/0x890
[  139.793040][ T8951]  ? __pfx_bpf_test_finish+0x10/0x10
[  139.798332][ T8951]  ? convert___skb_to_skb+0x41/0x620
[  139.803614][ T8951]  ? convert_skb_to___skb+0x2d3/0x510
[  139.808985][ T8951]  bpf_prog_test_run_skb+0xff0/0x1820
[  139.814369][ T8951]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  139.820171][ T8951]  ? __fget_files+0x2a/0x410
[  139.824762][ T8951]  ? fput+0x21b/0x290
[  139.828741][ T8951]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  139.834548][ T8951]  bpf_prog_test_run+0x2e4/0x360
[  139.839493][ T8951]  __sys_bpf+0x48d/0x810
[  139.843736][ T8951]  ? __pfx___sys_bpf+0x10/0x10
[  139.848515][ T8951]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  139.854498][ T8951]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  139.860822][ T8951]  ? do_syscall_64+0x100/0x230
[  139.865673][ T8951]  __x64_sys_bpf+0x7c/0x90
[  139.870088][ T8951]  do_syscall_64+0xf3/0x230
[  139.874588][ T8951]  ? clear_bhb_loop+0x35/0x90
[  139.879263][ T8951]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.885171][ T8951] RIP: 0033:0x7f4be8180809
[  139.889584][ T8951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  139.909188][ T8951] RSP: 002b:00007f4be9020058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  139.917598][ T8951] RAX: ffffffffffffffda RBX: 00007f4be8345fa0 RCX: 00007f4be8180809
[  139.925570][ T8951] RDX: 000000000000004c RSI: 0000000020000240 RDI: 000000000000000a
[  139.933539][ T8951] RBP: 00007f4be90200a0 R08: 0000000000000000 R09: 0000000000000000
[  139.941504][ T8951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  139.949473][ T8951] R13: 0000000000000000 R14: 00007f4be8345fa0 R15: 00007ffd692a84f8
[  139.957449][ T8951]  </TASK>
[  140.020601][ T8952] siw: device registration error -23
[  140.378491][ T8963] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  140.490845][ T8959] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[  141.040664][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  141.052432][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  141.062550][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  141.072696][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  141.086367][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  141.094460][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  141.421536][ T8984] netlink: 'syz.1.820': attribute type 1 has an invalid length.
[  141.439793][ T8976] lo speed is unknown, defaulting to 1000
[  141.627415][ T8976] chnl_net:caif_netlink_parms(): no params data found
[  142.277958][ T8976] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.286239][ T8976] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.293698][ T8976] bridge_slave_0: entered allmulticast mode
[  142.301004][ T8976] bridge_slave_0: entered promiscuous mode
[  142.308649][ T8976] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.315755][ T8976] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.323240][ T8976] bridge_slave_1: entered allmulticast mode
[  142.330561][ T8976] bridge_slave_1: entered promiscuous mode
[  142.359270][ T8976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.370967][ T8976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.403793][ T8976] team0: Port device team_slave_0 added
[  142.411723][ T8976] team0: Port device team_slave_1 added
[  142.429468][ T9001] FAULT_INJECTION: forcing a failure.
[  142.429468][ T9001] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  142.452903][ T9001] CPU: 1 UID: 0 PID: 9001 Comm: syz.1.823 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0
[  142.463194][ T9001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  142.473260][ T9001] Call Trace:
[  142.476552][ T9001]  <TASK>
[  142.479493][ T9001]  dump_stack_lvl+0x241/0x360
[  142.484191][ T9001]  ? __pfx_dump_stack_lvl+0x10/0x10
[  142.489406][ T9001]  ? __pfx__printk+0x10/0x10
[  142.494023][ T9001]  should_fail_ex+0x3b0/0x4e0
[  142.498720][ T9001]  _copy_to_user+0x31/0xb0
[  142.503162][ T9001]  bpf_test_finish+0x2e6/0x890
[  142.507952][ T9001]  ? __pfx_bpf_test_finish+0x10/0x10
[  142.513258][ T9001]  ? convert___skb_to_skb+0x41/0x620
[  142.518555][ T9001]  ? convert_skb_to___skb+0x2d3/0x510
[  142.523948][ T9001]  bpf_prog_test_run_skb+0xff0/0x1820
[  142.529362][ T9001]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  142.535184][ T9001]  ? __fget_files+0x2a/0x410
[  142.539793][ T9001]  ? fput+0x21b/0x290
[  142.543787][ T9001]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  142.549610][ T9001]  bpf_prog_test_run+0x2e4/0x360
[  142.555086][ T9001]  __sys_bpf+0x48d/0x810
[  142.559347][ T9001]  ? __pfx___sys_bpf+0x10/0x10
[  142.564234][ T9001]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  142.570228][ T9001]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  142.576567][ T9001]  ? do_syscall_64+0x100/0x230
[  142.581346][ T9001]  __x64_sys_bpf+0x7c/0x90
[  142.585778][ T9001]  do_syscall_64+0xf3/0x230
[  142.590298][ T9001]  ? clear_bhb_loop+0x35/0x90
[  142.594991][ T9001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.600913][ T9001] RIP: 0033:0x7feaec580809
[  142.605348][ T9001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.624973][ T9001] RSP: 002b:00007feaea3f6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  142.633422][ T9001] RAX: ffffffffffffffda RBX: 00007feaec745fa0 RCX: 00007feaec580809
[  142.641429][ T9001] RDX: 000000000000004c RSI: 0000000020000240 RDI: 000000000000000a
[  142.649425][ T9001] RBP: 00007feaea3f60a0 R08: 0000000000000000 R09: 0000000000000000
[  142.657411][ T9001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  142.665397][ T9001] R13: 0000000000000000 R14: 00007feaec745fa0 R15: 00007ffd3a272cd8
[  142.673484][ T9001]  </TASK>
[  142.801724][ T8976] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.812487][ T8976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.894041][ T8976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.930154][ T8976] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.938984][ T8976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.976268][ T8976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.168011][ T5851] Bluetooth: hci3: command tx timeout
[  143.201380][ T8976] hsr_slave_0: entered promiscuous mode
[  143.241730][ T8976] hsr_slave_1: entered promiscuous mode
[  143.274652][ T8976] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  143.294760][ T8976] Cannot create hsr debugfs directory
[  143.314454][ T9016] Unsupported ieee802154 address type: 0
[  143.443576][ T9016] __nla_validate_parse: 4 callbacks suppressed
[  143.443595][ T9016] netlink: 16 bytes leftover after parsing attributes in process `syz.3.828'.
[  143.745697][ T8976] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.761538][ T9030] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  143.771142][ T9031] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  143.780735][ T8976] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  143.913569][ T8976] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.946089][ T8976] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  144.115300][ T8976] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.151908][ T9039] netlink: 16 bytes leftover after parsing attributes in process `syz.1.833'.
[  144.169855][ T9041] FAULT_INJECTION: forcing a failure.
[  144.169855][ T9041] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  144.203357][ T9041] CPU: 0 UID: 0 PID: 9041 Comm: syz.2.835 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0
[  144.213653][ T9041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  144.223737][ T9041] Call Trace:
[  144.227038][ T9041]  <TASK>
[  144.229994][ T9041]  dump_stack_lvl+0x241/0x360
[  144.230060][ T8976] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  144.234677][ T9041]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.250368][ T9041]  ? __pfx__printk+0x10/0x10
[  144.255004][ T9041]  should_fail_ex+0x3b0/0x4e0
[  144.259710][ T9041]  _copy_to_user+0x31/0xb0
[  144.264151][ T9041]  bpf_test_finish+0x59c/0x890
[  144.268949][ T9041]  ? __pfx_bpf_test_finish+0x10/0x10
[  144.274280][ T9041]  ? convert___skb_to_skb+0x41/0x620
[  144.279593][ T9041]  ? convert_skb_to___skb+0x2d3/0x510
[  144.285012][ T9041]  bpf_prog_test_run_skb+0xff0/0x1820
[  144.290441][ T9041]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  144.296282][ T9041]  ? __fget_files+0x2a/0x410
[  144.300919][ T9041]  ? fput+0x21b/0x290
[  144.304932][ T9041]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  144.310782][ T9041]  bpf_prog_test_run+0x2e4/0x360
[  144.315761][ T9041]  __sys_bpf+0x48d/0x810
[  144.320042][ T9041]  ? __pfx___sys_bpf+0x10/0x10
[  144.324850][ T9041]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  144.330866][ T9041]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  144.337230][ T9041]  ? do_syscall_64+0x100/0x230
[  144.342121][ T9041]  __x64_sys_bpf+0x7c/0x90
[  144.346586][ T9041]  do_syscall_64+0xf3/0x230
[  144.351137][ T9041]  ? clear_bhb_loop+0x35/0x90
[  144.355855][ T9041]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.361787][ T9041] RIP: 0033:0x7f4be8180809
[  144.366230][ T9041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.385872][ T9041] RSP: 002b:00007f4be9020058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  144.394324][ T9041] RAX: ffffffffffffffda RBX: 00007f4be8345fa0 RCX: 00007f4be8180809
[  144.402331][ T9041] RDX: 000000000000004c RSI: 0000000020000240 RDI: 000000000000000a
[  144.410421][ T9041] RBP: 00007f4be90200a0 R08: 0000000000000000 R09: 0000000000000000
[  144.418423][ T9041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  144.426432][ T9041] R13: 0000000000000000 R14: 00007f4be8345fa0 R15: 00007ffd692a84f8
[  144.434454][ T9041]  </TASK>
[  144.614128][ T9063] netlink: 'syz.4.839': attribute type 1 has an invalid length.
[  144.622162][ T9063] netlink: 'syz.4.839': attribute type 2 has an invalid length.
[  144.623277][ T8976] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.641630][ T8976] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  144.803140][ T8976] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  144.824897][ T9071] netlink: 24 bytes leftover after parsing attributes in process `syz.2.842'.
[  144.852648][ T8976] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  144.873169][ T8976] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  144.901460][ T8976] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  144.917605][ T9076] vxcan2: entered allmulticast mode
[  144.966615][ T9077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.844'.
[  145.103271][ T8976] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.160055][ T8976] 8021q: adding VLAN 0 to HW filter on device team0
[  145.182798][ T7524] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.190064][ T7524] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.225132][ T7524] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.233438][ T7524] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.257888][ T5851] Bluetooth: hci3: command tx timeout
[  145.815517][ T8976] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.948982][ T8976] veth0_vlan: entered promiscuous mode
[  145.992270][ T8976] veth1_vlan: entered promiscuous mode
[  146.032602][ T8976] veth0_macvtap: entered promiscuous mode
[  146.042526][ T8976] veth1_macvtap: entered promiscuous mode
[  146.084466][ T8976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.106896][ T9130] netlink: 'syz.1.855': attribute type 3 has an invalid length.
[  146.115684][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.137383][ T8976] batman_adv: batadv0: Interface activated: batadv_slave_0
[  146.159401][ T9131] netlink: 60 bytes leftover after parsing attributes in process `syz.3.856'.
[  146.165818][ T8976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.188863][ T9131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.856'.
[  146.209542][ T9131] netlink: 'syz.3.856': attribute type 2 has an invalid length.
[  146.210917][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.249841][ T8976] batman_adv: batadv0: Interface activated: batadv_slave_1
[  146.282481][ T8976] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.300512][ T8976] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.327968][ T8976] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.357839][ T8976] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.530892][ T7523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.547540][ T7523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.587626][ T7523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.596593][ T7523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.700687][ T9152] netlink: 24 bytes leftover after parsing attributes in process `syz.4.862'.
[  146.807353][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.863'.
[  146.817444][ T9154] netlink: 'syz.4.863': attribute type 30 has an invalid length.
[  146.826082][ T9154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.863'.
[  147.286245][ T9179] netlink: 'syz.3.871': attribute type 1 has an invalid length.
[  147.294735][ T9179] netlink: 224 bytes leftover after parsing attributes in process `syz.3.871'.
[  147.365178][ T5863] Bluetooth: hci4: link tx timeout
[  147.371145][ T5863] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  147.386921][ T5863] Bluetooth: hci4: link tx timeout
[  147.392523][ T5863] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  147.401684][ T5863] Bluetooth: hci4: link tx timeout
[  147.408294][ T5863] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  147.418200][ T5863] Bluetooth: hci4: link tx timeout
[  147.423418][ T5863] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  147.431307][ T5863] Bluetooth: hci4: link tx timeout
[  147.436525][ T5863] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  147.455304][ T5863] Bluetooth: hci4: link tx timeout
[  147.460676][ T5863] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  147.469021][ T5863] Bluetooth: hci4: link tx timeout
[  147.474180][ T5863] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  147.520561][ T9191] hsr0: left allmulticast mode
[  147.525368][ T9191] hsr_slave_0: left allmulticast mode
[  147.548615][ T9191] hsr_slave_1: left allmulticast mode
[  147.554052][ T9191] hsr0: left promiscuous mode
[  147.579140][ T9191] bridge0: port 3(hsr0) entered disabled state
[  147.586762][ T9191] bridge_slave_1: left allmulticast mode
[  147.605671][ T9191] bridge_slave_1: left promiscuous mode
[  147.621088][ T9191] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.643007][ T9191] bridge_slave_0: left allmulticast mode
[  147.657955][ T9191] bridge_slave_0: left promiscuous mode
[  147.664945][ T9191] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.895959][ T7518] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.206594][ T9196] dvmrp5: entered allmulticast mode
[  148.236835][ T9196] dvmrp5: left allmulticast mode
[  148.334769][ T5865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  148.347467][ T5865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  148.356888][ T5865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  148.374970][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  148.384770][ T5865] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  148.392573][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  149.419111][ T5863] Bluetooth: hci4: command 0x0405 tx timeout
[  150.202461][ T9221] veth5: entered promiscuous mode
[  150.249096][ T7518] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.267337][ T9227] tipc: Started in network mode
[  150.273902][ T9227] tipc: Node identity ac14140f, cluster identity 4711
[  150.281337][ T9227] tipc: New replicast peer: 255.255.255.255
[  150.294226][ T9227] tipc: Enabled bearer <udp:syz2>, priority 10
[  150.400316][ T7518] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.448291][ T5863] Bluetooth: hci3: command tx timeout
[  150.599254][ T7518] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.629045][ T9251] __nla_validate_parse: 1 callbacks suppressed
[  150.629064][ T9251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.887'.
[  150.653282][ T9251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  150.672874][ T9204] lo speed is unknown, defaulting to 1000
[  150.683301][ T9254] netlink: 28 bytes leftover after parsing attributes in process `syz.1.887'.
[  150.707105][ T9254] netlink: 28 bytes leftover after parsing attributes in process `syz.1.887'.
[  151.002301][ T9268] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0
[  151.038780][ T9204] chnl_net:caif_netlink_parms(): no params data found
[  151.138537][ T7518] bridge_slave_1: left allmulticast mode
[  151.160714][ T7518] bridge_slave_1: left promiscuous mode
[  151.189598][ T7518] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.271621][ T7518] bridge_slave_0: left allmulticast mode
[  151.277341][ T7518] bridge_slave_0: left promiscuous mode
[  151.308143][ T7518] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.398951][ T8869] tipc: Node number set to 2886997007
[  151.494193][ T5863] Bluetooth: hci4: command 0x0405 tx timeout
[  151.725254][ T7518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  151.741030][ T7518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  151.753166][ T7518] bond0 (unregistering): Released all slaves
[  152.078215][ T9204] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.085739][ T9204] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.093761][ T9204] bridge_slave_0: entered allmulticast mode
[  152.102864][ T9204] bridge_slave_0: entered promiscuous mode
[  152.161240][ T9204] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.170521][ T9204] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.180737][ T9204] bridge_slave_1: entered allmulticast mode
[  152.189208][ T9204] bridge_slave_1: entered promiscuous mode
[  152.426505][ T9204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  152.432316][ T9327] netlink: 56 bytes leftover after parsing attributes in process `syz.3.908'.
[  152.464239][ T7518] hsr_slave_0: left promiscuous mode
[  152.473835][ T7518] hsr_slave_1: left promiscuous mode
[  152.481761][ T7518] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  152.493028][ T7518] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.503716][ T7518] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.516945][ T7518] batman_adv: batadv0: Removing interface: batadv_slave_1
[  152.535579][ T5851] Bluetooth: hci3: command tx timeout
[  152.582348][ T7518] veth1_macvtap: left promiscuous mode
[  152.598280][ T7518] veth0_macvtap: left promiscuous mode
[  152.607105][ T7518] veth1_vlan: left promiscuous mode
[  152.630137][ T7518] veth0_vlan: left promiscuous mode
[  153.427661][ T7518] team0 (unregistering): Port device team_slave_1 removed
[  153.473691][ T7518] team0 (unregistering): Port device team_slave_0 removed
[  153.843675][ T9204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.866296][ T9345] ipvlan0: entered promiscuous mode
[  153.872757][ T9345] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  153.889040][ T9345] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  153.906300][ T9360] netlink: 60 bytes leftover after parsing attributes in process `syz.3.916'.
[  153.982564][ T9204] team0: Port device team_slave_0 added
[  154.014053][ T9204] team0: Port device team_slave_1 added
[  154.102352][ T9204] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.123921][ T9363] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8
[  154.128254][ T9204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.163308][ T9204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.209549][ T9204] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.224692][ T9204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.266318][ T9204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.319540][ T9204] hsr_slave_0: entered promiscuous mode
[  154.329517][ T9204] hsr_slave_1: entered promiscuous mode
[  154.335659][ T9204] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  154.343418][ T9204] Cannot create hsr debugfs directory
[  154.618710][ T5851] Bluetooth: hci3: command tx timeout
[  154.634244][ T9204] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  154.653151][ T9204] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  154.663737][ T9204] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  154.674002][ T9204] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  154.725694][ T9204] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.742056][ T9204] 8021q: adding VLAN 0 to HW filter on device team0
[  154.763087][ T7523] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.770240][ T7523] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.785807][ T7529] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.792923][ T7529] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.915174][ T9204] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.950926][ T9204] veth0_vlan: entered promiscuous mode
[  154.962237][ T9204] veth1_vlan: entered promiscuous mode
[  154.985970][ T9204] veth0_macvtap: entered promiscuous mode
[  154.994644][ T9204] veth1_macvtap: entered promiscuous mode
[  155.009252][ T9204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.020365][ T9204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.031353][ T9204] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.044850][ T9204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.055971][ T9204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.067196][ T9204] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.077679][ T9204] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.087000][ T9204] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.096376][ T9204] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.105108][ T9204] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.157077][ T7523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.167618][ T7523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.192186][ T7529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.201004][ T7529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.193493][ T7522] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.406496][ T5863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  157.418246][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  157.426789][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  157.438094][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  157.445695][ T5863] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  157.455027][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  157.534196][ T9374] lo speed is unknown, defaulting to 1000
[  157.612846][ T9374] chnl_net:caif_netlink_parms(): no params data found
[  157.659713][ T9374] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.667633][ T9374] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.675104][ T9374] bridge_slave_0: entered allmulticast mode
[  157.681833][ T9374] bridge_slave_0: entered promiscuous mode
[  157.691375][ T9374] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.698774][ T9374] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.705959][ T9374] bridge_slave_1: entered allmulticast mode
[  157.713045][ T9374] bridge_slave_1: entered promiscuous mode
[  157.740593][ T9374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.753085][ T9374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.779904][ T9374] team0: Port device team_slave_0 added
[  157.787519][ T9374] team0: Port device team_slave_1 added
[  157.807209][ T9374] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.814681][ T9374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.841112][ T9374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.854178][ T9374] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.861374][ T9374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.887889][ T9374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.918344][ T9374] hsr_slave_0: entered promiscuous mode
[  157.924510][ T9374] hsr_slave_1: entered promiscuous mode
[  157.931961][ T9374] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  157.939865][ T9374] Cannot create hsr debugfs directory
[  158.847241][ T7522] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.934808][ T7522] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.004417][ T7522] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.092933][ T7522] bridge_slave_1: left allmulticast mode
[  159.099011][ T7522] bridge_slave_1: left promiscuous mode
[  159.105957][ T7522] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.115151][ T7522] bridge_slave_0: left allmulticast mode
[  159.122574][ T7522] bridge_slave_0: left promiscuous mode
[  159.128360][ T7522] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.434298][ T7522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  159.447294][ T7522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  159.458067][ T7522] bond0 (unregistering): Released all slaves
[  159.498553][ T5863] Bluetooth: hci3: command tx timeout
[  159.794499][ T7522] hsr_slave_0: left promiscuous mode
[  159.802405][ T7522] hsr_slave_1: left promiscuous mode
[  159.815546][ T7522] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.823043][ T7522] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.831738][ T7522] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.839283][ T7522] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.857136][ T7522] veth1_macvtap: left promiscuous mode
[  159.862874][ T7522] veth0_macvtap: left promiscuous mode
[  159.870280][ T7522] veth1_vlan: left promiscuous mode
[  159.875563][ T7522] veth0_vlan: left promiscuous mode
[  160.250550][ T7522] team0 (unregistering): Port device team_slave_1 removed
[  160.293462][ T7522] team0 (unregistering): Port device team_slave_0 removed
[  160.675961][ T9374] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  160.701165][ T9374] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  160.719296][ T9374] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  160.731356][ T9374] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  160.818849][ T9374] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.835256][ T9374] 8021q: adding VLAN 0 to HW filter on device team0
[  160.859545][ T7529] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.866658][ T7529] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.877772][ T7529] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.884860][ T7529] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.006592][ T9374] 8021q: adding VLAN 0 to HW filter on device batadv0
[  161.042419][ T9374] veth0_vlan: entered promiscuous mode
[  161.053302][ T9374] veth1_vlan: entered promiscuous mode
[  161.076194][ T9374] veth0_macvtap: entered promiscuous mode
[  161.084926][ T9374] veth1_macvtap: entered promiscuous mode
[  161.097673][ T9374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.109955][ T9374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.121775][ T9374] batman_adv: batadv0: Interface activated: batadv_slave_0
[  161.132172][ T9374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.143625][ T9374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.154668][ T9374] batman_adv: batadv0: Interface activated: batadv_slave_1
[  161.167321][ T9374] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.176674][ T9374] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.185463][ T9374] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.194375][ T9374] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.252532][ T7518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.264621][ T7518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.283252][ T7529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.292001][ T7529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.494391][ T7524] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.125909][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  164.138780][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  164.147125][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  164.155366][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  164.163121][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  164.171680][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  164.250683][ T9387] lo speed is unknown, defaulting to 1000
[  164.332412][ T9387] chnl_net:caif_netlink_parms(): no params data found
[  164.378730][ T9387] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.385869][ T9387] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.393863][ T9387] bridge_slave_0: entered allmulticast mode
[  164.401098][ T9387] bridge_slave_0: entered promiscuous mode
[  164.408932][ T9387] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.416030][ T9387] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.424170][ T9387] bridge_slave_1: entered allmulticast mode
[  164.431527][ T9387] bridge_slave_1: entered promiscuous mode
[  164.454962][ T9387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  164.465923][ T9387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.491627][ T9387] team0: Port device team_slave_0 added
[  164.500089][ T9387] team0: Port device team_slave_1 added
[  164.519906][ T9387] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.526880][ T9387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.554243][ T9387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.571240][ T9387] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.579077][ T9387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.605457][ T9387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.636003][ T9387] hsr_slave_0: entered promiscuous mode
[  164.642557][ T9387] hsr_slave_1: entered promiscuous mode
[  164.649487][ T9387] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  164.657053][ T9387] Cannot create hsr debugfs directory
[  165.285595][ T7524] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.361727][ T7524] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.425909][ T7524] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.535402][ T7524] bridge_slave_1: left allmulticast mode
[  165.541258][ T7524] bridge_slave_1: left promiscuous mode
[  165.546933][ T7524] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.556234][ T7524] bridge_slave_0: left allmulticast mode
[  165.562189][ T7524] bridge_slave_0: left promiscuous mode
[  165.569371][ T7524] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.862711][ T7524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  165.873357][ T7524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  165.883968][ T7524] bond0 (unregistering): Released all slaves
[  166.143156][ T7524] hsr_slave_0: left promiscuous mode
[  166.164359][ T7524] hsr_slave_1: left promiscuous mode
[  166.177886][ T7524] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  166.186191][ T7524] batman_adv: batadv0: Removing interface: batadv_slave_0
[  166.198866][ T7524] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  166.206300][ T7524] batman_adv: batadv0: Removing interface: batadv_slave_1
[  166.213700][ T5851] Bluetooth: hci3: command tx timeout
[  166.231152][ T7524] veth1_macvtap: left promiscuous mode
[  166.236660][ T7524] veth0_macvtap: left promiscuous mode
[  166.243799][ T7524] veth1_vlan: left promiscuous mode
[  166.249328][ T7524] veth0_vlan: left promiscuous mode
[  166.644269][ T7524] team0 (unregistering): Port device team_slave_1 removed
[  166.685163][ T7524] team0 (unregistering): Port device team_slave_0 removed
[  167.066594][ T9387] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  167.075808][ T9387] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  167.085002][ T9387] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  167.099434][ T9387] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  167.200010][ T9387] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.216146][ T9387] 8021q: adding VLAN 0 to HW filter on device team0
[  167.237391][ T7522] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.244564][ T7522] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.265045][ T7523] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.272237][ T7523] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.417081][ T9387] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.452829][ T9387] veth0_vlan: entered promiscuous mode
[  167.464148][ T9387] veth1_vlan: entered promiscuous mode
[  167.485962][ T9387] veth0_macvtap: entered promiscuous mode
[  167.495146][ T9387] veth1_macvtap: entered promiscuous mode
[  167.509665][ T9387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.520457][ T9387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.532200][ T9387] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.544553][ T9387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.555269][ T9387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.566498][ T9387] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.581420][ T9387] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.590674][ T9387] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.599571][ T9387] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.608463][ T9387] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.661742][ T7518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.674769][ T7518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.695175][ T7528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.704921][ T7528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.792415][ T7518] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.517241][ T9427] netlink: 28 bytes leftover after parsing attributes in process `syz.2.929'.
[  170.530691][ T9427] netlink: 28 bytes leftover after parsing attributes in process `syz.2.929'.
[  170.620102][ T5863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  170.630388][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  170.640308][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  170.651555][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  170.659943][ T5863] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  170.667376][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  170.723803][ T9436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.930'.
[  170.898905][ T9432] lo speed is unknown, defaulting to 1000
[  171.078386][ T9453] syzkaller1: entered promiscuous mode
[  171.088707][ T9453] syzkaller1: entered allmulticast mode
[  171.103268][ T9432] chnl_net:caif_netlink_parms(): no params data found
[  171.207253][ T9432] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.214836][ T9432] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.228350][ T9432] bridge_slave_0: entered allmulticast mode
[  171.235671][ T9432] bridge_slave_0: entered promiscuous mode
[  171.243997][ T9432] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.252165][ T9432] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.260374][ T9432] bridge_slave_1: entered allmulticast mode
[  171.267565][ T9432] bridge_slave_1: entered promiscuous mode
[  171.295972][ T9432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.308876][ T9432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.383047][ T7518] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.396163][ T9464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.939'.
[  171.413992][ T9432] team0: Port device team_slave_0 added
[  171.422205][ T9432] team0: Port device team_slave_1 added
[  171.474946][ T7518] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.494224][ T9432] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.501691][ T9432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.528695][ T9432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.557172][ T7518] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.577183][ T9432] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.584835][ T9432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.612986][ T9432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  171.633293][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.940'.
[  171.713466][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.941'.
[  171.725645][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.941'.
[  171.738636][ T9432] hsr_slave_0: entered promiscuous mode
[  171.745289][ T9432] hsr_slave_1: entered promiscuous mode
[  171.762615][ T9432] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  171.770517][ T9432] Cannot create hsr debugfs directory
[  171.793368][ T9469] netlink: 'syz.1.941': attribute type 12 has an invalid length.
[  171.849547][ T7518] bridge_slave_1: left allmulticast mode
[  171.855272][ T7518] bridge_slave_1: left promiscuous mode
[  171.866707][ T7518] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.876701][ T7518] bridge_slave_0: left allmulticast mode
[  171.887466][ T7518] bridge_slave_0: left promiscuous mode
[  171.894563][ T7518] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.361359][ T7518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.378438][ T7518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  172.391145][ T7518] bond0 (unregistering): Released all slaves
[  172.420320][ T9475] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  172.433337][ T9475] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  172.460797][ T9475] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  172.768157][ T5851] Bluetooth: hci3: command tx timeout
[  172.966172][ T7518] hsr_slave_0: left promiscuous mode
[  172.981951][ T7518] hsr_slave_1: left promiscuous mode
[  173.005278][ T7518] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.024239][ T7518] batman_adv: batadv0: Removing interface: batadv_slave_0
[  173.033083][ T7518] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.040664][ T7518] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.068734][ T7518] veth1_macvtap: left promiscuous mode
[  173.074418][ T7518] veth0_macvtap: left promiscuous mode
[  173.081231][ T7518] veth1_vlan: left promiscuous mode
[  173.087527][ T7518] veth0_vlan: left promiscuous mode
[  173.628635][ T7518] team0 (unregistering): Port device team_slave_1 removed
[  173.695022][ T7518] team0 (unregistering): Port device team_slave_0 removed
[  174.316651][ T9507] lo speed is unknown, defaulting to 1000
[  174.324591][ T9518] hsr0: entered promiscuous mode
[  174.648845][ T9432] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  174.677467][ T9432] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  174.720536][ T9432] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  174.771013][ T9544] netlink: 60 bytes leftover after parsing attributes in process `syz.2.962'.
[  174.799144][ T9432] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  174.810491][ T9543] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  174.837863][ T9543] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  174.857960][ T5851] Bluetooth: hci3: command tx timeout
[  174.880405][ T9543] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  174.994634][ T9432] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.015123][ T9432] 8021q: adding VLAN 0 to HW filter on device team0
[  175.027102][ T7524] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.034275][ T7524] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.050372][ T7518] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.057589][ T7518] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.086605][ T9553] xt_socket: unknown flags 0x8
[  175.114929][ T9553] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  175.125461][ T9553] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  175.140822][ T9553] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  175.149850][ T9553] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  175.163412][ T9553] geneve2: entered promiscuous mode
[  175.169677][ T9553] geneve2: entered allmulticast mode
[  175.185864][ T8866] IPVS: starting estimator thread 0...
[  175.229872][ T9555] tipc: Started in network mode
[  175.234939][ T9555] tipc: Node identity ac1414aa, cluster identity 4711
[  175.244529][ T9555] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  175.253062][ T9555] tipc: Enabled bearer <udp:s>, priority 10
[  175.288592][ T9556] IPVS: using max 26 ests per chain, 62400 per kthread
[  175.377942][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  175.428424][ T9432] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.507391][ T9432] veth0_vlan: entered promiscuous mode
[  175.518019][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  175.537260][ T9432] veth1_vlan: entered promiscuous mode
[  175.573663][ T9574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.968'.
[  175.582772][ T9573] netlink: 20 bytes leftover after parsing attributes in process `syz.3.969'.
[  175.614159][ T9432] veth0_macvtap: entered promiscuous mode
[  175.630792][ T9570] netlink: 'syz.2.968': attribute type 25 has an invalid length.
[  175.642087][ T9432] veth1_macvtap: entered promiscuous mode
[  175.657984][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  175.719921][ T9432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.734476][ T9432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.745589][ T9432] batman_adv: batadv0: Interface activated: batadv_slave_0
[  175.760186][ T9432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.770990][ T9432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.782169][ T9432] batman_adv: batadv0: Interface activated: batadv_slave_1
[  175.786015][ T9587] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  175.807847][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  175.831430][ T9432] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.840827][ T9432] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.844127][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.970'.
[  175.854573][ T9432] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.867565][ T9432] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.957991][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  176.087459][ T7518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.096966][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.976'.
[  176.106049][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  176.122871][ T7518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.135835][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.978'.
[  176.145903][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.153948][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.166699][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.976'.
[  176.183839][ T9614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.976'.
[  176.195719][ T9614] netlink: 'syz.1.976': attribute type 20 has an invalid length.
[  176.195756][ T9615] netlink: 'syz.3.978': attribute type 3 has an invalid length.
[  176.237961][ T8869] tipc: Node number set to 2886997162
[  176.387909][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  176.485692][ T9631] netlink: 48 bytes leftover after parsing attributes in process `syz.3.982'.
[  176.629236][ T9640] netlink: 32 bytes leftover after parsing attributes in process `syz.3.986'.
[  176.657849][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  176.665738][ T9638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.984'.
[  177.197888][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  178.097419][ T7518] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.275031][ T9704] lo speed is unknown, defaulting to 1000
[  179.043146][ T5863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  179.058669][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  179.078817][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  179.094251][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  179.103397][ T5863] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  179.111008][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  179.139146][ T9725] veth3: entered promiscuous mode
[  179.230457][ T9744] SET target dimension over the limit!
[  179.406318][ T9754] bridge0: entered promiscuous mode
[  179.424397][ T9754] bridge0: entered allmulticast mode
[  179.437386][ T9750] Bluetooth: hci0: Opcode 0x0c20 failed: -112
[  179.440405][ T9754] netlink: 'syz.4.1019': attribute type 4 has an invalid length.
[  179.515020][ T9756] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.531446][ T9756] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  179.549790][ T9733] lo speed is unknown, defaulting to 1000
[  179.579483][ T7518] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.692571][ T9756] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.705698][ T9756] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  179.715414][ T9762] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9
[  179.746012][ T9760] veth0_virt_wifi: entered promiscuous mode
[  179.754998][ T9760] veth0_virt_wifi: left promiscuous mode
[  179.797424][ T7518] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.891212][ T9768] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  179.896266][ T9756] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.899574][ T9768] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  179.922963][ T9756] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  179.971916][ T7518] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.037240][ T9756] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.051903][ T9756] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  180.216922][ T9756] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  180.228308][ T9756] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  180.238956][ T9779] xt_SECMARK: invalid mode: 0
[  180.255365][ T7518] bridge_slave_1: left allmulticast mode
[  180.263046][ T7518] bridge_slave_1: left promiscuous mode
[  180.282923][ T7518] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.290583][    C0] net_ratelimit: 67 callbacks suppressed
[  180.290600][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  180.309374][ T7518] bridge_slave_0: left allmulticast mode
[  180.315206][ T7518] bridge_slave_0: left promiscuous mode
[  180.321359][ T7518] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.709696][ T7518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  180.721817][ T7518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  180.732106][ T7518] bond0 (unregistering): Released all slaves
[  180.746810][ T9756] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  180.755317][ T9756] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  180.767361][ T9733] chnl_net:caif_netlink_parms(): no params data found
[  180.795771][ T9791] __nla_validate_parse: 7 callbacks suppressed
[  180.795791][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1031'.
[  180.873539][ T9756] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  180.885033][ T9756] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  180.923081][ T9756] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  180.932148][ T9756] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  181.036392][ T9733] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.043916][ T9733] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.054384][ T9733] bridge_slave_0: entered allmulticast mode
[  181.062698][ T9733] bridge_slave_0: entered promiscuous mode
[  181.095621][ T9733] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.117312][ T9733] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.140371][ T9733] bridge_slave_1: entered allmulticast mode
[  181.151823][ T9733] bridge_slave_1: entered promiscuous mode
[  181.170823][ T5851] Bluetooth: hci3: command tx timeout
[  181.273142][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1035'.
[  181.282631][ T9805] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1034'.
[  181.305274][ T7518] hsr_slave_0: left promiscuous mode
[  181.311445][ T7518] hsr_slave_1: left promiscuous mode
[  181.317359][ T7518] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.325316][ T7518] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.334049][ T7518] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.337889][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  181.344534][ T7518] batman_adv: batadv0: Removing interface: batadv_slave_1
[  181.367194][ T7518] veth1_macvtap: left promiscuous mode
[  181.373010][ T7518] veth0_macvtap: left promiscuous mode
[  181.379022][ T7518] veth1_vlan: left promiscuous mode
[  181.384314][ T7518] veth0_vlan: left promiscuous mode
[  181.408008][ T5851] Bluetooth: hci0: command 0x0c20 tx timeout
[  181.414278][ T5863] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  181.853677][ T7518] team0 (unregistering): Port device team_slave_1 removed
[  181.899469][ T7518] team0 (unregistering): Port device team_slave_0 removed
[  182.367876][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  182.442963][ T9807] team0 (unregistering): Port device team_slave_0 removed
[  182.460865][ T9807] team0 (unregistering): Port device team_slave_1 removed
[  182.517130][ T9733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  182.543986][ T9733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  182.633442][ T9733] team0: Port device team_slave_0 added
[  182.651278][ T9733] team0: Port device team_slave_1 added
[  182.718612][ T9733] batman_adv: batadv0: Adding interface: batadv_slave_0
[  182.725606][ T9733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.784318][ T9733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  182.813786][ T9834] netlink: 'syz.4.1043': attribute type 3 has an invalid length.
[  182.839244][ T9733] batman_adv: batadv0: Adding interface: batadv_slave_1
[  182.846251][ T9733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.898363][ T9733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  183.070219][ T9733] hsr_slave_0: entered promiscuous mode
[  183.088885][ T9733] hsr_slave_1: entered promiscuous mode
[  183.110746][ T9733] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  183.122571][ T9733] Cannot create hsr debugfs directory
[  183.254448][ T5851] Bluetooth: hci3: command tx timeout
[  183.417896][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  183.488330][ T5851] Bluetooth: hci0: command 0x0c20 tx timeout
[  183.500229][ T5863] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  183.755836][ T9870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1053'.
[  184.076214][ T9890] Cannot find set identified by id 0 to match
[  184.120099][ T9733] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  184.154461][ T9733] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  184.178168][ T9733] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  184.192791][ T9733] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  184.298375][ T9882] lo speed is unknown, defaulting to 1000
[  184.376701][ T9733] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.393184][ T9733] 8021q: adding VLAN 0 to HW filter on device team0
[  184.429792][ T9733] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  184.440914][ T9733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  184.457676][ T7518] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.457831][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  184.464812][ T7518] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.483083][ T7518] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.490292][ T7518] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.548700][ T9897] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  184.786939][ T9733] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.993060][ T9919] netlink: 'syz.4.1065': attribute type 1 has an invalid length.
[  185.121936][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1067'.
[  185.122570][ T9917] bond4 (unregistering): Released all slaves
[  185.149193][ T9926] xt_TCPMSS: Only works on TCP SYN packets
[  185.243690][ T9914] lo speed is unknown, defaulting to 1000
[  185.244090][ T9733] veth0_vlan: entered promiscuous mode
[  185.328049][ T5847] Bluetooth: hci3: command tx timeout
[  185.403860][ T9733] veth1_vlan: entered promiscuous mode
[  185.487896][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  185.568119][ T5847] Bluetooth: hci0: command 0x0c20 tx timeout
[  185.584038][ T9733] veth0_macvtap: entered promiscuous mode
[  185.623880][ T9733] veth1_macvtap: entered promiscuous mode
[  185.642987][ T9733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.654269][ T9733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.666020][ T9733] batman_adv: batadv0: Interface activated: batadv_slave_0
[  185.691005][ T9733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.706982][ T9733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.727485][ T9733] batman_adv: batadv0: Interface activated: batadv_slave_1
[  185.746527][ T9733] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.757176][ T9733] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.766387][ T9733] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.775607][ T9733] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.868766][ T9937] lo speed is unknown, defaulting to 1000
[  186.089507][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.129171][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.221869][ T9966] netlink: 'syz.1.1077': attribute type 3 has an invalid length.
[  186.248209][ T9961] netlink: 'syz.4.1075': attribute type 5 has an invalid length.
[  186.273093][ T7518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.291642][ T7518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.370758][ T5865] Bluetooth: hci1: command 0x0406 tx timeout
[  186.376921][ T5847] Bluetooth: hci2: command 0x0406 tx timeout
[  186.528063][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  186.531346][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1080'.
[  186.652164][ T9977] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  186.661405][ T9977] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  186.670820][ T9977] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  186.679661][ T9977] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  186.705068][ T9982] netlink: 'syz.2.1081': attribute type 13 has an invalid length.
[  186.800658][ T9984] ip_vti0: Master is either lo or non-ether device
[  186.808886][ T9977] ip_vti0: Master is either lo or non-ether device
[  187.004193][ T9996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1085'.
[  187.156822][ T9999] netlink: 'syz.1.1084': attribute type 1 has an invalid length.
[  187.183509][T10002] netlink: 'syz.4.1087': attribute type 21 has an invalid length.
[  187.192504][ T9999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1084'.
[  187.211495][T10002] IPv6: NLM_F_CREATE should be specified when creating new route
[  187.233923][T10002] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  187.241288][T10002] IPv6: NLM_F_CREATE should be set when creating new route
[  187.248618][T10002] IPv6: NLM_F_CREATE should be set when creating new route
[  187.255864][T10002] IPv6: NLM_F_CREATE should be set when creating new route
[  187.275062][T10006] xt_TPROXY: Can be used only with -p tcp or -p udp
[  187.440292][T10011] netlink: 'syz.2.1089': attribute type 1 has an invalid length.
[  187.448304][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1089'.
[  187.461358][T10011] xt_TCPMSS: Only works on TCP SYN packets
[  187.559812][ T7522] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.570542][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  187.650836][ T5863] Bluetooth: hci0: command 0x0c20 tx timeout
[  188.122464][ T7522] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.172358][ T7522] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.235861][ T7522] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.383399][ T7522] bridge_slave_1: left allmulticast mode
[  188.397804][ T7522] bridge_slave_1: left promiscuous mode
[  188.414432][ T7522] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.458748][ T7522] bridge_slave_0: left allmulticast mode
[  188.468000][ T7522] bridge_slave_0: left promiscuous mode
[  188.473759][ T7522] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.617823][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  188.631408][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1095'.
[  188.829666][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  188.839735][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  188.856584][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  188.865785][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  188.887964][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  188.895758][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  189.287515][ T7522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  189.300189][ T7522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  189.310931][ T7522] bond0 (unregistering): Released all slaves
[  189.554390][T10027] lo speed is unknown, defaulting to 1000
[  189.647896][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  189.709130][T10041] lo speed is unknown, defaulting to 1000
[  189.796308][T10069] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1102'.
[  189.947660][ T7522] hsr_slave_0: left promiscuous mode
[  189.973661][ T7522] hsr_slave_1: left promiscuous mode
[  189.981514][ T7522] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  189.989456][ T7522] batman_adv: batadv0: Removing interface: batadv_slave_0
[  189.997222][ T7522] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  190.005090][ T7522] batman_adv: batadv0: Removing interface: batadv_slave_1
[  190.025751][ T7522] veth1_macvtap: left promiscuous mode
[  190.031618][ T7522] veth0_macvtap: left promiscuous mode
[  190.037374][ T7522] veth1_vlan: left promiscuous mode
[  190.042768][ T7522] veth0_vlan: left promiscuous mode
[  190.447035][T10077] netlink: 'syz.1.1104': attribute type 1 has an invalid length.
[  190.456203][T10077] netlink: 'syz.1.1104': attribute type 3 has an invalid length.
[  190.467673][ T7522] team0 (unregistering): Port device team_slave_1 removed
[  190.485197][T10077] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1104'.
[  190.532722][ T7522] team0 (unregistering): Port device team_slave_0 removed
[  190.688579][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  190.985031][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1103'.
[  190.996256][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1103'.
[  191.008103][ T5851] Bluetooth: hci3: command tx timeout
[  191.209951][T10092] IPv6: NLM_F_CREATE should be specified when creating new route
[  191.255642][T10092] IPv6: Can't replace route, no match found
[  191.374110][T10108] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20003
[  191.527923][T10041] chnl_net:caif_netlink_parms(): no params data found
[  191.727944][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  191.822470][T10041] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.831234][T10041] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.843188][T10041] bridge_slave_0: entered allmulticast mode
[  191.853701][T10136] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1119'.
[  191.864301][T10041] bridge_slave_0: entered promiscuous mode
[  191.879139][T10041] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.886397][T10041] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.898138][T10041] bridge_slave_1: entered allmulticast mode
[  191.905146][T10041] bridge_slave_1: entered promiscuous mode
[  192.019286][T10041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.045366][T10041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.177475][T10145] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.1121'.
[  192.197055][T10129] lo speed is unknown, defaulting to 1000
[  192.260250][T10041] team0: Port device team_slave_0 added
[  192.293136][T10041] team0: Port device team_slave_1 added
[  192.366346][ T8869] IPVS: starting estimator thread 0...
[  192.381753][T10156] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1123'.
[  192.395137][T10041] batman_adv: batadv0: Adding interface: batadv_slave_0
[  192.402529][T10041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.464865][T10041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  192.478138][T10159] IPVS: using max 21 ests per chain, 50400 per kthread
[  192.493667][T10041] batman_adv: batadv0: Adding interface: batadv_slave_1
[  192.513998][T10041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.584433][T10041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  192.687302][T10165] tun0: tun_chr_ioctl cmd 1074812117
[  192.776971][T10041] hsr_slave_0: entered promiscuous mode
[  192.777969][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  192.832437][T10041] hsr_slave_1: entered promiscuous mode
[  192.859162][T10041] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  192.873602][T10041] Cannot create hsr debugfs directory
[  193.088125][ T5851] Bluetooth: hci3: command tx timeout
[  193.551512][T10174] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1127'.
[  193.584143][T10174] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1127'.
[  193.597563][T10174] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1127'.
[  193.807809][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  193.875834][T10185] xt_CT: No such helper "netbios-ns"
[  194.037008][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1132'.
[  194.144191][T10178] lo speed is unknown, defaulting to 1000
[  194.151990][T10041] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  194.175067][T10041] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  194.210647][T10041] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  194.235674][T10041] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  194.383516][T10182] xt_TPROXY: Can be used only with -p tcp or -p udp
[  194.404698][T10041] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.419765][T10041] 8021q: adding VLAN 0 to HW filter on device team0
[  194.457218][ T7529] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.464437][ T7529] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.491088][ T7522] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.498278][ T7522] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.623309][T10041] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  194.668643][T10041] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  194.718660][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1137'.
[  194.847866][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  194.986517][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1139'.
[  195.168432][ T5851] Bluetooth: hci3: command tx timeout
[  195.279555][T10041] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.411484][T10041] veth0_vlan: entered promiscuous mode
[  195.457537][T10041] veth1_vlan: entered promiscuous mode
[  195.502789][T10041] veth0_macvtap: entered promiscuous mode
[  195.511861][T10041] veth1_macvtap: entered promiscuous mode
[  195.526022][T10041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.536766][T10041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.548093][T10041] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.567158][T10041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.578993][T10041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.592258][T10041] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.611787][T10041] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.620997][T10041] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.630273][T10041] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.639992][T10041] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.661881][T10244] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1146'.
[  195.796966][ T7528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.820860][ T7528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.849011][T10253] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  195.857621][T10253] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  195.883914][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.891928][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  195.926777][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.042859][T10245] lo speed is unknown, defaulting to 1000
[  196.307466][T10272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  196.384831][T10267] ipt_rpfilter: unknown options
[  196.464182][T10267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  196.614400][T10278] lo speed is unknown, defaulting to 1000
[  196.894391][T10290] __nla_validate_parse: 1 callbacks suppressed
[  196.894411][T10290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1156'.
[  196.927855][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  197.045684][T10295] netlink: 'syz.2.1157': attribute type 4 has an invalid length.
[  197.063876][T10294] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1158'.
[  197.502637][ T7523] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.967868][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  198.548565][T10327] bridge0: entered promiscuous mode
[  198.568271][T10324] bridge0: left promiscuous mode
[  198.865863][ T7523] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.888338][ T5863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  198.900342][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  198.914152][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  198.922519][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  198.930740][ T5863] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  198.938546][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  199.007894][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  199.197472][ T7523] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.408561][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1171'.
[  199.417491][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1171'.
[  199.419633][T10351] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1173'.
[  199.443370][T10352] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1172'.
[  199.451363][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1171'.
[  199.461852][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1171'.
[  199.462903][T10350] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1173'.
[  199.471705][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1171'.
[  199.508024][T10345] hsr0: left promiscuous mode
[  199.513912][T10354] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  199.542831][T10340] lo speed is unknown, defaulting to 1000
[  199.594628][ T7523] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.788281][T10361] netlink: zone id is out of range
[  199.793782][T10361] netlink: zone id is out of range
[  199.820341][T10363] sctp: [Deprecated]: syz.2.1176 (pid 10363) Use of int in max_burst socket option deprecated.
[  199.820341][T10363] Use struct sctp_assoc_value instead
[  199.836897][T10361] netlink: zone id is out of range
[  199.859435][T10361] netlink: zone id is out of range
[  199.894419][T10361] netlink: zone id is out of range
[  199.925340][T10361] netlink: zone id is out of range
[  200.539706][ T7523] bridge_slave_1: left allmulticast mode
[  200.670682][ T7523] bridge_slave_1: left promiscuous mode
[  200.676529][ T7523] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.686474][ T7523] bridge_slave_0: left allmulticast mode
[  200.694114][ T7523] bridge_slave_0: left promiscuous mode
[  200.704427][ T7523] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.026732][ T5851] Bluetooth: hci3: command tx timeout
[  201.087815][    C0] net_ratelimit: 10 callbacks suppressed
[  201.087836][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  201.412310][ T7523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  201.425143][ T7523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  201.438760][ T7523] bond0 (unregistering): Released all slaves
[  201.746077][T10340] chnl_net:caif_netlink_parms(): no params data found
[  201.792546][T10409] gtp2: entered promiscuous mode
[  201.806737][T10409] gtp2: entered allmulticast mode
[  202.127984][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  202.200544][T10340] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.216039][T10340] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.231817][T10340] bridge_slave_0: entered allmulticast mode
[  202.240831][T10340] bridge_slave_0: entered promiscuous mode
[  202.281881][ T7523] hsr_slave_0: left promiscuous mode
[  202.311299][ T7523] hsr_slave_1: left promiscuous mode
[  202.331112][ T7523] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  202.338823][ T7523] batman_adv: batadv0: Removing interface: batadv_slave_0
[  202.350802][ T7523] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  202.377973][ T7523] batman_adv: batadv0: Removing interface: batadv_slave_1
[  202.393241][T10426] syz.1.1192[10426] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  202.393339][T10426] syz.1.1192[10426] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  202.416736][T10426] syz.1.1192[10426] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  202.423611][ T7523] veth1_macvtap: left promiscuous mode
[  202.431532][T10426] __nla_validate_parse: 95 callbacks suppressed
[  202.431551][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1192'.
[  202.458112][ T7523] veth0_macvtap: left promiscuous mode
[  202.466580][ T7523] veth1_vlan: left promiscuous mode
[  202.483668][ T7523] veth0_vlan: left promiscuous mode
[  202.547249][T10433] sctp: [Deprecated]: syz.3.1193 (pid 10433) Use of int in max_burst socket option.
[  202.547249][T10433] Use struct sctp_assoc_value instead
[  203.088296][ T5851] Bluetooth: hci3: command tx timeout
[  203.177842][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  203.190270][ T7523] team0 (unregistering): Port device team_slave_1 removed
[  203.282458][ T7523] team0 (unregistering): Port device team_slave_0 removed
[  203.831595][T10340] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.842357][T10340] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.850917][T10340] bridge_slave_1: entered allmulticast mode
[  203.858478][T10340] bridge_slave_1: entered promiscuous mode
[  203.866226][T10426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1192'.
[  203.889443][T10442] macvtap1: entered promiscuous mode
[  203.894780][T10442] vlan0: entered promiscuous mode
[  203.957108][T10442] vlan0: left promiscuous mode
[  204.091546][T10340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  204.208197][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  204.363667][T10340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  204.645122][T10340] team0: Port device team_slave_0 added
[  204.676116][T10340] team0: Port device team_slave_1 added
[  204.813280][T10340] batman_adv: batadv0: Adding interface: batadv_slave_0
[  204.838830][T10340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.905436][T10340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.066959][T10340] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.082932][T10340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.136639][T10340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.201449][ T5851] Bluetooth: hci3: command tx timeout
[  205.247883][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  205.473114][T10472] 
: renamed from batadv0 (while UP)
[  205.490519][T10474] x_tables: duplicate underflow at hook 2
[  205.573473][T10340] hsr_slave_0: entered promiscuous mode
[  205.595105][T10340] hsr_slave_1: entered promiscuous mode
[  205.637818][T10340] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  205.660011][T10340] Cannot create hsr debugfs directory
[  205.884187][T10483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1208'.
[  206.176256][T10480] lo speed is unknown, defaulting to 1000
[  206.270660][T10489] netlink: 'syz.2.1209': attribute type 10 has an invalid length.
[  206.297836][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  206.835424][T10340] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  206.888623][T10340] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  206.909888][T10340] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  206.923997][T10340] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  206.945882][T10503] netlink: 'syz.4.1214': attribute type 2 has an invalid length.
[  207.087045][T10340] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.165558][T10513] netlink: 'syz.2.1219': attribute type 10 has an invalid length.
[  207.226135][T10340] 8021q: adding VLAN 0 to HW filter on device team0
[  207.242152][ T7523] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.249344][ T7523] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.257489][ T5851] Bluetooth: hci3: command tx timeout
[  207.297196][ T7524] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.304398][ T7524] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.327830][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  207.348703][T10340] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  207.378457][T10340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  207.764886][T10340] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.825072][T10340] veth0_vlan: entered promiscuous mode
[  207.872910][T10340] veth1_vlan: entered promiscuous mode
[  207.934780][T10340] veth0_macvtap: entered promiscuous mode
[  207.957436][T10340] veth1_macvtap: entered promiscuous mode
[  208.005973][T10340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  208.016619][T10340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.028417][T10340] batman_adv: batadv0: Interface activated: batadv_slave_0
[  208.038072][T10340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  208.049014][T10340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.059909][T10340] batman_adv: batadv0: Interface activated: batadv_slave_1
[  208.071397][T10558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1227'.
[  208.076283][T10561] netlink: 'syz.2.1231': attribute type 5 has an invalid length.
[  208.102500][T10340] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.111782][T10340] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.120928][T10340] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.130273][T10340] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  208.141794][T10558] bridge_slave_1: left allmulticast mode
[  208.147553][T10558] bridge_slave_1: left promiscuous mode
[  208.153764][T10558] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.161960][T10566] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1231'.
[  208.174911][T10558] bridge_slave_0: left allmulticast mode
[  208.180813][T10558] bridge_slave_0: left promiscuous mode
[  208.192225][T10558] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.274360][T10573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1235'.
[  208.367918][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  208.424731][T10577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1236'.
[  208.449761][ T7529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.454754][T10580] netlink: 'syz.1.1238': attribute type 21 has an invalid length.
[  208.474165][ T7529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.475157][T10579] netlink: 'syz.2.1236': attribute type 39 has an invalid length.
[  208.487907][T10580] netlink: 'syz.1.1238': attribute type 20 has an invalid length.
[  208.626959][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.644332][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.822944][T10597] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1242'.
[  209.084231][T10625] netlink: 'syz.3.1250': attribute type 32 has an invalid length.
[  209.163346][T10635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1250'.
[  209.270341][T10642] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1254'.
[  209.408207][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  209.572300][T10660] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1258'.
[  209.624787][T10653] lo speed is unknown, defaulting to 1000
[  209.897966][T10671] 
[  209.900348][T10671] ======================================================
[  209.907375][T10671] WARNING: possible circular locking dependency detected
[  209.914407][T10671] 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 Not tainted
[  209.921182][T10671] ------------------------------------------------------
[  209.928215][T10671] syz.4.1260/10671 is trying to acquire lock:
[  209.934293][T10671] ffff888078f9c258 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_device_event+0x24d/0x580
[  209.943738][T10671] 
[  209.943738][T10671] but task is already holding lock:
[  209.951120][T10671] ffffffff8fef1388 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x706/0x1340
[  209.959521][T10671] 
[  209.959521][T10671] which lock already depends on the new lock.
[  209.959521][T10671] 
[  209.969945][T10671] 
[  209.969945][T10671] the existing dependency chain (in reverse order) is:
[  209.978973][T10671] 
[  209.978973][T10671] -> #1 (rtnl_mutex){+.+.}-{4:4}:
[  209.986205][T10671]        lock_acquire+0x1ed/0x550
[  209.991222][T10671]        __mutex_lock+0x1ac/0xee0
[  209.996261][T10671]        ax25_setsockopt+0xa55/0xe90
[  210.001536][T10671]        do_sock_setsockopt+0x3af/0x720
[  210.007105][T10671]        __x64_sys_setsockopt+0x1ee/0x280
[  210.012840][T10671]        do_syscall_64+0xf3/0x230
[  210.017872][T10671]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.024309][T10671] 
[  210.024309][T10671] -> #0 (sk_lock-AF_AX25){+.+.}-{0:0}:
[  210.031945][T10671]        validate_chain+0x18ef/0x5920
[  210.037313][T10671]        __lock_acquire+0x1397/0x2100
[  210.042679][T10671]        lock_acquire+0x1ed/0x550
[  210.047689][T10671]        lock_sock_nested+0x48/0x100
[  210.052972][T10671]        ax25_device_event+0x24d/0x580
[  210.058428][T10671]        notifier_call_chain+0x19f/0x3e0
[  210.064069][T10671]        dev_close_many+0x33c/0x4c0
[  210.069259][T10671]        dev_close+0x1c0/0x2c0
[  210.074014][T10671]        bpq_device_event+0x372/0x8b0
[  210.079387][T10671]        notifier_call_chain+0x19f/0x3e0
[  210.085023][T10671]        __dev_notify_flags+0x207/0x400
[  210.090564][T10671]        dev_change_flags+0xf0/0x1a0
[  210.095847][T10671]        dev_ifsioc+0x7c8/0xe70
[  210.100712][T10671]        dev_ioctl+0x719/0x1340
[  210.105558][T10671]        sock_do_ioctl+0x240/0x460
[  210.110659][T10671]        sock_ioctl+0x626/0x8e0
[  210.115497][T10671]        __se_sys_ioctl+0xf5/0x170
[  210.120594][T10671]        do_syscall_64+0xf3/0x230
[  210.125607][T10671]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.132012][T10671] 
[  210.132012][T10671] other info that might help us debug this:
[  210.132012][T10671] 
[  210.142251][T10671]  Possible unsafe locking scenario:
[  210.142251][T10671] 
[  210.149687][T10671]        CPU0                    CPU1
[  210.155039][T10671]        ----                    ----
[  210.160391][T10671]   lock(rtnl_mutex);
[  210.164362][T10671]                                lock(sk_lock-AF_AX25);
[  210.171281][T10671]                                lock(rtnl_mutex);
[  210.177782][T10671]   lock(sk_lock-AF_AX25);
[  210.182200][T10671] 
[  210.182200][T10671]  *** DEADLOCK ***
[  210.182200][T10671] 
[  210.190326][T10671] 1 lock held by syz.4.1260/10671:
[  210.195417][T10671]  #0: ffffffff8fef1388 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x706/0x1340
[  210.204215][T10671] 
[  210.204215][T10671] stack backtrace:
[  210.210097][T10671] CPU: 1 UID: 0 PID: 10671 Comm: syz.4.1260 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0
[  210.220497][T10671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  210.230546][T10671] Call Trace:
[  210.233816][T10671]  <TASK>
[  210.236742][T10671]  dump_stack_lvl+0x241/0x360
[  210.241415][T10671]  ? __pfx_dump_stack_lvl+0x10/0x10
[  210.246601][T10671]  ? __pfx__printk+0x10/0x10
[  210.251184][T10671]  print_circular_bug+0x13a/0x1b0
[  210.256201][T10671]  check_noncircular+0x36a/0x4a0
[  210.261133][T10671]  ? __pfx_check_noncircular+0x10/0x10
[  210.266587][T10671]  ? lockdep_lock+0x123/0x2b0
[  210.271263][T10671]  validate_chain+0x18ef/0x5920
[  210.276114][T10671]  ? __pfx_validate_chain+0x10/0x10
[  210.281322][T10671]  ? lockdep_hardirqs_on+0x99/0x150
[  210.286510][T10671]  ? finish_task_switch+0x1e5/0x870
[  210.291709][T10671]  ? __schedule+0x1858/0x4c30
[  210.296392][T10671]  ? __pfx___schedule+0x10/0x10
[  210.301231][T10671]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.307293][T10671]  ? mark_lock+0x9a/0x360
[  210.311634][T10671]  __lock_acquire+0x1397/0x2100
[  210.316477][T10671]  lock_acquire+0x1ed/0x550
[  210.320970][T10671]  ? ax25_device_event+0x24d/0x580
[  210.326076][T10671]  ? __pfx_lock_acquire+0x10/0x10
[  210.331087][T10671]  ? mark_lock+0x9a/0x360
[  210.335415][T10671]  ? __local_bh_enable_ip+0x179/0x200
[  210.340782][T10671]  ? ax25_device_event+0x243/0x580
[  210.345892][T10671]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  210.351611][T10671]  ? do_raw_spin_unlock+0x13c/0x8b0
[  210.356814][T10671]  lock_sock_nested+0x48/0x100
[  210.361578][T10671]  ? ax25_device_event+0x24d/0x580
[  210.366785][T10671]  ax25_device_event+0x24d/0x580
[  210.371728][T10671]  notifier_call_chain+0x19f/0x3e0
[  210.376852][T10671]  dev_close_many+0x33c/0x4c0
[  210.381537][T10671]  ? __pfx___try_to_del_timer_sync+0x10/0x10
[  210.387531][T10671]  ? __pfx_dev_close_many+0x10/0x10
[  210.392748][T10671]  ? bond_netdev_event+0x161/0xf20
[  210.397864][T10671]  dev_close+0x1c0/0x2c0
[  210.402112][T10671]  ? __pfx_dev_close+0x10/0x10
[  210.406892][T10671]  ? __asan_memset+0x23/0x50
[  210.411484][T10671]  bpq_device_event+0x372/0x8b0
[  210.416334][T10671]  ? lockdep_rtnl_is_held+0x26/0x40
[  210.421560][T10671]  notifier_call_chain+0x19f/0x3e0
[  210.426673][T10671]  __dev_notify_flags+0x207/0x400
[  210.431696][T10671]  ? dev_set_rx_mode+0x233/0x2e0
[  210.436630][T10671]  ? __pfx___dev_notify_flags+0x10/0x10
[  210.442173][T10671]  ? __dev_change_flags+0x515/0x6f0
[  210.447365][T10671]  ? __pfx___dev_change_flags+0x10/0x10
[  210.452906][T10671]  ? __mutex_lock+0xaf9/0xee0
[  210.457587][T10671]  ? __mutex_lock+0x5ef/0xee0
[  210.458168][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  210.462252][T10671]  dev_change_flags+0xf0/0x1a0
[  210.473846][T10671]  dev_ifsioc+0x7c8/0xe70
[  210.478178][T10671]  ? __pfx_dev_ifsioc+0x10/0x10
[  210.483027][T10671]  ? dev_load+0x21/0x1f0
[  210.487272][T10671]  dev_ioctl+0x719/0x1340
[  210.491601][T10671]  sock_do_ioctl+0x240/0x460
[  210.496189][T10671]  ? __pfx_sock_do_ioctl+0x10/0x10
[  210.501296][T10671]  sock_ioctl+0x626/0x8e0
[  210.505616][T10671]  ? __pfx_sock_ioctl+0x10/0x10
[  210.510457][T10671]  ? __fget_files+0x2a/0x410
[  210.515039][T10671]  ? __fget_files+0x2a/0x410
[  210.519644][T10671]  ? __pfx_sock_ioctl+0x10/0x10
[  210.524487][T10671]  __se_sys_ioctl+0xf5/0x170
[  210.529073][T10671]  do_syscall_64+0xf3/0x230
[  210.533576][T10671]  ? clear_bhb_loop+0x35/0x90
[  210.538254][T10671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.544145][T10671] RIP: 0033:0x7fe2be780809
[  210.548553][T10671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  210.568154][T10671] RSP: 002b:00007fe2bf669058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  210.576565][T10671] RAX: ffffffffffffffda RBX: 00007fe2be945fa0 RCX: 00007fe2be780809
[  210.584531][T10671] RDX: 0000000020000280 RSI: 0000000000008914 RDI: 000000000000000c
[  210.592497][T10671] RBP: 00007fe2be7f393e R08: 0000000000000000 R09: 0000000000000000
[  210.600463][T10671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  210.608431][T10671] R13: 0000000000000000 R14: 00007fe2be945fa0 R15: 00007fff26964de8
[  210.616405][T10671]  </TASK>
[  210.671675][ T7528] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  210.979747][T10692] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  210.999568][T10692] CPU: 0 UID: 0 PID: 10692 Comm: syz-executor Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0
[  211.010209][T10692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  211.020287][T10692] Call Trace:
[  211.023590][T10692]  <TASK>
[  211.026528][T10692]  dump_stack_lvl+0x241/0x360
[  211.031226][T10692]  ? __pfx_dump_stack_lvl+0x10/0x10
[  211.036438][T10692]  ? __pfx__printk+0x10/0x10
[  211.041050][T10692]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  211.047478][T10692]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  211.053983][T10692]  warn_alloc+0x278/0x410
[  211.058316][T10692]  ? __pfx_warn_alloc+0x10/0x10
[  211.063165][T10692]  ? kcov_ioctl+0x56/0x640
[  211.067577][T10692]  ? __get_vm_area_node+0x23d/0x270
[  211.072771][T10692]  __vmalloc_node_range_noprof+0x691/0x13f0
[  211.078691][T10692]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  211.085015][T10692]  ? __pfx_lock_release+0x10/0x10
[  211.090032][T10692]  vmalloc_user_noprof+0x74/0x80
[  211.094963][T10692]  ? kcov_ioctl+0x56/0x640
[  211.099377][T10692]  kcov_ioctl+0x56/0x640
[  211.103613][T10692]  ? __pfx_kcov_ioctl+0x10/0x10
[  211.108466][T10692]  __se_sys_ioctl+0xf5/0x170
[  211.113049][T10692]  do_syscall_64+0xf3/0x230
[  211.117545][T10692]  ? clear_bhb_loop+0x35/0x90
[  211.122216][T10692]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.128103][T10692] RIP: 0033:0x7fb595d8040b
[  211.132511][T10692] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  211.152107][T10692] RSP: 002b:00007ffd05eb9d20 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  211.160511][T10692] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007fb595d8040b
[  211.168475][T10692] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000da
[  211.176436][T10692] RBP: 00007fb595f461f8 R08: 00000000000000d9 R09: 0000000000000000
[  211.184395][T10692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  211.192357][T10692] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  211.200325][T10692]  </TASK>
[  211.444649][T10692] Mem-Info:
[  211.462156][T10692] active_anon:2095 inactive_anon:0 isolated_anon:0
[  211.462156][T10692]  active_file:644 inactive_file:38270 isolated_file:0
[  211.462156][T10692]  unevictable:768 dirty:44 writeback:24
[  211.462156][T10692]  slab_reclaimable:10903 slab_unreclaimable:104854
[  211.462156][T10692]  mapped:3507 shmem:1420 pagetables:321
[  211.462156][T10692]  sec_pagetables:0 bounce:0
[  211.462156][T10692]  kernel_misc_reclaimable:0
[  211.462156][T10692]  free:1380908 free_pcp:8002 free_cma:0
[  211.507493][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  211.584763][ T5856] bond0: (slave syz_tun): Releasing backup interface
[  211.603097][T10692] Node 0 active_anon:8180kB inactive_anon:0kB active_file:2576kB inactive_file:153008kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:13928kB dirty:172kB writeback:96kB shmem:4144kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12388kB pagetables:1284kB sec_pagetables:0kB all_unreclaimable? no
[  211.644473][T10692] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  211.703529][T10692] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  211.733101][T10692] lowmem_reserve[]: 0 2461 2461 0 0
[  211.738804][T10692] Node 0 DMA32 free:1629172kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:8340kB inactive_anon:0kB active_file:2576kB inactive_file:152684kB unevictable:1536kB writepending:164kB present:3129332kB managed:2548448kB mlocked:0kB bounce:0kB free_pcp:22376kB local_pcp:17884kB free_cma:0kB
[  211.771088][T10692] lowmem_reserve[]: 0 0 0 0 0
[  211.775841][T10692] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  211.808002][T10692] lowmem_reserve[]: 0 0 0 0 0
[  211.813194][T10692] Node 1 Normal free:3912180kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  211.842418][T10692] lowmem_reserve[]: 0 0 0 0 0
[  211.847173][T10692] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  211.860041][T10692] Node 0 DMA32: 1447*4kB (UM) 765*8kB (UME) 736*16kB (UME) 719*32kB (UME) 468*64kB (UME) 200*128kB (UME) 122*256kB (UME) 102*512kB (UME) 53*1024kB (UM) 26*2048kB (UM) 328*4096kB (UM) = 1636708kB
[  211.880920][T10692] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  211.893480][T10692] Node 1 Normal: 205*4kB (UME) 40*8kB (UME) 34*16kB (UME) 201*32kB (UME) 97*64kB (UME) 30*128kB (UME) 11*256kB (UME) 12*512kB (UME) 4*1024kB (UM) 3*2048kB (UE) 946*4096kB (M) = 3912180kB
[  211.913220][T10692] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  211.923133][T10692] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  211.932523][T10692] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  211.942502][T10692] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  211.951866][T10692] 40334 total pagecache pages
[  211.956566][T10692] 0 pages in swap cache
[  211.960887][T10692] Free swap  = 124996kB
[  211.965037][T10692] Total swap = 124996kB
[  211.969491][T10692] 2097051 pages RAM
[  211.973296][T10692] 0 pages HighMem/MovableOnly
[  211.978010][T10692] 428217 pages reserved
[  211.982162][T10692] 0 pages cma reserved
[  212.341252][ T7528] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.401518][ T7528] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.442293][ T7528] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.510448][ T7528] bridge_slave_1: left allmulticast mode
[  212.516134][ T7528] bridge_slave_1: left promiscuous mode
[  212.522397][ T7528] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.529699][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  212.538638][ T7528] bridge_slave_0: left allmulticast mode
[  212.544282][ T7528] bridge_slave_0: left promiscuous mode
[  212.550349][ T7528] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.623392][ T7528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  212.634209][ T7528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  212.643935][ T7528] bond0 (unregistering): Released all slaves
[  212.875394][ T7528] hsr_slave_0: left promiscuous mode
[  212.881410][ T7528] hsr_slave_1: left promiscuous mode
[  212.887208][ T7528] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  212.894724][ T7528] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.903172][ T7528] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.918861][ T7528] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.937231][ T7528] veth1_macvtap: left promiscuous mode
[  212.943076][ T7528] veth0_macvtap: left promiscuous mode
[  212.948668][ T7528] veth1_vlan: left promiscuous mode
[  212.953901][ T7528] veth0_vlan: left promiscuous mode
[  213.067275][ T7528] team0 (unregistering): Port device team_slave_1 removed
[  213.092963][ T7528] team0 (unregistering): Port device team_slave_0 removed
[  213.567796][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  214.607825][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  215.647925][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  216.687938][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  217.727818][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  218.768114][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  219.808068][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available