last executing test programs:

1m35.092351118s ago: executing program 4 (id=700):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket(0x26, 0x3, 0x0)
write(r1, &(0x7f00000000c0)="240000005f005f03a9f9f4ba0a1f0000000000000000ecffffffffffffff000000000000", 0x24)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x404002, 0x0)
ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000100))
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x48) (async)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f00000003c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10)
write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc36, 0x0, 0x0, 0x10, 0x2}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc36, 0x0, 0x0, 0x10, 0x2}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000d40)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
sendto(r6, &(0x7f0000000d40)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x5343}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000000780)=""/56, 0x38}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000000880)=""/151, 0x97}, {&(0x7f0000000a00)=""/77, 0x4d}, {&(0x7f0000000a80)=""/195, 0xc3}, {&(0x7f0000000b80)=""/233, 0xe9}, {&(0x7f0000000380)=""/160, 0xa0}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000d80)=""/244, 0xf4}, {&(0x7f00000004c0)=""/151, 0x97}], 0xa}, 0x2}], 0x2, 0x40012062, 0x0) (async)
recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x5343}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000000780)=""/56, 0x38}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000000880)=""/151, 0x97}, {&(0x7f0000000a00)=""/77, 0x4d}, {&(0x7f0000000a80)=""/195, 0xc3}, {&(0x7f0000000b80)=""/233, 0xe9}, {&(0x7f0000000380)=""/160, 0xa0}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000d80)=""/244, 0xf4}, {&(0x7f00000004c0)=""/151, 0x97}], 0xa}, 0x2}], 0x2, 0x40012062, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket(0x2b, 0x1, 0x0)
listen(r8, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r8, 0x541b, 0x0) (async)
ioctl$sock_inet6_udp_SIOCINQ(r8, 0x541b, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=@framed, &(0x7f00000000c0)='GPL\x00'}, 0x90)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000000)=0xfffffffd, 0x4) (async)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000000)=0xfffffffd, 0x4)
socket$inet6_sctp(0xa, 0x801, 0x84)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)

1m33.989643185s ago: executing program 2 (id=1919):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) (async, rerun: 32)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (rerun: 32)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000079c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001e40)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) (async)
r2 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000140)={'syztnl0\x00', <r3=>0x0, 0x8, 0x7800, 0xf6, 0x9, {{0x25, 0x4, 0x0, 0x2, 0x94, 0x68, 0x0, 0x0, 0x29, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x2b, 0x3, [{0x6, 0x6, "d6b1e033"}, {0x7, 0xe, "48edcb0f2d3f717df794fc96"}, {0x5, 0x2}, {0x2, 0xd, "d01bd951bc58245039de9e"}, {0x7, 0x2}]}, @generic={0x83, 0x12, "b015195b270ae71ed45d20cb5be6b26a"}, @noop, @lsrr={0x83, 0x7, 0x7b, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x15, 0x3, [{0x5, 0xf, "cff7442fe10298dbc59fcd88a9"}]}, @lsrr={0x83, 0x1f, 0xf7, [@broadcast, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x3b}, @remote]}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) (async, rerun: 64)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x8, r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7f, 0x0, &(0x7f0000000100), 0x40f00, 0x0, '\x00', r3, 0xd85b36a2d16686c6, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x4, 0x8}, 0x10, 0xffffffffffffffff, r4, 0x8, 0x0, &(0x7f00000003c0)=[{0x4, 0x2, 0xa, 0x2}, {0x5, 0x3, 0xa, 0xc}, {0x0, 0x4, 0xd}, {0x3, 0x1, 0x8, 0x5}, {0x3, 0x3, 0x1, 0x5}, {0x3, 0x1, 0xa, 0x2}, {0x1, 0x1, 0xc, 0x8}, {0x3, 0x2, 0x1}], 0x10, 0x9}, 0x90)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) (async, rerun: 64)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x3f, 0x3202, @vifc_lcl_addr=@remote, @remote}, 0x10) (rerun: 64)

1m16.630536014s ago: executing program 2 (id=1919):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) (async, rerun: 32)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (rerun: 32)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000079c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001e40)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) (async)
r2 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000140)={'syztnl0\x00', <r3=>0x0, 0x8, 0x7800, 0xf6, 0x9, {{0x25, 0x4, 0x0, 0x2, 0x94, 0x68, 0x0, 0x0, 0x29, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x2b, 0x3, [{0x6, 0x6, "d6b1e033"}, {0x7, 0xe, "48edcb0f2d3f717df794fc96"}, {0x5, 0x2}, {0x2, 0xd, "d01bd951bc58245039de9e"}, {0x7, 0x2}]}, @generic={0x83, 0x12, "b015195b270ae71ed45d20cb5be6b26a"}, @noop, @lsrr={0x83, 0x7, 0x7b, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x15, 0x3, [{0x5, 0xf, "cff7442fe10298dbc59fcd88a9"}]}, @lsrr={0x83, 0x1f, 0xf7, [@broadcast, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x3b}, @remote]}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) (async, rerun: 64)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x8, r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7f, 0x0, &(0x7f0000000100), 0x40f00, 0x0, '\x00', r3, 0xd85b36a2d16686c6, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x4, 0x8}, 0x10, 0xffffffffffffffff, r4, 0x8, 0x0, &(0x7f00000003c0)=[{0x4, 0x2, 0xa, 0x2}, {0x5, 0x3, 0xa, 0xc}, {0x0, 0x4, 0xd}, {0x3, 0x1, 0x8, 0x5}, {0x3, 0x3, 0x1, 0x5}, {0x3, 0x1, 0xa, 0x2}, {0x1, 0x1, 0xc, 0x8}, {0x3, 0x2, 0x1}], 0x10, 0x9}, 0x90)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) (async, rerun: 64)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x3f, 0x3202, @vifc_lcl_addr=@remote, @remote}, 0x10) (rerun: 64)

1m15.954124353s ago: executing program 4 (id=700):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket(0x26, 0x3, 0x0)
write(r1, &(0x7f00000000c0)="240000005f005f03a9f9f4ba0a1f0000000000000000ecffffffffffffff000000000000", 0x24)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x404002, 0x0)
ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000100))
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x48) (async)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f00000003c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10)
write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc36, 0x0, 0x0, 0x10, 0x2}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc36, 0x0, 0x0, 0x10, 0x2}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000d40)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
sendto(r6, &(0x7f0000000d40)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x5343}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000000780)=""/56, 0x38}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000000880)=""/151, 0x97}, {&(0x7f0000000a00)=""/77, 0x4d}, {&(0x7f0000000a80)=""/195, 0xc3}, {&(0x7f0000000b80)=""/233, 0xe9}, {&(0x7f0000000380)=""/160, 0xa0}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000d80)=""/244, 0xf4}, {&(0x7f00000004c0)=""/151, 0x97}], 0xa}, 0x2}], 0x2, 0x40012062, 0x0) (async)
recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x5343}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000000780)=""/56, 0x38}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000000880)=""/151, 0x97}, {&(0x7f0000000a00)=""/77, 0x4d}, {&(0x7f0000000a80)=""/195, 0xc3}, {&(0x7f0000000b80)=""/233, 0xe9}, {&(0x7f0000000380)=""/160, 0xa0}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000d80)=""/244, 0xf4}, {&(0x7f00000004c0)=""/151, 0x97}], 0xa}, 0x2}], 0x2, 0x40012062, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket(0x2b, 0x1, 0x0)
listen(r8, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r8, 0x541b, 0x0) (async)
ioctl$sock_inet6_udp_SIOCINQ(r8, 0x541b, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=@framed, &(0x7f00000000c0)='GPL\x00'}, 0x90)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000000)=0xfffffffd, 0x4) (async)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000000)=0xfffffffd, 0x4)
socket$inet6_sctp(0xa, 0x801, 0x84)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)

1m0.062509865s ago: executing program 2 (id=1919):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) (async, rerun: 32)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (rerun: 32)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000079c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001e40)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) (async)
r2 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000140)={'syztnl0\x00', <r3=>0x0, 0x8, 0x7800, 0xf6, 0x9, {{0x25, 0x4, 0x0, 0x2, 0x94, 0x68, 0x0, 0x0, 0x29, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x2b, 0x3, [{0x6, 0x6, "d6b1e033"}, {0x7, 0xe, "48edcb0f2d3f717df794fc96"}, {0x5, 0x2}, {0x2, 0xd, "d01bd951bc58245039de9e"}, {0x7, 0x2}]}, @generic={0x83, 0x12, "b015195b270ae71ed45d20cb5be6b26a"}, @noop, @lsrr={0x83, 0x7, 0x7b, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x15, 0x3, [{0x5, 0xf, "cff7442fe10298dbc59fcd88a9"}]}, @lsrr={0x83, 0x1f, 0xf7, [@broadcast, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x3b}, @remote]}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) (async, rerun: 64)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x8, r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7f, 0x0, &(0x7f0000000100), 0x40f00, 0x0, '\x00', r3, 0xd85b36a2d16686c6, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x4, 0x8}, 0x10, 0xffffffffffffffff, r4, 0x8, 0x0, &(0x7f00000003c0)=[{0x4, 0x2, 0xa, 0x2}, {0x5, 0x3, 0xa, 0xc}, {0x0, 0x4, 0xd}, {0x3, 0x1, 0x8, 0x5}, {0x3, 0x3, 0x1, 0x5}, {0x3, 0x1, 0xa, 0x2}, {0x1, 0x1, 0xc, 0x8}, {0x3, 0x2, 0x1}], 0x10, 0x9}, 0x90)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) (async, rerun: 64)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x3f, 0x3202, @vifc_lcl_addr=@remote, @remote}, 0x10) (rerun: 64)

56.607023712s ago: executing program 4 (id=700):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket(0x26, 0x3, 0x0)
write(r1, &(0x7f00000000c0)="240000005f005f03a9f9f4ba0a1f0000000000000000ecffffffffffffff000000000000", 0x24)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x404002, 0x0)
ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000100))
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x48) (async)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f00000003c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10)
write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc36, 0x0, 0x0, 0x10, 0x2}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc36, 0x0, 0x0, 0x10, 0x2}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000d40)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
sendto(r6, &(0x7f0000000d40)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x5343}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000000780)=""/56, 0x38}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000000880)=""/151, 0x97}, {&(0x7f0000000a00)=""/77, 0x4d}, {&(0x7f0000000a80)=""/195, 0xc3}, {&(0x7f0000000b80)=""/233, 0xe9}, {&(0x7f0000000380)=""/160, 0xa0}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000d80)=""/244, 0xf4}, {&(0x7f00000004c0)=""/151, 0x97}], 0xa}, 0x2}], 0x2, 0x40012062, 0x0) (async)
recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x5343}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000000780)=""/56, 0x38}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000000880)=""/151, 0x97}, {&(0x7f0000000a00)=""/77, 0x4d}, {&(0x7f0000000a80)=""/195, 0xc3}, {&(0x7f0000000b80)=""/233, 0xe9}, {&(0x7f0000000380)=""/160, 0xa0}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000d80)=""/244, 0xf4}, {&(0x7f00000004c0)=""/151, 0x97}], 0xa}, 0x2}], 0x2, 0x40012062, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket(0x2b, 0x1, 0x0)
listen(r8, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r8, 0x541b, 0x0) (async)
ioctl$sock_inet6_udp_SIOCINQ(r8, 0x541b, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=@framed, &(0x7f00000000c0)='GPL\x00'}, 0x90)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000000)=0xfffffffd, 0x4) (async)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000000)=0xfffffffd, 0x4)
socket$inet6_sctp(0xa, 0x801, 0x84)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)

44.173612057s ago: executing program 2 (id=1919):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) (async, rerun: 32)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (rerun: 32)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000079c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001e40)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) (async)
r2 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000140)={'syztnl0\x00', <r3=>0x0, 0x8, 0x7800, 0xf6, 0x9, {{0x25, 0x4, 0x0, 0x2, 0x94, 0x68, 0x0, 0x0, 0x29, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x2b, 0x3, [{0x6, 0x6, "d6b1e033"}, {0x7, 0xe, "48edcb0f2d3f717df794fc96"}, {0x5, 0x2}, {0x2, 0xd, "d01bd951bc58245039de9e"}, {0x7, 0x2}]}, @generic={0x83, 0x12, "b015195b270ae71ed45d20cb5be6b26a"}, @noop, @lsrr={0x83, 0x7, 0x7b, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x15, 0x3, [{0x5, 0xf, "cff7442fe10298dbc59fcd88a9"}]}, @lsrr={0x83, 0x1f, 0xf7, [@broadcast, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x3b}, @remote]}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) (async, rerun: 64)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x8, r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7f, 0x0, &(0x7f0000000100), 0x40f00, 0x0, '\x00', r3, 0xd85b36a2d16686c6, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x4, 0x8}, 0x10, 0xffffffffffffffff, r4, 0x8, 0x0, &(0x7f00000003c0)=[{0x4, 0x2, 0xa, 0x2}, {0x5, 0x3, 0xa, 0xc}, {0x0, 0x4, 0xd}, {0x3, 0x1, 0x8, 0x5}, {0x3, 0x3, 0x1, 0x5}, {0x3, 0x1, 0xa, 0x2}, {0x1, 0x1, 0xc, 0x8}, {0x3, 0x2, 0x1}], 0x10, 0x9}, 0x90)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) (async, rerun: 64)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x3f, 0x3202, @vifc_lcl_addr=@remote, @remote}, 0x10) (rerun: 64)

43.202906408s ago: executing program 4 (id=700):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket(0x26, 0x3, 0x0)
write(r1, &(0x7f00000000c0)="240000005f005f03a9f9f4ba0a1f0000000000000000ecffffffffffffff000000000000", 0x24)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x404002, 0x0)
ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000100))
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x48) (async)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f00000003c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10)
write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc36, 0x0, 0x0, 0x10, 0x2}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc36, 0x0, 0x0, 0x10, 0x2}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000d40)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
sendto(r6, &(0x7f0000000d40)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x5343}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000000780)=""/56, 0x38}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000000880)=""/151, 0x97}, {&(0x7f0000000a00)=""/77, 0x4d}, {&(0x7f0000000a80)=""/195, 0xc3}, {&(0x7f0000000b80)=""/233, 0xe9}, {&(0x7f0000000380)=""/160, 0xa0}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000d80)=""/244, 0xf4}, {&(0x7f00000004c0)=""/151, 0x97}], 0xa}, 0x2}], 0x2, 0x40012062, 0x0) (async)
recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x5343}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000000780)=""/56, 0x38}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000000880)=""/151, 0x97}, {&(0x7f0000000a00)=""/77, 0x4d}, {&(0x7f0000000a80)=""/195, 0xc3}, {&(0x7f0000000b80)=""/233, 0xe9}, {&(0x7f0000000380)=""/160, 0xa0}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000d80)=""/244, 0xf4}, {&(0x7f00000004c0)=""/151, 0x97}], 0xa}, 0x2}], 0x2, 0x40012062, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket(0x2b, 0x1, 0x0)
listen(r8, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r8, 0x541b, 0x0) (async)
ioctl$sock_inet6_udp_SIOCINQ(r8, 0x541b, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=@framed, &(0x7f00000000c0)='GPL\x00'}, 0x90)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000000)=0xfffffffd, 0x4) (async)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000000)=0xfffffffd, 0x4)
socket$inet6_sctp(0xa, 0x801, 0x84)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)

28.172886339s ago: executing program 2 (id=1919):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) (async, rerun: 32)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (rerun: 32)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000079c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001e40)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) (async)
r2 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000140)={'syztnl0\x00', <r3=>0x0, 0x8, 0x7800, 0xf6, 0x9, {{0x25, 0x4, 0x0, 0x2, 0x94, 0x68, 0x0, 0x0, 0x29, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x2b, 0x3, [{0x6, 0x6, "d6b1e033"}, {0x7, 0xe, "48edcb0f2d3f717df794fc96"}, {0x5, 0x2}, {0x2, 0xd, "d01bd951bc58245039de9e"}, {0x7, 0x2}]}, @generic={0x83, 0x12, "b015195b270ae71ed45d20cb5be6b26a"}, @noop, @lsrr={0x83, 0x7, 0x7b, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x15, 0x3, [{0x5, 0xf, "cff7442fe10298dbc59fcd88a9"}]}, @lsrr={0x83, 0x1f, 0xf7, [@broadcast, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x3b}, @remote]}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) (async, rerun: 64)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x8, r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7f, 0x0, &(0x7f0000000100), 0x40f00, 0x0, '\x00', r3, 0xd85b36a2d16686c6, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x4, 0x8}, 0x10, 0xffffffffffffffff, r4, 0x8, 0x0, &(0x7f00000003c0)=[{0x4, 0x2, 0xa, 0x2}, {0x5, 0x3, 0xa, 0xc}, {0x0, 0x4, 0xd}, {0x3, 0x1, 0x8, 0x5}, {0x3, 0x3, 0x1, 0x5}, {0x3, 0x1, 0xa, 0x2}, {0x1, 0x1, 0xc, 0x8}, {0x3, 0x2, 0x1}], 0x10, 0x9}, 0x90)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) (async, rerun: 64)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x3f, 0x3202, @vifc_lcl_addr=@remote, @remote}, 0x10) (rerun: 64)

27.51729697s ago: executing program 4 (id=700):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket(0x26, 0x3, 0x0)
write(r1, &(0x7f00000000c0)="240000005f005f03a9f9f4ba0a1f0000000000000000ecffffffffffffff000000000000", 0x24)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x404002, 0x0)
ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000100))
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x48) (async)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f00000003c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10)
write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc36, 0x0, 0x0, 0x10, 0x2}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc36, 0x0, 0x0, 0x10, 0x2}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000d40)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
sendto(r6, &(0x7f0000000d40)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x5343}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000000780)=""/56, 0x38}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000000880)=""/151, 0x97}, {&(0x7f0000000a00)=""/77, 0x4d}, {&(0x7f0000000a80)=""/195, 0xc3}, {&(0x7f0000000b80)=""/233, 0xe9}, {&(0x7f0000000380)=""/160, 0xa0}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000d80)=""/244, 0xf4}, {&(0x7f00000004c0)=""/151, 0x97}], 0xa}, 0x2}], 0x2, 0x40012062, 0x0) (async)
recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x5343}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000000780)=""/56, 0x38}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000000880)=""/151, 0x97}, {&(0x7f0000000a00)=""/77, 0x4d}, {&(0x7f0000000a80)=""/195, 0xc3}, {&(0x7f0000000b80)=""/233, 0xe9}, {&(0x7f0000000380)=""/160, 0xa0}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000d80)=""/244, 0xf4}, {&(0x7f00000004c0)=""/151, 0x97}], 0xa}, 0x2}], 0x2, 0x40012062, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket(0x2b, 0x1, 0x0)
listen(r8, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r8, 0x541b, 0x0) (async)
ioctl$sock_inet6_udp_SIOCINQ(r8, 0x541b, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=@framed, &(0x7f00000000c0)='GPL\x00'}, 0x90)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000000)=0xfffffffd, 0x4) (async)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000000)=0xfffffffd, 0x4)
socket$inet6_sctp(0xa, 0x801, 0x84)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)

13.14138717s ago: executing program 2 (id=1919):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) (async, rerun: 32)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (rerun: 32)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000079c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001e40)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) (async)
r2 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000140)={'syztnl0\x00', <r3=>0x0, 0x8, 0x7800, 0xf6, 0x9, {{0x25, 0x4, 0x0, 0x2, 0x94, 0x68, 0x0, 0x0, 0x29, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x2b, 0x3, [{0x6, 0x6, "d6b1e033"}, {0x7, 0xe, "48edcb0f2d3f717df794fc96"}, {0x5, 0x2}, {0x2, 0xd, "d01bd951bc58245039de9e"}, {0x7, 0x2}]}, @generic={0x83, 0x12, "b015195b270ae71ed45d20cb5be6b26a"}, @noop, @lsrr={0x83, 0x7, 0x7b, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x15, 0x3, [{0x5, 0xf, "cff7442fe10298dbc59fcd88a9"}]}, @lsrr={0x83, 0x1f, 0xf7, [@broadcast, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x3b}, @remote]}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) (async, rerun: 64)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x8, r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7f, 0x0, &(0x7f0000000100), 0x40f00, 0x0, '\x00', r3, 0xd85b36a2d16686c6, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x4, 0x8}, 0x10, 0xffffffffffffffff, r4, 0x8, 0x0, &(0x7f00000003c0)=[{0x4, 0x2, 0xa, 0x2}, {0x5, 0x3, 0xa, 0xc}, {0x0, 0x4, 0xd}, {0x3, 0x1, 0x8, 0x5}, {0x3, 0x3, 0x1, 0x5}, {0x3, 0x1, 0xa, 0x2}, {0x1, 0x1, 0xc, 0x8}, {0x3, 0x2, 0x1}], 0x10, 0x9}, 0x90)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) (async, rerun: 64)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x3f, 0x3202, @vifc_lcl_addr=@remote, @remote}, 0x10) (rerun: 64)

11.624191354s ago: executing program 4 (id=700):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket(0x26, 0x3, 0x0)
write(r1, &(0x7f00000000c0)="240000005f005f03a9f9f4ba0a1f0000000000000000ecffffffffffffff000000000000", 0x24)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x404002, 0x0)
ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000100))
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x48) (async)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f00000003c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10)
write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc36, 0x0, 0x0, 0x10, 0x2}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc36, 0x0, 0x0, 0x10, 0x2}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000d40)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
sendto(r6, &(0x7f0000000d40)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x5343}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000000780)=""/56, 0x38}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000000880)=""/151, 0x97}, {&(0x7f0000000a00)=""/77, 0x4d}, {&(0x7f0000000a80)=""/195, 0xc3}, {&(0x7f0000000b80)=""/233, 0xe9}, {&(0x7f0000000380)=""/160, 0xa0}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000d80)=""/244, 0xf4}, {&(0x7f00000004c0)=""/151, 0x97}], 0xa}, 0x2}], 0x2, 0x40012062, 0x0) (async)
recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x5343}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000000780)=""/56, 0x38}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000000880)=""/151, 0x97}, {&(0x7f0000000a00)=""/77, 0x4d}, {&(0x7f0000000a80)=""/195, 0xc3}, {&(0x7f0000000b80)=""/233, 0xe9}, {&(0x7f0000000380)=""/160, 0xa0}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000d80)=""/244, 0xf4}, {&(0x7f00000004c0)=""/151, 0x97}], 0xa}, 0x2}], 0x2, 0x40012062, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket(0x2b, 0x1, 0x0)
listen(r8, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r8, 0x541b, 0x0) (async)
ioctl$sock_inet6_udp_SIOCINQ(r8, 0x541b, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=@framed, &(0x7f00000000c0)='GPL\x00'}, 0x90)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000000)=0xfffffffd, 0x4) (async)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000000)=0xfffffffd, 0x4)
socket$inet6_sctp(0xa, 0x801, 0x84)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)

2.225972057s ago: executing program 1 (id=2701):
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x8004)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', <r6=>0x0})
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r1, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xf}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x4000010)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r0)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r7, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x9}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x12}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xb}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x66}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xb}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, &(0x7f0000000540)=0x8000, 0x2)
sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r7, 0x400, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x80)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, r1, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}]}, 0x48}}, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan1\x00', <r9=>0x0})
ioctl$sock_proto_private(r8, 0x89e5, &(0x7f0000000800)="a2529045576982da24ff408a5873ec7b2abd1a95403f47e1d792bafbba743b459a627c20a29ae465a36e0c8d7295f08f8d45e491a89315d8f56b38c147ab97bd448bf74f3e63c8d859e9c9258dd9d0ad0c8d273812ab47e040958cabe345ac84e9ee2037b150683d4834f1d58408f9775a00cbccb7159189f6ad5411a1f87e84d6954241c90d7e653bee51b675ae9041bcc4caf088be0799ded80fe8fe8084371db2d4aae323432ccaaa760f9b1888e67656acfaa8e1699c1bd8184fb7a5fd6e48cfe078fb723e1dc5400ea321fd454aecf885022a9bfe")
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r0)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x64, r10, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x38c7e1b076e9f1b1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000004)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r11, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000081)
sendmsg$IEEE802154_ADD_IFACE(r0, 0x0, 0x4010)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000cc0)={'sit0\x00', &(0x7f0000000bc0)={'ip_vti0\x00', <r12=>0x0, 0xbebc0e8f7ec52af7, 0x7, 0x28000, 0x8, {{0x33, 0x4, 0x0, 0x7, 0xcc, 0x64, 0x0, 0xe2, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp={0x44, 0x10, 0x9a, 0x0, 0xd, [0xffff, 0x5, 0x918]}, @timestamp_prespec={0x44, 0x14, 0x5e, 0x3, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@multicast2, 0x80}]}, @generic={0x44, 0xe, "00946fddfd834769aac65b03"}, @lsrr={0x83, 0x1b, 0x39, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x41}, @remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @cipso={0x86, 0x4e, 0x0, [{0x0, 0x2}, {0x2, 0xe, "a1e30b3896997786c28daa70"}, {0x2, 0x5, "7529d2"}, {0x0, 0xa, "868f9724fac262cf"}, {0x6, 0x11, "4cbf2162e5898a1d84cc91f2e20d1a"}, {0x5, 0x10, "0ed5cedb4b47dcf05d63f5bcc25d"}, {0x0, 0x8, "5d08c118bf67"}]}, @generic={0x44, 0x12, "34e0cf8423454187599815511f110f95"}]}}}}})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)={0x1b, 0x0, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0xffff, '\x00', r12, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x48)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), r0)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000dc0)={<r13=>0x0, 0x5, 0x2, 0x77, 0x77b, 0x101, 0x7, 0x0, {0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x51, 0x7, 0x7, 0x1a, 0xfffffff8}}, &(0x7f0000000e80)=0xb0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000ec0)={r13, 0x7fff, 0x10, 0x800, 0x800}, &(0x7f0000000f00)=0x18)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r14, &(0x7f00000011c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001180)={&(0x7f0000000fc0)={0x1b8, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xd, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x1, 0x41}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7f}, @NL80211_ATTR_IE={0x17, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x8, 0x0, 0x9}}, @dsss={0x3, 0x1, 0xc}, @ibss={0x6, 0x2, 0x1ff}, @chsw_timing={0x68, 0x4, {0xdd59, 0xd}}]}, @NL80211_ATTR_IE={0x171, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}, @measure_req={0x26, 0x77, {0x3, 0x7, 0x6, "772d2a813ee5faf3f6fd0c2aa059d58215ba139853ce77ea73aa51b80741a7e5034f7d9d3c53be1bb3a3267f2460268ee4c47e516c3e8d94e4c3016e10b2519fc617ad676add98548dffeb39dad9119fd1c46ab33972b3a19045f2e9560094e43158df7bd13292f7b218e6b9bdf91b2254504542"}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ibss={0x6, 0x2, 0x1}, @mesh_id={0x72, 0x6}, @tim={0x5, 0x53, {0x8, 0x1b, 0xff, "e0bab804668a5981c41f8f83fdbfa8e204adcbac3aa5c06329eb22214638bbb3f972049caa3dbe6e445c93b54afe5061074d6184d6bcb3edd5f54a07f4bd683fc318c27a493f0310d8d6f9bac3832876"}}, @perr={0x84, 0x7b, {0xff, 0x7, [{{}, @device_b, 0x200, @void, 0x36}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x2}, {{0x0, 0x1}, @device_a, 0xdce, @value, 0x1f}, {{0x0, 0x1}, @device_b, 0x7, @value=@broadcast, 0x15}, {{0x0, 0x1}, @broadcast, 0x6, @value=@device_b, 0x3b}, {{0x0, 0x1}, @device_b, 0x0, @value, 0x18}, {{}, @device_a, 0x9, @void, 0x9}]}}, @ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40000}, 0x4040010)

2.03981658s ago: executing program 1 (id=2704):
unshare(0x20000400)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x1000, 0xfffffffe}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r2, 0x0) (async)
listen(r2, 0x0)
connect$x25(r2, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3, 0x2}}, 0x12)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtaction={0xf4, 0x30, 0x0, 0x0, 0x25dfdbff, {}, [{0xe0, 0x1, [@m_ctinfo={0x48, 0x1d, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x0, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x94, 0x3, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3}]}]}, {0x35, 0x6, "994930736f3ee46c12754e4b9df9098ebc7c1a4f67765762c753cbfd6fe46c134874cb7d5dcca248eac316120a6a00dc70"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xf4}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x10000}, 0x90)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="28aaa009e808a9a7730000000203010300000000000000004809000000000000006c8dbbe993f18f9660bff22ae0a213728eb618903362671b8722d2ce7f957a5f8ecdb5180350c663d752179c8705ddfc329f2303f6fad44fef47e2ceddb87f60778edf552193a2cf8ab4e8ba510994fb0c038e29a35eb6d66e547d96141b7ebb8e1758e5216faac7e7"], 0x28}, 0x1, 0x0, 0x0, 0x4004811}, 0x0)
ioctl(r3, 0x8b2a, &(0x7f0000000040))
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
write(r1, &(0x7f00000001c0)="67601d9823c2e2e53c278e8715e96b5d84679bf3a61f7c1f395dda6696eeeaa135f60c6b33737973e74696190f2e5c257c3738e7db9aac256a1e397495be83a55599cad9cc71b4526be1766c9dbc81cf59ea1a26c8c2df044572d182bf1d69ed393449866b7a", 0x66) (async)
write(r1, &(0x7f00000001c0)="67601d9823c2e2e53c278e8715e96b5d84679bf3a61f7c1f395dda6696eeeaa135f60c6b33737973e74696190f2e5c257c3738e7db9aac256a1e397495be83a55599cad9cc71b4526be1766c9dbc81cf59ea1a26c8c2df044572d182bf1d69ed393449866b7a", 0x66)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00q\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000080"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
shutdown(r8, 0x1)
socket(0x2c, 0x2, 0x8)
ioctl$int_in(r8, 0x5452, &(0x7f0000000180)=0x401) (async)
ioctl$int_in(r8, 0x5452, &(0x7f0000000180)=0x401)
listen(r8, 0x0)
shutdown(r8, 0x0) (async)
shutdown(r8, 0x0)
ioctl(r7, 0x8b2a, &(0x7f0000000040))
syz_genetlink_get_family_id$netlbl_cipso(0x0, r6)

1.954705261s ago: executing program 0 (id=2705):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000e2bac15d3b6641a215f099e26603a050337b2ccc70a9f928ba3c529bb6e7365e7e246317380f5884d79663e7fcaa89795d7b10e88378c33265a7af06040e3d0bbc6a5864dfa023c6ac1da574242785bbb4ece12b11da52496875e1e384042aad63a3094bf3bc0e40a7"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'nat\x00', 0x0, 0x0, 0x0, [0xabe, 0x9, 0x0, 0xffff, 0x1, 0x73bd]}, &(0x7f00000000c0)=0x78)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x5f}, @initr0, @exit]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@ifindex, r3, 0x6, 0x0, 0xffffffffffffffff, @link_id}, 0x20)

1.59059622s ago: executing program 1 (id=2708):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e00010069703667726574597000000018000280140006002001000000000000000000000000e13115a1c8ff", @ANYRES32=r3, @ANYBLOB], 0x54}}, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x4)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@broadcast, @multicast2}, &(0x7f0000000200)=0xff5f)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280))
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.stat\x00', 0x275a, 0x0)
write$cgroup_pid(r8, &(0x7f0000000000), 0x2a979d)
socket$nl_route(0x10, 0x3, 0x0)

1.559956023s ago: executing program 0 (id=2710):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001d000137440000000000487007"], 0x14}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000500)={<r1=>0x0, 0x58, &(0x7f0000000480)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e23, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10}, @in6={0xa, 0x4e23, 0x62, @dev={0xfe, 0x80, '\x00', 0x33}, 0x10}]}, &(0x7f0000000540)=0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xc, 0x24, 0x4, @prog_fd}, 0x20)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000780)={0x8, 0x7, 0x800a, 0x1, 0x8231, 0x6, 0x0, 0x7, <r2=>0x0}, &(0x7f00000007c0)=0x20)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000e80)={<r3=>0x0, 0xa}, &(0x7f0000000ec0)=0x8)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000028c0)=@filter={'filter\x00', 0x2, 0x4, 0x1420, 0xffffffff, 0x1250, 0x1250, 0x1250, 0xfeffffff, 0xffffffff, 0x1358, 0x1358, 0x1358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1108, 0x1130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0xfd, 0x0, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}, @common=@frag={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @common=@mh={{0x28}, {"6bbf"}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth1_vlan\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1488)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000001480)={{0xa, 0x4e23, 0xd3f, @loopback, 0xfffffffe}, {0xa, 0x4e21, 0xfffffffd, @rand_addr=' \x01\x00', 0x9}, 0x0, {[0x3ff, 0x6, 0x6, 0x7, 0x2, 0x6, 0x8, 0x9]}}, 0x5c)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000000)={r7, 0x2}, 0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001180)={<r8=>0x0, @in6={{0xa, 0x4e20, 0x91b, @private1, 0x200}}, 0x0, 0xffff}, &(0x7f0000001240)=0x90)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f0000000040)=@in6={0xa, 0x4e22, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd6f}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000000c0)="fb9360481e0e57ff7b507ee722904d8de138f4fde63d22f3043da6ec3a25cd8a16e01d2d3dad4be5463c1c546aa0cb82998877021c4bc0ea6e69690a8a8cabd56d281a10f536d6ded7ddbc8f7749f72e576af7f68938abb7dcfeefa011c478c2095b8c76148700d42c7aaa7dd4e45b5f47da8521e37235dfbce52208ffa8db", 0x7f}], 0x1, &(0x7f0000000180)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x6}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xffffffff}}], 0x30, 0x40801}, {&(0x7f00000001c0)=@in6={0xa, 0x4e20, 0x80000000, @private2, 0x9}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000200)="c588c9c543957a4ff982d0954242af9dd50ec03ab3d22fbb2dbe7373bde90db8cf4f3dcc6ac5fae9682dfcef1cf8133b48ba2db9563d562d55c9b62b00a88c4a8049d2c811addcf8e99d10a79067d42d0d1b2d958ad93d3f1670a1fde582fed48fc8a5045c197e006d800e60deb10a6eb5ec10", 0x73}, {&(0x7f0000000280)="65f1da491e48de8819c0d1edd4142cad02b26d9ba703babd989e410aef78a2408417d8b2bfaff500448d04c40fd50f8243739da6d0c5cefec4d738fd3b8acf612e82842cf179faf25d79b1cd431ab01613e9aa6893dc8cb394741959d90a34eb6d60bc8507a110771bc18e", 0x6b}, {&(0x7f0000000300)="a5f879481c8000d6d39213fc9fb6f0aafa57091d456176bd55e90367d8872eefdf7aeed294dbbb16b7329a8486bb8350dc1641504ba787966118", 0x3a}, {&(0x7f0000000340)="b94e2e648e2da062f59db418e98df4d6dc1eb599eb6010341060a8c36d713945181f08cbbc5de26caa3a8fae6fd2e13eebdb959e39fb5ca18db6cf989929dc26aced8afb97e3c0fda3ed36667ff3250a49bcbb368730e96ad68e10e511b8c3d2479d5196ad995f0a88bcbeb12ac07612c5b40743cf6829add21aa2971a06b7ad990a6ac92127a7a7263fa1e8eafd2acb27b71413b66e7d996a31e7a5eb2b028584e281c6ebb698224fae8a0172f579c471b7b1841a219e75553e0104a6c489aaf038b0e8f07ae4aab3b35e0b086da5f93adf613895988b0d94430a325f082783", 0xe0}], 0x4, &(0x7f0000000580)=[@init={0x18, 0x84, 0x0, {0x7, 0x3, 0x1, 0x200}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x207, 0x0, 0x4, r1}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x2}}, @init={0x18, 0x84, 0x0, {0x2, 0x8, 0x0, 0x8}}], 0x68, 0x4000804}, {&(0x7f0000000600)=@in6={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000640)="1a33c6669985e35e86cd8e391d59f8bf9c44", 0x12}, {&(0x7f0000000680)="69daf06d0853976963a95f509672690910eee47b093631de5a1108f7374124bf2a5a7e53275909f21abbb1f554bbb51d281800e8eb2d560d4cf400915d0bd320ec944f319762f24f2354e086cae970a3a521d80dbce92cd096bd3282c4cc9f0c85f598ef12ec5d41ab8e8c01e780d6d7f35f0e253872a5843195903c856953ee588c366c6ad39d660984110d8518b939154c308acbb5071c26", 0x99}], 0x2, &(0x7f0000000800)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x81}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010102}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x2, 0x1ff, 0x4, r2}}, @authinfo={0x18, 0x84, 0x6, {0x8}}], 0x68, 0x40}, {&(0x7f0000000880)=@in={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000e00)=[{&(0x7f00000008c0)="1e23a553f9a2a062c5fffc33f9bdc50741f04535ec4aa8b87d1b2da66f182c6d", 0x20}, {&(0x7f0000000900)="21866183940f509bc41b08fc0bd1d585ca164115a6ad2e5c4e2bc4244f05ddb67198ca7e6fdac81d3ba9486c2a29aa9a6dcc", 0x32}, {&(0x7f0000000940)="00436a97e9c28f3dc1c8619013b2e20ed02f7f82b5cc4bb4521cc4dcdab2", 0x1e}, {&(0x7f0000000980)="748d6c55a3833519a9bffd369a74f1bd94f7c19784e89ad3e4a3b9de0b94e31c0c09c0c9db96993140338fb6996378c0f26310d28abbdcb9a64688a65adb02759f597c323354a861c354803946d0f9afa1fedbd98212ecd6ad920df793887838c1a96d52f22c2a81766d0f75b3a9ce5c66872c13502a19e155e87a187639daffc95c5bda26cdce3447385d562cf99dfb2d3353ea6dd1c4344cb55b2ff84a6b725eb05514e853af8d2e1c23c5ce8b41458f36606dd6b1b1512d33ffb0bf7edd8dcfeddfcaafa165e6c2438d1eadab79", 0xcf}, {&(0x7f0000000a80)="f3c095cd343ee959bfa7caa8d880e2bf547cce079684a8fec1c6d606a8d9b139be529edfb855c1b04dbe69c02f03d0c0dc8e89ed3748a14e5b3ecc027834b0fa5855c5462856f2b77ce7626a0baef016bb8e37916e8f6cd3b5a63b4c3f72a90ef141a0b289f93f666b025c1d940d512ee87a26781469ef12b15b43c1e586", 0x7e}, {&(0x7f0000000c00)="94ec6c6af5914d20354063f628434f66ea7815109ce98fd3b3a10c9702513cdcff6b8f35f732633d571016f931899fa7e03feaa546e00564e3f7f3c6ed44fda4c99ce633f8626f00bc383279289f44401dc11cfe26d0ab317de285031c94af24823c753b2fc1b4a70adf6d8a8afd62c7a6f9f1527a04f4e37b11143ecea09541d16a4ea597e2da573d9883b5c5e46af9545ab5ec58e33c5362482d6dd87c16b91142d64987c9ddea0b6f8e83c30757a9d77f0cae6588e336ae41fdd0809e95dce58a94be0ccd6c649d5473b0a791fe261c7a144c060d634f4665d145d3cc2b", 0xdf}, {&(0x7f0000000d00)="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", 0xfa}, {&(0x7f0000000b00)="bebbeaaf523660cc0b19ef3e52289321a88e0b91e56217eba077d0dd33febd9a93969389333602a88de3df146ebf8469626da2fd226b7f890ab9662a5941546d48c7c9407878ca3177e726b6e110a1db931e7c41a156c8f649aa2b87f7d2b3fd54a66a20feffdd96c476f34f95281a7d1498a9b086945e3ec4ef80a580f01326551c4488", 0x84}], 0x8, &(0x7f0000000f00)=[@sndrcv={0x30, 0x84, 0x1, {0x8, 0x6, 0x204, 0x10000, 0x3, 0x10001, 0x1, 0x0, r3}}, @init={0x18, 0x84, 0x0, {0x2, 0x6, 0x5, 0x8}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x7}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x5, 0x201, 0x3, 0xfffffeff, 0x5, 0xffff, 0x0, r7}}, @sndinfo={0x20, 0x84, 0x2, {0xf772, 0x1, 0x5, 0x100}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x404}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0xe0, 0x800}, {&(0x7f0000001000)=@in={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000001140)=[{&(0x7f0000001040)="344b30f8a0a6c9964b50c02ec4a630974e0d88f40a0a454a2f2b659460b694f4467c72a0520df5a4831d1036b4d488060b0db25fe413b276bbf7c4e164585aabc5b389f7e9ed005b3587d74cf506d5656781c8768c46bf7e92f925e3bb490456e225f81abb0ec2fac38e265a5b66d2e48a959a1239412fc2400e743b477dff6b6bb4db9fd8d8dd", 0x87}, {&(0x7f0000001100)="a43b58e3abeed173efcc6a2f", 0xc}], 0x2, &(0x7f0000001280)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}, @init={0x18, 0x84, 0x0, {0x2, 0x8, 0x4, 0x101}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x2, 0x8005, 0x3, 0x1, 0xedc7, 0x68, 0xa, r8}}, @prinfo={0x18, 0x84, 0x5, {0x10}}], 0x98, 0x805}], 0x5, 0x4000000)

1.320618261s ago: executing program 0 (id=2713):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ppoll(&(0x7f0000000280)=[{r0, 0x8104}, {r1, 0x1400}], 0x2, 0x0, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x7a, &(0x7f00000000c0)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00040211000000160016000a0002000048035c3b61c1d67f6f94007133cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)

1.138426565s ago: executing program 1 (id=2714):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000000005bb992464e73a02159d3720df19f7a1dfec3000000000300060000000000020000000000000000000079c100000002000100000000000000020d00000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYRESDEC=r0], 0x3c}}, 0x20000000)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000013000000000000000000000000020000000000"], 0x0, 0x1a}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x19, &(0x7f0000000540)=@raw=[@tail_call, @exit, @jmp, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x11, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r3}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r3, 0x0, 0x100000000000000}, 0x38)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001300)=ANY=[@ANYBLOB="1800"/16, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_es_lookup_extent_exit\x00', r4}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@ifindex, 0xffffffffffffffff, 0x13, 0x0, 0xffffffffffffffff, @prog_fd}, 0x20)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0xe}, 0x48)
bind$inet(r5, &(0x7f0000000500)={0x2, 0x4e21, @multicast1}, 0x10)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r9, 0x5452, &(0x7f00000003c0)=0x2ed7)
listen(r9, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r9}, 0x20)
recvmmsg(r9, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)=""/173, 0xad}], 0x1}}], 0x2, 0x0, 0x0)
shutdown(r9, 0x0)

1.132437149s ago: executing program 0 (id=2716):
r0 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x9)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
close(r2)

1.002911849s ago: executing program 0 (id=2717):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x118, 0xa, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0xa0, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'wlan1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x9}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xfffffffffffffffd}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xae}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'vlan1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000010}, 0x48010)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x5c9}, {&(0x7f00000007c0)=""/154, 0x12}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x200, @empty, 0x7fffffff}], 0x1c)
r4 = accept4$alg(r2, 0x0, 0x0, 0x80000)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x0, 'bond0\x00', {0x2}, 0x401})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x3, 0x0, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @empty, {[@ssrr={0x89, 0x7, 0xfa, [@remote]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)

902.693509ms ago: executing program 3 (id=2718):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'tunl0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xfffffffffffffca7, &(0x7f00000002c0)={&(0x7f0000000040)=@newneigh={0xfffffea5, 0x1c, 0x401, 0x70bd27, 0x0, {0xa, 0x0, 0x0, r3, 0x0, 0x5}, [@NDA_NH_ID={0x0, 0xd, 0xd}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000014c0)={r4, <r5=>0xffffffffffffffff}, 0x4) (async)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r5, 0x0) (async)
mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r6, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x3c}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x10}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r7, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000044) (async)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000400)=[@in6={0xa, 0x4e23, 0xf1cc, @mcast2, 0xffffffff}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e20, 0xe66, @remote, 0x4}, @in6={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9b}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}], 0x90)

726.9802ms ago: executing program 3 (id=2719):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000000), 0x10) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="340000001300010000000000fedbdf2507000000", @ANYRES32=r3, @ANYBLOB="040004000000000014001a80100004800c0001800840"], 0x34}}, 0x0) (async)
bind$can_raw(r0, &(0x7f0000000100), 0x10) (async)
r4 = socket(0x0, 0x800, 0x18)
getpeername$unix(r4, 0x0, 0x0)
r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040), 0x0) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0xaa)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x0, 0xe, 0x0, &(0x7f00000001c0)="348b0d151f8218e3c73697c80800", 0x0, 0x711c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r8 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x3}, @enum, @func_proto={0x0, 0x2, 0x0, 0xd, 0x2, [{0x10}, {0x0, 0x5}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x50}, 0x20)
setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r9, 0x5}, 0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000140)={r9, 0xec}, 0x8)

564.410939ms ago: executing program 3 (id=2720):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0xf21, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0x25, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @private1}}}}, &(0x7f0000000100)=0xb0)
pipe(&(0x7f0000000840))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffdd, &(0x7f0000000000)='/proc/0KgOq\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r5 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x2c}, {0x80000006}]}, 0x10)
listen(r1, 0xfff)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', <r7=>0x0})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000880)=ANY=[@ANYBLOB="602000000201010100000000000000000a0000020c001640000000020000032a0c001080080002400000f05e08000480040003800c001700000000030000000040000000071400164000000007000000590080000400000fff00000000000000d6708555e12656c2bc1cd1a5ac508a4b013e9fd4a3763e8ff588154ff602deaa0a6fbf1f4278901ffbedad383ff16a63081f8b5a05ed25f3b9a40b6a2b7b638843562d7d41772e6d489a9676f3078558b967e9c31d9793949971f9b8ece168aab52fff3fb2f49c850456d7bc5915da8089222a142bd159cb94f7"], 0x60}, 0x1, 0x0, 0x0, 0x24008800}, 0x4040010)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@RTM_DELMDB={0x38, 0x55, 0x93d, 0x2, 0x25dfdbfc, {0x7, r11}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x3, 0x1, {@ip4=@multicast2, 0x800}}}]}, 0x38}}, 0x4000000)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl1\x00', <r12=>0x0, 0x4, 0x2, 0x31, 0x7, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x10, 0x7808, 0x8001, 0x59}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'tunl0\x00', &(0x7f00000003c0)={'sit0\x00', <r13=>0x0, 0x700, 0x80, 0x8, 0x1000, {{0xe, 0x4, 0x1, 0x3, 0x38, 0x68, 0x0, 0x2, 0x0, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x1d, 0x0, [{0x7, 0xd, "2a391b2431cf4ca4153671"}, {0x5, 0x6, "8292ca1a"}, {0x2, 0x4, "cced"}]}, @generic={0x7, 0x4, "d2ce"}]}}}}})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r6, @ANYBLOB="000828bd7000fddbdf25020000003c00068008000700", @ANYRES32=r7, @ANYBLOB="08000300ffffffff050002000000000008000700", @ANYRES32=r8, @ANYBLOB="050002000c00000005000200a4000000060005004e21000008000400030000001c000680080003000a010102060001000a00000008000700", @ANYRES32=r11, @ANYBLOB="2400018008000700", @ANYRES32=r12, @ANYBLOB="060005004e210800060009000000080007000000a1bf5c84bdc080ecc391ac9bffdd8bffb395f07d81e0660942c88b3e2e7a7d946f1a5114471b8d92e21139663e218ff0fc630159c894805cb73927ac973c6499a43f1106c7f6d827801055835fd4bdcb145b11af9a1f79f35b6c2ba6d9ecbf3f21b60b5c19475499b249acd2845ff3b64ccd03eeccc6643b651159bde9b9de02d734158d65f6e190979fb342c7f3aa1800f19d9eef", @ANYRES32=r13, @ANYBLOB], 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040850)
openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x0, 0x0)
syz_emit_ethernet(0x45, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaabb0000000004000004f04e81529ecb442fa28d4f8ae6016984d8728929325ddfa941a03c5fd4704d0c4764470e3de8a83bf5c9748c9a00b1"], 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)

458.662703ms ago: executing program 1 (id=2721):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000240)={@broadcast, @loopback, 0x8, "2a46fe66c49254da00083539cb61a7b602b3c6021926dacd0c8721d2665e9b88", 0x2, 0xe2c8, 0x2, 0xd15}, 0x3c)
ioctl$FITHAW(0xffffffffffffffff, 0xc0045878)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYRESOCT=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYBLOB="080003000800000008000100", @ANYRES32=r0, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=r0], 0x60}}, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x1000, 0x8, 0x96fe, 0x401, 0x9b, 0x6, 0x1}, 0x1c)

456.240454ms ago: executing program 3 (id=2722):
socket$nl_crypto(0x10, 0x3, 0x15) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0), 0x100}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) (async)
r3 = socket$kcm(0xa, 0x5, 0x0) (async)
syz_emit_ethernet(0x6a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000343c0020010000000000000000000000000002fe8000000000000000000000000000aa2903003300000000070800000000000000000708"], 0x0)
sendmsg$inet(r3, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0xffffff64, &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb56450000822be3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

382.74696ms ago: executing program 3 (id=2723):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES64=<r1=>r0], 0x20}, 0x1, 0x0, 0x0, 0x4008080}, 0xc800)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x80000db, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0xfffffe31, 0xec, 0x8, 0x8, &(0x7f0000000240)}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x209f5f9cc3e8e091, 0x7, 0x85, 0x800, 0x92c, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r4, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x23, '\x00', r2}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r6, 0x29, 0x1e, 0x0, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000140)=0x10001, 0x4)
recvmmsg(r4, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=""/180, 0xb4}}], 0x1, 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="28000000120001000000000008000000180000000c000000000000000000000008003b00", @ANYRES32=0x0, @ANYBLOB], 0x28}], 0x1}, 0x0)
r7 = socket$kcm(0x10, 0x1, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x6, 0x3, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000f800b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x24, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES16=0x0, @ANYRESOCT=r9], 0x34}, 0x1, 0x0, 0x0, 0x91}, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10001800", 0x33fe0}], 0x1}, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r12, &(0x7f0000000100)={0x1f, 0xffff, 0x4}, 0x6)
write$binfmt_misc(r12, 0x0, 0xd)
r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r11)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, r13, 0x325}, 0x14}, 0x1, 0x0, 0x0, 0x2400c000}, 0x8)

301.986073ms ago: executing program 1 (id=2724):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0) (async)
socketpair(0x0, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[], 0x0, 0x2e}, 0x20) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[], 0x0, 0x2e}, 0x20)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
socket$kcm(0x10, 0x3, 0x10) (async)
socket$kcm(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x20000014)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x18, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, r1, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x40}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000230, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000230, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_rxfh_indir={0x33}}) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_rxfh_indir={0x33}})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r4)
sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0xffffffffffffff02, r5, 0x100, 0x70bd2c, 0x200}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40088c0)
openat$cgroup_devices(r3, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000009c0)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000009c0)={'vcan0\x00'})
socket$can_j1939(0x1d, 0x2, 0x7)

190.639664ms ago: executing program 3 (id=2725):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r1)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x40, r5, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @probe_request={{{}, {}, @broadcast, @device_b}, @void, @void, @void, @void, @val={0x72, 0x6}}}]}, 0x40}}, 0x0)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r7, 0x8)
r8 = accept4(r7, 0x0, 0x0, 0x0)
connect$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x43, 0x2}, 0x3}}, 0x10)
ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"})

0s ago: executing program 0 (id=2726):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYRES8=r2], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

kernel console output (not intermixed with test programs):

50][T13294] batman_adv: batadv0: Adding interface: batadv_slave_1
[  295.492804][T13294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.519432][T13294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  295.536784][T13438] IPVS: using max 19 ests per chain, 45600 per kthread
[  295.676790][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  295.709343][   T64] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.735141][T13296] batman_adv: batadv0: Adding interface: batadv_slave_0
[  295.742727][T13296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.771514][T13296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  295.810981][T13294] hsr_slave_0: entered promiscuous mode
[  295.818449][T13294] hsr_slave_1: entered promiscuous mode
[  295.824659][T13294] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  295.839079][T13294] Cannot create hsr debugfs directory
[  295.898202][T13296] batman_adv: batadv0: Adding interface: batadv_slave_1
[  295.928995][T13296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.955444][T13296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  296.055551][T13452] bridge_slave_0: left allmulticast mode
[  296.062084][T13452] bridge_slave_0: left promiscuous mode
[  296.068887][T13452] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.084126][T13452] bridge_slave_1: left allmulticast mode
[  296.090662][T13452] bridge_slave_1: left promiscuous mode
[  296.096491][T13452] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.109602][T13452] bond0: (slave bond_slave_0): Releasing backup interface
[  296.119239][T13452] bond_slave_0: left allmulticast mode
[  296.124753][T13452] bond_slave_0: left promiscuous mode
[  296.141148][T13452] bond0: (slave bond_slave_1): Releasing backup interface
[  296.154408][T13452] bond_slave_1: left allmulticast mode
[  296.158600][   T35] wlan0: Trigger new scan to find an IBSS to join
[  296.164382][T13452] bond_slave_1: left promiscuous mode
[  296.209438][T13452] team0: Port device C removed
[  296.229832][T13452] team0: Port device team_slave_1 removed
[  296.238254][T13452] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  296.245880][T13452] batman_adv: batadv0: Removing interface: batadv_slave_0
[  296.255470][T13452] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  296.266761][T13452] batman_adv: batadv0: Removing interface: batadv_slave_1
[  296.344244][T13453] 8021q: adding VLAN 0 to HW filter on device bond0
[  296.356631][T13453] team0: Device bond0 failed to register rx_handler
[  296.470189][T13296] hsr_slave_0: entered promiscuous mode
[  296.489142][T13296] hsr_slave_1: entered promiscuous mode
[  296.495608][T13296] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  296.504380][T13296] Cannot create hsr debugfs directory
[  296.716433][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  296.808859][   T64] bridge_slave_1: left allmulticast mode
[  296.814647][   T64] bridge_slave_1: left promiscuous mode
[  296.835017][   T64] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.889718][   T64] bridge_slave_0: left allmulticast mode
[  296.895421][   T64] bridge_slave_0: left promiscuous mode
[  296.906770][   T64] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.117691][ T5234] Bluetooth: hci1: command tx timeout
[  297.206933][ T5234] Bluetooth: hci4: command tx timeout
[  297.620088][T13484] ebtables: ebtables: counters copy to user failed while replacing table
[  297.766463][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  297.785043][   T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  297.798621][   T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  297.811362][   T64] bond0 (unregistering): Released all slaves
[  297.863098][T13469] gtp0: entered promiscuous mode
[  297.876103][T13469] gtp0: entered allmulticast mode
[  298.160021][T13494] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5
[  298.244416][T13501] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2168'.
[  298.369188][   T64] hsr_slave_0: left promiscuous mode
[  298.387901][   T64] hsr_slave_1: left promiscuous mode
[  298.404991][   T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  298.415080][   T64] batman_adv: batadv0: Removing interface: batadv_slave_0
[  298.425471][   T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  298.433425][   T64] batman_adv: batadv0: Removing interface: batadv_slave_1
[  298.459202][   T64] veth1_macvtap: left promiscuous mode
[  298.464809][   T64] veth0_macvtap: left promiscuous mode
[  298.470552][   T64] veth1_vlan: left promiscuous mode
[  298.475831][   T64] veth0_vlan: left promiscuous mode
[  298.803487][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  299.116641][ T9345] wlan0: Trigger new scan to find an IBSS to join
[  299.202337][ T5234] Bluetooth: hci1: command tx timeout
[  299.253758][   T64] team0 (unregistering): Port device team_slave_1 removed
[  299.281581][ T5234] Bluetooth: hci4: command tx timeout
[  299.315262][   T64] team0 (unregistering): Port device team_slave_0 removed
[  299.836691][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  299.848565][T13505] netlink: 'syz.1.2170': attribute type 10 has an invalid length.
[  299.871412][T13505] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  300.886473][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  301.105750][T13519] netlink: 'syz.1.2172': attribute type 10 has an invalid length.
[  301.177217][T13519] syz_tun: entered promiscuous mode
[  301.207412][T13519] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  301.280091][T13525] wg2: entered promiscuous mode
[  301.285014][T13525] wg2: entered allmulticast mode
[  301.408675][T13532] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2176'.
[  301.465621][T13524] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2173'.
[  301.645565][T13547] netlink: 'syz.0.2180': attribute type 1 has an invalid length.
[  301.926385][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  301.987340][T13294] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  302.058174][T13571] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2186'.
[  302.092139][T13571] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  302.161755][   T64] wlan0: Trigger new scan to find an IBSS to join
[  302.271752][T13294] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  302.290486][T13294] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  302.339404][T13294] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  302.444690][T13583] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  302.468755][T13589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2189'.
[  302.593792][T13296] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  302.615046][T13296] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  302.633116][T13296] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  302.675114][T13296] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  302.825212][T13294] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.854206][T13607] x_tables: duplicate underflow at hook 3
[  302.901233][T13294] 8021q: adding VLAN 0 to HW filter on device team0
[  302.928993][T13609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2194'.
[  302.956703][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  302.990831][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.998031][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  303.046769][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.053978][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  303.076862][T12020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.182526][T13296] 8021q: adding VLAN 0 to HW filter on device bond0
[  303.218327][T13294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  303.288204][T13296] 8021q: adding VLAN 0 to HW filter on device team0
[  303.294477][T13619] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2196'.
[  303.339205][ T9334] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.346440][ T9334] bridge0: port 1(bridge_slave_0) entered forwarding state
[  303.399095][T13622] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2197'.
[  303.426588][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.433810][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  303.471062][T13625] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2197'.
[  303.583985][T13294] 8021q: adding VLAN 0 to HW filter on device batadv0
[  303.747424][T13294] veth0_vlan: entered promiscuous mode
[  303.781657][T13294] veth1_vlan: entered promiscuous mode
[  303.852190][T13640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.862844][T13296] 8021q: adding VLAN 0 to HW filter on device batadv0
[  303.891332][T13294] veth0_macvtap: entered promiscuous mode
[  303.909332][T13294] veth1_macvtap: entered promiscuous mode
[  303.943078][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  303.955089][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.965059][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  303.994377][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.006830][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  304.020027][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.033925][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.045156][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.056530][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.068522][T13294] batman_adv: batadv0: Interface activated: batadv_slave_0
[  304.113765][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.133032][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.145666][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.158970][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.169087][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.179998][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.190202][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.202172][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.213943][T13294] batman_adv: batadv0: Interface activated: batadv_slave_1
[  304.258554][T13294] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  304.273831][T13294] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  304.283191][T13294] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  304.292384][T13294] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  304.463458][T13296] veth0_vlan: entered promiscuous mode
[  304.480988][T13653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2203'.
[  304.520199][T13653] vxcan3: entered promiscuous mode
[  304.764259][ T9345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.772855][T13660] netlink: 'syz.0.2204': attribute type 1 has an invalid length.
[  304.781013][ T9345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.789408][T13662] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2206'.
[  304.821080][T13296] veth1_vlan: entered promiscuous mode
[  304.991256][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  305.016127][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  305.030855][T13662] syzkaller1: entered promiscuous mode
[  305.037882][T13662] syzkaller1: entered allmulticast mode
[  305.046471][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  305.054647][T13296] veth0_macvtap: entered promiscuous mode
[  305.181088][T13296] veth1_macvtap: entered promiscuous mode
[  305.254962][T13680] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2211'.
[  305.273644][T13680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2211'.
[  305.299014][T13680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2211'.
[  305.327793][T13684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2210'.
[  305.347754][T13683] netlink: 'syz.3.2212': attribute type 10 has an invalid length.
[  305.360561][T13681] netlink: 'syz.1.2210': attribute type 3 has an invalid length.
[  305.388839][T13681] netlink: 'syz.1.2210': attribute type 7 has an invalid length.
[  305.400447][T13296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.424827][T13296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.455518][T13296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.476305][T13296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.486174][T13296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.510233][T13296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.532683][T13296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.557275][T13296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.576308][T13296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.604693][T13296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.618283][T13296] batman_adv: batadv0: Interface activated: batadv_slave_0
[  305.650644][T13681] : entered promiscuous mode
[  305.701100][T13689] dvmrp1: entered allmulticast mode
[  305.725065][T13296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.750669][T13296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.761180][T13296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.772172][T13296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.782835][T13296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.793567][T13296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.803878][T13296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.814807][T13296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.825117][T13296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.840236][T13296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.859581][T13296] batman_adv: batadv0: Interface activated: batadv_slave_1
[  305.891686][T13296] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  305.902389][T13296] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  305.911701][T13296] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  305.923428][T13296] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  305.954495][T13700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2217'.
[  306.076493][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  306.132888][ T9352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.155438][ T9352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.224589][ T9352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.244193][ T9352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.261234][T13710] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  306.458673][T13714] netlink: 'syz.1.2222': attribute type 10 has an invalid length.
[  307.116614][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  307.692045][ T9334] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.166430][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  308.497988][ T5251] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  308.506113][ T5251] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  308.517089][ T5251] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  308.526611][ T5251] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  308.534309][ T5251] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  308.546102][ T5251] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  308.586012][T13756] lo speed is unknown, defaulting to 1000
[  308.723598][T13756] chnl_net:caif_netlink_parms(): no params data found
[  308.771899][ T9334] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.848599][T13756] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.855849][T13756] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.863219][T13756] bridge_slave_0: entered allmulticast mode
[  308.874810][T13756] bridge_slave_0: entered promiscuous mode
[  308.910877][ T9334] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.928756][T13756] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.935842][T13756] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.943438][T13756] bridge_slave_1: entered allmulticast mode
[  308.951795][T13756] bridge_slave_1: entered promiscuous mode
[  309.001212][ T9334] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.021196][T13756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  309.034578][T13756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  309.081984][T13756] team0: Port device team_slave_0 added
[  309.091447][T13756] team0: Port device team_slave_1 added
[  309.133449][T13756] batman_adv: batadv0: Adding interface: batadv_slave_0
[  309.143053][T13756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.173682][T13756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  309.186530][T13756] batman_adv: batadv0: Adding interface: batadv_slave_1
[  309.193632][T13756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.219840][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  309.228925][T13756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  309.277547][ T5251] Bluetooth: hci6: command 0x0405 tx timeout
[  309.303315][T13756] hsr_slave_0: entered promiscuous mode
[  309.312985][T13756] hsr_slave_1: entered promiscuous mode
[  309.319516][T13756] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  309.327622][T13756] Cannot create hsr debugfs directory
[  309.371367][ T9334] bridge_slave_1: left allmulticast mode
[  309.377346][ T9334] bridge_slave_1: left promiscuous mode
[  309.383070][ T9334] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.397017][ T9334] bridge_slave_0: left allmulticast mode
[  309.402695][ T9334] bridge_slave_0: left promiscuous mode
[  309.408711][ T9334] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.060590][ T9334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  310.100602][ T9334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  310.158019][ T9334] bond0 (unregistering): Released all slaves
[  310.236575][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  310.315788][ T5251] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  310.345343][ T5251] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  310.347685][T13773] __nla_validate_parse: 5 callbacks suppressed
[  310.347702][T13773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2236'.
[  310.377018][ T5251] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  310.393012][ T5251] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  310.412486][ T5251] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  310.421059][ T5251] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  310.637387][ T5251] Bluetooth: hci1: command tx timeout
[  311.280452][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  312.337420][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  312.483860][ T5251] Bluetooth: hci4: command tx timeout
[  312.721001][ T5251] Bluetooth: hci1: command tx timeout
[  313.188952][T13791] netlink: 'syz.0.2242': attribute type 21 has an invalid length.
[  313.213232][T13791] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2242'.
[  313.261235][T13782] lo speed is unknown, defaulting to 1000
[  313.334746][ T9334] hsr_slave_0: left promiscuous mode
[  313.342771][ T9334] hsr_slave_1: left promiscuous mode
[  313.356421][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  313.364423][ T9334] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  313.376449][ T9334] batman_adv: batadv0: Removing interface: batadv_slave_0
[  313.384489][ T9334] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  313.392433][ T9334] batman_adv: batadv0: Removing interface: batadv_slave_1
[  313.420087][ T9334] veth1_macvtap: left promiscuous mode
[  313.425738][ T9334] veth0_macvtap: left promiscuous mode
[  313.434010][ T9334] veth1_vlan: left promiscuous mode
[  313.446631][ T9334] veth0_vlan: left promiscuous mode
[  314.103401][ T9334] team0 (unregistering): Port device team_slave_1 removed
[  314.163312][ T9334] team0 (unregistering): Port device team_slave_0 removed
[  314.401164][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  314.556800][ T5251] Bluetooth: hci4: command tx timeout
[  314.797923][ T5251] Bluetooth: hci1: command tx timeout
[  315.177713][T13782] chnl_net:caif_netlink_parms(): no params data found
[  315.240830][T13822] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  315.436441][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  315.490019][T13782] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.497883][T13782] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.505291][T13782] bridge_slave_0: entered allmulticast mode
[  315.513339][T13782] bridge_slave_0: entered promiscuous mode
[  315.543474][T13782] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.555990][T13782] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.574665][T13782] bridge_slave_1: entered allmulticast mode
[  315.597650][T13782] bridge_slave_1: entered promiscuous mode
[  315.621806][T13840] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2255'.
[  315.631590][T13840] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes.
[  315.724379][T13782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  315.788044][ T9334] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.829328][T13782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  315.893416][T13843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2256'.
[  316.037622][ T9334] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.056670][T13846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2256'.
[  316.075239][T13846] bond5: (slave vcan0): The slave device specified does not support setting the MAC address
[  316.091507][T13846] bond5: (slave vcan0): Error -95 calling set_mac_address
[  316.148953][T13756] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  316.173504][T13756] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  316.303825][ T9334] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.332850][T13782] team0: Port device team_slave_0 added
[  316.341253][T13756] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  316.354552][T13756] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  316.393738][T13782] team0: Port device team_slave_1 added
[  316.474621][ T9334] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.485171][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  316.508425][T13863] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2260'.
[  316.558687][T13782] batman_adv: batadv0: Adding interface: batadv_slave_0
[  316.585818][T13782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  316.637309][ T5251] Bluetooth: hci4: command tx timeout
[  316.667906][T13782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  316.822554][T13782] batman_adv: batadv0: Adding interface: batadv_slave_1
[  316.829914][T13889] x_tables: unsorted entry at hook 2
[  316.856930][T13782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  316.906909][ T5251] Bluetooth: hci1: command tx timeout
[  316.932884][T13782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  316.999667][T13893] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  317.148796][T13782] hsr_slave_0: entered promiscuous mode
[  317.168052][T13903] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2269'.
[  317.177975][T13782] hsr_slave_1: entered promiscuous mode
[  317.184936][T13782] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  317.195187][T13782] Cannot create hsr debugfs directory
[  317.285628][T13905] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2271'.
[  317.303448][ T9334] bridge_slave_1: left allmulticast mode
[  317.316542][ T9334] bridge_slave_1: left promiscuous mode
[  317.322310][T13905] netlink: 'syz.1.2271': attribute type 2 has an invalid length.
[  317.322443][ T9334] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.331092][T13905] netlink: 509 bytes leftover after parsing attributes in process `syz.1.2271'.
[  317.351230][ T9334] bridge_slave_0: left allmulticast mode
[  317.357833][ T9334] bridge_slave_0: left promiscuous mode
[  317.363848][ T9334] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.448671][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  317.455055][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  317.521139][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  317.893367][ T9334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  317.906494][ T9334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  317.921721][ T9334] bond0 (unregistering): Released all slaves
[  317.948186][T13911] netlink: 'syz.1.2273': attribute type 14 has an invalid length.
[  318.075539][T13918] netlink: 209676 bytes leftover after parsing attributes in process `syz.3.2274'.
[  318.117510][T13918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2274'.
[  318.461460][T13756] 8021q: adding VLAN 0 to HW filter on device bond0
[  318.556393][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  318.680769][T13946] netlink: 'syz.1.2285': attribute type 1 has an invalid length.
[  318.689381][T13946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2285'.
[  318.718118][ T5251] Bluetooth: hci4: command tx timeout
[  318.825904][ T9334] hsr_slave_0: left promiscuous mode
[  318.836207][ T9334] hsr_slave_1: left promiscuous mode
[  318.843752][ T9334] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  318.862723][ T9334] batman_adv: batadv0: Removing interface: batadv_slave_0
[  318.879331][ T9334] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  318.897016][ T9334] batman_adv: batadv0: Removing interface: batadv_slave_1
[  318.945338][ T9334] veth1_macvtap: left promiscuous mode
[  318.952162][ T9334] veth0_macvtap: left promiscuous mode
[  318.958839][ T9334] veth1_vlan: left promiscuous mode
[  318.964216][ T9334] veth0_vlan: left promiscuous mode
[  318.982925][T13957] No such timeout policy "syz0"
[  318.998608][T13960] openvswitch: netlink: Tunnel attr 11525 out of range max 16
[  319.606530][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  319.626057][ T9334] team0 (unregistering): Port device team_slave_1 removed
[  319.684888][ T9334] team0 (unregistering): Port device team_slave_0 removed
[  320.260369][T13756] 8021q: adding VLAN 0 to HW filter on device team0
[  320.278296][T13954] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  320.285871][T13954] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  320.293588][T13959] netlink: 'syz.1.2288': attribute type 10 has an invalid length.
[  320.325516][T13959] veth1_macvtap: left promiscuous mode
[  320.351582][T13957] netlink: 'syz.1.2288': attribute type 10 has an invalid length.
[  320.492209][T13968] syz.3.2291[13968] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  320.511006][ T9345] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.527372][T13968] syz.3.2291[13968] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  320.529613][ T9345] bridge0: port 1(bridge_slave_0) entered forwarding state
[  320.530061][T13968] syz.3.2291[13968] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  320.546722][ T9345] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.567712][ T9345] bridge0: port 2(bridge_slave_1) entered forwarding state
[  320.567997][T13968] syz.3.2291[13968] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  320.628322][T13970] __nla_validate_parse: 3 callbacks suppressed
[  320.628345][T13970] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2292'.
[  320.640592][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  320.841602][T13981] netlink: 'syz.3.2296': attribute type 3 has an invalid length.
[  320.867442][T13981] netlink: 'syz.3.2296': attribute type 1 has an invalid length.
[  320.908313][T13981] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2296'.
[  320.973794][T13782] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  321.029773][T13782] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  321.048345][T13992] xt_bpf: check failed: parse error
[  321.070635][T13782] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  321.147483][T13782] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  321.231551][T13756] 8021q: adding VLAN 0 to HW filter on device batadv0
[  321.441823][T13756] veth0_vlan: entered promiscuous mode
[  321.560334][T13756] veth1_vlan: entered promiscuous mode
[  321.589269][T13782] 8021q: adding VLAN 0 to HW filter on device bond0
[  321.600348][T14014] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  321.670312][T13782] 8021q: adding VLAN 0 to HW filter on device team0
[  321.677303][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  321.787756][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2305'.
[  321.807812][ T9345] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.814959][ T9345] bridge0: port 1(bridge_slave_0) entered forwarding state
[  321.828462][ T9345] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.835645][ T9345] bridge0: port 2(bridge_slave_1) entered forwarding state
[  321.851724][T13756] veth0_macvtap: entered promiscuous mode
[  321.904203][T13756] veth1_macvtap: entered promiscuous mode
[  321.976054][T13756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  322.003324][T13756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.041901][T13756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  322.071012][T13756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.092551][T13756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  322.116799][T13756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.138263][T13756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  322.160139][T13756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.188234][T13756] batman_adv: batadv0: Interface activated: batadv_slave_0
[  322.248277][T13756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  322.266840][T13756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.286939][T13756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  322.306405][T13756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.322605][T14039] sock: sock_timestamping_bind_phc: sock not bind to device
[  322.329842][T13756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  322.356502][T13756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.376857][T13756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  322.397231][T13756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.449851][T13756] batman_adv: batadv0: Interface activated: batadv_slave_1
[  322.520047][T13756] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  322.576340][T13756] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  322.585094][T13756] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  322.636635][T13756] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  322.677294][T14045] netlink: 'syz.3.2314': attribute type 10 has an invalid length.
[  322.716394][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  322.748673][T14045] 8021q: adding VLAN 0 to HW filter on device batadv0
[  322.769468][T14045] team0: Port device batadv0 added
[  323.048470][ T9352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.067867][ T9352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.107775][T14061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2318'.
[  323.202441][T13782] 8021q: adding VLAN 0 to HW filter on device batadv0
[  323.259331][T12020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.275081][T12020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.756524][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  323.767261][T14088] ipt_ECN: cannot use operation on non-tcp rule
[  324.029850][T13782] veth0_vlan: entered promiscuous mode
[  324.102107][T13782] veth1_vlan: entered promiscuous mode
[  324.257649][   T64] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.310171][T14097] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  324.336499][T14097] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  324.360708][T14097] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  324.394799][T14097] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  324.430090][T14097] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  324.468713][T14097] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  324.487050][T14097] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  324.511396][T14097] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  324.522039][T14097] geneve2: entered promiscuous mode
[  324.536776][T14097] geneve2: entered allmulticast mode
[  324.620421][   T64] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.708652][T13782] veth0_macvtap: entered promiscuous mode
[  324.760574][   T64] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.801142][T13782] veth1_macvtap: entered promiscuous mode
[  324.807129][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  324.892056][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  324.917089][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.936537][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  324.957120][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.976902][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  324.989486][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.999583][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.026668][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.056149][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.086739][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.108437][T13782] batman_adv: batadv0: Interface activated: batadv_slave_0
[  325.143724][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.161477][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  325.165563][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.178120][T14113] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2333'.
[  325.195715][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.210434][T14113] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2333'.
[  325.231018][T14113] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2333'.
[  325.240408][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.252137][T14113] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2333'.
[  325.262151][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.287406][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.318777][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.345916][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.359134][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.382734][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.411130][T13782] batman_adv: batadv0: Interface activated: batadv_slave_1
[  325.460102][T13782] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  325.486991][T13782] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  325.506423][T13782] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  325.515449][T13782] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  325.584152][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  325.584283][T14128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2337'.
[  325.595420][   T64] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.614227][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  325.626304][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  325.637408][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  325.645606][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  325.653213][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  325.723887][T14133] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2338'.
[  325.741547][T14124] lo speed is unknown, defaulting to 1000
[  325.846417][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  326.000650][ T9334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.036475][ T9334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.089747][   T64] bridge_slave_1: left allmulticast mode
[  326.095963][   T64] bridge_slave_1: left promiscuous mode
[  326.121839][   T64] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.138829][   T64] bridge_slave_0: left allmulticast mode
[  326.144521][   T64] bridge_slave_0: left promiscuous mode
[  326.165425][   T64] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.660514][   T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  326.672968][   T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  326.689365][   T64] bond0 (unregistering): Released all slaves
[  326.740814][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.762050][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.876408][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  327.058399][T14164] netlink: 'syz.3.2346': attribute type 1 has an invalid length.
[  327.098686][T14164] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2346'.
[  327.287051][T14124] chnl_net:caif_netlink_parms(): no params data found
[  327.361566][T14179] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.2349'.
[  327.398696][   T64] hsr_slave_0: left promiscuous mode
[  327.413279][   T64] hsr_slave_1: left promiscuous mode
[  327.416045][T14179] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  327.431671][   T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  327.442510][   T64] batman_adv: batadv0: Removing interface: batadv_slave_0
[  327.455267][   T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  327.462988][   T64] batman_adv: batadv0: Removing interface: batadv_slave_1
[  327.489844][   T64] veth1_macvtap: left promiscuous mode
[  327.495438][   T64] veth0_macvtap: left promiscuous mode
[  327.506970][   T64] veth1_vlan: left promiscuous mode
[  327.512552][   T64] veth0_vlan: left promiscuous mode
[  327.758467][ T5251] Bluetooth: hci1: command tx timeout
[  327.921164][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  328.315947][   T64] team0 (unregistering): Port device team_slave_1 removed
[  328.381526][   T64] team0 (unregistering): Port device team_slave_0 removed
[  328.950441][T14176] tipc: Cannot configure node identity twice
[  328.966793][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  329.125730][T14124] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.135969][T14124] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.143577][T14124] bridge_slave_0: entered allmulticast mode
[  329.152101][T14124] bridge_slave_0: entered promiscuous mode
[  329.173302][T14124] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.199219][T14124] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.206965][T14124] bridge_slave_1: entered allmulticast mode
[  329.213799][T14124] bridge_slave_1: entered promiscuous mode
[  329.265597][T14124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  329.288252][T14124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  329.327435][T14124] team0: Port device team_slave_0 added
[  329.340690][T14124] team0: Port device team_slave_1 added
[  329.442115][T14124] batman_adv: batadv0: Adding interface: batadv_slave_0
[  329.449967][T14124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  329.488952][T14124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  329.552708][T14124] batman_adv: batadv0: Adding interface: batadv_slave_1
[  329.586276][T14124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  329.654810][T14216] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2352'.
[  329.690684][T14124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  329.836702][ T5251] Bluetooth: hci1: command tx timeout
[  329.882361][T14124] hsr_slave_0: entered promiscuous mode
[  329.927183][T14124] hsr_slave_1: entered promiscuous mode
[  329.946613][T14124] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  329.949729][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  329.964682][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  329.969396][T14124] Cannot create hsr debugfs directory
[  329.975404][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  329.985430][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  329.993537][ T5234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  330.000735][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  330.011608][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  330.097644][   T64] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.254670][   T64] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.372646][   T64] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.431030][T14229] lo speed is unknown, defaulting to 1000
[  330.500312][   T64] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.741031][T14253] openvswitch: netlink: Message has 4 unknown bytes.
[  330.968157][T14268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2366'.
[  330.982694][   T64] bridge_slave_1: left allmulticast mode
[  330.998130][   T64] bridge_slave_1: left promiscuous mode
[  331.020348][   T64] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.046392][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  331.050479][T14268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2366'.
[  331.070897][   T64] bridge_slave_0: left allmulticast mode
[  331.076955][   T64] bridge_slave_0: left promiscuous mode
[  331.087104][   T64] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.605644][   T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  331.620507][   T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  331.632838][   T64] bond0 (unregistering): Released all slaves
[  331.669933][T14274] netlink: 'syz.1.2368': attribute type 6 has an invalid length.
[  331.679082][T14274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2368'.
[  331.691758][T14275] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2368'.
[  331.879186][T14229] chnl_net:caif_netlink_parms(): no params data found
[  331.916734][T14286] netlink: 'syz.0.2372': attribute type 12 has an invalid length.
[  331.926984][ T5234] Bluetooth: hci1: command tx timeout
[  332.076537][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  332.085954][ T5234] Bluetooth: hci4: command tx timeout
[  332.315053][T14311] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2379'.
[  332.435815][   T64] hsr_slave_0: left promiscuous mode
[  332.468323][   T64] hsr_slave_1: left promiscuous mode
[  332.477925][   T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  332.485374][   T64] batman_adv: batadv0: Removing interface: batadv_slave_0
[  332.511556][   T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  332.519800][   T64] batman_adv: batadv0: Removing interface: batadv_slave_1
[  332.546990][   T64] veth1_macvtap: left promiscuous mode
[  332.552532][   T64] veth0_macvtap: left promiscuous mode
[  332.560154][   T64] veth1_vlan: left promiscuous mode
[  332.565446][   T64] veth0_vlan: left promiscuous mode
[  333.122378][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  333.194976][   T64] team0 (unregistering): Port device team_slave_1 removed
[  333.254050][   T64] team0 (unregistering): Port device team_slave_0 removed
[  333.825689][T14314] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2381'.
[  333.835790][T14229] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.856715][T14229] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.886871][T14229] bridge_slave_0: entered allmulticast mode
[  333.894256][T14229] bridge_slave_0: entered promiscuous mode
[  333.917415][T14322] tipc: New replicast peer: 255.255.255.255
[  333.923742][T14322] tipc: Enabled bearer <udp:syz2>, priority 10
[  333.952350][T14329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2383'.
[  333.981419][T14229] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.997930][ T5234] Bluetooth: hci1: command tx timeout
[  334.003750][T14229] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.025354][T14229] bridge_slave_1: entered allmulticast mode
[  334.033288][T14229] bridge_slave_1: entered promiscuous mode
[  334.069803][T14328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2383'.
[  334.107176][T14332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2384'.
[  334.166445][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  334.174333][ T5234] Bluetooth: hci4: command tx timeout
[  334.211771][T14336] netlink: 'syz.1.2386': attribute type 2 has an invalid length.
[  334.224630][T14229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  334.239033][T14336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2386'.
[  334.253614][T14229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  334.410462][T14229] team0: Port device team_slave_0 added
[  334.451167][T14124] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  334.550873][T14229] team0: Port device team_slave_1 added
[  334.566984][T14124] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  334.634164][T14124] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  334.663851][T14124] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  334.729996][T14229] batman_adv: batadv0: Adding interface: batadv_slave_0
[  334.756274][T14229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  334.794963][T14366] openvswitch: netlink: Unknown nsh attribute 0
[  334.819224][T14229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  334.835465][T14229] batman_adv: batadv0: Adding interface: batadv_slave_1
[  334.842670][T14229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  334.871164][T14229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  334.916574][ T9254] tipc: Node number set to 2886996992
[  335.057511][T14229] hsr_slave_0: entered promiscuous mode
[  335.074848][T14229] hsr_slave_1: entered promiscuous mode
[  335.086967][T14229] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  335.092484][T14377] Unsupported ieee802154 address type: 0
[  335.104814][T14229] Cannot create hsr debugfs directory
[  335.196542][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  335.295263][T14380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  335.360484][T12024] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  335.379757][T14387] netlink: 'syz.3.2400': attribute type 15 has an invalid length.
[  335.443399][T14124] 8021q: adding VLAN 0 to HW filter on device bond0
[  335.512965][T14124] 8021q: adding VLAN 0 to HW filter on device team0
[  335.572626][T12024] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.579861][T12024] bridge0: port 1(bridge_slave_0) entered forwarding state
[  335.598438][T12024] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.605608][T12024] bridge0: port 2(bridge_slave_1) entered forwarding state
[  335.881113][T14402] IPv6: NLM_F_CREATE should be specified when creating new route
[  336.077312][ T5234] Bluetooth: hci1: command tx timeout
[  336.111639][T14229] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  336.158544][T14412] netlink: 'syz.1.2407': attribute type 12 has an invalid length.
[  336.166996][T14229] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  336.205459][T14229] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  336.236444][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  336.243595][ T5234] Bluetooth: hci4: command tx timeout
[  336.251823][T14124] 8021q: adding VLAN 0 to HW filter on device batadv0
[  336.326380][T14229] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  336.551714][T14124] veth0_vlan: entered promiscuous mode
[  336.598946][T14124] veth1_vlan: entered promiscuous mode
[  336.718013][T14430] __nla_validate_parse: 3 callbacks suppressed
[  336.718033][T14430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2409'.
[  336.772738][T14432] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2410'.
[  336.785796][T14124] veth0_macvtap: entered promiscuous mode
[  336.812491][T14229] 8021q: adding VLAN 0 to HW filter on device bond0
[  336.839014][T14433] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2410'.
[  336.841216][T14124] veth1_macvtap: entered promiscuous mode
[  336.886861][T14433] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2410'.
[  336.896153][T14433] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2410'.
[  336.979620][T14124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.008093][T14124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.026508][T14124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.052128][T14124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.063707][T14124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.076481][T14124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.089402][T14124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.100123][T14124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.132839][T14124] batman_adv: batadv0: Interface activated: batadv_slave_0
[  337.169909][T14124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.188709][T14124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.212823][T14124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.232484][T14124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.247340][T14444] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2414'.
[  337.247396][T14124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.268082][T14124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.269943][T14444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2414'.
[  337.278225][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  337.278860][T14124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.306495][T14124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.321666][T14124] batman_adv: batadv0: Interface activated: batadv_slave_1
[  337.349993][T14124] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  337.386426][T14124] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  337.407323][T14124] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  337.416076][T14124] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  337.469789][T14229] 8021q: adding VLAN 0 to HW filter on device team0
[  337.502231][T14192] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.509456][T14192] bridge0: port 1(bridge_slave_0) entered forwarding state
[  337.640535][ T2942] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.647759][ T2942] bridge0: port 2(bridge_slave_1) entered forwarding state
[  337.715828][T14460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2419'.
[  337.749424][T14460] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2419'.
[  337.775660][T14460] netlink: 'syz.1.2419': attribute type 5 has an invalid length.
[  337.905471][T14195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.927821][T14195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.002245][ T2942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.016567][ T2942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.165933][T14473] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2423'.
[  338.176795][T14473] NCSI netlink: No device for ifindex 0
[  338.316161][T14229] 8021q: adding VLAN 0 to HW filter on device batadv0
[  338.323225][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  338.324367][ T5234] Bluetooth: hci4: command tx timeout
[  338.397219][T14482] netlink: 'syz.3.2425': attribute type 1 has an invalid length.
[  338.651559][T14229] veth0_vlan: entered promiscuous mode
[  338.674755][T14229] veth1_vlan: entered promiscuous mode
[  338.746005][T14229] veth0_macvtap: entered promiscuous mode
[  338.760143][T14229] veth1_macvtap: entered promiscuous mode
[  338.783235][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.797364][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.807668][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.821399][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.843904][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.855724][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.865812][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.877709][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.888181][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.920164][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.935924][T14229] batman_adv: batadv0: Interface activated: batadv_slave_0
[  338.964438][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.977509][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.991673][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  339.002311][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.012831][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  339.029529][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.045738][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  339.067611][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.078378][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  339.088984][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.117939][T14229] batman_adv: batadv0: Interface activated: batadv_slave_1
[  339.140651][T14229] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  339.167458][T14229] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  339.181067][T14229] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  339.205348][T14229] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  339.240737][T14510] netlink: 'syz.0.2431': attribute type 6 has an invalid length.
[  339.356590][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  339.430478][T14192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.454839][T14192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.498594][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.516632][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.540203][T14517] netlink: 'syz.1.2434': attribute type 4 has an invalid length.
[  340.057786][T14194] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.396618][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  340.679226][T14194] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.746110][T14194] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.843739][T14194] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.066417][T14545] netlink: 'syz.3.2443': attribute type 1 has an invalid length.
[  341.246475][T14194] bridge_slave_1: left allmulticast mode
[  341.252231][T14194] bridge_slave_1: left promiscuous mode
[  341.267728][T14194] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.279574][T14194] bridge_slave_0: left allmulticast mode
[  341.285286][T14194] bridge_slave_0: left promiscuous mode
[  341.306812][T14194] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.367153][ T5251] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  341.378859][ T5251] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  341.387040][ T5251] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  341.397006][ T5251] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  341.407805][ T5251] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  341.415299][ T5251] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  341.436442][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  341.861225][T14194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  341.874824][T14194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  341.885881][T14194] bond0 (unregistering): Released all slaves
[  341.949696][T14553] lo speed is unknown, defaulting to 1000
[  342.195213][T14553] chnl_net:caif_netlink_parms(): no params data found
[  342.285923][T14553] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.294777][T14553] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.302211][T14553] bridge_slave_0: entered allmulticast mode
[  342.310631][T14553] bridge_slave_0: entered promiscuous mode
[  342.320756][T14553] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.328493][T14553] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.335716][T14553] bridge_slave_1: entered allmulticast mode
[  342.342583][T14553] bridge_slave_1: entered promiscuous mode
[  342.359619][T14194] hsr_slave_0: left promiscuous mode
[  342.365555][T14194] hsr_slave_1: left promiscuous mode
[  342.373585][T14194] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  342.382438][T14194] batman_adv: batadv0: Removing interface: batadv_slave_0
[  342.394493][T14194] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  342.403436][T14194] batman_adv: batadv0: Removing interface: batadv_slave_1
[  342.427337][T14194] veth1_macvtap: left promiscuous mode
[  342.432913][T14194] veth0_macvtap: left promiscuous mode
[  342.438624][T14194] veth1_vlan: left promiscuous mode
[  342.444147][T14194] veth0_vlan: left promiscuous mode
[  342.486553][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  343.271356][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  343.287723][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  343.298276][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  343.310368][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  343.318440][ T5234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  343.325980][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  343.509560][T14194] team0 (unregistering): Port device team_slave_1 removed
[  343.517094][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  343.517404][ T5234] Bluetooth: hci1: command tx timeout
[  343.584712][T14194] team0 (unregistering): Port device team_slave_0 removed
[  344.244999][T14584] netlink: 'syz.0.2450': attribute type 10 has an invalid length.
[  344.295169][T14584] __nla_validate_parse: 3 callbacks suppressed
[  344.295189][T14584] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2450'.
[  344.360811][T14592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2452'.
[  344.411379][T14553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  344.453671][T14553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  344.559539][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  344.593576][T14599] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2454'.
[  344.614358][T14553] team0: Port device team_slave_0 added
[  344.643122][T14581] lo speed is unknown, defaulting to 1000
[  344.680317][T14553] team0: Port device team_slave_1 added
[  344.872071][T14608] 8021q: adding VLAN 0 to HW filter on device bond0
[  344.882481][T14608] team0: Port device bond0 added
[  344.932015][T14553] batman_adv: batadv0: Adding interface: batadv_slave_0
[  344.959965][T14553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  345.003374][T14553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  345.038427][T14553] batman_adv: batadv0: Adding interface: batadv_slave_1
[  345.058251][T14553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  345.086177][T14553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  345.167909][T14622] netlink: 'syz.3.2461': attribute type 2 has an invalid length.
[  345.228514][T14553] hsr_slave_0: entered promiscuous mode
[  345.245562][T14553] hsr_slave_1: entered promiscuous mode
[  345.253752][T14553] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  345.264991][T14553] Cannot create hsr debugfs directory
[  345.358241][ T5234] Bluetooth: hci4: command tx timeout
[  345.465583][T14194] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.523976][T14634] ieee802154 phy0 wpan0: encryption failed: -90
[  345.535358][T14635] ieee802154 phy0 wpan0: encryption failed: -90
[  345.590793][T14194] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.604267][ T5234] Bluetooth: hci1: command tx timeout
[  345.606483][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  345.697438][T14194] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.818547][T14194] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.934971][T14581] chnl_net:caif_netlink_parms(): no params data found
[  346.043027][T14649] netlink: 'syz.1.2467': attribute type 23 has an invalid length.
[  346.066516][T14649] netlink: 'syz.1.2467': attribute type 9 has an invalid length.
[  346.114061][T14649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2467'.
[  346.182051][T14646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2467'.
[  346.276774][T14581] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.313002][T14581] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.342397][T14581] bridge_slave_0: entered allmulticast mode
[  346.361509][T14581] bridge_slave_0: entered promiscuous mode
[  346.389085][T14581] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.407079][T14581] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.407207][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2471'.
[  346.414350][T14581] bridge_slave_1: entered allmulticast mode
[  346.468117][T14581] bridge_slave_1: entered promiscuous mode
[  346.636548][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  346.654844][T14194] bridge_slave_1: left allmulticast mode
[  346.677456][T14194] bridge_slave_1: left promiscuous mode
[  346.681979][T14681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2475'.
[  346.683212][T14194] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.728353][T14194] bridge_slave_0: left allmulticast mode
[  346.744891][T14194] bridge_slave_0: left promiscuous mode
[  346.756772][T14194] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.893780][T14687] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2478'.
[  347.421316][T14194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  347.433933][T14194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  347.436701][ T5234] Bluetooth: hci4: command tx timeout
[  347.454297][T14194] bond0 (unregistering): Released all slaves
[  347.553529][T14581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  347.593473][T14581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  347.676839][ T5234] Bluetooth: hci1: command tx timeout
[  347.686383][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  347.814757][T14710] netlink: 'syz.0.2484': attribute type 30 has an invalid length.
[  347.866155][T14581] team0: Port device team_slave_0 added
[  347.885192][T14711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2482'.
[  347.914118][T14581] team0: Port device team_slave_1 added
[  347.916811][T14710] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2484'.
[  347.938615][T14710] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes.
[  348.143306][T14581] batman_adv: batadv0: Adding interface: batadv_slave_0
[  348.157911][T14581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  348.201532][T14581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  348.214835][T14581] batman_adv: batadv0: Adding interface: batadv_slave_1
[  348.222505][T14581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  348.250801][T14581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  348.271421][T14722] netlink: 'syz.3.2488': attribute type 11 has an invalid length.
[  348.348271][T14553] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  348.399816][T14194] hsr_slave_0: left promiscuous mode
[  348.409225][T14194] hsr_slave_1: left promiscuous mode
[  348.423291][T14194] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  348.442061][T14194] batman_adv: batadv0: Removing interface: batadv_slave_0
[  348.453916][T14194] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  348.461880][T14194] batman_adv: batadv0: Removing interface: batadv_slave_1
[  348.509857][T14194] veth1_macvtap: left promiscuous mode
[  348.515508][T14194] veth0_macvtap: left promiscuous mode
[  348.522415][T14194] veth1_vlan: left promiscuous mode
[  348.528012][T14194] veth0_vlan: left promiscuous mode
[  348.536002][T14738] ieee802154 phy0 wpan0: encryption failed: -90
[  348.601668][T14740] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes
[  348.610169][T14740] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[  348.726428][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  349.283033][T14194] team0 (unregistering): Port device team_slave_1 removed
[  349.333573][T14194] team0 (unregistering): Port device team_slave_0 removed
[  349.516834][ T5234] Bluetooth: hci4: command tx timeout
[  349.756625][ T5234] Bluetooth: hci1: command tx timeout
[  349.759361][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  349.903659][T14553] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  349.958949][T14733] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  349.969942][T14733] macsec2: entered promiscuous mode
[  349.975294][T14733] macsec2: entered allmulticast mode
[  349.980771][T14733] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  350.051912][T14747] __nla_validate_parse: 2 callbacks suppressed
[  350.051930][T14747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2495'.
[  350.091245][T14748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2495'.
[  350.219718][T14553] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  350.254431][T14553] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  350.263057][T14763] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2499'.
[  350.316166][T14581] hsr_slave_0: entered promiscuous mode
[  350.335216][T14581] hsr_slave_1: entered promiscuous mode
[  350.363727][T14581] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  350.374425][T14581] Cannot create hsr debugfs directory
[  350.394130][T14765] IPv6: sit2: Disabled Multicast RS
[  350.796454][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  350.980983][T14553] 8021q: adding VLAN 0 to HW filter on device bond0
[  351.064284][T14553] 8021q: adding VLAN 0 to HW filter on device team0
[  351.099896][T14191] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.107100][T14191] bridge0: port 1(bridge_slave_0) entered forwarding state
[  351.128603][ T9349] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.135831][ T9349] bridge0: port 2(bridge_slave_1) entered forwarding state
[  351.433983][T14581] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  351.458895][T14581] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  351.507893][T14581] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  351.523295][T14581] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  351.596950][ T5251] Bluetooth: hci4: command tx timeout
[  351.718753][T14808] lo speed is unknown, defaulting to 1000
[  351.836483][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  351.841800][T14553] 8021q: adding VLAN 0 to HW filter on device batadv0
[  351.898562][T14581] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.010042][T14824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2515'.
[  352.129451][T14581] 8021q: adding VLAN 0 to HW filter on device team0
[  352.164893][T14553] veth0_vlan: entered promiscuous mode
[  352.219639][ T9329] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.226843][ T9329] bridge0: port 1(bridge_slave_0) entered forwarding state
[  352.291751][T14553] veth1_vlan: entered promiscuous mode
[  352.333929][ T9329] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.341136][ T9329] bridge0: port 2(bridge_slave_1) entered forwarding state
[  352.666203][T14553] veth0_macvtap: entered promiscuous mode
[  352.692677][T14855] netlink: 'syz.0.2524': attribute type 1 has an invalid length.
[  352.698963][T14553] veth1_macvtap: entered promiscuous mode
[  352.722387][T14855] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2524'.
[  352.748977][T14852] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2523'.
[  352.769185][T14553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  352.788401][T14852] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2523'.
[  352.806380][T14553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.841295][T14553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  352.864974][T14553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.875161][T14553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  352.886474][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  352.902093][T14553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.913350][T14553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  352.925271][T14553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.951625][T14553] batman_adv: batadv0: Interface activated: batadv_slave_0
[  353.022215][T14553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  353.066535][T14553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.088388][T14553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  353.104645][T14871] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2528'.
[  353.115973][T14553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.136305][T14553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  353.158234][T14553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.182099][T14553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  353.196972][T14553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.228937][T14553] batman_adv: batadv0: Interface activated: batadv_slave_1
[  353.264209][T14553] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  353.284508][T14553] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  353.303653][T14553] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  353.312919][T14553] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  353.369146][T14877] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  353.409040][T14581] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.595373][ T9338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.622339][ T9338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.677355][ T5251] Bluetooth: hci4: command 0x0405 tx timeout
[  353.800186][T14192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.823690][T14192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.916513][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  354.229219][T14906] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2536'.
[  354.279362][T14581] veth0_vlan: entered promiscuous mode
[  354.363865][T14581] veth1_vlan: entered promiscuous mode
[  354.490579][T14581] veth0_macvtap: entered promiscuous mode
[  354.522615][T14581] veth1_macvtap: entered promiscuous mode
[  354.594149][T14581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  354.617352][T14581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.637332][T14581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  354.649566][T14581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.659763][T14581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  354.670536][T14581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.681918][T14581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  354.692620][T14581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.702826][T14581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  354.714410][T14581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.732374][T14581] batman_adv: batadv0: Interface activated: batadv_slave_0
[  354.743224][T14922] batadv_slave_1: entered promiscuous mode
[  354.757651][T14923] batadv_slave_1: left promiscuous mode
[  354.778065][T14581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.804099][T14581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.814682][T14581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.825902][T14581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.835871][T14581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.849967][T14581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.862503][T14581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.873329][T14581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.885959][T14581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.898289][T14581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.911521][T14581] batman_adv: batadv0: Interface activated: batadv_slave_1
[  354.920297][T14923] tipc: Started in network mode
[  354.925170][T14923] tipc: Node identity ac14140f, cluster identity 4711
[  354.934937][T14923] tipc: New replicast peer: 255.255.255.255
[  354.941756][T14923] tipc: Enabled bearer <udp:syz2>, priority 10
[  354.956413][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  354.988095][T14581] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.997930][T14581] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.011957][T14581] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.021756][T14581] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  355.178052][T14194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.202543][T14194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.265871][ T9349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.275526][ T9349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.937395][ T9254] tipc: Node number set to 2886997007
[  355.996403][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  356.191484][ T4227] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.652717][T14972] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2554'.
[  356.780668][ T4227] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.919455][ T4227] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.016981][ T5251] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  357.019379][ T4227] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.039200][ T5251] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  357.046492][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  357.054211][ T5251] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  357.063505][ T5251] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  357.071903][ T5251] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  357.082495][ T5251] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  357.121009][T14981] lo speed is unknown, defaulting to 1000
[  357.231577][ T4227] bridge_slave_1: left allmulticast mode
[  357.238753][ T4227] bridge_slave_1: left promiscuous mode
[  357.244441][ T4227] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.254882][ T4227] bridge_slave_0: left allmulticast mode
[  357.261627][ T4227] bridge_slave_0: left promiscuous mode
[  357.267726][ T4227] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.731611][ T4227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  357.743802][ T4227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  357.755807][ T4227] bond0 (unregistering): Released all slaves
[  357.868672][T14981] chnl_net:caif_netlink_parms(): no params data found
[  357.983180][T14981] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.990593][T14981] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.000980][T14981] bridge_slave_0: entered allmulticast mode
[  358.008958][T14981] bridge_slave_0: entered promiscuous mode
[  358.019918][T14981] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.039025][T14981] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.046351][T14981] bridge_slave_1: entered allmulticast mode
[  358.054622][T14981] bridge_slave_1: entered promiscuous mode
[  358.076422][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  358.123022][T14981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  358.136376][T14981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  358.173929][ T4227] hsr_slave_0: left promiscuous mode
[  358.182426][ T4227] hsr_slave_1: left promiscuous mode
[  358.189041][ T4227] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  358.197177][ T4227] batman_adv: batadv0: Removing interface: batadv_slave_0
[  358.205069][ T4227] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  358.212794][ T4227] batman_adv: batadv0: Removing interface: batadv_slave_1
[  358.247845][ T4227] veth1_macvtap: left promiscuous mode
[  358.253506][ T4227] veth0_macvtap: left promiscuous mode
[  358.259823][ T4227] veth1_vlan: left promiscuous mode
[  358.265128][ T4227] veth0_vlan: left promiscuous mode
[  358.372611][T14993] x_tables: duplicate entry at hook 2
[  358.798665][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  358.809855][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  358.823872][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  358.832435][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  358.840385][ T5234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  358.847848][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  359.126467][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  359.133598][ T5234] Bluetooth: hci1: command tx timeout
[  359.184875][ T4227] team0 (unregistering): Port device team_slave_1 removed
[  359.243374][ T4227] team0 (unregistering): Port device team_slave_0 removed
[  359.918521][T14981] team0: Port device team_slave_0 added
[  359.952766][T14981] team0: Port device team_slave_1 added
[  360.013416][T14998] lo speed is unknown, defaulting to 1000
[  360.055283][T14981] batman_adv: batadv0: Adding interface: batadv_slave_0
[  360.065102][T14981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  360.140768][T14981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  360.156421][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  360.187333][T14981] batman_adv: batadv0: Adding interface: batadv_slave_1
[  360.222478][T14981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  360.296037][T14981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  360.530699][T14981] hsr_slave_0: entered promiscuous mode
[  360.557629][T14981] hsr_slave_1: entered promiscuous mode
[  360.564123][T14981] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  360.586738][T14981] Cannot create hsr debugfs directory
[  360.604830][T15038] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  360.615498][T15038] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  360.625378][T15038] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  360.634294][T15038] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  360.644576][T15038] vxlan0: entered promiscuous mode
[  360.650118][T15038] vxlan0: entered allmulticast mode
[  360.803129][T15043] sctp: [Deprecated]: syz.0.2569 (pid 15043) Use of struct sctp_assoc_value in delayed_ack socket option.
[  360.803129][T15043] Use struct sctp_sack_info instead
[  360.876704][ T5251] Bluetooth: hci4: command tx timeout
[  360.979305][ T4227] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.146955][ T4227] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.196470][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  361.196879][ T5251] Bluetooth: hci1: command tx timeout
[  361.468148][ T4227] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.480763][T15065] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2576'.
[  361.505640][T15057] vlan2: entered promiscuous mode
[  361.522905][T15057] batadv0: entered promiscuous mode
[  361.540135][T15057] batadv0: left promiscuous mode
[  361.550365][T15066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2575'.
[  361.604264][T15062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2575'.
[  361.626432][T15062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2575'.
[  361.670733][T15065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2576'.
[  361.728779][ T4227] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.855950][T14998] chnl_net:caif_netlink_parms(): no params data found
[  362.105492][T15082] netlink: 'syz.3.2579': attribute type 1 has an invalid length.
[  362.121538][T15082] netlink: 9396 bytes leftover after parsing attributes in process `syz.3.2579'.
[  362.236686][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  362.269216][ T4227] bridge_slave_1: left allmulticast mode
[  362.274910][ T4227] bridge_slave_1: left promiscuous mode
[  362.295430][ T4227] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.318983][ T4227] bridge_slave_0: left allmulticast mode
[  362.336452][ T4227] bridge_slave_0: left promiscuous mode
[  362.342273][ T4227] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.819247][ T4227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  362.831405][ T4227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  362.844307][ T4227] bond0 (unregistering): Released all slaves
[  362.855933][T15093] netlink: 'syz.3.2582': attribute type 2 has an invalid length.
[  362.918242][T14998] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.925414][T14998] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.946729][T14998] bridge_slave_0: entered allmulticast mode
[  362.963760][ T5251] Bluetooth: hci4: command 0x041b tx timeout
[  362.978103][T14998] bridge_slave_0: entered promiscuous mode
[  362.998203][T15104] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2584'.
[  363.042035][T14998] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.065194][T14998] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.074484][T14998] bridge_slave_1: entered allmulticast mode
[  363.082399][T14998] bridge_slave_1: entered promiscuous mode
[  363.232730][T14998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  363.272512][T14998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  363.286382][ T5234] Bluetooth: hci1: command tx timeout
[  363.286432][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  363.505461][T14981] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  363.566676][T15126] pim6reg: entered allmulticast mode
[  363.579326][T15129] pim6reg: left allmulticast mode
[  363.721982][T14998] team0: Port device team_slave_0 added
[  363.752125][T14998] team0: Port device team_slave_1 added
[  363.811082][T14981] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  363.847800][T14981] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  363.893294][T15139] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.940458][T14981] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  363.973959][T14998] batman_adv: batadv0: Adding interface: batadv_slave_0
[  363.993694][T14998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  364.026944][T14998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  364.079356][ T4227] hsr_slave_0: left promiscuous mode
[  364.100896][ T4227] hsr_slave_1: left promiscuous mode
[  364.117477][ T4227] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  364.125041][ T4227] batman_adv: batadv0: Removing interface: batadv_slave_0
[  364.133508][ T4227] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  364.146144][ T4227] batman_adv: batadv0: Removing interface: batadv_slave_1
[  364.180516][ T4227] veth1_macvtap: left promiscuous mode
[  364.186111][ T4227] veth0_macvtap: left promiscuous mode
[  364.192283][ T4227] veth1_vlan: left promiscuous mode
[  364.199033][ T4227] veth0_vlan: left promiscuous mode
[  364.326552][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  364.857039][ T4227] team0 (unregistering): Port device team_slave_1 removed
[  364.911048][ T4227] team0 (unregistering): Port device team_slave_0 removed
[  365.042351][ T5234] Bluetooth: hci4: command 0x041b tx timeout
[  365.359610][ T5234] Bluetooth: hci1: command tx timeout
[  365.366437][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  365.502468][T14998] batman_adv: batadv0: Adding interface: batadv_slave_1
[  365.526050][T14998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  365.565739][T14998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  365.708069][T14998] hsr_slave_0: entered promiscuous mode
[  365.727412][T14998] hsr_slave_1: entered promiscuous mode
[  365.744417][T14998] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  365.764737][T14998] Cannot create hsr debugfs directory
[  365.813356][T15172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2600'.
[  365.829755][T15176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2600'.
[  366.396448][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  366.447013][T14981] 8021q: adding VLAN 0 to HW filter on device bond0
[  366.599719][T14981] 8021q: adding VLAN 0 to HW filter on device team0
[  366.624726][T14194] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.631922][T14194] bridge0: port 1(bridge_slave_0) entered forwarding state
[  366.671852][T14194] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.679067][T14194] bridge0: port 2(bridge_slave_1) entered forwarding state
[  366.717401][T14194] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  366.932713][T14998] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  366.951247][T15215] sock: sock_set_timeout: `syz.1.2612' (pid 15215) tries to set negative timeout
[  366.970036][T14998] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  367.008780][T14998] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  367.068985][T14998] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  367.112486][T15223] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2614'.
[  367.117446][ T5234] Bluetooth: hci4: command 0x041b tx timeout
[  367.210953][T14981] 8021q: adding VLAN 0 to HW filter on device batadv0
[  367.406727][T14981] veth0_vlan: entered promiscuous mode
[  367.432262][T14981] veth1_vlan: entered promiscuous mode
[  367.437984][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  367.478468][T14998] 8021q: adding VLAN 0 to HW filter on device bond0
[  367.585684][T14998] 8021q: adding VLAN 0 to HW filter on device team0
[  367.616039][T14981] veth0_macvtap: entered promiscuous mode
[  367.644884][ T9338] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.652137][ T9338] bridge0: port 1(bridge_slave_0) entered forwarding state
[  367.700070][ T9338] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.707301][ T9338] bridge0: port 2(bridge_slave_1) entered forwarding state
[  367.752589][T14981] veth1_macvtap: entered promiscuous mode
[  367.800940][T15245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2622'.
[  367.825013][T15245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2622'.
[  367.846657][T15245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2622'.
[  367.880185][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  367.895724][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.907025][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  367.927977][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.939644][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  367.952891][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.963716][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  367.974807][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.992082][T14981] batman_adv: batadv0: Interface activated: batadv_slave_0
[  368.062758][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  368.079938][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  368.095679][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  368.107348][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  368.120868][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  368.132007][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  368.144304][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  368.155296][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  368.183807][T14981] batman_adv: batadv0: Interface activated: batadv_slave_1
[  368.202003][T15252] lo speed is unknown, defaulting to 1000
[  368.220009][T14981] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  368.229406][T14981] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  368.241125][T14981] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  368.254801][T14981] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  368.486549][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  368.553160][T15261] lo speed is unknown, defaulting to 1000
[  368.747248][T14191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  368.754340][T14998] 8021q: adding VLAN 0 to HW filter on device batadv0
[  368.762828][T14191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  368.948832][ T4227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  368.996421][ T4227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.078617][T15273] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2627'.
[  369.198048][ T5234] Bluetooth: hci4: command 0x041b tx timeout
[  369.516432][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  369.604360][T14998] veth0_vlan: entered promiscuous mode
[  369.651713][T14998] veth1_vlan: entered promiscuous mode
[  369.767737][T14998] veth0_macvtap: entered promiscuous mode
[  369.820883][T14998] veth1_macvtap: entered promiscuous mode
[  369.884861][T15300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2636'.
[  369.897021][T15302] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  369.906764][T14998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  369.934041][T14998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.944856][T14998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  369.955601][T14998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.966514][T14998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  369.982420][T14998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.992508][T14998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  370.004910][T14998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.014947][T14998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  370.025484][T14998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.040365][T14998] batman_adv: batadv0: Interface activated: batadv_slave_0
[  370.052135][T14998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  370.062764][T14998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.086391][T14998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  370.107263][T14998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.126504][T14998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  370.135461][T15308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2639'.
[  370.151211][T15308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2639'.
[  370.152186][T14998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.171914][T14998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  370.182847][T14998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.192831][T14998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  370.203447][T14998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.215306][T14998] batman_adv: batadv0: Interface activated: batadv_slave_1
[  370.238413][T15305] 
@ÿÿÿ: left promiscuous mode
[  370.326023][T14998] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  370.336652][T14998] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  370.348368][T14998] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  370.357251][T14998] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  370.428136][T15311] netlink: 'syz.3.2640': attribute type 1 has an invalid length.
[  370.435916][T15311] netlink: 'syz.3.2640': attribute type 2 has an invalid length.
[  370.521147][T15317] netlink: 'syz.0.2641': attribute type 159 has an invalid length.
[  370.556504][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  370.708243][ T9329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  370.716110][ T9329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  370.810087][T14191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  370.826660][T14191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  371.206116][T14191] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.431725][T14191] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.517765][T14191] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.594612][T14191] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.605157][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  371.724666][T14191] bridge_slave_1: left allmulticast mode
[  371.730514][T14191] bridge_slave_1: left promiscuous mode
[  371.736749][T14191] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.745769][T14191] bridge_slave_0: left allmulticast mode
[  371.751765][T14191] bridge_slave_0: left promiscuous mode
[  371.758028][T14191] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.916809][ T5234] Bluetooth: hci0: command tx timeout
[  372.320547][T14191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  372.362924][T14191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  372.382325][T15352] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2650'.
[  372.432408][T14191] bond0 (unregistering): Released all slaves
[  372.597672][T15352] veth4: entered allmulticast mode
[  372.636492][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  372.877457][ T5251] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  372.892326][ T5251] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  372.902434][ T5251] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  372.914480][ T5251] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  372.924194][ T5251] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  372.931919][ T5251] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  372.972807][T15360] lo speed is unknown, defaulting to 1000
[  373.011333][T14191] hsr_slave_0: left promiscuous mode
[  373.018657][T14191] hsr_slave_1: left promiscuous mode
[  373.024566][T14191] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  373.032866][T14191] batman_adv: batadv0: Removing interface: batadv_slave_0
[  373.041297][T14191] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  373.048963][T14191] batman_adv: batadv0: Removing interface: batadv_slave_1
[  373.072559][T14191] veth1_macvtap: left promiscuous mode
[  373.078463][T14191] veth0_macvtap: left promiscuous mode
[  373.084022][T14191] veth1_vlan: left promiscuous mode
[  373.089520][T14191] veth0_vlan: left promiscuous mode
[  373.642375][T14191] team0 (unregistering): Port device team_slave_1 removed
[  373.686520][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  373.705378][T14191] team0 (unregistering): Port device team_slave_0 removed
[  374.405640][T15360] chnl_net:caif_netlink_parms(): no params data found
[  374.506672][T15360] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.513916][T15360] bridge0: port 1(bridge_slave_0) entered disabled state
[  374.521893][T15360] bridge_slave_0: entered allmulticast mode
[  374.535410][T15360] bridge_slave_0: entered promiscuous mode
[  374.544841][T15360] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.553476][T15360] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.561106][T15360] bridge_slave_1: entered allmulticast mode
[  374.568486][T15360] bridge_slave_1: entered promiscuous mode
[  374.615085][T15360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  374.628380][T15360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  374.716478][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  374.733229][T15360] team0: Port device team_slave_0 added
[  374.772967][T15360] team0: Port device team_slave_1 added
[  374.811700][T15376] sctp: [Deprecated]: syz.1.2655 (pid 15376) Use of int in maxseg socket option.
[  374.811700][T15376] Use struct sctp_assoc_value instead
[  374.957041][ T5251] Bluetooth: hci1: command tx timeout
[  375.029410][T14191] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.080977][T15360] batman_adv: batadv0: Adding interface: batadv_slave_0
[  375.098077][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  375.115578][T15360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  375.117489][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  375.169345][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  375.183452][T15360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  375.198482][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  375.214803][ T5234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  375.224175][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  375.334690][T14191] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.385144][T15360] batman_adv: batadv0: Adding interface: batadv_slave_1
[  375.406715][T15360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  375.456154][T15360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  375.568507][T14191] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.743336][T15360] hsr_slave_0: entered promiscuous mode
[  375.756563][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  375.764336][T15360] hsr_slave_1: entered promiscuous mode
[  375.774762][T15360] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  375.789977][T15360] Cannot create hsr debugfs directory
[  375.813224][T14191] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.833524][T15384] lo speed is unknown, defaulting to 1000
[  375.846924][T15406] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2665'.
[  375.992473][T15417] netlink: 'syz.3.2667': attribute type 34 has an invalid length.
[  376.094721][T15417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2667'.
[  376.172395][T15422] ipt_REJECT: ECHOREPLY no longer supported.
[  376.448190][T14191] bridge_slave_1: left allmulticast mode
[  376.453921][T14191] bridge_slave_1: left promiscuous mode
[  376.460295][T14191] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.513731][T14191] bridge_slave_0: left allmulticast mode
[  376.520408][T14191] bridge_slave_0: left promiscuous mode
[  376.526685][T14191] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.547831][T15430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2669'.
[  376.796779][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  377.051463][ T5251] Bluetooth: hci1: command tx timeout
[  377.276496][ T5251] Bluetooth: hci4: command tx timeout
[  377.688927][T15480] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2677'.
[  377.841112][T14191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  377.846498][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  377.870330][T14191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  377.887847][T14191] bond0 (unregistering): Released all slaves
[  377.966877][T15480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2677'.
[  378.102558][T15483] lo speed is unknown, defaulting to 1000
[  378.168292][T15487] netlink: 'syz.0.2679': attribute type 4 has an invalid length.
[  378.186549][T15487] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2679'.
[  378.352100][T15384] chnl_net:caif_netlink_parms(): no params data found
[  378.406946][T15497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2681'.
[  378.592810][T15502] FAULT_INJECTION: forcing a failure.
[  378.592810][T15502] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  378.606862][T15502] CPU: 1 UID: 0 PID: 15502 Comm: syz.3.2684 Not tainted 6.11.0-rc6-syzkaller-00178-gd759ee240d3c #0
[  378.617656][T15502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  378.627725][T15502] Call Trace:
[  378.631018][T15502]  <TASK>
[  378.633957][T15502]  dump_stack_lvl+0x241/0x360
[  378.638661][T15502]  ? __pfx_dump_stack_lvl+0x10/0x10
[  378.643889][T15502]  ? __pfx__printk+0x10/0x10
[  378.648509][T15502]  ? snprintf+0xda/0x120
[  378.652768][T15502]  should_fail_ex+0x3b0/0x4e0
[  378.657471][T15502]  _copy_to_user+0x2f/0xb0
[  378.661918][T15502]  simple_read_from_buffer+0xca/0x150
[  378.667318][T15502]  proc_fail_nth_read+0x1ec/0x260
[  378.672362][T15502]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  378.677919][T15502]  ? rw_verify_area+0x520/0x6b0
[  378.682815][T15502]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  378.688347][T15502]  vfs_read+0x204/0xbc0
[  378.692488][T15502]  ? __pfx_lock_release+0x10/0x10
[  378.697503][T15502]  ? __pfx_vfs_read+0x10/0x10
[  378.702171][T15502]  ? __fget_files+0x29/0x470
[  378.706753][T15502]  ? __fget_files+0x3f6/0x470
[  378.711419][T15502]  ksys_read+0x1a0/0x2c0
[  378.715666][T15502]  ? __pfx_ksys_read+0x10/0x10
[  378.720439][T15502]  ? do_syscall_64+0x100/0x230
[  378.725206][T15502]  ? do_syscall_64+0xb6/0x230
[  378.729874][T15502]  do_syscall_64+0xf3/0x230
[  378.734368][T15502]  ? clear_bhb_loop+0x35/0x90
[  378.739040][T15502]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.744925][T15502] RIP: 0033:0x7f8f02f7b93c
[  378.749329][T15502] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  378.768928][T15502] RSP: 002b:00007f8f03cd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  378.777332][T15502] RAX: ffffffffffffffda RBX: 00007f8f03135f80 RCX: 00007f8f02f7b93c
[  378.785288][T15502] RDX: 000000000000000f RSI: 00007f8f03cd50a0 RDI: 0000000000000004
[  378.793247][T15502] RBP: 00007f8f03cd5090 R08: 0000000000000000 R09: 0000000000000000
[  378.801205][T15502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  378.809165][T15502] R13: 0000000000000000 R14: 00007f8f03135f80 R15: 00007ffc2e736808
[  378.817143][T15502]  </TASK>
[  378.881088][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  378.894745][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  378.901301][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  379.050852][T14191] hsr_slave_0: left promiscuous mode
[  379.086701][T15514] ebt_among: dst integrity fail: 30d
[  379.111983][T14191] hsr_slave_1: left promiscuous mode
[  379.120765][T14191] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  379.127001][ T5251] Bluetooth: hci1: command tx timeout
[  379.140535][T14191] batman_adv: batadv0: Removing interface: batadv_slave_0
[  379.157347][T15516] netlink: 'syz.0.2686': attribute type 1 has an invalid length.
[  379.165477][T15516] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2686'.
[  379.185485][T14191] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  379.193246][T14191] batman_adv: batadv0: Removing interface: batadv_slave_1
[  379.223857][T14191] veth1_macvtap: left promiscuous mode
[  379.229606][T14191] veth0_macvtap: left promiscuous mode
[  379.235475][T14191] veth1_vlan: left promiscuous mode
[  379.241250][T14191] veth0_vlan: left promiscuous mode
[  379.356796][ T5251] Bluetooth: hci4: command tx timeout
[  379.919877][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  379.936673][T14191] team0 (unregistering): Port device team_slave_1 removed
[  379.995583][T14191] team0 (unregistering): Port device team_slave_0 removed
[  380.592932][T15384] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.603162][T15384] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.610963][T15384] bridge_slave_0: entered allmulticast mode
[  380.618782][T15384] bridge_slave_0: entered promiscuous mode
[  380.628705][T15384] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.635953][T15384] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.656618][T15384] bridge_slave_1: entered allmulticast mode
[  380.676673][T15384] bridge_slave_1: entered promiscuous mode
[  380.765152][T15384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  380.839534][T15384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  380.956432][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  381.024445][T15543] openvswitch: netlink: Message has 2 unknown bytes.
[  381.024442][T15538] netlink: 209848 bytes leftover after parsing attributes in process `syz.3.2694'.
[  381.045073][T15538] openvswitch: netlink: Message has 2 unknown bytes.
[  381.115609][T15542] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2695'.
[  381.164335][T15384] team0: Port device team_slave_0 added
[  381.206717][ T5251] Bluetooth: hci1: command tx timeout
[  381.240534][T15384] team0: Port device team_slave_1 added
[  381.249096][T15360] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  381.324501][T15554] netlink: 'syz.0.2698': attribute type 10 has an invalid length.
[  381.343387][T15554] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.2698'.
[  381.363763][T15554] openvswitch: netlink: Flow key attr not present in new flow.
[  381.437555][T15360] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  381.444709][ T5251] Bluetooth: hci4: command tx timeout
[  381.457598][T15360] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  381.519398][T15384] batman_adv: batadv0: Adding interface: batadv_slave_0
[  381.555267][T15384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  381.591779][T15384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  381.633764][T15384] batman_adv: batadv0: Adding interface: batadv_slave_1
[  381.655979][T15384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  381.721558][T15384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  381.752070][T15360] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  381.964762][T15384] hsr_slave_0: entered promiscuous mode
[  381.983947][T15384] hsr_slave_1: entered promiscuous mode
[  381.996538][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  382.045506][T15384] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  382.069454][T15384] Cannot create hsr debugfs directory
[  382.568069][T15597] netlink: 'syz.1.2708': attribute type 1 has an invalid length.
[  382.605483][T15597] 8021q: adding VLAN 0 to HW filter on device bond5
[  382.687194][T15601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2708'.
[  382.696194][T15608] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2711'.
[  382.709476][T15608] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2711'.
[  382.889336][T15360] 8021q: adding VLAN 0 to HW filter on device bond0
[  382.911591][T15616] netlink: 'syz.0.2713': attribute type 6 has an invalid length.
[  383.036386][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  383.050355][T15360] 8021q: adding VLAN 0 to HW filter on device team0
[  383.135027][T14191] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.142250][T14191] bridge0: port 1(bridge_slave_0) entered forwarding state
[  383.188126][ T9338] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.195310][ T9338] bridge0: port 2(bridge_slave_1) entered forwarding state
[  383.468174][T15645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2719'.
[  383.522091][ T5234] Bluetooth: hci4: command tx timeout
[  383.555913][T15384] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  383.596080][T15384] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  383.649565][T15384] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  383.679837][T15384] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  383.850810][T15360] 8021q: adding VLAN 0 to HW filter on device batadv0
[  383.898726][T15663] netdevsim netdevsim1: Direct firmware load for 
 failed with error -2
[  383.926925][T15663] netdevsim netdevsim1: Falling back to sysfs fallback for: 

[  383.993390][T15360] veth0_vlan: entered promiscuous mode
[  383.996067][T15662] netdevsim netdevsim1: Direct firmware load for 
 failed with error -2
[  384.031465][T15384] 8021q: adding VLAN 0 to HW filter on device bond0
[  384.046930][T15662] netdevsim netdevsim1: Falling back to sysfs fallback for: 

[  384.076483][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  384.095530][T15665] ------------[ cut here ]------------
[  384.101603][T15665] WARNING: CPU: 1 PID: 15665 at kernel/softirq.c:362 __local_bh_enable_ip+0x1be/0x200
[  384.111270][T15665] Modules linked in:
[  384.115201][T15665] CPU: 1 UID: 0 PID: 15665 Comm: syz.3.2725 Not tainted 6.11.0-rc6-syzkaller-00178-gd759ee240d3c #0
[  384.125992][T15665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  384.136072][T15665] RIP: 0010:__local_bh_enable_ip+0x1be/0x200
[  384.142092][T15665] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 4c a3 18 90 80 e1 07 80 c1 03 38
[  384.161819][T15665] RSP: 0018:ffffc900037fef40 EFLAGS: 00010046
[  384.167927][T15665] RAX: 0000000000000000 RBX: 1ffff920006ffdec RCX: ffffc900037fef03
[  384.175929][T15665] RDX: 0000000000000005 RSI: 0000000000000200 RDI: ffffffff89877b3a
[  384.183921][T15665] RBP: ffffc900037feff0 R08: ffffffff901870ef R09: 1ffffffff2030e1d
[  384.191986][T15665] R10: dffffc0000000000 R11: fffffbfff2030e1e R12: dffffc0000000000
[  384.199980][T15665] R13: 1ffff1100a59d4a0 R14: ffffc900037fef80 R15: 0000000000000200
[  384.207991][T15665] FS:  00007f8f03cd56c0(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000
[  384.216945][T15665] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  384.223527][T15665] CR2: 0000000000000000 CR3: 000000004efee000 CR4: 00000000003506f0
[  384.231585][T15665] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  384.239561][T15665] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  384.247576][T15665] Call Trace:
[  384.250883][T15665]  <TASK>
[  384.253834][T15665]  ? __warn+0x163/0x4e0
[  384.258015][T15665]  ? __local_bh_enable_ip+0x1be/0x200
[  384.263408][T15665]  ? report_bug+0x2b3/0x500
[  384.267912][T15665]  ? __local_bh_enable_ip+0x1be/0x200
[  384.273295][T15665]  ? handle_bug+0x3e/0x70
[  384.277622][T15665]  ? exc_invalid_op+0x1a/0x50
[  384.282293][T15665]  ? asm_exc_invalid_op+0x1a/0x20
[  384.287317][T15665]  ? __dev_queue_xmit+0x2da/0x3e90
[  384.292426][T15665]  ? __local_bh_enable_ip+0x1be/0x200
[  384.297870][T15665]  ? dev_hard_start_xmit+0x773/0x7e0
[  384.303188][T15665]  ? __dev_queue_xmit+0x2da/0x3e90
[  384.308502][T15665]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  384.314270][T15665]  ? __dev_queue_xmit+0x2da/0x3e90
[  384.319381][T15665]  __dev_queue_xmit+0x1763/0x3e90
[  384.324403][T15665]  ? kasan_save_track+0x51/0x80
[  384.329265][T15665]  ? ieee80211_do_stop+0x13d9/0x1f40
[  384.334563][T15665]  ? cfg80211_change_iface+0x782/0xf30
[  384.340019][T15665]  ? wext_ioctl_dispatch+0x58e/0x640
[  384.345295][T15665]  ? __dev_queue_xmit+0x2da/0x3e90
[  384.350426][T15665]  ? __se_sys_ioctl+0xfc/0x170
[  384.355211][T15665]  ? do_syscall_64+0xf3/0x230
[  384.359907][T15665]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.366006][T15665]  ? __pfx___dev_queue_xmit+0x10/0x10
[  384.371432][T15665]  ? __copy_skb_header+0x437/0x5b0
[  384.376567][T15665]  ? __asan_memcpy+0x40/0x70
[  384.381172][T15665]  ? skb_clone+0x240/0x390
[  384.385633][T15665]  __netlink_deliver_tap+0x54d/0x7c0
[  384.390924][T15665]  ? netlink_deliver_tap+0x2e/0x1b0
[  384.396119][T15665]  netlink_deliver_tap+0x19d/0x1b0
[  384.401241][T15665]  netlink_broadcast_filtered+0xe60/0x12a0
[  384.407369][T15665]  genlmsg_multicast_netns+0x93/0xd0
[  384.412674][T15665]  nl80211_frame_tx_status+0x8fa/0xda0
[  384.418143][T15665]  ? __pfx_nl80211_frame_tx_status+0x10/0x10
[  384.424121][T15665]  ? do_raw_spin_unlock+0x13c/0x8b0
[  384.429321][T15665]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  384.435212][T15665]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  384.441543][T15665]  ? ieee80211_report_used_skb+0x1621/0x2470
[  384.447536][T15665]  ieee80211_report_used_skb+0x19eb/0x2470
[  384.453403][T15665]  ? __pfx_ieee80211_report_used_skb+0x10/0x10
[  384.459634][T15665]  ? _raw_spin_lock_irqsave+0xe1/0x120
[  384.465113][T15665]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  384.471100][T15665]  ieee80211_free_txskb+0x24/0x40
[  384.476125][T15665]  ieee80211_do_stop+0x13d9/0x1f40
[  384.481236][T15665]  ? __ieee80211_stop_queue+0x1fe/0x460
[  384.486777][T15665]  ? _find_next_bit+0xec/0x120
[  384.491538][T15665]  ? __pfx_ieee80211_do_stop+0x10/0x10
[  384.497015][T15665]  ? ieee80211_stop_vif_queues+0x15b/0x1a0
[  384.502854][T15665]  ? __pfx_ieee80211_stop_vif_queues+0x10/0x10
[  384.509038][T15665]  ? ieee80211_check_concurrent_iface+0x70e/0x7e0
[  384.515487][T15665]  ieee80211_if_change_type+0x4cd/0xad0
[  384.521058][T15665]  ieee80211_change_iface+0xd2/0x4f0
[  384.526399][T15665]  ? cfg80211_mlme_purge_registrations+0x1fa/0x230
[  384.532910][T15665]  cfg80211_change_iface+0x782/0xf30
[  384.538218][T15665]  cfg80211_wext_siwmode+0x1bb/0x290
[  384.543632][T15665]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  384.549459][T15665]  ? __pfx___mutex_lock+0x10/0x10
[  384.554511][T15665]  ? full_name_hash+0x93/0xe0
[  384.559217][T15665]  ioctl_standard_call+0xe3/0x290
[  384.564259][T15665]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  384.570069][T15665]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  384.575872][T15665]  wext_ioctl_dispatch+0x58e/0x640
[  384.580981][T15665]  ? __pfx_ioctl_standard_call+0x10/0x10
[  384.586607][T15665]  ? __pfx_ioctl_private_call+0x10/0x10
[  384.592145][T15665]  ? __pfx_wext_ioctl_dispatch+0x10/0x10
[  384.597788][T15665]  ? __might_fault+0xc6/0x120
[  384.602512][T15665]  wext_handle_ioctl+0x15f/0x270
[  384.607482][T15665]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  384.612981][T15665]  sock_ioctl+0x17f/0x8e0
[  384.617312][T15665]  ? __pfx_sock_ioctl+0x10/0x10
[  384.622158][T15665]  ? __fget_files+0x29/0x470
[  384.626744][T15665]  ? __fget_files+0x3f6/0x470
[  384.631414][T15665]  ? __fget_files+0x29/0x470
[  384.636005][T15665]  ? bpf_lsm_file_ioctl+0x9/0x10
[  384.640958][T15665]  ? security_file_ioctl+0x87/0xb0
[  384.646062][T15665]  ? __pfx_sock_ioctl+0x10/0x10
[  384.651012][T15665]  __se_sys_ioctl+0xfc/0x170
[  384.655636][T15665]  do_syscall_64+0xf3/0x230
[  384.660162][T15665]  ? clear_bhb_loop+0x35/0x90
[  384.664855][T15665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.670752][T15665] RIP: 0033:0x7f8f02f7cef9
[  384.675181][T15665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  384.694785][T15665] RSP: 002b:00007f8f03cd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  384.703219][T15665] RAX: ffffffffffffffda RBX: 00007f8f03135f80 RCX: 00007f8f02f7cef9
[  384.711206][T15665] RDX: 0000000020000000 RSI: 0000000000008b06 RDI: 0000000000000003
[  384.719258][T15665] RBP: 00007f8f02fef046 R08: 0000000000000000 R09: 0000000000000000
[  384.727222][T15665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  384.735196][T15665] R13: 0000000000000000 R14: 00007f8f03135f80 R15: 00007ffc2e736808
[  384.743188][T15665]  </TASK>
[  384.746201][T15665] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  384.753484][T15665] CPU: 1 UID: 0 PID: 15665 Comm: syz.3.2725 Not tainted 6.11.0-rc6-syzkaller-00178-gd759ee240d3c #0
[  384.764250][T15665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  384.774317][T15665] Call Trace:
[  384.777600][T15665]  <TASK>
[  384.780530][T15665]  dump_stack_lvl+0x241/0x360
[  384.785217][T15665]  ? __pfx_dump_stack_lvl+0x10/0x10
[  384.790429][T15665]  ? __pfx__printk+0x10/0x10
[  384.795017][T15665]  ? vscnprintf+0x5d/0x90
[  384.799358][T15665]  panic+0x349/0x860
[  384.803280][T15665]  ? __warn+0x172/0x4e0
[  384.807457][T15665]  ? __pfx_panic+0x10/0x10
[  384.811915][T15665]  __warn+0x346/0x4e0
[  384.815905][T15665]  ? __local_bh_enable_ip+0x1be/0x200
[  384.821272][T15665]  report_bug+0x2b3/0x500
[  384.825606][T15665]  ? __local_bh_enable_ip+0x1be/0x200
[  384.830974][T15665]  handle_bug+0x3e/0x70
[  384.835124][T15665]  exc_invalid_op+0x1a/0x50
[  384.839639][T15665]  asm_exc_invalid_op+0x1a/0x20
[  384.844498][T15665] RIP: 0010:__local_bh_enable_ip+0x1be/0x200
[  384.850488][T15665] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 4c a3 18 90 80 e1 07 80 c1 03 38
[  384.870105][T15665] RSP: 0018:ffffc900037fef40 EFLAGS: 00010046
[  384.876164][T15665] RAX: 0000000000000000 RBX: 1ffff920006ffdec RCX: ffffc900037fef03
[  384.884127][T15665] RDX: 0000000000000005 RSI: 0000000000000200 RDI: ffffffff89877b3a
[  384.892090][T15665] RBP: ffffc900037feff0 R08: ffffffff901870ef R09: 1ffffffff2030e1d
[  384.900069][T15665] R10: dffffc0000000000 R11: fffffbfff2030e1e R12: dffffc0000000000
[  384.908149][T15665] R13: 1ffff1100a59d4a0 R14: ffffc900037fef80 R15: 0000000000000200
[  384.916153][T15665]  ? __dev_queue_xmit+0x2da/0x3e90
[  384.921446][T15665]  ? dev_hard_start_xmit+0x773/0x7e0
[  384.926738][T15665]  ? __dev_queue_xmit+0x2da/0x3e90
[  384.931852][T15665]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  384.937575][T15665]  ? __dev_queue_xmit+0x2da/0x3e90
[  384.942682][T15665]  __dev_queue_xmit+0x1763/0x3e90
[  384.947725][T15665]  ? kasan_save_track+0x51/0x80
[  384.952610][T15665]  ? ieee80211_do_stop+0x13d9/0x1f40
[  384.957917][T15665]  ? cfg80211_change_iface+0x782/0xf30
[  384.963390][T15665]  ? wext_ioctl_dispatch+0x58e/0x640
[  384.968682][T15665]  ? __dev_queue_xmit+0x2da/0x3e90
[  384.973798][T15665]  ? __se_sys_ioctl+0xfc/0x170
[  384.978582][T15665]  ? do_syscall_64+0xf3/0x230
[  384.983252][T15665]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.989317][T15665]  ? __pfx___dev_queue_xmit+0x10/0x10
[  384.994787][T15665]  ? __copy_skb_header+0x437/0x5b0
[  384.999919][T15665]  ? __asan_memcpy+0x40/0x70
[  385.004563][T15665]  ? skb_clone+0x240/0x390
[  385.009010][T15665]  __netlink_deliver_tap+0x54d/0x7c0
[  385.014328][T15665]  ? netlink_deliver_tap+0x2e/0x1b0
[  385.019539][T15665]  netlink_deliver_tap+0x19d/0x1b0
[  385.024672][T15665]  netlink_broadcast_filtered+0xe60/0x12a0
[  385.030497][T15665]  genlmsg_multicast_netns+0x93/0xd0
[  385.035790][T15665]  nl80211_frame_tx_status+0x8fa/0xda0
[  385.041257][T15665]  ? __pfx_nl80211_frame_tx_status+0x10/0x10
[  385.047245][T15665]  ? do_raw_spin_unlock+0x13c/0x8b0
[  385.052568][T15665]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  385.058497][T15665]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  385.064859][T15665]  ? ieee80211_report_used_skb+0x1621/0x2470
[  385.070836][T15665]  ieee80211_report_used_skb+0x19eb/0x2470
[  385.076662][T15665]  ? __pfx_ieee80211_report_used_skb+0x10/0x10
[  385.082837][T15665]  ? _raw_spin_lock_irqsave+0xe1/0x120
[  385.088294][T15665]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  385.094207][T15665]  ieee80211_free_txskb+0x24/0x40
[  385.099242][T15665]  ieee80211_do_stop+0x13d9/0x1f40
[  385.104394][T15665]  ? __ieee80211_stop_queue+0x1fe/0x460
[  385.109961][T15665]  ? _find_next_bit+0xec/0x120
[  385.114740][T15665]  ? __pfx_ieee80211_do_stop+0x10/0x10
[  385.120194][T15665]  ? ieee80211_stop_vif_queues+0x15b/0x1a0
[  385.125998][T15665]  ? __pfx_ieee80211_stop_vif_queues+0x10/0x10
[  385.132143][T15665]  ? ieee80211_check_concurrent_iface+0x70e/0x7e0
[  385.138562][T15665]  ieee80211_if_change_type+0x4cd/0xad0
[  385.144121][T15665]  ieee80211_change_iface+0xd2/0x4f0
[  385.149415][T15665]  ? cfg80211_mlme_purge_registrations+0x1fa/0x230
[  385.155943][T15665]  cfg80211_change_iface+0x782/0xf30
[  385.161242][T15665]  cfg80211_wext_siwmode+0x1bb/0x290
[  385.166525][T15665]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  385.172323][T15665]  ? __pfx___mutex_lock+0x10/0x10
[  385.177344][T15665]  ? full_name_hash+0x93/0xe0
[  385.182040][T15665]  ioctl_standard_call+0xe3/0x290
[  385.187079][T15665]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  385.192972][T15665]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  385.198788][T15665]  wext_ioctl_dispatch+0x58e/0x640
[  385.203936][T15665]  ? __pfx_ioctl_standard_call+0x10/0x10
[  385.209599][T15665]  ? __pfx_ioctl_private_call+0x10/0x10
[  385.215167][T15665]  ? __pfx_wext_ioctl_dispatch+0x10/0x10
[  385.220896][T15665]  ? __might_fault+0xc6/0x120
[  385.225575][T15665]  wext_handle_ioctl+0x15f/0x270
[  385.230516][T15665]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  385.235976][T15665]  sock_ioctl+0x17f/0x8e0
[  385.240315][T15665]  ? __pfx_sock_ioctl+0x10/0x10
[  385.245163][T15665]  ? __fget_files+0x29/0x470
[  385.249779][T15665]  ? __fget_files+0x3f6/0x470
[  385.254478][T15665]  ? __fget_files+0x29/0x470
[  385.259097][T15665]  ? bpf_lsm_file_ioctl+0x9/0x10
[  385.264053][T15665]  ? security_file_ioctl+0x87/0xb0
[  385.269162][T15665]  ? __pfx_sock_ioctl+0x10/0x10
[  385.274010][T15665]  __se_sys_ioctl+0xfc/0x170
[  385.278596][T15665]  do_syscall_64+0xf3/0x230
[  385.283090][T15665]  ? clear_bhb_loop+0x35/0x90
[  385.287769][T15665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.293655][T15665] RIP: 0033:0x7f8f02f7cef9
[  385.298071][T15665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  385.317758][T15665] RSP: 002b:00007f8f03cd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  385.326268][T15665] RAX: ffffffffffffffda RBX: 00007f8f03135f80 RCX: 00007f8f02f7cef9
[  385.334281][T15665] RDX: 0000000020000000 RSI: 0000000000008b06 RDI: 0000000000000003
[  385.342251][T15665] RBP: 00007f8f02fef046 R08: 0000000000000000 R09: 0000000000000000
[  385.350227][T15665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  385.358215][T15665] R13: 0000000000000000 R14: 00007f8f03135f80 R15: 00007ffc2e736808
[  385.366207][T15665]  </TASK>
[  385.369465][T15665] Kernel Offset: disabled
[  385.373933][T15665] Rebooting in 86400 seconds..