last executing test programs:

2m35.474271959s ago: executing program 2 (id=1604):
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macvlan1\x00', <r2=>0x0}) (async, rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'syztnl2\x00', <r3=>0x0, 0x8, 0x8000, 0xa2a, 0x0, {{0x15, 0x4, 0x3, 0x0, 0x54, 0x64, 0x0, 0xed, 0x4, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0x7, 0x7c, [@broadcast]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x4c, 0x0, 0x8, [0x8000, 0x6, 0x7ff]}, @ssrr={0x89, 0x23, 0x5f, [@local, @private=0xa010100, @private=0xa010102, @broadcast, @multicast2, @private=0xa010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}}}})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000400)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0)
read(r5, &(0x7f0000000100)=""/19, 0x13) (async)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000780)=@newsa={0x318, 0x10, 0x20, 0x70bd28, 0x25dfdbfc, {{@in6=@remote, @in=@multicast1, 0x4e21, 0x5, 0x4e20, 0x2, 0xa, 0x0, 0x0, 0x8, r2, 0xee00}, {@in=@broadcast, 0x4d3, 0x6c}, @in=@rand_addr=0x64010100, {0x7fffffffffffffff, 0xc, 0x5b8, 0x7, 0xfff, 0x9, 0x3, 0x4}, {0xdae, 0x10000, 0xffff, 0x7fffffff}, {0xc0000000, 0xf}, 0x70bd29, 0x0, 0xa, 0x0, 0x40, 0xc8}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@empty, @in=@multicast1, @in6=@private1, 0x33, 0x2680c613e070f64e, 0x0, 0x9, 0x2, 0xa}]}, @sa={0xe4, 0x6, {{@in6=@empty, @in=@rand_addr=0x64010101, 0x4e20, 0x6, 0x4e20, 0x5, 0xa, 0x80, 0x80, 0x3c, r3, r6}, {@in=@broadcast, 0x4d2, 0xff}, @in=@remote, {0x5, 0x505e6576, 0x3ff, 0x6, 0x9, 0x5, 0x7fffffffffffffff, 0x9}, {0xfffffffffffffffe, 0x0, 0x5, 0x2}, {0x675, 0x10000, 0x80000}, 0x70bd26, 0x0, 0x2, 0x2, 0x7, 0x40}}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd28, 0x42e}}, @proto={0x5, 0x19, 0xff}, @lastused={0xc, 0xf, 0x7ff}, @XFRMA_SET_MARK_MASK={0x8}, @algo_aead={0xc0, 0x12, {{'pcrypt(gcm_base(ctr-cast6-avx,blake2s-160-arm))\x00'}, 0x3a0, 0xc0, "9e4d97043d88eca66a5c2dbfe67ff9a5b5abf75a888318b636694adbfd7ed5ca5ec19b95fe4a30ffd39fdacc82673d5c859305269a44e0535a761640262c2747a90031dbfc226293e6461fc43b8efef8a6a18f59e30bd9a77dcd265543ddb55b2b4dfd3d55d017482ee3dcc3d205a8ea7c6f9675"}}, @proto={0x5, 0x19, 0x3c}]}, 0x318}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) (async)
getsockopt$bt_hci(r0, 0x11e, 0x1, 0x0, &(0x7f0000000740))

2m34.465008274s ago: executing program 2 (id=1606):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000007e1b1f2995"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x2cb}, 0x0)
r4 = socket(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e3, &(0x7f0000000000)={<r5=>r4})
r6 = socket(0x840000000002, 0x3, 0x100)
setsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x1)
getsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, 0x0, &(0x7f0000000300))
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r5, @ANYRES32=r1, @ANYBLOB="00000000000000001c002b8008000800", @ANYRES32, @ANYRES8=r1, @ANYRES32=r1], 0x44}}, 0x0)

2m33.683534169s ago: executing program 2 (id=1609):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
shutdown(r1, 0x1)
listen(r1, 0xfffffffc)
r2 = socket$kcm(0x29, 0x5, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000300)="b6d07a5556", 0x5}], 0x1)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
sendfile(r2, r3, 0x0, 0xffffffff000)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r4 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012)
recvmmsg$unix(r4, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xfffffffffffffffc})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x51792e7248df3904}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

2m33.18962779s ago: executing program 2 (id=1613):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1)
sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000001200000000060000e808000100000000000c000d"], 0x28}}, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x214, 0x30, 0x51b, 0x0, 0x0, {}, [{0x200, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x2, 0x0, 0x0, {{0x7}, {0xfffffffffffffff5, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x3}}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x0, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010103}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x34e80bc827e65cec}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @rand_addr=0x64010101}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x214}}, 0x0)

2m31.799281179s ago: executing program 2 (id=1615):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d04fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="cb840400000000001c00128009000100626f6e64edaed69c7c1757bbbd287f6a5c6209000000000c00028008000f00ff7f0000"], 0x3c}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m31.675475739s ago: executing program 2 (id=1618):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000000a0601010000000d000000000100000005000100070000001400088010000780090012fdffffff32000000000900020073797a32000000000800094000000000"], 0x44}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94)
r2 = socket$kcm(0xa, 0x5, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
setsockopt$sock_attach_bpf(r2, 0x29, 0x3b, &(0x7f0000000100)=r3, 0x120)
r4 = socket(0x28, 0x1, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000001400)=@req={0x3, 0xfff, 0x7fffffff, 0x1}, 0x10)
recvmmsg(r4, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}, 0xe83}], 0x1, 0x2000, 0x0)
sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback, 0x1, 0x5c4}, 0x80, &(0x7f00000029c0)}, 0xc9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='rpc_stats_latency\x00', r1, 0x0, 0x8001}, 0x18)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth0\x00', <r8=>0x0})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{0x1, <r9=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000001340)='%pI4   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000013c0)={r9}, 0x4)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000003000000610200000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000f24704", @ANYRES32=r8], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r10, &(0x7f0000000000), 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r6, 0x0, 0xf}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

2m27.595183804s ago: executing program 4 (id=1670):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000009c0)=@assoc_value={0x0, 0x800}, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x14, 0x2, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x61e0, 0x0)

2m26.957502858s ago: executing program 4 (id=1675):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x7530}, 0x10)
connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d52a99295b2f"}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x3c}}, 0x41)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0xa, 0xa, 0x806, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_DATA_TYPE={0x8}]}, 0x1c}}, 0x0)

2m26.846073874s ago: executing program 4 (id=1677):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069107f000000000004000000000000009508001500040000"], &(0x7f0000000040)='GPL\x00', 0xffff, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0xb, 0x2, 0xb)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4)

2m26.785811953s ago: executing program 4 (id=1678):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}})
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_void(r1, 0x1, 0x0, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000001c0)={@mcast1, @mcast2, @local, 0x1, 0x1ff, 0x8, 0x500, 0xc, 0x1800102})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x0, 0x0, 0x8f2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}})
socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
setsockopt$sock_void(r1, 0x1, 0x0, 0x0, 0x0) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000001c0)={@mcast1, @mcast2, @local, 0x1, 0x1ff, 0x8, 0x500, 0xc, 0x1800102}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x0, 0x0, 0x8f2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) (async)

2m26.337747475s ago: executing program 4 (id=1680):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x5a, 0x3, 0x5}, {0x9, 0xb, 0xac, 0xfffff5f7}]}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x14}, 0x1, 0x3000000, 0x0, 0x800}, 0x8840)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x5, 0x2}, 0x1c)
socket$vsock_stream(0x28, 0x1, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmmsg(r7, &(0x7f0000006100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fedbdf255100000008000300", @ANYRES32=r8, @ANYBLOB="05070000030000000a000600ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0xc000)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000f148755"], 0x1c}}, 0x0)
r10 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', <r11=>0x0})
recvmsg(r3, &(0x7f0000000c80)={&(0x7f00000003c0)=@x25, 0x80, &(0x7f0000000980)=[{&(0x7f0000000840)=""/132, 0x84}, {&(0x7f0000000a00)=""/239, 0xef}, {&(0x7f0000000900)=""/105, 0x69}, {&(0x7f0000000500)=""/165, 0xa5}], 0x4, &(0x7f00000010c0)=""/172, 0x3c}, 0x1)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xac}}, 0x0)
sendmsg$NFT_MSG_GETGEN(r12, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0x7, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004805)

2m25.390581689s ago: executing program 4 (id=1683):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x78, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff}}, @IFLA_VLAN_QOS_MAPPING={0x7, 0x1, {0x7f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff}}]}]}}}, @IFLA_LINK={0x8}]}, 0x78}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r1, 0x0, 0x7f}, 0x18)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r3 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10)
sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0)
sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000340)={<r5=>0x0, 0x11, "39c9694696a7e8478d3fbd04154e571285"}, &(0x7f0000000680)=0x19)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000006c0)={r5, 0x40, 0x58, "de721bce479f70ecac96bd091ea6fd46154e652c908289c1ed9d099cd4ade00e20ceb8d5c6aadbe0ed5e395bab97bf55a01df6c046c12d0e7bae311a7c546fc22da0b52f797c6239cc67b38d1e7b592cd5d0bb5025cee133"}, 0x60)
connect$llc(r3, &(0x7f0000000300)={0x1a, 0x326, 0x2, 0x40, 0x3, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x2b8, r6, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x16c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "5d35a2fab084b1c2b149608cc838e2e5a9805acdf90e36"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ID={0x7e, 0x3, "5e9a763554be3fd62820012c105d1b60997fca1c163b11c509163e7e59fef8c46904646377f032a16d8c1f1a96e8273934de416bbbb8f13f8a75e79f3a667408c33671ba041c835169b048db1611e90c6cfa6032619998423aa7244156f1e8c5ff9a66ec0c5f805a059fe615988ea2f3a20910e1f6cb9290fb4d"}, @TIPC_NLA_NODE_ID={0x91, 0x3, "333689c6d9774c1da2ef2b69f7e6a4eb25157b72714faf714c5bbafc63e9f6760d7cc87faccd4e3e6dfe822033ae8ad40886b47e79050df866c68d90c263b30f37da9ca41242b171eb476e2a6adcbdb237f17f2595f80c1447a989960f614a2834e61aafb58e16171f6c1a5101eb52082d9945a8d03e2ff6284b7bdb0bad2a54fcfc59a228c8ffb9c819d4d856"}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xe33, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @local, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfdce}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x6f, 0x3, "65d4687f4cb0489c84c65ef56ae63fdebae18a4d59de4789e945df505176cfa881d16e431c9dc433fa45f644b987e9eb9e93799200a190a0d5fd6e3c04a3efe14486c04978de02c9b943b6ecf658058514850ead0472a7d75b4a23b7f6445b2d5e670d7d289c368283403a"}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x41}, 0x8840)

2m16.438673434s ago: executing program 32 (id=1618):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000000a0601010000000d000000000100000005000100070000001400088010000780090012fdffffff32000000000900020073797a32000000000800094000000000"], 0x44}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94)
r2 = socket$kcm(0xa, 0x5, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
setsockopt$sock_attach_bpf(r2, 0x29, 0x3b, &(0x7f0000000100)=r3, 0x120)
r4 = socket(0x28, 0x1, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000001400)=@req={0x3, 0xfff, 0x7fffffff, 0x1}, 0x10)
recvmmsg(r4, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}, 0xe83}], 0x1, 0x2000, 0x0)
sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback, 0x1, 0x5c4}, 0x80, &(0x7f00000029c0)}, 0xc9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='rpc_stats_latency\x00', r1, 0x0, 0x8001}, 0x18)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth0\x00', <r8=>0x0})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{0x1, <r9=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000001340)='%pI4   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000013c0)={r9}, 0x4)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000003000000610200000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000f24704", @ANYRES32=r8], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r10, &(0x7f0000000000), 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r6, 0x0, 0xf}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

2m10.170147474s ago: executing program 33 (id=1683):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x78, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff}}, @IFLA_VLAN_QOS_MAPPING={0x7, 0x1, {0x7f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff}}]}]}}}, @IFLA_LINK={0x8}]}, 0x78}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r1, 0x0, 0x7f}, 0x18)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r3 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10)
sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0)
sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000340)={<r5=>0x0, 0x11, "39c9694696a7e8478d3fbd04154e571285"}, &(0x7f0000000680)=0x19)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000006c0)={r5, 0x40, 0x58, "de721bce479f70ecac96bd091ea6fd46154e652c908289c1ed9d099cd4ade00e20ceb8d5c6aadbe0ed5e395bab97bf55a01df6c046c12d0e7bae311a7c546fc22da0b52f797c6239cc67b38d1e7b592cd5d0bb5025cee133"}, 0x60)
connect$llc(r3, &(0x7f0000000300)={0x1a, 0x326, 0x2, 0x40, 0x3, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x2b8, r6, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x16c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "5d35a2fab084b1c2b149608cc838e2e5a9805acdf90e36"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ID={0x7e, 0x3, "5e9a763554be3fd62820012c105d1b60997fca1c163b11c509163e7e59fef8c46904646377f032a16d8c1f1a96e8273934de416bbbb8f13f8a75e79f3a667408c33671ba041c835169b048db1611e90c6cfa6032619998423aa7244156f1e8c5ff9a66ec0c5f805a059fe615988ea2f3a20910e1f6cb9290fb4d"}, @TIPC_NLA_NODE_ID={0x91, 0x3, "333689c6d9774c1da2ef2b69f7e6a4eb25157b72714faf714c5bbafc63e9f6760d7cc87faccd4e3e6dfe822033ae8ad40886b47e79050df866c68d90c263b30f37da9ca41242b171eb476e2a6adcbdb237f17f2595f80c1447a989960f614a2834e61aafb58e16171f6c1a5101eb52082d9945a8d03e2ff6284b7bdb0bad2a54fcfc59a228c8ffb9c819d4d856"}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xe33, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @local, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfdce}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x6f, 0x3, "65d4687f4cb0489c84c65ef56ae63fdebae18a4d59de4789e945df505176cfa881d16e431c9dc433fa45f644b987e9eb9e93799200a190a0d5fd6e3c04a3efe14486c04978de02c9b943b6ecf658058514850ead0472a7d75b4a23b7f6445b2d5e670d7d289c368283403a"}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x41}, 0x8840)

1m29.92532736s ago: executing program 3 (id=939):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910530000000000070000005157e7c59500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x21)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010014000000000000000200e70308000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0005000000080026000816"], 0x40}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth1_to_batadv\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r7, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x41, 0x5f}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x44, r3, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x65}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

1m26.437655868s ago: executing program 1 (id=1569):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0})
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, 0x0)
socket(0x10, 0x803, 0x0) (async)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r7, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r7, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r7, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x0)
recvfrom$inet(r3, 0x0, 0x0, 0x40000100, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="81ffffff104300003000128008000100687372002400028008000100", @ANYRES32=r1, @ANYBLOB="08c70000", @ANYRES32=r2], 0x50}}, 0x4000000)

1m25.500258981s ago: executing program 6 (id=1979):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r1, &(0x7f0000003580)=[{{&(0x7f0000000000)=@rc={0x1f, @any, 0x9}, 0x80, 0x0}}], 0x1, 0x40040c1)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000079122800000000009500", @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4cc5}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000079122800000000009500", @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4cc5}, 0x94)
socket(0x2, 0x80805, 0x0) (async)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000040)=0x8)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e23, 0xef24, @empty, 0xfffffbff}}, 0x1ff, 0x201}, &(0x7f0000000400)=0x90) (async)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e23, 0xef24, @empty, 0xfffffbff}}, 0x1ff, 0x201}, &(0x7f0000000400)=0x90)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x40)

1m14.091687396s ago: executing program 3 (id=939):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910530000000000070000005157e7c59500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x21)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010014000000000000000200e70308000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0005000000080026000816"], 0x40}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth1_to_batadv\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r7, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x41, 0x5f}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x44, r3, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x65}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

1m11.849822472s ago: executing program 1 (id=1569):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0})
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, 0x0)
socket(0x10, 0x803, 0x0) (async)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r7, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r7, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r7, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x0)
recvfrom$inet(r3, 0x0, 0x0, 0x40000100, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="81ffffff104300003000128008000100687372002400028008000100", @ANYRES32=r1, @ANYBLOB="08c70000", @ANYRES32=r2], 0x50}}, 0x4000000)

1m9.567720187s ago: executing program 6 (id=1979):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r1, &(0x7f0000003580)=[{{&(0x7f0000000000)=@rc={0x1f, @any, 0x9}, 0x80, 0x0}}], 0x1, 0x40040c1)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000079122800000000009500", @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4cc5}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000079122800000000009500", @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4cc5}, 0x94)
socket(0x2, 0x80805, 0x0) (async)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000040)=0x8)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e23, 0xef24, @empty, 0xfffffbff}}, 0x1ff, 0x201}, &(0x7f0000000400)=0x90) (async)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e23, 0xef24, @empty, 0xfffffbff}}, 0x1ff, 0x201}, &(0x7f0000000400)=0x90)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x40)

1m5.354839657s ago: executing program 0 (id=2183):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140)

1m5.231368211s ago: executing program 0 (id=2184):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xfe341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) (async)
write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152)

1m5.196183274s ago: executing program 0 (id=2185):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfffb}, {0xfff1, 0x4}, {0xa06d1318dbb4eb2c}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, 0x0, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000190000000100800e000f01"}}}]}, 0x48}}, 0x0)
sendmsg$inet(r0, &(0x7f0000000940)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x6, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000080)="16febedebad6608c1ed82bc9f1d38d854e005c6c0b6be85c56d47dabf673f8c7abfa38c53feb9f888d4e6d16afe4b9788a34cb7ac4230c05272dd88c703ded9e11c93e02555962ace1e98bfe8deedcd89f91ad0541253922dfa7a0eb1cac9e5c3757ab42a8bd7e2bc984733d47c5aecf2c836d4b12df1679afc8ab07d3a26e7db3494bec8799e796e7c4519aa1ca0f84da2d0d480e98e1", 0x97}, {&(0x7f00000002c0)="a181ad4697ea9a8ead6a49bab67966edaa3013d906a93998adb1de751963e868dcc222077e1c01b0761219c8004b7203a96931cbe7816213d3323f74bdbc7a11b794ae0d3c591ddd641cf442bc8496ebc2e0641983437a6ae27a69041524f222f036ea87ad43005bbaa7ef36176f02fd05a343c4b62648ee30fe7731635d7efa25f5f08cf7501fe5f8e2d398a62412a807d44173385ca638d3014198f4798b42d9906122584af6898bf2a8545fcb704b394ed8f30c6ee4d49ecbd5a1043b7927ef6edc022555db7b505d19d141f23dbb4f31e516d9d156db80290fda5eda39b48c3d89065846bc92cf0645eda81f6e14ab938c", 0xf3}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000000140)="57522b4598c76e783cd571fe4e70c340fffc", 0x12}, {&(0x7f0000000180)="925e8fa35d7df9c97aba9c1198cfddac9211b0c83926b9b8a37bd084c68ea77583215dce544b1ceec68a13bfb045ebab4b4e405a838482", 0x37}, {&(0x7f0000000600)="08b361f4b86ba6582ec8c8093e319ed13d6af0d70848cdb8e98c32b8bbd3126ca3192e125e6bc81a298c19ef06f2eb5ea1e931a6faf6d80f5cfee4dd4daead759b74e34b740b9a927d1bfad27cba4dcb20c4d7397596e5fe9668007ec2872ad5e45eea6f7a4850c3307c771c03c34e403b1f1f158090febf3e769625d40bdb3bc242db85b30cf746ad29eaa2b568c1e36ac29f87a0b7df1efc6056ff2e97c010e7ba22a03ca31226998097cde74d75cb8703d156496c77345da372d6cc3778c2dfff8e8a894add50a8d7e3d5441caa9c3409c2ccf815020435329ed026b28019c4aedf", 0xe3}, {&(0x7f0000000700)="1bd98abb147ae242db966f1068f0fa0d88df03a90f114615176074595310ca85be09c7567703abad926a52fd1e13ed30836c975720df879f7a99f2bd873b907bd9ea5d674862dba3326c182783da5f6c0a8d2c4dabfd41a3ad05cdb546ebe55c24bdf4d1143f17b875ba5aef676d34e4aa24b5bbd8aeb05f92307f5a2eb9d2e5037b67a45386e9bad38f698dbec0499b19da", 0x92}], 0x7, &(0x7f0000000880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @rand_addr=0x64010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_tos_u8={{0x11}}], 0x88}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x30}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)

1m3.640069326s ago: executing program 0 (id=2186):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x25, 0x148, 0x138, 0x60, 0x250, 0x2a8, 0x2a8, 0x250, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x21a, 0x0, 0x0, 0xffffffff, 0x7}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x348)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x4f}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "54092cdabee6486357e44b37437007ce1ac46b7ae8b78728"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x497c51c85fdc3bca)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x208, 0x2e8, 0x2e8, 0x208, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0xf8, 0x118, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338)
socket$inet6(0xa, 0x6, 0x25)

1m3.361626415s ago: executing program 0 (id=2189):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
r1 = socket(0x10, 0x80002, 0x0)
r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20001}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x57ed0}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_to_bond\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24)

1m3.240524826s ago: executing program 0 (id=2191):
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x2}}, 0x10, &(0x7f0000000240)=[{&(0x7f00000002c0)}, {&(0x7f0000000140)="f878abaee5d8e938dc5dfedbbaf96913b77e0fe4d096", 0x16}], 0x2, &(0x7f0000000380), 0x0, 0x80}, 0x40844)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3)
sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7040fddbdf250300305206000e"], 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x8040)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r5, 0x0, 0xf69}, 0x18)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x100, 0x0, 0x4}, 0xc)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, &(0x7f0000000040))
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r8, &(0x7f0000000180), 0x10)
sendmsg$can_bcm(r8, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000400)=ANY=[@ANYBLOB="05000000010500"/16, @ANYRES64=0x0, @ANYRES64=r8, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0100006001"], 0x48}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r8, @ANYBLOB="e99367fedda6d0b373272ef1c50277f9b9bee4bd6cb009666057e2c9f59666a31b4f698fd917a89f3a339fe3d2b0416ff137a7ca4bb0d63c4414bb87ddcb49a65dd1f565f01d8b21d8f84c8c172bb68b76557d3f01d9fd743cd9bc904323a7c478975302bfd00cfde310e96fd870850c5c130ad58d328ca4710a2ae9631a6b3cdfb4615aa8fb91c97f73c1ed991daedc357076cb1a3ae86b3c214c78479587754214abe70971ac6eee47e42237c174003b518e2f4185f6a51fa28f6f945b9fdf851013b0e08b3602215b1c0ea706e4bdc033dc98f5d6e079fb006cda59c91ea42a20fb27081825", @ANYRESHEX=r5, @ANYBLOB="3b7506b7f197b4e4575beedc4c1bc4a80ac2fd063a609f033b8b0d3251e959193baa982ab90e08ca25b8be8ef185899b85ff6eb2cb989c23578acda7bb04f8d37a30f566d99fe33ee29e4072022bbdb6733a946187933ed4736c3ea5"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sm3)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

56.829878088s ago: executing program 3 (id=939):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910530000000000070000005157e7c59500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x21)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010014000000000000000200e70308000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0005000000080026000816"], 0x40}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth1_to_batadv\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r7, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x41, 0x5f}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x44, r3, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x65}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

56.027846284s ago: executing program 1 (id=1569):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0})
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, 0x0)
socket(0x10, 0x803, 0x0) (async)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r7, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r7, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r7, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x0)
recvfrom$inet(r3, 0x0, 0x0, 0x40000100, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="81ffffff104300003000128008000100687372002400028008000100", @ANYRES32=r1, @ANYBLOB="08c70000", @ANYRES32=r2], 0x50}}, 0x4000000)

55.008926791s ago: executing program 6 (id=1979):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r1, &(0x7f0000003580)=[{{&(0x7f0000000000)=@rc={0x1f, @any, 0x9}, 0x80, 0x0}}], 0x1, 0x40040c1)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000079122800000000009500", @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4cc5}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000079122800000000009500", @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4cc5}, 0x94)
socket(0x2, 0x80805, 0x0) (async)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000040)=0x8)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e23, 0xef24, @empty, 0xfffffbff}}, 0x1ff, 0x201}, &(0x7f0000000400)=0x90) (async)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e23, 0xef24, @empty, 0xfffffbff}}, 0x1ff, 0x201}, &(0x7f0000000400)=0x90)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x40)

47.391212098s ago: executing program 34 (id=2191):
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x2}}, 0x10, &(0x7f0000000240)=[{&(0x7f00000002c0)}, {&(0x7f0000000140)="f878abaee5d8e938dc5dfedbbaf96913b77e0fe4d096", 0x16}], 0x2, &(0x7f0000000380), 0x0, 0x80}, 0x40844)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3)
sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7040fddbdf250300305206000e"], 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x8040)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r5, 0x0, 0xf69}, 0x18)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x100, 0x0, 0x4}, 0xc)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, &(0x7f0000000040))
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r8, &(0x7f0000000180), 0x10)
sendmsg$can_bcm(r8, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000400)=ANY=[@ANYBLOB="05000000010500"/16, @ANYRES64=0x0, @ANYRES64=r8, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0100006001"], 0x48}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r8, @ANYBLOB="e99367fedda6d0b373272ef1c50277f9b9bee4bd6cb009666057e2c9f59666a31b4f698fd917a89f3a339fe3d2b0416ff137a7ca4bb0d63c4414bb87ddcb49a65dd1f565f01d8b21d8f84c8c172bb68b76557d3f01d9fd743cd9bc904323a7c478975302bfd00cfde310e96fd870850c5c130ad58d328ca4710a2ae9631a6b3cdfb4615aa8fb91c97f73c1ed991daedc357076cb1a3ae86b3c214c78479587754214abe70971ac6eee47e42237c174003b518e2f4185f6a51fa28f6f945b9fdf851013b0e08b3602215b1c0ea706e4bdc033dc98f5d6e079fb006cda59c91ea42a20fb27081825", @ANYRESHEX=r5, @ANYBLOB="3b7506b7f197b4e4575beedc4c1bc4a80ac2fd063a609f033b8b0d3251e959193baa982ab90e08ca25b8be8ef185899b85ff6eb2cb989c23578acda7bb04f8d37a30f566d99fe33ee29e4072022bbdb6733a946187933ed4736c3ea5"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sm3)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

42.683302307s ago: executing program 3 (id=939):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910530000000000070000005157e7c59500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x21)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010014000000000000000200e70308000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0005000000080026000816"], 0x40}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth1_to_batadv\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r7, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x41, 0x5f}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x44, r3, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x65}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

38.89149261s ago: executing program 6 (id=1979):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r1, &(0x7f0000003580)=[{{&(0x7f0000000000)=@rc={0x1f, @any, 0x9}, 0x80, 0x0}}], 0x1, 0x40040c1)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000079122800000000009500", @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4cc5}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000079122800000000009500", @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4cc5}, 0x94)
socket(0x2, 0x80805, 0x0) (async)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000040)=0x8)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e23, 0xef24, @empty, 0xfffffbff}}, 0x1ff, 0x201}, &(0x7f0000000400)=0x90) (async)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e23, 0xef24, @empty, 0xfffffbff}}, 0x1ff, 0x201}, &(0x7f0000000400)=0x90)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x40)

38.836901058s ago: executing program 1 (id=1569):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0})
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, 0x0)
socket(0x10, 0x803, 0x0) (async)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r7, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r7, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r7, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x0)
recvfrom$inet(r3, 0x0, 0x0, 0x40000100, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="81ffffff104300003000128008000100687372002400028008000100", @ANYRES32=r1, @ANYBLOB="08c70000", @ANYRES32=r2], 0x50}}, 0x4000000)

26.592993733s ago: executing program 3 (id=939):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910530000000000070000005157e7c59500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x21)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010014000000000000000200e70308000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0005000000080026000816"], 0x40}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth1_to_batadv\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r7, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x41, 0x5f}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x44, r3, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x65}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

22.45039555s ago: executing program 1 (id=1569):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0})
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, 0x0)
socket(0x10, 0x803, 0x0) (async)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r7, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r7, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r7, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x0)
recvfrom$inet(r3, 0x0, 0x0, 0x40000100, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="81ffffff104300003000128008000100687372002400028008000100", @ANYRES32=r1, @ANYBLOB="08c70000", @ANYRES32=r2], 0x50}}, 0x4000000)

18.742566438s ago: executing program 6 (id=1979):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r1, &(0x7f0000003580)=[{{&(0x7f0000000000)=@rc={0x1f, @any, 0x9}, 0x80, 0x0}}], 0x1, 0x40040c1)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000079122800000000009500", @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4cc5}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000079122800000000009500", @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4cc5}, 0x94)
socket(0x2, 0x80805, 0x0) (async)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000040)=0x8)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e23, 0xef24, @empty, 0xfffffbff}}, 0x1ff, 0x201}, &(0x7f0000000400)=0x90) (async)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e23, 0xef24, @empty, 0xfffffbff}}, 0x1ff, 0x201}, &(0x7f0000000400)=0x90)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x40)

11.41909796s ago: executing program 3 (id=939):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910530000000000070000005157e7c59500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x21)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010014000000000000000200e70308000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0005000000080026000816"], 0x40}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth1_to_batadv\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r7, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x41, 0x5f}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x44, r3, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x65}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

7.50040616s ago: executing program 1 (id=1569):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0})
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, 0x0)
socket(0x10, 0x803, 0x0) (async)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r7, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r7, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r7, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x0)
recvfrom$inet(r3, 0x0, 0x0, 0x40000100, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="81ffffff104300003000128008000100687372002400028008000100", @ANYRES32=r1, @ANYBLOB="08c70000", @ANYRES32=r2], 0x50}}, 0x4000000)

5.428012691s ago: executing program 6 (id=1979):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r1, &(0x7f0000003580)=[{{&(0x7f0000000000)=@rc={0x1f, @any, 0x9}, 0x80, 0x0}}], 0x1, 0x40040c1)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000079122800000000009500", @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4cc5}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000079122800000000009500", @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4cc5}, 0x94)
socket(0x2, 0x80805, 0x0) (async)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000040)=0x8)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e23, 0xef24, @empty, 0xfffffbff}}, 0x1ff, 0x201}, &(0x7f0000000400)=0x90) (async)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e23, 0xef24, @empty, 0xfffffbff}}, 0x1ff, 0x201}, &(0x7f0000000400)=0x90)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x40)

2.382764481s ago: executing program 7 (id=2416):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000020000000b704000010000020620700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551557f05dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086061d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224090000000000000096e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d615efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d181210bb6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0108007734c1d2bc6a9d32d2560a88bad976b6000100002b712e632eeca810fb73fc8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b965714144652cdc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbd8ea2a77dccdc3fe247feb121d9440a3ea9012a9d23a7e3110b0f25c5f8bf803d688de4d92b5dfdbd69fb8b426b55c10ba01b5f18b10cce8de3369300000000"], &(0x7f0000000280)='GPL\x00'}, 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback=<r1=>r0, 0x0, 0x1, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0]}, 0x40)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x11, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x53}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0xa, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x8, 0xf5, &(0x7f0000000380)=""/245, 0x41000, 0xd, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000240)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x1, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[r1, r1, r1, r1, r1, r1, r1, r1], &(0x7f0000000500)=[{0x1, 0x1, 0xb, 0xb}, {0x0, 0x4, 0x8, 0xa}]}, 0x94)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f0000000600)={0x8, 0x80})

2.175121652s ago: executing program 7 (id=2419):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r5, &(0x7f0000000440)=[{&(0x7f0000000380)="77bfe4a8420d7ea8d58830e9f5b3df1fd3300aed6aa3d37dff0a1fbf50ab8b71cdf597c0552514751c9f8b818e486108e3aabc2777e7a58c0a61e01aae8e103814720bc0dd34ea5d86b609f679cfbe8723c0560a04383def70e2c3c6e2cbaac1b37896cd2b55a9063009f30bb1f4a7e133829611c68e994f879e398b831eaa12f5b3a1bd9c00e88a2ecf5aa6969619859a37a2adc1e7abd4185cd6512532d8eef3033041708535d847d524", 0xab}, {&(0x7f00000002c0)="0d0d31dddf2f26a5afa3cb1a8aec56b9ff6254ecbee600ccaee64236692059cfde8585e52e8982a23a613459f5a903f4790f243f6f1f505c0180c02dbc6120f399dc61", 0x43}], 0x2)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
r6 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4)
listen(r6, 0x8)
r7 = accept4(r6, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x82, 0x0, &(0x7f0000000540))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r9, @ANYBLOB="05005b"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a0000001c0a2555", @ANYRES32=r2, @ANYBLOB="05005b00cc000000"], 0x24}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000740)={'wlan1\x00'})
sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[], 0x24}}, 0x0)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r11, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x894)

1.742932999s ago: executing program 7 (id=2420):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0)
socket(0x5, 0x5, 0x7f)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) (async)
socket(0x5, 0x5, 0x7f) (async)

1.167396894s ago: executing program 5 (id=2421):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x2)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000071800290200000000e6ff000002000000"], 0x14}}, 0x0)

983.351729ms ago: executing program 7 (id=2422):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) (async)
socket$isdn(0x22, 0x2, 0x11) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r2=>0xffffffffffffffff}, 0x4) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40a000040000900000000000000000003000000040060809c0a01"], 0xab4}, 0x1, 0x0, 0x0, 0x80}, 0x0)
syz_emit_ethernet(0x76, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@broadcast}]}]}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x10, &(0x7f00000017c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001a000000950000000000000006973d17b0cef698764f0ce207499320b0895f84aac4e4f88833a8532edd9594172b03787c75ef27b4c29759c39e09dcac9ecc750f0ac4f8a3f9f692a56acc84c3ac554bd99cb339b413f036"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f00000000c0)="1043698a3ad399411682f6af9fe524716f5efc271409c3f499fb504c1b1ac82c9d0370dbe76d826a2fa9e0e2d2ab751e71cfdf99bd4029a18c892b30b7e912688876b37b8f300811e119b0645429e632f0574f043ceeecdba772cb1e50cad8ac", 0x60}, {&(0x7f0000000140)="66853db8d08168c564191fd75eebc8fd1be3ffcdb2bc8b179067911790fa956579bd1531454e340ff8b0f33a60e2e2502a954441f83a3a9973a96f78b26e1cf374b723da027bda0a271871307a10e3aaf4fcbd388ae7ef83129c99e923999503d187155d8f36ec45d2bbfbf6b1092f3ebf74dcedf7836d2fb70fafafc7731c6736ef2245d77aa9997708ee9ad273e8c9b3f0b94710d9", 0x96}, {&(0x7f0000000040)="d0339f71427cda9851224ea7aa9d96481ae38174aca52b7161da6df7b4791b8b96b4aae0a76fafb3438161f534fc6a6d4b2f7145781f", 0x36}, {&(0x7f0000000200)="53ffd7afee8f86ee702df9cbdc05b1ff1d3fcb8559a1399ec93abbb53590e5fdf836087a7d719d6d95a6ae77cd50520b90c64e2e74976644a11bb358b43f85c233ee0d6b7dfbbb4058b00ee2282c63614d8559deee274fc100307fea15d9d7b1b08bb4cef2ec37b8e22ba0b3b0d519e488664a010ba28b317c4d8907c131a06228f5fa2c27c84b4c80f7709b576d1844eb0a78c11dcc4ebd8d1d927797f1e1e14af894d436a08be470b3c387c58bbd9b50bcb17af44679a849706495125151787df008f74675206c767bb5e41a3306841a726f2ecedda2deecf643d9f104bca97a7f952b", 0xe4}, {&(0x7f00000003c0)="2f52ac9a47a1e45a8792193f47105758cbcfdc8eeda38e9a5df72390169f993f2e2cb26ec7d46fc872b9a35c296bc2ad4951328da4a42763f7d069d426db064c3a4e294bfe1ebfcbb9963a4d8a712c11829206", 0x53}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000300)}, {&(0x7f0000000580)="d17333132ceffb52228f5a83400c2d876e57b4fb881ac44333f62b5737a6cb719b988bc9508f02882fb8a400a795c56935eaccf582b65744e00645552ea4c5e22e0325c0a6", 0x45}], 0x8, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}, 0x44)

832.92305ms ago: executing program 7 (id=2423):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100200, 0x0)
ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000080)) (async)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x336) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
syz_emit_ethernet(0x0, 0x0, 0x0)
close(0x3)
r6 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r6, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) (async)
close(r6) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r1, 0xf, 0x0, 0x5e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c0002800500240000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x200408c4}, 0x0)

558.051052ms ago: executing program 7 (id=2424):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x632adfeb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000e70103057c5ad6dbb475c8c80e9a30000000000000000000000000000800010002000015"], 0x1c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000000000000000000000000008500000099000000e3f0182f3d17bc806c295170720179fe9500000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0xf}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4008010)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000a7b1417369cc06504900020300010000000000080005400600000024ca5394440000002700000000000000"], 0x2c}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000130a01030000000000000000030000030c000640000000000000000108000340000000090c00064000000000000000020900010073797a31000000006c0008003d0cd37140b71515cc1498877bc3b08e5494e81d961b9e44c7496b8ba2f9bdd8a85174cf7724c81159f08e21c43fcefb667c732e612930a09c6246deda7d339bcee4022c56a3419ff5d4a3a5f7cb493f45b0e37db7b48a0c60e60fb3084aa411304221235476d3530900010073797a3000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x4000080)

226.86897ms ago: executing program 5 (id=2425):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x5, @empty}, 0x1c)
syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000020100000e22"], 0x0)

222.777434ms ago: executing program 5 (id=2426):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0}) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r3)
sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}}, 0x800) (async)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x18)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
close(r6)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x198, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@private1, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @algo_auth={0x59, 0x1, {{'cmac(aes)\x00'}, 0x88, "b6f3e543e3ff15c934decfda52def2c9f2"}}]}, 0x198}}, 0x0) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071173e000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async, rerun: 64)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3}, 0x50) (rerun: 32)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f0000003dc0)={0x2, 0x2, 0xb, 0x2, 0x2e})
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r11)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x30, r12, 0x60b, 0x70bd2f, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x30}}, 0x8050) (async)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r10, 0x0, 0x0}, 0x10) (async)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r8, r10, 0x1, 0x0, 0xffffffffffffffff, @void, @value=r6}, 0x20) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='io_uring_submit_sqe\x00', r10, 0x0, 0x7fffffffffffffff}, 0x18) (async, rerun: 32)
r13 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0xb, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, 0x0}, 0x90) (async)
r14 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async)
recvmmsg(r14, &(0x7f0000003c80)=[{{&(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000580)=""/119, 0x77}, {&(0x7f0000000940)=""/226, 0xe2}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000000800)=""/189, 0xbd}, {&(0x7f0000000600)=""/101, 0x65}], 0x5, &(0x7f00000002c0)=""/41, 0x29}, 0x3}, {{&(0x7f0000000b80)=@un=@abs, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000c40)=""/98, 0x62}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000000400)=""/57, 0x39}, {&(0x7f0000002d40)=""/145, 0x91}, {&(0x7f0000000740)=""/34, 0x22}, {&(0x7f0000002e00)=""/102, 0x66}, {&(0x7f0000002e80)=""/210, 0xd2}, {&(0x7f0000002f80)=""/194, 0xc2}, {&(0x7f0000003080)=""/174, 0xae}, {&(0x7f0000003140)=""/78, 0x4e}], 0xa, &(0x7f0000003280)=""/141, 0x8d}, 0x3}, {{&(0x7f0000003340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000003740)=[{&(0x7f00000033c0)=""/222, 0xde}, {&(0x7f0000000a40)=""/14, 0xe}, {&(0x7f00000034c0)=""/176, 0xb0}, {&(0x7f0000003580)=""/234, 0xea}, {&(0x7f0000003680)=""/154, 0x9a}], 0x5, &(0x7f00000037c0)=""/96, 0x60}, 0x3647}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000003840)=""/138, 0x8a}], 0x1, &(0x7f0000003900)=""/35, 0x23}, 0x1ff}, {{&(0x7f0000003940)=@rc, 0x80, &(0x7f0000003b40)=[{&(0x7f00000039c0)=""/174, 0xae}, {&(0x7f0000003a80)=""/31, 0x1f}, {&(0x7f0000003ac0)=""/114, 0x72}], 0x3, &(0x7f0000003b80)=""/208, 0xd0}, 0x5}], 0x5, 0x1, 0x0)
sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000012002102000000000000000007"], 0x28}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

155.362274ms ago: executing program 5 (id=2427):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

100.979148ms ago: executing program 5 (id=2428):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$sock_int(r0, 0x1, 0x13, 0x0, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000)="771b69967dd0b7d0deccc9dd5c35186fbab03054086fe680226c30d81fc9ae39b8176463b05b1a1fc1b093b9bcbbc449425f822436901cce79ae9d42766a5ca2e624a62ad895f1cc0d604f1626693d9230a67fb9ef00c47fca9d669882272f", &(0x7f0000000100)=""/223}, 0x20)
mmap(&(0x7f0000724000/0x1000)=nil, 0x1000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

0s ago: executing program 5 (id=2429):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r2}, 0x10)
r3 = socket(0x21, 0x2, 0x10000000000002)
connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @private=0xa010102}}, 0x24)
sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c445}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
sendmsg$TIPC_NL_MON_GET(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x1a4, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x190, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x15e}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "0f689a99a040712b7647031ce0ec14318ed218aadd028478551da727"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a76ef50167b0b67caf824f460db7ad7c391ec5e5bfa288cc7a8ffd922f89659e7e6b4d"}}, @TIPC_NLA_NODE_ID={0xe9, 0x3, "0abd6090a978c9e9e0b832975255f30678675ad04b38726f929c6ba2e2ec57b763fddd3992ad64e7a41ab87ca10be2616898139def83f32c4f6231588f86b430f7f76008409de9b763d5a66a03f92495d45705ea22eb661207caf9da4e2dc85d75ee342aeaa0913b52797a52cbd9edcbfe667c6f372d677d3e36e5bb150f04b7b32c5b042a58594d521367efc2c18f963335d9131036c084c393291795740662d1eb87b4e229312a66ac020abccc15995c5b80514fa55b1633c66f779a67b7321bf2ab675ac57468b46eb2fcf4f9a0a2c18e9538198abb83bced89b8317c0f6c9ed1324a96"}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080)

kernel console output (not intermixed with test programs):

evsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.369950][T13339] batman_adv: batadv0: Adding interface: batadv_slave_0
[  275.388414][T13339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.427934][T13339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  275.442098][T13339] batman_adv: batadv0: Adding interface: batadv_slave_1
[  275.450311][T13339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.476737][T13339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  275.608379][T13425] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  275.617206][   T50] Bluetooth: hci5: command tx timeout
[  275.689008][T13425] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  275.713134][T13339] hsr_slave_0: entered promiscuous mode
[  275.720592][T13339] hsr_slave_1: entered promiscuous mode
[  275.729898][T13339] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  275.740220][T13339] Cannot create hsr debugfs directory
[  275.793075][T13425] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  275.916431][T13425] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  276.043250][T10529] bridge_slave_1: left allmulticast mode
[  276.078407][T10529] bridge_slave_1: left promiscuous mode
[  276.084416][T10529] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.095433][T10529] bridge_slave_0: left allmulticast mode
[  276.101177][T10529] bridge_slave_0: left promiscuous mode
[  276.109611][T10529] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.188799][T13467] netlink: 204060 bytes leftover after parsing attributes in process `syz.0.2103'.
[  276.205651][T13467] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2103'.
[  276.555240][T10529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  276.567319][T10529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  276.577752][T10529] bond0 (unregistering): Released all slaves
[  276.833554][T13473] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2104'.
[  276.868819][T13284] 8021q: adding VLAN 0 to HW filter on device bond0
[  277.044663][   T50] Bluetooth: hci6: command tx timeout
[  277.044775][ T5854] Bluetooth: hci4: command tx timeout
[  277.092256][T13284] 8021q: adding VLAN 0 to HW filter on device team0
[  277.147879][T13491] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  277.158868][T10529] hsr_slave_0: left promiscuous mode
[  277.179453][T10529] hsr_slave_1: left promiscuous mode
[  277.192044][T10529] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  277.200097][T10529] batman_adv: batadv0: Removing interface: batadv_slave_0
[  277.227423][T10529] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  277.227632][T13495] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  277.244243][T10529] batman_adv: batadv0: Removing interface: batadv_slave_1
[  277.282420][T10529] veth1_macvtap: left promiscuous mode
[  277.288337][T10529] veth0_macvtap: left promiscuous mode
[  277.294015][T10529] veth1_vlan: left promiscuous mode
[  277.299577][T10529] veth0_vlan: left promiscuous mode
[  277.478877][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2113'.
[  277.501598][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2113'.
[  277.529031][T13502] netlink: 'syz.0.2113': attribute type 15 has an invalid length.
[  277.880344][T10529] team0 (unregistering): Port device team_slave_1 removed
[  277.934239][T10529] team0 (unregistering): Port device team_slave_0 removed
[  278.424131][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.431384][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.517424][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.524645][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state
[  278.551735][T13504] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2114'.
[  278.635119][T13506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2115'.
[  278.821670][T13284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  278.914588][T13342] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  279.001799][T13342] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  279.023480][T13342] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  279.109305][T13342] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  279.125255][ T5854] Bluetooth: hci6: command tx timeout
[  279.125263][   T50] Bluetooth: hci4: command tx timeout
[  279.156271][T13517] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  279.316053][T13284] 8021q: adding VLAN 0 to HW filter on device batadv0
[  279.465830][T13284] veth0_vlan: entered promiscuous mode
[  279.576269][T13284] veth1_vlan: entered promiscuous mode
[  279.638850][T13339] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  279.669596][T13339] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  279.693516][T13339] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  279.727272][T13339] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  279.808488][T13342] 8021q: adding VLAN 0 to HW filter on device bond0
[  279.896835][T13342] 8021q: adding VLAN 0 to HW filter on device team0
[  279.904243][T13284] veth0_macvtap: entered promiscuous mode
[  279.936182][T13284] veth1_macvtap: entered promiscuous mode
[  279.972093][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.979335][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  280.003924][T13554] sctp: [Deprecated]: syz.5.2127 (pid 13554) Use of int in maxseg socket option.
[  280.003924][T13554] Use struct sctp_assoc_value instead
[  280.009107][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.025512][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.085424][T13562] netlink: 'syz.0.2129': attribute type 2 has an invalid length.
[  280.106839][T13563] netlink: 'syz.0.2129': attribute type 10 has an invalid length.
[  280.153568][T13563] bond0: (slave team0): Releasing backup interface
[  280.187144][T13563] team0: left allmulticast mode
[  280.192066][T13563] team_slave_0: left allmulticast mode
[  280.207727][T13563] team_slave_1: left allmulticast mode
[  280.227627][T13284] batman_adv: batadv0: Interface activated: batadv_slave_0
[  280.248842][T13284] batman_adv: batadv0: Interface activated: batadv_slave_1
[  280.296631][T13284] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  280.313771][T13284] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  280.323004][T13284] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  280.332479][T13284] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  280.370636][T13342] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  280.381689][T13342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  280.534073][T13339] 8021q: adding VLAN 0 to HW filter on device bond0
[  280.636455][T13339] 8021q: adding VLAN 0 to HW filter on device team0
[  280.736329][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  280.744177][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  280.767182][T12155] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.774296][T12155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  280.875354][T12155] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.882508][T12155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.955800][T12155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  280.965959][T12155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.022129][T13342] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.080617][T13339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  281.307784][T13342] veth0_vlan: entered promiscuous mode
[  281.431427][T13342] veth1_vlan: entered promiscuous mode
[  281.485928][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2139'.
[  281.544252][T10529] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.726887][T10529] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.780286][T13342] veth0_macvtap: entered promiscuous mode
[  281.808993][T13339] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.837917][T13342] veth1_macvtap: entered promiscuous mode
[  281.880093][T10529] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.944055][T13342] batman_adv: batadv0: Interface activated: batadv_slave_0
[  281.993234][T10529] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.022055][T13342] batman_adv: batadv0: Interface activated: batadv_slave_1
[  282.033179][T13342] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  282.042624][T13342] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  282.055122][T13342] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  282.063845][T13342] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  282.262863][T12155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.282715][T12155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.295698][T10529] bridge_slave_1: left allmulticast mode
[  282.301389][T10529] bridge_slave_1: left promiscuous mode
[  282.307350][T10529] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.317333][T10529] bridge_slave_0: left allmulticast mode
[  282.322996][T10529] bridge_slave_0: left promiscuous mode
[  282.330653][T10529] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.661476][T10529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  282.672858][T10529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  282.683336][T10529] bond0 (unregistering): Released all slaves
[  282.746084][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.753953][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.791704][T13339] veth0_vlan: entered promiscuous mode
[  282.839532][T13621] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2140'.
[  283.003783][T13339] veth1_vlan: entered promiscuous mode
[  283.031142][T13628] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  283.051389][T13629] netlink: 'syz.0.2143': attribute type 1 has an invalid length.
[  283.212817][T13629] 8021q: adding VLAN 0 to HW filter on device bond7
[  283.282521][   T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  283.295187][   T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  283.304970][   T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  283.315019][   T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  283.329530][   T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  283.466246][T13339] veth0_macvtap: entered promiscuous mode
[  283.546508][T13339] veth1_macvtap: entered promiscuous mode
[  283.609816][T10529] hsr_slave_0: left promiscuous mode
[  283.634142][T10529] hsr_slave_1: left promiscuous mode
[  283.643958][T13653] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2150'.
[  283.655916][T10529] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  283.663383][T10529] batman_adv: batadv0: Removing interface: batadv_slave_0
[  283.695577][T10529] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  283.703134][T10529] batman_adv: batadv0: Removing interface: batadv_slave_1
[  283.757949][T10529] veth1_macvtap: left promiscuous mode
[  283.763538][T10529] veth0_macvtap: left promiscuous mode
[  283.794709][T10529] veth1_vlan: left promiscuous mode
[  283.800125][T10529] veth0_vlan: left promiscuous mode
[  284.294569][T10529] team0 (unregistering): Port device team_slave_1 removed
[  284.337613][T10529] team0 (unregistering): Port device team_slave_0 removed
[  284.733742][T13339] batman_adv: batadv0: Interface activated: batadv_slave_0
[  284.754238][T13339] batman_adv: batadv0: Interface activated: batadv_slave_1
[  284.799066][T13339] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  284.810040][T13339] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  284.818944][T13339] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  284.828279][T13339] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  285.021377][T13664] x_tables: duplicate underflow at hook 2
[  285.024711][T13667] x_tables: duplicate underflow at hook 2
[  285.069338][T13668] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2154'.
[  285.071662][T13662] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  285.088901][T13664] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  285.162024][T13669] netlink: 'syz.0.2154': attribute type 18 has an invalid length.
[  285.185630][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.199192][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.370827][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.379377][ T5854] Bluetooth: hci5: command tx timeout
[  285.398832][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.490619][   T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  285.500057][   T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  285.512450][   T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  285.523346][   T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  285.533356][   T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  285.691371][T13640] chnl_net:caif_netlink_parms(): no params data found
[  285.807280][   T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.081243][   T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.261787][   T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.426899][   T48] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.570976][T13640] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.588766][T13640] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.605169][T13640] bridge_slave_0: entered allmulticast mode
[  286.612983][T13640] bridge_slave_0: entered promiscuous mode
[  286.699446][   T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  286.712724][   T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  286.721659][   T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  286.732190][   T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  286.742363][   T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  286.835028][T13640] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.842206][T13640] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.861571][T13721] x_tables: duplicate underflow at hook 3
[  286.873502][T13640] bridge_slave_1: entered allmulticast mode
[  286.886155][T13640] bridge_slave_1: entered promiscuous mode
[  287.010462][T13640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  287.062767][T13640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  287.254598][T13640] team0: Port device team_slave_0 added
[  287.306494][T13640] team0: Port device team_slave_1 added
[  287.346759][T13674] chnl_net:caif_netlink_parms(): no params data found
[  287.446163][ T5854] Bluetooth: hci5: command tx timeout
[  287.491828][T13640] batman_adv: batadv0: Adding interface: batadv_slave_0
[  287.499702][T13640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  287.527354][T13640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  287.565792][T13640] batman_adv: batadv0: Adding interface: batadv_slave_1
[  287.573822][T13640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  287.600873][T13640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  287.616593][ T5854] Bluetooth: hci6: command tx timeout
[  287.622917][   T48] bridge_slave_1: left allmulticast mode
[  287.629764][   T48] bridge_slave_1: left promiscuous mode
[  287.635691][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.650970][   T48] bridge_slave_0: left allmulticast mode
[  287.657302][   T48] bridge_slave_0: left promiscuous mode
[  287.663375][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.001167][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  288.011994][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  288.022721][   T48] bond0 (unregistering): Released all slaves
[  288.239134][T13640] hsr_slave_0: entered promiscuous mode
[  288.249404][T13640] hsr_slave_1: entered promiscuous mode
[  288.258509][T13640] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  288.266284][T13640] Cannot create hsr debugfs directory
[  288.517194][T13674] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.524986][T13674] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.532301][T13674] bridge_slave_0: entered allmulticast mode
[  288.539978][T13674] bridge_slave_0: entered promiscuous mode
[  288.548600][T13674] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.556974][T13674] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.564281][T13674] bridge_slave_1: entered allmulticast mode
[  288.573951][T13674] bridge_slave_1: entered promiscuous mode
[  288.603980][   T48] hsr_slave_0: left promiscuous mode
[  288.609994][   T48] hsr_slave_1: left promiscuous mode
[  288.616547][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  288.623971][   T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[  288.631964][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  288.640213][   T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[  288.661690][   T48] veth1_macvtap: left promiscuous mode
[  288.667505][   T48] veth0_macvtap: left promiscuous mode
[  288.673137][   T48] veth1_vlan: left promiscuous mode
[  288.678718][   T48] veth0_vlan: left promiscuous mode
[  288.805305][ T5854] Bluetooth: hci4: command tx timeout
[  289.239382][   T48] team0 (unregistering): Port device team_slave_1 removed
[  289.289194][   T48] team0 (unregistering): Port device team_slave_0 removed
[  289.526551][ T5854] Bluetooth: hci5: command tx timeout
[  289.684665][ T5854] Bluetooth: hci6: command tx timeout
[  289.866403][T13765] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  289.941442][T13766] syzkaller0: entered promiscuous mode
[  289.947087][T13766] syzkaller0: entered allmulticast mode
[  289.959199][T13766] tipc: Resetting bearer <eth:syzkaller0>
[  290.037930][T13674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  290.059953][T13674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  290.077761][T13762] tipc: Resetting bearer <eth:syzkaller0>
[  290.885184][ T5854] Bluetooth: hci4: command tx timeout
[  291.608481][ T5854] Bluetooth: hci5: command tx timeout
[  291.724712][T13762] tipc: Disabling bearer <eth:syzkaller0>
[  291.765147][ T5854] Bluetooth: hci6: command tx timeout
[  291.876695][T13674] team0: Port device team_slave_0 added
[  291.892428][T13795] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  291.963917][T13674] team0: Port device team_slave_1 added
[  292.169290][T13674] batman_adv: batadv0: Adding interface: batadv_slave_0
[  292.194314][T13674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.225245][T13674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  292.267649][T13674] batman_adv: batadv0: Adding interface: batadv_slave_1
[  292.275916][T13674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.308702][T13674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  292.320265][T13714] chnl_net:caif_netlink_parms(): no params data found
[  292.604289][T13824] netlink: 'syz.5.2193': attribute type 10 has an invalid length.
[  292.655724][   T48] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.711716][T13674] hsr_slave_0: entered promiscuous mode
[  292.719442][T13674] hsr_slave_1: entered promiscuous mode
[  292.737403][T13674] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  292.745134][T13674] Cannot create hsr debugfs directory
[  292.781388][   T48] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.910355][T13832] openvswitch: netlink: IPv4 tun info is not correct
[  292.921931][   T48] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.941718][T13714] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.950623][T13714] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.960908][T13714] bridge_slave_0: entered allmulticast mode
[  292.969253][ T5854] Bluetooth: hci4: command tx timeout
[  292.980658][T13714] bridge_slave_0: entered promiscuous mode
[  293.112302][T13832] batman_adv: batadv0: Removing interface: team0
[  293.139317][T13832] team0 (unregistering): Port device team_slave_0 removed
[  293.152917][T13832] team0 (unregistering): Port device team_slave_1 removed
[  293.194678][   T48] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.211121][T13714] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.218585][T13714] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.229458][T13714] bridge_slave_1: entered allmulticast mode
[  293.246489][T13714] bridge_slave_1: entered promiscuous mode
[  293.357259][T13714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  293.411255][T13714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  293.542366][T13714] team0: Port device team_slave_0 added
[  293.571314][T13842] netlink: 'syz.5.2198': attribute type 55 has an invalid length.
[  293.579539][T13842] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2198'.
[  293.588608][T13640] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  293.602147][T13714] team0: Port device team_slave_1 added
[  293.694449][T13640] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  293.743321][T13714] batman_adv: batadv0: Adding interface: batadv_slave_0
[  293.751151][T13714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.778414][T13714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  293.792041][T13640] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  293.802794][   T48] bridge_slave_1: left allmulticast mode
[  293.823874][   T48] bridge_slave_1: left promiscuous mode
[  293.830195][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.844253][   T48] bridge_slave_0: left allmulticast mode
[  293.844885][ T5854] Bluetooth: hci6: command tx timeout
[  293.850302][   T48] bridge_slave_0: left promiscuous mode
[  293.861002][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.202244][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  294.218685][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  294.233555][   T48] bond0 (unregistering): Released all slaves
[  294.260990][T13714] batman_adv: batadv0: Adding interface: batadv_slave_1
[  294.268558][T13714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.295064][T13714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  294.306909][T13640] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  294.506158][T13714] hsr_slave_0: entered promiscuous mode
[  294.512537][T13714] hsr_slave_1: entered promiscuous mode
[  294.519222][T13714] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  294.527608][T13714] Cannot create hsr debugfs directory
[  294.789482][   T48] hsr_slave_0: left promiscuous mode
[  294.795688][   T48] hsr_slave_1: left promiscuous mode
[  294.801575][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  294.817671][   T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[  294.827818][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  294.835620][   T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[  294.861355][   T48] veth1_macvtap: left promiscuous mode
[  294.871122][   T48] veth0_macvtap: left promiscuous mode
[  294.877437][   T48] veth1_vlan: left promiscuous mode
[  294.882773][   T48] veth0_vlan: left promiscuous mode
[  295.051238][ T5854] Bluetooth: hci4: command tx timeout
[  295.340740][   T48] team0 (unregistering): Port device team_slave_1 removed
[  295.387989][   T48] team0 (unregistering): Port device team_slave_0 removed
[  295.993264][T13674] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  296.027137][T13674] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  296.049490][T13674] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  296.094840][T13674] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  296.119300][T13640] 8021q: adding VLAN 0 to HW filter on device bond0
[  296.200752][T13640] 8021q: adding VLAN 0 to HW filter on device team0
[  296.302088][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.309328][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  296.321672][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.321936][T13887] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2207'.
[  296.328858][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  296.596494][T13674] 8021q: adding VLAN 0 to HW filter on device bond0
[  296.663796][T13674] 8021q: adding VLAN 0 to HW filter on device team0
[  296.700900][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.708120][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  296.762937][T13714] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  296.789784][T13714] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  296.813597][T13714] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  296.832176][T13714] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  296.864129][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.871354][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[  296.966419][T13640] 8021q: adding VLAN 0 to HW filter on device batadv0
[  297.101727][T13640] veth0_vlan: entered promiscuous mode
[  297.153142][T13640] veth1_vlan: entered promiscuous mode
[  297.209398][T13714] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.233461][T13917] netlink: 'syz.5.2212': attribute type 13 has an invalid length.
[  297.248430][T13640] veth0_macvtap: entered promiscuous mode
[  297.290227][T13714] 8021q: adding VLAN 0 to HW filter on device team0
[  297.317785][T13640] veth1_macvtap: entered promiscuous mode
[  297.349591][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.356787][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  297.397189][T13920] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2213'.
[  297.400524][T10529] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.413306][T10529] bridge0: port 2(bridge_slave_1) entered forwarding state
[  297.426427][T13920] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2213'.
[  297.449653][T13640] batman_adv: batadv0: Interface activated: batadv_slave_0
[  297.490193][T13640] batman_adv: batadv0: Interface activated: batadv_slave_1
[  297.509440][T13674] 8021q: adding VLAN 0 to HW filter on device batadv0
[  297.532797][T13640] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  297.552980][T13640] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.562075][T13640] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  297.580247][T13640] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  297.743782][T13931] Bluetooth: MGMT ver 1.23
[  297.834289][T13674] veth0_vlan: entered promiscuous mode
[  297.881943][T13674] veth1_vlan: entered promiscuous mode
[  297.936019][   T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.943890][   T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.024811][T13674] veth0_macvtap: entered promiscuous mode
[  298.069693][T13674] veth1_macvtap: entered promiscuous mode
[  298.101117][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.110905][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.151764][T13674] batman_adv: batadv0: Interface activated: batadv_slave_0
[  298.192311][T13674] batman_adv: batadv0: Interface activated: batadv_slave_1
[  298.228231][T13674] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  298.239940][T13674] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  298.256680][T13674] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  298.268811][T13674] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  298.326290][T13714] 8021q: adding VLAN 0 to HW filter on device batadv0
[  298.463388][   T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.481169][   T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.539889][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.553275][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.602198][T13950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2220'.
[  298.616283][T13950] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2220'.
[  298.696622][T13952] netlink: 'syz.5.2220': attribute type 15 has an invalid length.
[  298.747213][T13950] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2220'.
[  298.819844][T10529] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.956779][T10529] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.086808][T10529] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.123695][T13714] veth0_vlan: entered promiscuous mode
[  299.151224][T13714] veth1_vlan: entered promiscuous mode
[  299.201106][T13714] veth0_macvtap: entered promiscuous mode
[  299.224276][T13714] veth1_macvtap: entered promiscuous mode
[  299.253328][T13714] batman_adv: batadv0: Interface activated: batadv_slave_0
[  299.278472][T13714] batman_adv: batadv0: Interface activated: batadv_slave_1
[  299.297301][T13714] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.307105][T13714] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.324056][T13714] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.344139][T13714] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  299.447200][T10529] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.518381][   T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.537699][   T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.572907][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.582164][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.825284][T10529] bridge_slave_1: left allmulticast mode
[  299.827145][   T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  299.834421][T10529] bridge_slave_1: left promiscuous mode
[  299.846857][   T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  299.848462][T10529] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.864959][   T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  299.875647][   T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  299.876362][T10529] bridge_slave_0: left allmulticast mode
[  299.890837][   T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  299.890904][T10529] bridge_slave_0: left promiscuous mode
[  299.907570][T10529] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.252014][T10529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  300.263084][T10529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  300.276816][T10529] bond0 (unregistering): Released all slaves
[  300.783325][T10529] hsr_slave_0: left promiscuous mode
[  300.794987][T10529] hsr_slave_1: left promiscuous mode
[  300.805540][T10529] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  300.824693][T10529] batman_adv: batadv0: Removing interface: batadv_slave_0
[  300.833193][T10529] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  300.864583][T10529] batman_adv: batadv0: Removing interface: batadv_slave_1
[  300.900174][T10529] veth1_macvtap: left promiscuous mode
[  300.907246][T10529] veth0_macvtap: left promiscuous mode
[  300.912917][T10529] veth1_vlan: left promiscuous mode
[  300.918436][T10529] veth0_vlan: left promiscuous mode
[  301.021834][   T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  301.032288][   T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  301.040583][   T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  301.049394][   T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  301.059991][   T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  301.332840][T13968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2222'.
[  301.537499][T10529] team0 (unregistering): Port device team_slave_1 removed
[  301.603203][T10529] team0 (unregistering): Port device team_slave_0 removed
[  301.662320][ T5854] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  301.680772][ T5854] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  301.692084][ T5854] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  301.708731][ T5854] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  301.717943][ T5854] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  301.929737][ T5854] Bluetooth: hci4: command tx timeout
[  302.151468][T13956] chnl_net:caif_netlink_parms(): no params data found
[  302.469388][T13956] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.477712][T13956] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.485621][T13956] bridge_slave_0: entered allmulticast mode
[  302.502761][T13956] bridge_slave_0: entered promiscuous mode
[  302.549872][T13956] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.568394][T13956] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.580045][T13956] bridge_slave_1: entered allmulticast mode
[  302.590339][T13956] bridge_slave_1: entered promiscuous mode
[  302.723375][T13956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  302.769230][T13956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  302.946304][T13956] team0: Port device team_slave_0 added
[  302.979668][T10529] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.033483][T13956] team0: Port device team_slave_1 added
[  303.112259][T10529] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.125973][ T5854] Bluetooth: hci5: command tx timeout
[  303.176881][T13970] chnl_net:caif_netlink_parms(): no params data found
[  303.232754][T13956] batman_adv: batadv0: Adding interface: batadv_slave_0
[  303.239910][T13956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  303.268000][T13956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  303.298453][T10529] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.324317][T13956] batman_adv: batadv0: Adding interface: batadv_slave_1
[  303.331552][T13956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  303.359168][T13956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  303.399465][T10529] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.420955][T13964] chnl_net:caif_netlink_parms(): no params data found
[  303.464045][T14005] netlink: 'syz.5.2231': attribute type 12 has an invalid length.
[  303.472555][T14005] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255)
[  303.622217][T13956] hsr_slave_0: entered promiscuous mode
[  303.628943][T13956] hsr_slave_1: entered promiscuous mode
[  303.635531][T13956] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  303.643113][T13956] Cannot create hsr debugfs directory
[  303.691942][T13970] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.699375][T13970] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.706852][T13970] bridge_slave_0: entered allmulticast mode
[  303.713982][T13970] bridge_slave_0: entered promiscuous mode
[  303.763278][T13970] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.770850][ T5854] Bluetooth: hci6: command tx timeout
[  303.777937][T13970] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.785379][T13970] bridge_slave_1: entered allmulticast mode
[  303.793057][T13970] bridge_slave_1: entered promiscuous mode
[  303.812259][T13964] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.819521][T13964] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.826884][T13964] bridge_slave_0: entered allmulticast mode
[  303.833977][T13964] bridge_slave_0: entered promiscuous mode
[  303.883270][T13964] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.893157][T13964] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.900735][T13964] bridge_slave_1: entered allmulticast mode
[  303.907973][T13964] bridge_slave_1: entered promiscuous mode
[  303.951598][T13970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  303.986457][T10529] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.005105][ T5854] Bluetooth: hci4: command tx timeout
[  304.028136][T13970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  304.058371][T13964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  304.097437][T13964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  304.157829][T10529] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.183956][T13970] team0: Port device team_slave_0 added
[  304.228129][T13970] team0: Port device team_slave_1 added
[  304.303181][T10529] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.348871][T13964] team0: Port device team_slave_0 added
[  304.364293][T13964] team0: Port device team_slave_1 added
[  304.442160][T13970] batman_adv: batadv0: Adding interface: batadv_slave_0
[  304.449470][T13970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.485425][T13970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  304.529619][T10529] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.599018][T13970] batman_adv: batadv0: Adding interface: batadv_slave_1
[  304.607757][T13970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.643970][T13970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  304.765158][T13964] batman_adv: batadv0: Adding interface: batadv_slave_0
[  304.772156][T13964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.800028][T13964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  304.867832][T13964] batman_adv: batadv0: Adding interface: batadv_slave_1
[  304.882966][T13964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.910350][T13964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  304.942514][T13970] hsr_slave_0: entered promiscuous mode
[  304.949392][T13970] hsr_slave_1: entered promiscuous mode
[  304.956155][T13970] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  304.963721][T13970] Cannot create hsr debugfs directory
[  305.134304][T13964] hsr_slave_0: entered promiscuous mode
[  305.156490][T13964] hsr_slave_1: entered promiscuous mode
[  305.162925][T13964] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  305.171251][T13964] Cannot create hsr debugfs directory
[  305.206446][ T5854] Bluetooth: hci5: command tx timeout
[  305.214562][T10529] bridge_slave_1: left allmulticast mode
[  305.220260][T10529] bridge_slave_1: left promiscuous mode
[  305.226184][T10529] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.240039][T10529] bridge_slave_0: left allmulticast mode
[  305.245863][T10529] bridge_slave_0: left promiscuous mode
[  305.251541][T10529] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.262927][T10529] bridge_slave_1: left allmulticast mode
[  305.269332][T10529] bridge_slave_1: left promiscuous mode
[  305.275226][T10529] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.285757][T10529] bridge_slave_0: left allmulticast mode
[  305.292791][T10529] bridge_slave_0: left promiscuous mode
[  305.300187][T10529] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.689489][T10529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  305.701429][T10529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  305.712727][T10529] bond0 (unregistering): Released all slaves
[  305.845064][ T5854] Bluetooth: hci6: command tx timeout
[  306.042907][T10529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  306.060675][T10529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  306.071130][T10529] bond0 (unregistering): Released all slaves
[  306.085264][ T5854] Bluetooth: hci4: command tx timeout
[  306.096791][T14038] syzkaller1: entered promiscuous mode
[  306.102278][T14038] syzkaller1: entered allmulticast mode
[  306.756985][T13956] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  306.778580][T10529] hsr_slave_0: left promiscuous mode
[  306.788432][T10529] hsr_slave_1: left promiscuous mode
[  306.794219][T10529] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  306.802522][T10529] batman_adv: batadv0: Removing interface: batadv_slave_0
[  306.821736][T10529] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  306.829938][T10529] batman_adv: batadv0: Removing interface: batadv_slave_1
[  306.842034][T10529] hsr_slave_0: left promiscuous mode
[  306.850413][T10529] hsr_slave_1: left promiscuous mode
[  306.857546][T10529] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  306.865268][T10529] batman_adv: batadv0: Removing interface: batadv_slave_0
[  306.873162][T10529] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  306.881360][T10529] batman_adv: batadv0: Removing interface: batadv_slave_1
[  306.942255][T10529] veth1_macvtap: left promiscuous mode
[  306.948306][T10529] veth0_macvtap: left promiscuous mode
[  306.955295][T10529] veth1_vlan: left promiscuous mode
[  306.960651][T10529] veth0_vlan: left promiscuous mode
[  306.982349][T10529] veth1_macvtap: left promiscuous mode
[  306.988071][T10529] veth0_macvtap: left promiscuous mode
[  306.993633][T10529] veth1_vlan: left promiscuous mode
[  307.000819][T10529] veth0_vlan: left promiscuous mode
[  307.284844][ T5854] Bluetooth: hci5: command tx timeout
[  307.584194][T10529] team0 (unregistering): Port device team_slave_1 removed
[  307.623389][T10529] team0 (unregistering): Port device team_slave_0 removed
[  307.927980][ T5854] Bluetooth: hci6: command tx timeout
[  308.167816][ T5854] Bluetooth: hci4: command tx timeout
[  308.413352][   T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  308.433041][   T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  308.443455][   T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  308.471824][   T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  308.494087][   T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  308.590871][T10529] team0 (unregistering): Port device team_slave_1 removed
[  308.635074][T10529] team0 (unregistering): Port device team_slave_0 removed
[  309.009815][T13956] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  309.023591][T13956] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  309.035072][T13956] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  309.303679][T14071] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2248'.
[  309.365384][ T5854] Bluetooth: hci5: command tx timeout
[  309.416806][T14073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2249'.
[  309.428644][T13956] 8021q: adding VLAN 0 to HW filter on device bond0
[  309.442848][T14073] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2249'.
[  309.559264][T13956] 8021q: adding VLAN 0 to HW filter on device team0
[  309.616778][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.623970][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  309.662968][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.670196][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  309.742396][T14059] chnl_net:caif_netlink_parms(): no params data found
[  309.961519][T14059] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.970587][T14059] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.980866][T14059] bridge_slave_0: entered allmulticast mode
[  309.988707][T14059] bridge_slave_0: entered promiscuous mode
[  309.997615][T14059] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.006391][T14059] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.013652][T14059] bridge_slave_1: entered allmulticast mode
[  310.016071][ T5854] Bluetooth: hci6: command tx timeout
[  310.025540][T14059] bridge_slave_1: entered promiscuous mode
[  310.082962][T14059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  310.117703][T14059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  310.168475][T14059] team0: Port device team_slave_0 added
[  310.180627][T14059] team0: Port device team_slave_1 added
[  310.257574][T14059] batman_adv: batadv0: Adding interface: batadv_slave_0
[  310.269359][T14059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.296131][T14059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  310.338788][T14059] batman_adv: batadv0: Adding interface: batadv_slave_1
[  310.347337][T14059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.373554][T14059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  310.410813][T13970] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  310.439747][T13970] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  310.459514][T13970] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  310.472510][T13970] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  310.560944][T14059] hsr_slave_0: entered promiscuous mode
[  310.567077][ T5854] Bluetooth: hci7: command tx timeout
[  310.573884][T14059] hsr_slave_1: entered promiscuous mode
[  310.580451][T14059] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  310.588211][T14059] Cannot create hsr debugfs directory
[  310.674185][T13956] 8021q: adding VLAN 0 to HW filter on device batadv0
[  310.681261][T13964] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  310.702220][T14083] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  310.709376][T13964] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  310.733910][T13964] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  310.780027][T13964] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  310.841783][T14097] xt_policy: output policy not valid in PREROUTING and INPUT
[  310.936994][T14106] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  311.065375][T13956] veth0_vlan: entered promiscuous mode
[  311.124260][T13956] veth1_vlan: entered promiscuous mode
[  311.206405][T13970] 8021q: adding VLAN 0 to HW filter on device bond0
[  311.250368][T13956] veth0_macvtap: entered promiscuous mode
[  311.261366][T13970] 8021q: adding VLAN 0 to HW filter on device team0
[  311.280294][T14059] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  311.300307][T13956] veth1_macvtap: entered promiscuous mode
[  311.323111][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.330341][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  311.353122][T14059] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  311.378102][T14059] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  311.404256][T14059] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  311.435283][T13956] batman_adv: batadv0: Interface activated: batadv_slave_0
[  311.450111][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.457249][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state
[  311.484267][T13964] 8021q: adding VLAN 0 to HW filter on device bond0
[  311.506229][T13956] batman_adv: batadv0: Interface activated: batadv_slave_1
[  311.548756][T13956] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  311.558156][T13956] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  311.567114][T13956] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  311.577001][T13956] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  311.622537][T13964] 8021q: adding VLAN 0 to HW filter on device team0
[  311.687817][T10529] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.694991][T10529] bridge0: port 1(bridge_slave_0) entered forwarding state
[  311.720787][T10529] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.728024][T10529] bridge0: port 2(bridge_slave_1) entered forwarding state
[  311.759833][T13970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  311.892542][T14125] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode
[  311.926885][ T5854] Bluetooth: hci2: command 0x0406 tx timeout
[  312.029270][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.063909][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.100173][T13964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  312.263058][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.281946][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.309331][T14059] 8021q: adding VLAN 0 to HW filter on device bond0
[  312.333189][T13970] 8021q: adding VLAN 0 to HW filter on device batadv0
[  312.369909][T14059] 8021q: adding VLAN 0 to HW filter on device team0
[  312.412612][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.419827][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  312.460642][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.468128][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state
[  312.583817][T14141] sctp: [Deprecated]: syz.5.2262 (pid 14141) Use of struct sctp_assoc_value in delayed_ack socket option.
[  312.583817][T14141] Use struct sctp_sack_info instead
[  312.644944][ T5847] Bluetooth: hci7: command tx timeout
[  312.683839][T14141] netlink: 'syz.5.2262': attribute type 25 has an invalid length.
[  312.791024][T13964] 8021q: adding VLAN 0 to HW filter on device batadv0
[  312.951961][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.108153][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.240746][T13970] veth0_vlan: entered promiscuous mode
[  313.306699][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.331709][T13970] veth1_vlan: entered promiscuous mode
[  313.344340][T13964] veth0_vlan: entered promiscuous mode
[  313.382556][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.424734][T13964] veth1_vlan: entered promiscuous mode
[  313.471137][T13970] veth0_macvtap: entered promiscuous mode
[  313.490963][T14059] 8021q: adding VLAN 0 to HW filter on device batadv0
[  313.511241][T13970] veth1_macvtap: entered promiscuous mode
[  313.579457][T13964] veth0_macvtap: entered promiscuous mode
[  313.607493][T13970] batman_adv: batadv0: Interface activated: batadv_slave_0
[  313.622178][T13964] veth1_macvtap: entered promiscuous mode
[  313.669210][T13970] batman_adv: batadv0: Interface activated: batadv_slave_1
[  313.712600][T13964] batman_adv: batadv0: Interface activated: batadv_slave_0
[  313.722955][T13970] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  313.735415][T13970] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  313.744147][T13970] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  313.753825][T13970] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  313.783202][T13964] batman_adv: batadv0: Interface activated: batadv_slave_1
[  313.851554][T13964] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  313.874521][T13964] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  313.883252][T13964] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  313.893941][T13964] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  313.937966][   T12] bridge_slave_1: left allmulticast mode
[  313.943658][   T12] bridge_slave_1: left promiscuous mode
[  313.959211][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.973861][   T12] bridge_slave_0: left allmulticast mode
[  313.981040][   T12] bridge_slave_0: left promiscuous mode
[  313.987397][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.015437][   T50] Bluetooth: hci3: command 0x0405 tx timeout
[  314.324254][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  314.353826][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  314.371346][   T12] bond0 (unregistering): Released all slaves
[  314.632261][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  314.661286][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  314.688939][T14166] xt_hashlimit: overflow, rate too high: 0
[  314.728176][   T50] Bluetooth: hci7: command tx timeout
[  314.802170][T14166] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2265'.
[  314.835155][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  314.844280][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  314.851605][T10529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  314.851624][T10529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  314.869972][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  314.888282][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  314.898427][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  314.967429][   T12] hsr_slave_0: left promiscuous mode
[  314.977678][   T12] hsr_slave_1: left promiscuous mode
[  314.984287][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  315.006475][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  315.021269][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  315.030255][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  315.058497][   T12] veth1_macvtap: left promiscuous mode
[  315.064052][   T12] veth0_macvtap: left promiscuous mode
[  315.070325][   T12] veth1_vlan: left promiscuous mode
[  315.076139][   T12] veth0_vlan: left promiscuous mode
[  315.582284][   T12] team0 (unregistering): Port device team_slave_1 removed
[  315.623646][   T12] team0 (unregistering): Port device team_slave_0 removed
[  316.010928][T14059] veth0_vlan: entered promiscuous mode
[  316.054756][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.086447][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.137827][T14059] veth1_vlan: entered promiscuous mode
[  316.206999][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.232074][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.303173][T14059] veth0_macvtap: entered promiscuous mode
[  316.433324][T14059] veth1_macvtap: entered promiscuous mode
[  316.541282][T14059] batman_adv: batadv0: Interface activated: batadv_slave_0
[  316.648495][T14059] batman_adv: batadv0: Interface activated: batadv_slave_1
[  316.795416][T14187] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2271'.
[  316.814641][ T5847] Bluetooth: hci7: command tx timeout
[  316.833927][T14187] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2271'.
[  316.849833][T14059] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  316.861272][T14059] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  316.870967][T14059] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  316.889981][T14059] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  316.965950][ T5847] Bluetooth: hci4: command tx timeout
[  317.107486][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.208907][T14167] chnl_net:caif_netlink_parms(): no params data found
[  317.252534][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.347975][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.425427][   T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  317.434125][   T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  317.443612][   T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  317.479597][   T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  317.488414][   T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  317.528812][T14167] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.536959][T14167] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.544234][T14167] bridge_slave_0: entered allmulticast mode
[  317.567148][T14167] bridge_slave_0: entered promiscuous mode
[  317.647250][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.673014][T14167] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.681611][T14167] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.695850][T14167] bridge_slave_1: entered allmulticast mode
[  317.703691][T14167] bridge_slave_1: entered promiscuous mode
[  317.718548][T14202] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2273'.
[  317.727999][T14202] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2273'.
[  317.854148][T14167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  317.880107][T14167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  317.902465][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  317.914711][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  317.928997][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  317.938212][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  317.946552][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  317.957513][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  317.966749][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  318.021348][T14167] team0: Port device team_slave_0 added
[  318.063693][T14167] team0: Port device team_slave_1 added
[  318.164018][T10529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.175563][T10529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.210084][   T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.230399][T14167] batman_adv: batadv0: Adding interface: batadv_slave_0
[  318.237829][T14167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  318.265181][T14167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  318.277845][T14167] batman_adv: batadv0: Adding interface: batadv_slave_1
[  318.284970][T14167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  318.313225][T14167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  318.376530][   T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.568806][   T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.633081][T14167] hsr_slave_0: entered promiscuous mode
[  318.642941][T14211] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2246'.
[  318.643844][T14167] hsr_slave_1: entered promiscuous mode
[  318.665412][T14167] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  318.673000][T14167] Cannot create hsr debugfs directory
[  318.726051][   T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.816585][T14217] netlink: 'syz.7.2276': attribute type 4 has an invalid length.
[  319.045551][   T50] Bluetooth: hci4: command tx timeout
[  319.237720][T14195] chnl_net:caif_netlink_parms(): no params data found
[  319.526035][   T50] Bluetooth: hci5: command tx timeout
[  319.746648][   T12] bridge_slave_1: left allmulticast mode
[  319.752353][   T12] bridge_slave_1: left promiscuous mode
[  319.760856][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.771481][   T12] bridge_slave_0: left allmulticast mode
[  319.801963][   T12] bridge_slave_0: left promiscuous mode
[  319.819431][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.849867][   T12] bridge_slave_1: left allmulticast mode
[  319.880469][   T12] bridge_slave_1: left promiscuous mode
[  319.887117][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.898122][   T12] bridge_slave_0: left allmulticast mode
[  319.903854][   T12] bridge_slave_0: left promiscuous mode
[  319.910724][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.941383][T14272] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  320.005215][   T50] Bluetooth: hci6: command tx timeout
[  320.331914][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  320.352208][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  320.362369][   T12] bond0 (unregistering): Released all slaves
[  320.662679][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  320.673446][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  320.683491][   T12] bond0 (unregistering): Released all slaves
[  320.858613][T14195] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.871025][T14195] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.882514][T14195] bridge_slave_0: entered allmulticast mode
[  320.922099][T14195] bridge_slave_0: entered promiscuous mode
[  321.014659][T14195] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.022476][T14195] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.035518][T14195] bridge_slave_1: entered allmulticast mode
[  321.042594][T14195] bridge_slave_1: entered promiscuous mode
[  321.059822][T14203] chnl_net:caif_netlink_parms(): no params data found
[  321.139386][   T50] Bluetooth: hci4: command tx timeout
[  321.195362][T14280] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.202616][T14280] bridge0: port 2(bridge_slave_1) entered forwarding state
[  321.222932][T14280] bridge0: entered allmulticast mode
[  321.372868][T14195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  321.402992][T14287] netlink: 'syz.5.2291': attribute type 5 has an invalid length.
[  321.473082][T14195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  321.549045][T14195] team0: Port device team_slave_0 added
[  321.597355][T14195] team0: Port device team_slave_1 added
[  321.606368][   T50] Bluetooth: hci5: command tx timeout
[  321.620523][T14298] netlink: 'syz.7.2293': attribute type 10 has an invalid length.
[  321.692771][T14203] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.714699][T14203] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.725859][T14203] bridge_slave_0: entered allmulticast mode
[  321.761365][T14203] bridge_slave_0: entered promiscuous mode
[  321.811295][T14195] batman_adv: batadv0: Adding interface: batadv_slave_0
[  321.821249][T14195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.851131][T14195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  321.915805][T14203] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.935078][T14203] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.942411][T14203] bridge_slave_1: entered allmulticast mode
[  321.972124][T14203] bridge_slave_1: entered promiscuous mode
[  322.063877][T14195] batman_adv: batadv0: Adding interface: batadv_slave_1
[  322.081499][T14195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  322.108399][   T50] Bluetooth: hci6: command tx timeout
[  322.138244][T14195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  322.199639][   T12] hsr_slave_0: left promiscuous mode
[  322.211695][   T12] hsr_slave_1: left promiscuous mode
[  322.217971][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  322.223865][T14317] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2297'.
[  322.226249][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  322.243093][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  322.251415][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  322.263775][   T12] hsr_slave_0: left promiscuous mode
[  322.270321][   T12] hsr_slave_1: left promiscuous mode
[  322.277305][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  322.286157][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  322.296333][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  322.303771][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  322.344195][   T12] veth1_macvtap: left promiscuous mode
[  322.349820][   T12] veth0_macvtap: left promiscuous mode
[  322.355648][   T12] veth1_vlan: left promiscuous mode
[  322.362397][   T12] veth0_vlan: left promiscuous mode
[  322.369070][   T12] veth1_macvtap: left promiscuous mode
[  322.374856][   T12] veth0_macvtap: left promiscuous mode
[  322.380514][   T12] veth1_vlan: left promiscuous mode
[  322.385963][   T12] veth0_vlan: left promiscuous mode
[  322.983913][   T12] team0 (unregistering): Port device team_slave_1 removed
[  323.028765][   T12] team0 (unregistering): Port device team_slave_0 removed
[  323.215113][   T50] Bluetooth: hci4: command tx timeout
[  323.694834][   T50] Bluetooth: hci5: command tx timeout
[  323.844051][   T12] team0 (unregistering): Port device team_slave_1 removed
[  323.894172][   T12] team0 (unregistering): Port device team_slave_0 removed
[  324.164872][   T50] Bluetooth: hci6: command tx timeout
[  324.415016][T14316] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.456256][T14203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  324.478196][T14203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  324.544328][T14321] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2299'.
[  324.578936][T14316] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.604036][T14322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2299'.
[  324.613106][T14322] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2299'.
[  324.623019][T14167] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  324.638122][T14167] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  324.715227][T14203] team0: Port device team_slave_0 added
[  324.773979][T14316] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.791412][T14167] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  324.804159][T14195] hsr_slave_0: entered promiscuous mode
[  324.811861][T14195] hsr_slave_1: entered promiscuous mode
[  324.818727][T14195] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  324.826550][T14195] Cannot create hsr debugfs directory
[  324.835525][T14203] team0: Port device team_slave_1 added
[  324.882197][T14167] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  324.924986][T14316] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.956249][T14325] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2300'.
[  324.970049][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  324.982310][    C0] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1c used by aa:aa:aa:aa:aa:1c detected!
[  325.012468][T14325] bridge_slave_1: left allmulticast mode
[  325.018857][T14325] bridge_slave_1: left promiscuous mode
[  325.025392][T14325] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.042268][T14325] bridge_slave_0: left allmulticast mode
[  325.063888][T14325] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.168825][T14203] batman_adv: batadv0: Adding interface: batadv_slave_0
[  325.180998][T14203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.213156][T14203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  325.228315][T14203] batman_adv: batadv0: Adding interface: batadv_slave_1
[  325.240466][T14203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.267679][T14203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.380218][T14333] No such timeout policy "syz0"
[  325.487921][T14203] hsr_slave_0: entered promiscuous mode
[  325.504069][T14203] hsr_slave_1: entered promiscuous mode
[  325.520601][T14203] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  325.528763][T14203] Cannot create hsr debugfs directory
[  325.583756][T14316] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  325.666367][T14316] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  325.738145][T14316] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  325.761526][T14316] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  325.778131][   T50] Bluetooth: hci5: command tx timeout
[  326.186441][T14167] 8021q: adding VLAN 0 to HW filter on device bond0
[  326.231750][T14167] 8021q: adding VLAN 0 to HW filter on device team0
[  326.245751][   T50] Bluetooth: hci6: command tx timeout
[  326.277128][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.284324][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  326.295825][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.303009][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  326.637028][T14167] 8021q: adding VLAN 0 to HW filter on device batadv0
[  326.764174][T14167] veth0_vlan: entered promiscuous mode
[  326.832895][T14167] veth1_vlan: entered promiscuous mode
[  326.963211][T14195] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  326.999815][T14167] veth0_macvtap: entered promiscuous mode
[  327.026272][T14195] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  327.061715][T14167] veth1_macvtap: entered promiscuous mode
[  327.334326][T14195] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  327.403800][T14195] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  327.475517][T14167] batman_adv: batadv0: Interface activated: batadv_slave_0
[  327.580035][T14167] batman_adv: batadv0: Interface activated: batadv_slave_1
[  327.630999][T14167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  327.645486][T14167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  327.654243][T14167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  327.672579][T14167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  327.727352][T14203] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  327.748284][T14203] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  327.807494][T14203] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  327.839646][T14203] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  328.156564][T12155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.178785][T12155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.282847][T14449] netlink: 'syz.7.2323': attribute type 11 has an invalid length.
[  328.296000][T14449] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2323'.
[  328.321776][T12155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.353106][T12155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.370717][T14195] 8021q: adding VLAN 0 to HW filter on device bond0
[  328.489166][T14195] 8021q: adding VLAN 0 to HW filter on device team0
[  328.536233][T14454] netlink: 'syz.5.2325': attribute type 3 has an invalid length.
[  328.552800][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.560025][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  328.583019][T14457] netlink: 'syz.5.2325': attribute type 3 has an invalid length.
[  328.595824][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  328.603060][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  328.642615][T14456] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2326'.
[  328.712310][T14203] 8021q: adding VLAN 0 to HW filter on device bond0
[  328.844076][T14203] 8021q: adding VLAN 0 to HW filter on device team0
[  329.121593][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.198119][T12155] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.205350][T12155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  329.269739][T12155] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.276940][T12155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  329.400783][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.560922][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.640878][T14195] 8021q: adding VLAN 0 to HW filter on device batadv0
[  329.688036][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.784329][T14195] veth0_vlan: entered promiscuous mode
[  329.807440][T14195] veth1_vlan: entered promiscuous mode
[  329.916719][   T13] bridge_slave_1: left allmulticast mode
[  329.922420][   T13] bridge_slave_1: left promiscuous mode
[  329.934707][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.947897][   T13] bridge_slave_0: left allmulticast mode
[  329.953567][   T13] bridge_slave_0: left promiscuous mode
[  329.959584][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.279160][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  330.290092][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  330.300400][   T13] bond0 (unregistering): Released all slaves
[  330.320574][T14195] veth0_macvtap: entered promiscuous mode
[  330.360376][T14195] veth1_macvtap: entered promiscuous mode
[  330.440533][T14195] batman_adv: batadv0: Interface activated: batadv_slave_0
[  330.453987][T14203] 8021q: adding VLAN 0 to HW filter on device batadv0
[  330.463640][T14195] batman_adv: batadv0: Interface activated: batadv_slave_1
[  330.563556][T14195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  330.581369][T14195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  330.598648][T14195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  330.610652][T14195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  330.662175][   T13] hsr_slave_0: left promiscuous mode
[  330.677914][   T13] hsr_slave_1: left promiscuous mode
[  330.685268][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  330.692720][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  330.701661][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  330.719301][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  330.800364][   T13] veth1_macvtap: left promiscuous mode
[  330.807368][   T13] veth0_macvtap: left promiscuous mode
[  330.813067][   T13] veth1_vlan: left promiscuous mode
[  330.818866][   T13] veth0_vlan: left promiscuous mode
[  331.164931][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  331.174930][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  331.184056][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  331.197043][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  331.215276][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  331.543330][   T13] team0 (unregistering): Port device team_slave_1 removed
[  331.587003][   T13] team0 (unregistering): Port device team_slave_0 removed
[  332.178167][T14493] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2332'.
[  332.233711][T14493] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2332'.
[  332.273386][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.284991][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.520136][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.536545][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.572269][T14498] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2334'.
[  332.651670][T14203] veth0_vlan: entered promiscuous mode
[  332.790422][T14203] veth1_vlan: entered promiscuous mode
[  332.902262][T14487] chnl_net:caif_netlink_parms(): no params data found
[  333.107800][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.210562][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.239710][T14511] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (8)
[  333.304537][ T5847] Bluetooth: hci4: command tx timeout
[  333.314246][T14487] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.321596][T14487] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.329024][T14487] bridge_slave_0: entered allmulticast mode
[  333.336632][T14487] bridge_slave_0: entered promiscuous mode
[  333.349989][T14203] veth0_macvtap: entered promiscuous mode
[  333.359817][T14487] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.367680][T14487] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.375071][T14487] bridge_slave_1: entered allmulticast mode
[  333.382081][T14487] bridge_slave_1: entered promiscuous mode
[  333.424189][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.441452][T14203] veth1_macvtap: entered promiscuous mode
[  333.470141][T14487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  333.490320][T14487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  333.544085][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.568901][T14487] team0: Port device team_slave_0 added
[  333.578540][T14487] team0: Port device team_slave_1 added
[  333.589509][T14203] batman_adv: batadv0: Interface activated: batadv_slave_0
[  333.643847][T14487] batman_adv: batadv0: Adding interface: batadv_slave_0
[  333.651862][T14487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  333.680114][T14487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  333.694777][T14487] batman_adv: batadv0: Adding interface: batadv_slave_1
[  333.701759][T14487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  333.728468][T14487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  333.752607][T14203] batman_adv: batadv0: Interface activated: batadv_slave_1
[  333.807732][T14487] hsr_slave_0: entered promiscuous mode
[  333.815717][T14487] hsr_slave_1: entered promiscuous mode
[  333.822130][T14487] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  333.829790][T14487] Cannot create hsr debugfs directory
[  333.838485][T14203] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  333.853082][T14203] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  333.863162][T14203] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  333.872393][T14203] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  334.001503][   T13] bridge_slave_1: left allmulticast mode
[  334.017426][   T13] bridge_slave_1: left promiscuous mode
[  334.023158][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.032820][   T13] bridge_slave_0: left allmulticast mode
[  334.039330][   T13] bridge_slave_0: left promiscuous mode
[  334.045239][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.382206][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  334.392892][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  334.404627][   T13] bond0 (unregistering): Released all slaves
[  334.592106][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  334.615326][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  334.951700][T14415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  334.979262][T14415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.059353][   T13] hsr_slave_0: left promiscuous mode
[  335.083525][   T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  335.095570][   T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  335.104954][   T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  335.111954][   T13] hsr_slave_1: left promiscuous mode
[  335.118520][   T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  335.126607][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  335.135499][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  335.142715][   T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  335.153344][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  335.160958][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  335.187294][   T13] veth1_macvtap: left promiscuous mode
[  335.194052][   T13] veth0_macvtap: left promiscuous mode
[  335.199937][   T13] veth1_vlan: left promiscuous mode
[  335.205665][   T13] veth0_vlan: left promiscuous mode
[  335.374578][ T5847] Bluetooth: hci4: command tx timeout
[  335.727435][   T13] team0 (unregistering): Port device team_slave_1 removed
[  335.773787][   T13] team0 (unregistering): Port device team_slave_0 removed
[  336.502976][T14545] netlink: 'syz.7.2347': attribute type 1 has an invalid length.
[  336.511286][T14545] netlink: 220 bytes leftover after parsing attributes in process `syz.7.2347'.
[  336.830540][T14556] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2349'.
[  336.963031][T14487] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  337.000429][T14487] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  337.031265][T14526] chnl_net:caif_netlink_parms(): no params data found
[  337.052582][T14487] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  337.065305][T14487] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  337.165555][   T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.193224][T14526] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.206640][ T5847] Bluetooth: hci5: command tx timeout
[  337.210981][T14526] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.223490][T14526] bridge_slave_0: entered allmulticast mode
[  337.230683][T14526] bridge_slave_0: entered promiscuous mode
[  337.243074][T14526] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.251565][T14526] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.258879][T14526] bridge_slave_1: entered allmulticast mode
[  337.267311][T14526] bridge_slave_1: entered promiscuous mode
[  337.291478][   T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.343219][T14526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  337.361837][T14526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  337.393991][   T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.444632][ T5847] Bluetooth: hci4: command tx timeout
[  337.469849][   T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.491945][T14526] team0: Port device team_slave_0 added
[  337.502638][T14526] team0: Port device team_slave_1 added
[  337.563364][T14526] batman_adv: batadv0: Adding interface: batadv_slave_0
[  337.571286][T14526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.598214][T14526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  337.626413][T14526] batman_adv: batadv0: Adding interface: batadv_slave_1
[  337.633402][T14526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.662046][T14526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  337.782676][T14573] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2351'.
[  337.982748][T14526] hsr_slave_0: entered promiscuous mode
[  338.007359][T14573] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2351'.
[  338.035755][T14526] hsr_slave_1: entered promiscuous mode
[  338.042217][T14526] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  338.104573][T14526] Cannot create hsr debugfs directory
[  338.124759][   T13] bridge_slave_1: left allmulticast mode
[  338.134165][   T13] bridge_slave_1: left promiscuous mode
[  338.160472][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.186784][   T13] bridge_slave_0: left allmulticast mode
[  338.206571][   T13] bridge_slave_0: left promiscuous mode
[  338.212396][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.302695][   T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  338.323232][   T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  338.333660][   T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  338.345664][   T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  338.360956][   T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  338.631779][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  338.642998][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  338.653662][   T13] bond0 (unregistering): Released all slaves
[  338.788810][T14590] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2354'.
[  338.853682][T14487] 8021q: adding VLAN 0 to HW filter on device bond0
[  338.982914][T14598] netlink: 'syz.5.2357': attribute type 1 has an invalid length.
[  339.056820][T14600] xt_policy: output policy not valid in PREROUTING and INPUT
[  339.103444][T14602] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2359'.
[  339.169275][T14487] 8021q: adding VLAN 0 to HW filter on device team0
[  339.294456][ T5847] Bluetooth: hci5: command tx timeout
[  339.340658][   T13] hsr_slave_0: left promiscuous mode
[  339.346744][   T13] hsr_slave_1: left promiscuous mode
[  339.352592][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  339.372614][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  339.389369][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  339.397258][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  339.434951][   T13] veth1_macvtap: left promiscuous mode
[  339.440763][   T13] veth0_macvtap: left promiscuous mode
[  339.447081][   T13] veth1_vlan: left promiscuous mode
[  339.452634][   T13] veth0_vlan: left promiscuous mode
[  339.525788][ T5847] Bluetooth: hci4: command tx timeout
[  339.953388][   T13] team0 (unregistering): Port device team_slave_1 removed
[  339.997677][   T13] team0 (unregistering): Port device team_slave_0 removed
[  340.404779][ T5847] Bluetooth: hci6: command tx timeout
[  340.419628][T14609] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  340.459163][T14411] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.474665][T14411] bridge0: port 1(bridge_slave_0) entered forwarding state
[  340.501503][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2362'.
[  340.518934][T10529] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.526145][T10529] bridge0: port 2(bridge_slave_1) entered forwarding state
[  340.719608][T14619] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2362'.
[  341.067875][T14587] chnl_net:caif_netlink_parms(): no params data found
[  341.365469][ T5847] Bluetooth: hci5: command tx timeout
[  341.413842][T14645] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2369'.
[  341.501179][T14487] 8021q: adding VLAN 0 to HW filter on device batadv0
[  341.629871][T14587] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.639293][T14587] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.648015][T14587] bridge_slave_0: entered allmulticast mode
[  341.656303][T14587] bridge_slave_0: entered promiscuous mode
[  341.696489][T14587] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.703671][T14587] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.721872][T14587] bridge_slave_1: entered allmulticast mode
[  341.752587][T14587] bridge_slave_1: entered promiscuous mode
[  341.862372][T14587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  341.912917][T14587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  341.969276][T14526] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  342.022760][T14587] team0: Port device team_slave_0 added
[  342.035356][T14526] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  342.060043][T14526] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  342.096232][T14587] team0: Port device team_slave_1 added
[  342.161217][T14526] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  342.280921][T14487] veth0_vlan: entered promiscuous mode
[  342.296575][T14587] batman_adv: batadv0: Adding interface: batadv_slave_0
[  342.308343][T14587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.349040][T14587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  342.365547][T14587] batman_adv: batadv0: Adding interface: batadv_slave_1
[  342.372610][T14587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.400385][T14587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  342.489296][ T5847] Bluetooth: hci6: command tx timeout
[  342.611717][T14487] veth1_vlan: entered promiscuous mode
[  342.640572][T14587] hsr_slave_0: entered promiscuous mode
[  342.661827][T14587] hsr_slave_1: entered promiscuous mode
[  342.678375][T14587] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  342.689369][T14587] Cannot create hsr debugfs directory
[  343.017464][T14487] veth0_macvtap: entered promiscuous mode
[  343.036649][T14487] veth1_macvtap: entered promiscuous mode
[  343.110023][T14487] batman_adv: batadv0: Interface activated: batadv_slave_0
[  343.166624][T14487] batman_adv: batadv0: Interface activated: batadv_slave_1
[  343.202737][T14487] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  343.212156][T14487] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  343.221080][T14487] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  343.229960][T14487] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  343.309805][T14526] 8021q: adding VLAN 0 to HW filter on device bond0
[  343.403975][T14526] 8021q: adding VLAN 0 to HW filter on device team0
[  343.445005][ T5847] Bluetooth: hci5: command tx timeout
[  343.460001][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state
[  343.467201][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state
[  343.501406][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  343.518435][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  343.560835][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state
[  343.568000][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state
[  343.640085][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  343.676837][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  343.698908][T14587] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  343.718811][T14587] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  343.752786][T14587] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  343.803338][T14587] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  344.218092][ T1153] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.336572][ T1153] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.438037][T14587] 8021q: adding VLAN 0 to HW filter on device bond0
[  344.483466][ T1153] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.523965][T14526] 8021q: adding VLAN 0 to HW filter on device batadv0
[  344.548106][T14587] 8021q: adding VLAN 0 to HW filter on device team0
[  344.566159][ T5847] Bluetooth: hci6: command tx timeout
[  344.573613][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.580737][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  344.596987][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.604104][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  344.677869][T14526] veth0_vlan: entered promiscuous mode
[  344.716618][ T1153] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.736975][ T5847] Bluetooth: hci1: command 0x0406 tx timeout
[  344.761924][T14526] veth1_vlan: entered promiscuous mode
[  344.860346][T14526] veth0_macvtap: entered promiscuous mode
[  344.898551][T14526] veth1_macvtap: entered promiscuous mode
[  344.991939][ T1153] bridge_slave_1: left allmulticast mode
[  345.004407][ T1153] bridge_slave_1: left promiscuous mode
[  345.010203][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.033052][ T1153] bridge_slave_0: left allmulticast mode
[  345.041130][ T1153] bridge_slave_0: left promiscuous mode
[  345.047508][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.385686][ T1153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  345.396930][ T1153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  345.410324][ T1153] bond0 (unregistering): Released all slaves
[  345.426188][T14526] batman_adv: batadv0: Interface activated: batadv_slave_0
[  345.448640][T14526] batman_adv: batadv0: Interface activated: batadv_slave_1
[  345.470264][T14526] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  345.488558][T14526] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.498890][T14526] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.507712][T14526] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  345.597166][T14587] 8021q: adding VLAN 0 to HW filter on device batadv0
[  345.759794][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.809703][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.911563][ T1153] hsr_slave_0: left promiscuous mode
[  345.919217][ T1153] hsr_slave_1: left promiscuous mode
[  345.935392][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  345.943697][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  345.975871][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  345.983487][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  346.031882][ T1153] veth1_macvtap: left promiscuous mode
[  346.040256][ T1153] veth0_macvtap: left promiscuous mode
[  346.049815][ T1153] veth1_vlan: left promiscuous mode
[  346.059276][ T1153] veth0_vlan: left promiscuous mode
[  346.173288][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  346.182892][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  346.193759][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  346.209271][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  346.219703][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  346.615008][ T1153] team0 (unregistering): Port device team_slave_1 removed
[  346.652420][   T50] Bluetooth: hci6: command tx timeout
[  346.670730][ T1153] team0 (unregistering): Port device team_slave_0 removed
[  347.160754][T10529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.194489][T10529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.497542][T14776] delete_channel: no stack
[  347.587457][T14587] veth0_vlan: entered promiscuous mode
[  347.670125][T14587] veth1_vlan: entered promiscuous mode
[  347.719299][T14766] chnl_net:caif_netlink_parms(): no params data found
[  347.823991][T14766] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.831439][T14766] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.840624][T14766] bridge_slave_0: entered allmulticast mode
[  347.848673][T14766] bridge_slave_0: entered promiscuous mode
[  347.866897][T14766] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.874190][T14766] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.881967][T14766] bridge_slave_1: entered allmulticast mode
[  347.891863][T14766] bridge_slave_1: entered promiscuous mode
[  347.916186][T14587] veth0_macvtap: entered promiscuous mode
[  347.944295][T14766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  347.973179][T14766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  347.989908][T14587] veth1_macvtap: entered promiscuous mode
[  348.040952][T12155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.127661][T14766] team0: Port device team_slave_0 added
[  348.206916][T12155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.234132][T14766] team0: Port device team_slave_1 added
[  348.243500][T14587] batman_adv: batadv0: Interface activated: batadv_slave_0
[  348.250915][   T50] Bluetooth: hci4: command tx timeout
[  348.293229][T14766] batman_adv: batadv0: Adding interface: batadv_slave_0
[  348.301398][T14766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  348.331236][T14766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  348.373065][T14587] batman_adv: batadv0: Interface activated: batadv_slave_1
[  348.421673][T12155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.438317][T14766] batman_adv: batadv0: Adding interface: batadv_slave_1
[  348.446033][T14766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  348.472035][T14766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  348.497342][T14587] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  348.508287][T14587] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  348.517582][T14587] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  348.526553][T14587] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.559189][T12155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.615307][T14766] hsr_slave_0: entered promiscuous mode
[  348.622226][T14766] hsr_slave_1: entered promiscuous mode
[  348.629674][T14766] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  348.637493][T14766] Cannot create hsr debugfs directory
[  348.845218][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.853060][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  348.920442][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.931338][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  348.949870][T12155] bridge_slave_1: left allmulticast mode
[  348.957795][T12155] bridge_slave_1: left promiscuous mode
[  348.963488][T12155] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.973853][T12155] bridge_slave_0: left allmulticast mode
[  348.980401][T12155] bridge_slave_0: left promiscuous mode
[  348.988195][T12155] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.330559][T12155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  349.341322][T12155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  349.352160][T12155] bond0 (unregistering): Released all slaves
[  349.819510][T14794] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2404'.
[  350.024043][T12155] hsr_slave_0: left promiscuous mode
[  350.049760][T12155] hsr_slave_1: left promiscuous mode
[  350.056550][T12155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  350.063997][T12155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  350.094586][T12155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  350.102068][T12155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  350.189251][T12155] veth1_macvtap: left promiscuous mode
[  350.204982][T12155] veth0_macvtap: left promiscuous mode
[  350.210703][T12155] veth1_vlan: left promiscuous mode
[  350.229144][T12155] veth0_vlan: left promiscuous mode
[  350.238800][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  350.249607][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  350.258969][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  350.269155][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  350.277268][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  350.324890][   T50] Bluetooth: hci4: command tx timeout
[  350.742326][T12155] team0 (unregistering): Port device team_slave_1 removed
[  350.788976][T12155] team0 (unregistering): Port device team_slave_0 removed
[  351.509589][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  351.538652][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  351.553242][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  351.563124][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  351.571176][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  351.683356][T14819] xt_CT: No such helper "syz0"
[  351.693955][T14766] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  351.737779][T14766] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  351.768562][T14766] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  351.792316][T14823] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2409'.
[  351.813575][T14766] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  352.269275][T14815] chnl_net:caif_netlink_parms(): no params data found
[  352.320564][T14804] chnl_net:caif_netlink_parms(): no params data found
[  352.327521][   T50] Bluetooth: hci5: command tx timeout
[  352.380830][T12155] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.404745][   T50] Bluetooth: hci4: command tx timeout
[  352.540428][T14766] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.586402][T12155] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.659380][T14815] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.668731][T14815] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.676617][T14815] bridge_slave_0: entered allmulticast mode
[  352.684640][T14815] bridge_slave_0: entered promiscuous mode
[  352.708273][T14815] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.715871][T14815] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.723086][T14815] bridge_slave_1: entered allmulticast mode
[  352.732122][T14815] bridge_slave_1: entered promiscuous mode
[  352.775183][T12155] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.942488][T14858] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2414'.
[  352.962330][T12155] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.999649][T14859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2413'.
[  353.026399][T14804] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.043835][T14804] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.062524][T14804] bridge_slave_0: entered allmulticast mode
[  353.076862][T14804] bridge_slave_0: entered promiscuous mode
[  353.108474][T14804] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.122904][T14804] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.146305][T14804] bridge_slave_1: entered allmulticast mode
[  353.154203][T14804] bridge_slave_1: entered promiscuous mode
[  353.178189][T14766] 8021q: adding VLAN 0 to HW filter on device team0
[  353.210407][T14815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  353.241904][T14815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  353.374231][T14874] syz.5.2418: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  353.393978][T14874] CPU: 0 UID: 0 PID: 14874 Comm: syz.5.2418 Not tainted 6.16.0-rc2-syzkaller-00177-g1fd26729e013 #0 PREEMPT(full) 
[  353.394026][T14874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  353.394052][T14874] Call Trace:
[  353.394063][T14874]  <TASK>
[  353.394070][T14874]  dump_stack_lvl+0x189/0x250
[  353.394103][T14874]  ? __pfx_dump_stack_lvl+0x10/0x10
[  353.394127][T14874]  ? __pfx__printk+0x10/0x10
[  353.394146][T14874]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  353.394164][T14874]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  353.394184][T14874]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  353.394206][T14874]  warn_alloc+0x214/0x310
[  353.394232][T14874]  ? __pfx_warn_alloc+0x10/0x10
[  353.394262][T14874]  ? __get_vm_area_node+0x28f/0x300
[  353.394280][T14874]  ? fq_pie_init+0x430/0x840
[  353.394301][T14874]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  353.394346][T14874]  ? up_write+0x1c4/0x420
[  353.394361][T14874]  ? tcf_block_get_ext+0x8d4/0x17d0
[  353.394389][T14874]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  353.394412][T14874]  ? rcu_is_watching+0x15/0xb0
[  353.394437][T14874]  ? fq_pie_init+0x430/0x840
[  353.394451][T14874]  ? fq_pie_init+0x430/0x840
[  353.394464][T14874]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  353.394483][T14874]  ? fq_pie_init+0x430/0x840
[  353.394497][T14874]  ? tcf_block_get+0x67/0xa0
[  353.394514][T14874]  ? __pfx_tcf_chain_head_change_dflt+0x10/0x10
[  353.394537][T14874]  fq_pie_init+0x430/0x840
[  353.394554][T14874]  ? __pfx_fq_pie_init+0x10/0x10
[  353.394569][T14874]  qdisc_create+0x7a9/0xea0
[  353.394596][T14874]  tc_modify_qdisc+0x1426/0x2010
[  353.394631][T14874]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  353.394688][T14874]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  353.394710][T14874]  rtnetlink_rcv_msg+0x77c/0xb70
[  353.394733][T14874]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  353.394750][T14874]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  353.394765][T14874]  ? ref_tracker_free+0x63a/0x7d0
[  353.394784][T14874]  ? __copy_skb_header+0xa7/0x550
[  353.394807][T14874]  ? __pfx_ref_tracker_free+0x10/0x10
[  353.394827][T14874]  ? __skb_clone+0x63/0x7a0
[  353.394855][T14874]  netlink_rcv_skb+0x205/0x470
[  353.394876][T14874]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  353.394896][T14874]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  353.394929][T14874]  ? netlink_deliver_tap+0x2e/0x1b0
[  353.394948][T14874]  ? netlink_deliver_tap+0x2e/0x1b0
[  353.394973][T14874]  netlink_unicast+0x758/0x8d0
[  353.395003][T14874]  netlink_sendmsg+0x805/0xb30
[  353.395033][T14874]  ? __pfx_netlink_sendmsg+0x10/0x10
[  353.395056][T14874]  ? aa_sock_msg_perm+0x94/0x160
[  353.395078][T14874]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  353.395097][T14874]  ? __pfx_netlink_sendmsg+0x10/0x10
[  353.395118][T14874]  __sock_sendmsg+0x219/0x270
[  353.395145][T14874]  ____sys_sendmsg+0x505/0x830
[  353.395171][T14874]  ? __pfx_____sys_sendmsg+0x10/0x10
[  353.395202][T14874]  ? import_iovec+0x74/0xa0
[  353.395223][T14874]  ___sys_sendmsg+0x21f/0x2a0
[  353.395246][T14874]  ? __pfx____sys_sendmsg+0x10/0x10
[  353.395307][T14874]  ? __fget_files+0x2a/0x420
[  353.395324][T14874]  ? __fget_files+0x3a0/0x420
[  353.395353][T14874]  __x64_sys_sendmsg+0x19b/0x260
[  353.395374][T14874]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  353.395412][T14874]  ? rcu_is_watching+0x15/0xb0
[  353.395440][T14874]  ? do_syscall_64+0xbe/0x3b0
[  353.395462][T14874]  do_syscall_64+0xfa/0x3b0
[  353.395476][T14874]  ? lockdep_hardirqs_on+0x9c/0x150
[  353.395497][T14874]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.395512][T14874]  ? clear_bhb_loop+0x60/0xb0
[  353.395533][T14874]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.395548][T14874] RIP: 0033:0x7ff78ed8e929
[  353.395565][T14874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  353.395579][T14874] RSP: 002b:00007ff78fb54038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  353.395597][T14874] RAX: ffffffffffffffda RBX: 00007ff78efb5fa0 RCX: 00007ff78ed8e929
[  353.395610][T14874] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000003
[  353.395621][T14874] RBP: 00007ff78ee10b39 R08: 0000000000000000 R09: 0000000000000000
[  353.395630][T14874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  353.395641][T14874] R13: 0000000000000000 R14: 00007ff78efb5fa0 R15: 00007ffd9e7d4868
[  353.395670][T14874]  </TASK>
[  353.605387][   T50] Bluetooth: hci6: command tx timeout
[  353.611080][T14874] Mem-Info:
[  353.796363][T14887] netlink: 'syz.7.2420': attribute type 32 has an invalid length.
[  353.804029][T14874] active_anon:4345 inactive_anon:0 isolated_anon:0
[  353.804029][T14874]  active_file:1647 inactive_file:40011 isolated_file:0
[  353.804029][T14874]  unevictable:768 dirty:85 writeback:0
[  353.804029][T14874]  slab_reclaimable:11685 slab_unreclaimable:115994
[  353.804029][T14874]  mapped:44424 shmem:1362 pagetables:1239
[  353.804029][T14874]  sec_pagetables:0 bounce:0
[  353.804029][T14874]  kernel_misc_reclaimable:0
[  353.804029][T14874]  free:1272055 free_pcp:12883 free_cma:0
[  353.843721][T14887] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2420'.
[  353.898150][T14874] Node 0 active_anon:17380kB inactive_anon:0kB active_file:6588kB inactive_file:159844kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:177696kB dirty:336kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14568kB pagetables:4736kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  353.943816][T14874] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  353.975902][T14874] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  354.004997][T14874] lowmem_reserve[]: 0 2500 2502 2502 2502
[  354.010793][T14874] Node 0 DMA32 free:1163068kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17432kB inactive_anon:0kB active_file:6588kB inactive_file:158004kB unevictable:1536kB writepending:332kB present:3129332kB managed:2561020kB mlocked:0kB bounce:0kB free_pcp:40884kB local_pcp:17756kB free_cma:0kB
[  354.044123][T14874] lowmem_reserve[]: 0 0 1 1 1
[  354.049043][T14874] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  354.078484][T14874] lowmem_reserve[]: 0 0 0 0 0
[  354.083247][T14874] Node 1 Normal free:3909660kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:10796kB local_pcp:4320kB free_cma:0kB
[  354.115347][T14874] lowmem_reserve[]: 0 0 0 0 0
[  354.120103][T14874] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  354.133520][T14874] Node 0 DMA32: 419*4kB (UM) 180*8kB (UM) 37*16kB (UM) 115*32kB (UM) 12*64kB (UME) 46*128kB (UME) 16*256kB (ME) 54*512kB (UME) 51*1024kB (UM) 6*2048kB (UM) 257*4096kB (UM) = 1162972kB
[  354.152147][T14874] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  354.164142][T14874] Node 1 Normal: 5*4kB (UME) 5*8kB (UME) 34*16kB (UME) 184*32kB (UME) 51*64kB (UME) 12*128kB (UME) 4*256kB (UME) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 950*4096kB (M) = 3909660kB
[  354.182603][T14874] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  354.192242][T14874] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB
[  354.201656][T14874] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  354.211646][T14874] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  354.221112][T14874] 43017 total pagecache pages
[  354.225838][T14874] 0 pages in swap cache
[  354.229972][T14874] Free swap  = 124996kB
[  354.234098][T14874] Total swap = 124996kB
[  354.239999][T14874] 2097051 pages RAM
[  354.243826][T14874] 0 pages HighMem/MovableOnly
[  354.248832][T14874] 424690 pages reserved
[  354.252994][T14874] 0 pages cma reserved
[  354.270065][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.277286][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  354.301684][T14804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  354.316697][T14804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  354.357692][T14815] team0: Port device team_slave_0 added
[  354.363896][T14887] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  354.373012][T14887] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  354.377544][T10529] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.392901][T10529] bridge0: port 2(bridge_slave_1) entered forwarding state
[  354.405381][   T50] Bluetooth: hci5: command tx timeout
[  354.451857][T14815] team0: Port device team_slave_1 added
[  354.458655][T14897] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2422'.
[  354.484725][   T50] Bluetooth: hci4: command tx timeout
[  354.509791][T14898] netlink: 'syz.7.2422': attribute type 1 has an invalid length.
[  354.529948][T14804] team0: Port device team_slave_0 added
[  354.541671][T14896] delete_channel: no stack
[  354.543513][T14804] team0: Port device team_slave_1 added
[  354.566530][T14815] batman_adv: batadv0: Adding interface: batadv_slave_0
[  354.580617][T14815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.607845][T14815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  354.692387][T14815] batman_adv: batadv0: Adding interface: batadv_slave_1
[  354.699807][T14815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.726351][T14815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.769523][T14804] batman_adv: batadv0: Adding interface: batadv_slave_0
[  354.778125][T14804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.806674][T14804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  354.844370][T14804] batman_adv: batadv0: Adding interface: batadv_slave_1
[  354.852241][T14804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.879161][T14804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.953097][T14906] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2424'.
[  354.979896][T14815] hsr_slave_0: entered promiscuous mode
[  354.986605][T14815] hsr_slave_1: entered promiscuous mode
[  354.992696][T14815] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  355.001944][T14815] Cannot create hsr debugfs directory
[  355.043012][T14804] hsr_slave_0: entered promiscuous mode
[  355.049620][T14804] hsr_slave_1: entered promiscuous mode
[  355.057304][T14804] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  355.065251][T14804] Cannot create hsr debugfs directory
[  355.073741][T12155] bridge_slave_1: left allmulticast mode
[  355.079904][T12155] bridge_slave_1: left promiscuous mode
[  355.086464][T12155] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.099381][T12155] bridge_slave_0: left allmulticast mode
[  355.105487][T12155] bridge_slave_0: left promiscuous mode
[  355.111263][T12155] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.449382][   T31] INFO: task syz.4.1683:11797 blocked for more than 143 seconds.
[  355.473730][   T31]       Not tainted 6.16.0-rc2-syzkaller-00177-g1fd26729e013 #0
[  355.481579][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  355.490439][   T31] task:syz.4.1683      state:D stack:25352 pid:11797 tgid:11796 ppid:5844   task_flags:0x400140 flags:0x00004004
[  355.506233][   T31] Call Trace:
[  355.509568][   T31]  <TASK>
[  355.514061][   T31]  __schedule+0x16f5/0x4d00
[  355.518784][   T31]  ? __lock_acquire+0xab9/0xd20
[  355.523659][   T31]  ? schedule+0x165/0x360
[  355.529186][   T31]  ? __pfx___schedule+0x10/0x10
[  355.534256][   T31]  ? schedule+0x91/0x360
[  355.538594][   T31]  schedule+0x165/0x360
[  355.542751][   T31]  schedule_preempt_disabled+0x13/0x30
[  355.549220][   T31]  __mutex_lock+0x724/0xe80
[  355.553764][   T31]  ? __mutex_lock+0x51b/0xe80
[  355.558578][   T31]  ? nfsd_nl_listener_set_doit+0x12a/0x1650
[  355.564667][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  355.570716][   T31]  ? __asan_memset+0x22/0x50
[  355.575446][   T31]  ? ____sys_sendmsg+0x505/0x830
[  355.580441][   T31]  ? ___sys_sendmsg+0x21f/0x2a0
[  355.599045][   T31]  ? __x64_sys_sendmsg+0x19b/0x260
[  355.604223][   T31]  nfsd_nl_listener_set_doit+0x12a/0x1650
[  355.613913][   T31]  ? __pfx___nla_validate_parse+0x10/0x10
[  355.624623][   T31]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  355.630832][   T31]  ? __nla_parse+0x40/0x60
[  355.640191][   T31]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  355.646686][   T31]  genl_family_rcv_msg_doit+0x212/0x300
[  355.652258][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  355.663418][   T31]  ? bpf_lsm_capable+0x9/0x20
[  355.669918][   T31]  ? security_capable+0x7e/0x2e0
[  355.680668][   T31]  genl_rcv_msg+0x60e/0x790
[  355.685485][   T50] Bluetooth: hci6: command tx timeout
[  355.699179][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  355.704268][   T31]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  355.716037][   T31]  netlink_rcv_skb+0x205/0x470
[  355.720838][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  355.726255][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  355.731588][   T31]  ? down_read+0x1ad/0x2e0
[  355.736153][   T31]  genl_rcv+0x28/0x40
[  355.740159][   T31]  netlink_unicast+0x758/0x8d0
[  355.745114][   T31]  netlink_sendmsg+0x805/0xb30
[  355.749932][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  355.755401][   T31]  ? aa_sock_msg_perm+0x94/0x160
[  355.760483][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  355.766490][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  355.775814][   T31]  __sock_sendmsg+0x219/0x270
[  355.780548][   T31]  ____sys_sendmsg+0x505/0x830
[  355.786967][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  355.792293][   T31]  ? import_iovec+0x74/0xa0
[  355.797041][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  355.801739][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  355.807455][   T31]  ? __fget_files+0x2a/0x420
[  355.812066][   T31]  ? __fget_files+0x3a0/0x420
[  355.817040][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  355.822005][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  355.827577][   T31]  ? rcu_is_watching+0x15/0xb0
[  355.832351][   T31]  ? do_syscall_64+0xbe/0x3b0
[  355.837203][   T31]  do_syscall_64+0xfa/0x3b0
[  355.841800][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  355.847584][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.853701][   T31]  ? clear_bhb_loop+0x60/0xb0
[  355.858453][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.864445][   T31] RIP: 0033:0x7f24bad8e929
[  355.868871][   T31] RSP: 002b:00007f24bbcc8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  355.878224][   T31] RAX: ffffffffffffffda RBX: 00007f24bafb5fa0 RCX: 00007f24bad8e929
[  355.887154][   T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  355.895206][   T31] RBP: 00007f24bae10b39 R08: 0000000000000000 R09: 0000000000000000
[  355.903204][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  355.911211][   T31] R13: 0000000000000000 R14: 00007f24bafb5fa0 R15: 00007fff69089f78
[  355.919300][   T31]  </TASK>
[  355.922396][   T31] 
[  355.922396][   T31] Showing all locks held in the system:
[  355.947100][   T31] 1 lock held by kworker/u8:0/12:
[  355.952138][   T31]  #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  355.963402][   T31] 3 locks held by kworker/u8:1/13:
[  355.968664][   T31]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  355.980858][   T31]  #1: ffffc90000127bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  355.992015][   T31]  #2: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  356.001085][   T31] 1 lock held by khungtaskd/31:
[  356.006172][   T31]  #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  356.016097][   T31] 3 locks held by kworker/u8:3/48:
[  356.021220][   T31]  #0: ffff88802ff5b148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  356.032888][   T31]  #1: ffffc90000b87bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  356.045826][   T31]  #2: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0
[  356.055417][   T31] 2 locks held by getty/5597:
[  356.060095][   T31]  #0: ffff8880301b70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  356.069878][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  356.080675][   T31] 3 locks held by kworker/0:4/5898:
[  356.086192][   T31]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  356.097422][   T31]  #1: ffffc9000451fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  356.108572][   T31]  #2: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  356.119837][   T31] 2 locks held by syz.2.1618/11578:
[  356.125274][   T31]  #0: ffffffff8f5764f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  356.133601][   T31]  #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650
[  356.143908][   T31] 2 locks held by syz.4.1683/11797:
[  356.149204][   T31]  #0: ffffffff8f5764f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  356.157573][   T31]  #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650
[  356.168554][   T31] 5 locks held by kworker/u8:10/12155:
[  356.174023][   T31]  #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  356.185676][   T31]  #1: ffffc900033b7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  356.196454][   T31]  #2: ffffffff8f503750 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  356.206065][   T31]  #3: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990
[  356.215924][   T31]  #4: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  356.228097][   T31] 2 locks held by syz.0.2191/13811:
[  356.233305][   T31]  #0: ffffffff8f5764f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  356.246151][   T31]  #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650
[  356.257263][   T31] 2 locks held by syz.0.2191/13816:
[  356.262483][   T31]  #0: ffffffff8f5764f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  356.270783][   T31]  #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650
[  356.281085][   T31] 1 lock held by syz-executor/14766:
[  356.287119][   T31]  #0: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x5b7/0xd20
[  356.296607][   T31] 1 lock held by syz-executor/14804:
[  356.301893][   T31]  #0: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  356.310988][   T31] 1 lock held by syz-executor/14815:
[  356.316473][   T31]  #0: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  356.325737][   T31] 1 lock held by syz.7.2424/14906:
[  356.330863][   T31]  #0: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70
[  356.340346][   T31] 1 lock held by syz.7.2424/14907:
[  356.345523][   T31]  #0: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70
[  356.356443][   T31] 3 locks held by syz.5.2429/14921:
[  356.361794][   T31]  #0: ffffffff8f5764f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  356.370095][   T31]  #1: ffffffff8f576308 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  356.379167][   T31]  #2: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: tipc_nl_bearer_set+0x17/0x40
[  356.389176][   T31] 
[  356.393196][   T31] =============================================
[  356.393196][   T31] 
[  356.401786][   T31] NMI backtrace for cpu 1
[  356.401798][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00177-g1fd26729e013 #0 PREEMPT(full) 
[  356.401810][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  356.401816][   T31] Call Trace:
[  356.401820][   T31]  <TASK>
[  356.401825][   T31]  dump_stack_lvl+0x189/0x250
[  356.401843][   T31]  ? __wake_up_klogd+0xd9/0x110
[  356.401857][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  356.401871][   T31]  ? __pfx__printk+0x10/0x10
[  356.401887][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  356.401902][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  356.401913][   T31]  ? _printk+0xcf/0x120
[  356.401924][   T31]  ? __pfx__printk+0x10/0x10
[  356.401941][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  356.401963][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  356.401984][   T31]  watchdog+0xfee/0x1030
[  356.402017][   T31]  ? watchdog+0x1de/0x1030
[  356.402038][   T31]  kthread+0x70e/0x8a0
[  356.402051][   T31]  ? __pfx_watchdog+0x10/0x10
[  356.402062][   T31]  ? __pfx_kthread+0x10/0x10
[  356.402077][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  356.402091][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  356.402104][   T31]  ? __pfx_kthread+0x10/0x10
[  356.402115][   T31]  ret_from_fork+0x3f9/0x770
[  356.402130][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  356.402146][   T31]  ? __switch_to_asm+0x39/0x70
[  356.402155][   T31]  ? __switch_to_asm+0x33/0x70
[  356.402164][   T31]  ? __pfx_kthread+0x10/0x10
[  356.402174][   T31]  ret_from_fork_asm+0x1a/0x30
[  356.402191][   T31]  </TASK>
[  356.402195][   T31] Sending NMI from CPU 1 to CPUs 0:
[  356.504595][   T50] Bluetooth: hci5: command tx timeout
[  356.508630][    C0] NMI backtrace for cpu 0
[  356.508644][    C0] CPU: 0 UID: 0 PID: 50 Comm: kworker/u9:0 Not tainted 6.16.0-rc2-syzkaller-00177-g1fd26729e013 #0 PREEMPT(full) 
[  356.508662][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  356.508673][    C0] Workqueue: hci5 hci_cmd_timeout
[  356.508697][    C0] RIP: 0010:io_serial_out+0x7c/0xc0
[  356.508715][    C0] Code: 1f 79 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0c 9d dc fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 38 c1
[  356.508728][    C0] RSP: 0018:ffffc90000ba7310 EFLAGS: 00000002
[  356.508741][    C0] RAX: 000000000000002e RBX: 000000000000002e RCX: 0000000000000000
[  356.508750][    C0] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020
[  356.508760][    C0] RBP: 00000000000003f8 R08: ffff888024910237 R09: 1ffff11004922046
[  356.508770][    C0] R10: dffffc0000000000 R11: ffffffff85473cf0 R12: dffffc0000000000
[  356.508781][    C0] R13: ffffffff99ac38c7 R14: ffffffff99dc8780 R15: 0000000000000000
[  356.508792][    C0] FS:  0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000
[  356.508804][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  356.508814][    C0] CR2: 0000001b32c13ff8 CR3: 0000000075460000 CR4: 00000000003526f0
[  356.508827][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  356.508836][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  356.508846][    C0] Call Trace:
[  356.508852][    C0]  <TASK>
[  356.508861][    C0]  serial8250_console_write+0x140d/0x1ba0
[  356.508884][    C0]  ? __lock_acquire+0xab9/0xd20
[  356.508903][    C0]  ? __pfx_serial8250_console_write+0x10/0x10
[  356.508920][    C0]  ? console_flush_all+0x13a/0xc40
[  356.508936][    C0]  ? console_flush_all+0x13a/0xc40
[  356.508954][    C0]  ? do_raw_spin_unlock+0x122/0x240
[  356.508969][    C0]  ? console_flush_all+0x13a/0xc40
[  356.508983][    C0]  ? console_flush_all+0x13a/0xc40
[  356.508999][    C0]  console_flush_all+0x728/0xc40
[  356.509016][    C0]  ? console_flush_all+0x13a/0xc40
[  356.509034][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  356.509054][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  356.509073][    C0]  console_unlock+0xc4/0x270
[  356.509088][    C0]  ? __pfx_console_unlock+0x10/0x10
[  356.509101][    C0]  ? vprintk_emit+0x3f0/0x7a0
[  356.509116][    C0]  ? vprintk_emit+0x587/0x7a0
[  356.509129][    C0]  ? vprintk_emit+0x444/0x7a0
[  356.509141][    C0]  ? vprintk_emit+0x444/0x7a0
[  356.509155][    C0]  vprintk_emit+0x5b7/0x7a0
[  356.509168][    C0]  ? vprintk_emit+0x444/0x7a0
[  356.509182][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  356.509199][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  356.509218][    C0]  ? sched_clock_cpu+0x74/0x430
[  356.509246][    C0]  _printk+0xcf/0x120
[  356.509264][    C0]  ? __pfx__printk+0x10/0x10
[  356.509278][    C0]  ? do_raw_spin_lock+0x121/0x290
[  356.509292][    C0]  ? look_up_lock_class+0x74/0x170
[  356.509314][    C0]  bt_err+0x10b/0x160
[  356.509331][    C0]  ? __lock_acquire+0xab9/0xd20
[  356.509349][    C0]  ? __pfx_bt_err+0x10/0x10
[  356.509373][    C0]  hci_cmd_timeout+0xff/0x1e0
[  356.509386][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  356.509406][    C0]  process_scheduled_works+0xae1/0x17b0
[  356.509438][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  356.509465][    C0]  worker_thread+0x8a0/0xda0
[  356.509490][    C0]  kthread+0x70e/0x8a0
[  356.509508][    C0]  ? __pfx_worker_thread+0x10/0x10
[  356.509526][    C0]  ? __pfx_kthread+0x10/0x10
[  356.509542][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  356.509560][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  356.509577][    C0]  ? __pfx_kthread+0x10/0x10
[  356.509592][    C0]  ret_from_fork+0x3f9/0x770
[  356.509612][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  356.509633][    C0]  ? __switch_to_asm+0x39/0x70
[  356.509647][    C0]  ? __switch_to_asm+0x33/0x70
[  356.509660][    C0]  ? __pfx_kthread+0x10/0x10
[  356.509675][    C0]  ret_from_fork_asm+0x1a/0x30
[  356.509697][    C0]  </TASK>
[  356.510870][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  356.510885][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00177-g1fd26729e013 #0 PREEMPT(full) 
[  356.510905][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  356.510916][   T31] Call Trace:
[  356.510923][   T31]  <TASK>
[  356.510931][   T31]  dump_stack_lvl+0x99/0x250
[  356.510957][   T31]  ? __asan_memcpy+0x40/0x70
[  356.510979][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  356.511009][   T31]  ? __pfx__printk+0x10/0x10
[  356.511038][   T31]  panic+0x2db/0x790
[  356.511066][   T31]  ? __pfx_panic+0x10/0x10
[  356.511089][   T31]  ? nmi_backtrace_stall_check+0x433/0x440
[  356.511116][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  356.511137][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  356.511170][   T31]  watchdog+0x102d/0x1030
[  356.511194][   T31]  ? watchdog+0x1de/0x1030
[  356.511222][   T31]  kthread+0x70e/0x8a0
[  356.511242][   T31]  ? __pfx_watchdog+0x10/0x10
[  356.511262][   T31]  ? __pfx_kthread+0x10/0x10
[  356.511283][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  356.511304][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  356.511324][   T31]  ? __pfx_kthread+0x10/0x10
[  356.511343][   T31]  ret_from_fork+0x3f9/0x770
[  356.511367][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  356.511399][   T31]  ? __switch_to_asm+0x39/0x70
[  356.511415][   T31]  ? __switch_to_asm+0x33/0x70
[  356.511430][   T31]  ? __pfx_kthread+0x10/0x10
[  356.511449][   T31]  ret_from_fork_asm+0x1a/0x30
[  356.511481][   T31]  </TASK>
[  356.514523][   T31] Kernel Offset: disabled