last executing test programs:

1m17.963146994s ago: executing program 0 (id=133):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@ccm_128={{0x303}, "76eb7f1af1bfab6e", "628050e7130f301c4e4dc8080ca5bd46", "e440a888", "da6933c61038fcd1"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xba98575a95aeb70d)
write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
sendfile(r0, r1, 0x0, 0xffffffff002)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="8000000000060000f10800"/20, @ANYRESDEC=r1, @ANYRES64=r0, @ANYRESDEC], 0x48)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r5, &(0x7f0000000240), 0x0}, 0x20)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r8}, &(0x7f0000000a00), &(0x7f0000000a40)=r7}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r8}, &(0x7f0000000880), &(0x7f00000008c0)=r7}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r5, @ANYBLOB="00000000000000000000000000005a259c343c64eab444000000000000c7e6f157bb39f7fd11689d", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="25a7c4f6efd7fb0500000005000000040000000000009f0000000600"], 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r9, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, &(0x7f0000001400)=[{&(0x7f00000004c0)="5f74a874eec639d0a431865ae40232b2c254da19197c3cca19", 0x19}], 0x1}, 0x4000014)

1m4.128936074s ago: executing program 0 (id=133):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@ccm_128={{0x303}, "76eb7f1af1bfab6e", "628050e7130f301c4e4dc8080ca5bd46", "e440a888", "da6933c61038fcd1"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xba98575a95aeb70d)
write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
sendfile(r0, r1, 0x0, 0xffffffff002)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="8000000000060000f10800"/20, @ANYRESDEC=r1, @ANYRES64=r0, @ANYRESDEC], 0x48)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r5, &(0x7f0000000240), 0x0}, 0x20)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r8}, &(0x7f0000000a00), &(0x7f0000000a40)=r7}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r8}, &(0x7f0000000880), &(0x7f00000008c0)=r7}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r5, @ANYBLOB="00000000000000000000000000005a259c343c64eab444000000000000c7e6f157bb39f7fd11689d", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="25a7c4f6efd7fb0500000005000000040000000000009f0000000600"], 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r9, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, &(0x7f0000001400)=[{&(0x7f00000004c0)="5f74a874eec639d0a431865ae40232b2c254da19197c3cca19", 0x19}], 0x1}, 0x4000014)

48.983415698s ago: executing program 0 (id=133):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@ccm_128={{0x303}, "76eb7f1af1bfab6e", "628050e7130f301c4e4dc8080ca5bd46", "e440a888", "da6933c61038fcd1"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xba98575a95aeb70d)
write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
sendfile(r0, r1, 0x0, 0xffffffff002)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="8000000000060000f10800"/20, @ANYRESDEC=r1, @ANYRES64=r0, @ANYRESDEC], 0x48)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r5, &(0x7f0000000240), 0x0}, 0x20)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r8}, &(0x7f0000000a00), &(0x7f0000000a40)=r7}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r8}, &(0x7f0000000880), &(0x7f00000008c0)=r7}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r5, @ANYBLOB="00000000000000000000000000005a259c343c64eab444000000000000c7e6f157bb39f7fd11689d", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="25a7c4f6efd7fb0500000005000000040000000000009f0000000600"], 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r9, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, &(0x7f0000001400)=[{&(0x7f00000004c0)="5f74a874eec639d0a431865ae40232b2c254da19197c3cca19", 0x19}], 0x1}, 0x4000014)

35.291604198s ago: executing program 0 (id=133):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@ccm_128={{0x303}, "76eb7f1af1bfab6e", "628050e7130f301c4e4dc8080ca5bd46", "e440a888", "da6933c61038fcd1"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xba98575a95aeb70d)
write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
sendfile(r0, r1, 0x0, 0xffffffff002)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="8000000000060000f10800"/20, @ANYRESDEC=r1, @ANYRES64=r0, @ANYRESDEC], 0x48)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r5, &(0x7f0000000240), 0x0}, 0x20)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r8}, &(0x7f0000000a00), &(0x7f0000000a40)=r7}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r8}, &(0x7f0000000880), &(0x7f00000008c0)=r7}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r5, @ANYBLOB="00000000000000000000000000005a259c343c64eab444000000000000c7e6f157bb39f7fd11689d", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="25a7c4f6efd7fb0500000005000000040000000000009f0000000600"], 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r9, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, &(0x7f0000001400)=[{&(0x7f00000004c0)="5f74a874eec639d0a431865ae40232b2c254da19197c3cca19", 0x19}], 0x1}, 0x4000014)

33.983080868s ago: executing program 2 (id=729):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000002d00)=@bloom_filter={0x21, 0x0, 0x0, 0x0, 0x24, 0x1, 0x8}, 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010100080000000000002b00000008000300", @ANYRES32=r6, @ANYBLOB="17002a00710700010000ff052004060c07c50e030001000005003400"], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r8, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)

33.376095962s ago: executing program 2 (id=732):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0200000002"], 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="02"], 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x4}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)

33.235902164s ago: executing program 2 (id=733):
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000540)=""/174, &(0x7f0000000140)=0xae)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$rose(r0, 0x104, 0x4, 0x0, &(0x7f0000000080))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$inet(r1, &(0x7f0000002180)=[{{&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="99b16a", 0x3}], 0x1}}], 0x1, 0x0)
sendto$inet(r1, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
sendmsg$inet_sctp(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)="4c875ca1829aeeb2fab897971b525046745505ebc3fa0ced4d959dd6e775f1094339edc27952c8cefafb0ffb253f0e93943495b57297a40d47a1c11f5548957453220e38abbdf0db533b1684902a49f816e89c0cce8ff91e93da6fdd3ff930b860f98b0dea21de358862b9f099cbda0305914b83b71e602e3823bd7e0c4169ad53d30467699b5f4f83fec9f399635f3a808f1b2cf7deaf0b4bb87270e9ba80430a99763a86e27487d6ea505848e42b93e6dc5c2271153f4d8e904447c9c096a60cc6416e7218469eee1920da057869e37b07eed9881e99a0166388a6213d483e8d56e56c0dd0fbc882da8fc97db9dff282e592efc614c70810599c6008e2d9a44330d4d923cef47a9a848fbcfc91d79eb87afe72b7b3a9408b5fb2384bc14b081e1fdc2f703030f79beca6a446f86bb43161b48c8fe5182b4a66a94cb1b9cd9173b957bf8c7e61128d2f36e99f25b7561e9ed3c48426faf4cf72", 0x15a}], 0x1, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x807, 0x41}}], 0x20, 0x4048801}, 0x6050)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000028000701000000080000090005"], 0x20}}, 0x40080c0)
r4 = socket$netlink(0x10, 0x3, 0xc)
getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="1c0000000d0ee8000000000000010007000000"], 0x1c}}, 0x0)

32.964051873s ago: executing program 2 (id=736):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
pipe(&(0x7f0000000600))
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4)
setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0xff, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="379500000000000000007200000008000300", @ANYRES32=r5], 0x1c}}, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)

19.77923054s ago: executing program 0 (id=133):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@ccm_128={{0x303}, "76eb7f1af1bfab6e", "628050e7130f301c4e4dc8080ca5bd46", "e440a888", "da6933c61038fcd1"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xba98575a95aeb70d)
write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
sendfile(r0, r1, 0x0, 0xffffffff002)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="10001000040000000000000001000000000000002a0f67b5da29cb00000000000000005d59f5077b3d69ced4c22f98502e75fe4c6e20440fe2b4577c81eace4a13616392922161505a3c259fde901eaecab318fd8396de2266950e3af1095f3558d51eafff111cd6749d26af42e02021cb495aae77c9438a0156ae6d0927dbb6decfdd9b101875d88d166827e1aa89361c45227ee70c78306f12a1a24285380aa1c0252e0d725fe377f49471dc9ccbd9558d5945884e436f5ff06a62b2c8f33b339b156f7c6fc9d3b7e842b2f1f0961f2e17ad16e8c7b241666362cd65f3ddbc240c8df363bd57ff5eee5b4af219603abe2a280a71bcce942f25ce0d334b3adb934ee8e81cac09e8cfbbd6967e18535abc5207b5a328f7b2e85640bfdd316c30cd550ff9be10e753ccc827ede377a662654a09cfb94d6a0ad7154e7771d16b70bc2011cc9a33226de9c9e894e2b208430db8f14328fbdd6963eac754ec56d38f9539a4aad4bb18a000398c14e2dc77b243a111e17008d272b97fb5dcc2e4bafa7dae2f5decb2614d22f770d45217c43104b2b25b6c9acf0f1420844073a53c98af20beafbd6a1a511f9d23769c22208e75171e04864156a61aa8fc0dc12db9876747882b05035293797a6b37d88169495611fe741b3f7da63d7a1ce822cfcbc0ab25b89cb8811b90075a9328c5f080459fcb2c7941695eb3fbea32517e3e0a795f14d1d904b85d03d892accd1c26efc2e045b4f892e3b337e26b3840c369ee19485e567c3a2e1e2e633e52569de344745d7c4e117bcacab00fb6c12999088101b916daca1f5c6f051051f6646d014bc640ce91c9d8c517eef5", @ANYRES32=0x1, @ANYBLOB="8000000000060000f10800"/20, @ANYRESDEC=r1, @ANYRES64=r0, @ANYRESDEC], 0x48)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r5, &(0x7f0000000240), 0x0}, 0x20)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r8}, &(0x7f0000000a00), &(0x7f0000000a40)=r7}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r8}, &(0x7f0000000880), &(0x7f00000008c0)=r7}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r5, @ANYBLOB="00000000000000000000000000005a259c343c64eab444000000000000c7e6f157bb39f7fd11689d", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="25a7c4f6efd7fb0500000005000000040000000000009f0000000600"], 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r9, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, &(0x7f0000001400)=[{&(0x7f00000004c0)="5f74a874eec639d0a431865ae40232b2c254da19197c3cca19", 0x19}], 0x1}, 0x4000014)

18.505741281s ago: executing program 2 (id=736):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
pipe(&(0x7f0000000600))
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4)
setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0xff, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="379500000000000000007200000008000300", @ANYRES32=r5], 0x1c}}, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)

4.233051738s ago: executing program 1 (id=941):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'dummy0\x00'})
ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000080))
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x7, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x240480c0}, 0x4008000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00', <r8=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r6, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x80)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, 'a+,'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}}, 0x4004000)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000580)={<r9=>r2, 0x8, 0x3669, 0x81})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000540)='svcsock_tcp_recv_short\x00', r9, 0x0, 0x2}, 0x18)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000600)={<r10=>0x0, 0x5}, &(0x7f0000000640)=0x8)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, 0x2, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x56}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x1)
r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0xffffffffffffffff, 0x8, 0x10}, 0xc)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'sit0\x00', <r12=>0x0, 0x20, 0x7, 0x9, 0x7, {{0x2f, 0x4, 0x0, 0x1e, 0xbc, 0x68, 0x0, 0x1, 0x29, 0x0, @remote, @multicast1, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x54, 0x8b, 0x3, 0xe, [{@private=0xa010102, 0x4}, {@multicast2, 0x9}, {@empty, 0x1}, {@rand_addr=0x64010102, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@loopback, 0x7}, {@local, 0x39}, {@multicast1, 0x5}, {@remote, 0x4}, {@empty, 0x64}]}, @timestamp_prespec={0x44, 0x24, 0x2e, 0x3, 0xa, [{@remote, 0xf7a}, {@empty, 0x3481c777}, {@empty, 0xfffffffd}, {@private=0xa010102, 0x7f}]}, @ssrr={0x89, 0x2b, 0xee, [@local, @dev={0xac, 0x14, 0x14, 0xa}, @broadcast, @dev={0xac, 0x14, 0x14, 0x2a}, @empty, @private=0xa010100, @loopback, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010101]}]}}}}})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x7, 0x0, r11, 0x8, '\x00', r12, r2, 0x2, 0x5, 0x1}, 0x50)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r9)
sendmsg$NL80211_CMD_GET_STATION(r9, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x74, r13, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff, 0x25}}}}, [@NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x20, 0xbe, "4439985f6e8bc14bee0c3f647f8cd5a17f7aae407452d8e84388acf4"}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x4004010)
ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000bc0)=<r14=>0x0)
sendto(r4, &(0x7f0000000b40)="9a775faa080dcb9bba49fdda3e15dec15ac74fecc7098427d252f6266bd7ccfc2c7451a652a075609ee04b5989f3b05f22d124e16d498e4106e65c79a23a273107d5d12bf686688eb66e30f8", 0x4c, 0x4008041, &(0x7f0000000c00)=@nfc={0x27, r14, 0x1, 0x1}, 0x80)
getsockopt$bt_BT_VOICE(r9, 0x112, 0xb, &(0x7f0000000c80)=0xb8ce, &(0x7f0000000cc0)=0x2)
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000d00)={r10, 0x10000}, &(0x7f0000000d40)=0x8)

3.976134974s ago: executing program 1 (id=944):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40)

3.68855929s ago: executing program 1 (id=947):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="dfff0000", @ANYRES16=r1, @ANYBLOB="8fbf2bbd7000fcdbdf2516000000140001800d0001007564703a73797a3200000000"], 0x28}}, 0x0)

3.483628652s ago: executing program 1 (id=950):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x4, &(0x7f0000000740)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000c80)={'veth0_to_batadv\x00'})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r5, 0x0, r7, 0x0, 0x1, 0x5)
write$cgroup_pid(r3, &(0x7f0000000080), 0x12)
r8 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x6e}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfc}}, [], [], 'macvlan1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xfffffffffffffe00)
syz_emit_ethernet(0x12d, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60e20f0000f71101fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e204e2200f79078"], 0x0)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9fef01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f00"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESDEC=r8], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
r10 = socket$inet6(0xa, 0x2, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000300)={0x0, 0x5c, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000890)
bind$inet6(r10, &(0x7f0000000040)={0xa, 0xe22, 0x1000, @rand_addr=' \x01\x00', 0x5}, 0x1c)
r12 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r12, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, 0x0, 0x0)

3.093756451s ago: executing program 4 (id=951):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r2=>0x0})
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r4=>0x0})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYBLOB='-1'], 0x27)
bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10)
setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x4)

2.695774242s ago: executing program 4 (id=952):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000380), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000))
preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, 0x13, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', <r3=>0x0, 0x2f, 0x6, 0x3, 0x8, 0x30, @private1={0xfc, 0x1, '\x00', 0x8}, @mcast2, 0x8, 0x7, 0x4, 0x7}})
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000006040000000000ce9f560793d6bb5a2f2e5be032ac12694ae702e336d81e798e8a0aa4d06c9e230b08ba9e4df81e052f2cea0c5a6a171b1a44a417b40c68290e4ece7acacf655a9f414dd43cf6be2cdf7d124c000cb0c6d200dc25823bf50232aafc826f15960c13e95f9b5dfc95f8b1a6ce9d916bda3242e0279aeaee4d955ff3d16b833504c611d08609295bdec9f38fc271b061f5711aaa"], 0x0, 0x26}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20}, 0x90)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000940)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5e8, 0x378, 0x0, 0x378, 0x378, 0x238, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, &(0x7f0000000500), {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x38}, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x18, 0x19, 0xffff}}}, {{@ipv6={@mcast2, @mcast2, [0xff000000, 0xffffff00, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'syzkaller1\x00', 'ip6tnl0\x00', {}, {}, 0x3c, 0x4, 0x0, 0x28}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@mh={{0x28}, {"dde0"}}, @inet=@rpfilter={{0x28}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xab, 0x2}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, [0x0, 0xffffffff, 0xffffff00, 0xffffffff], [0x0, 0xff000000, 0xffffffff, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x4, 0x6, 0x4, 0x50a65fe1d7feae83}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv4=@dev={0xac, 0x14, 0x14, 0x21}, 0x1d, 0x4, 0x8}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0x0, 0xff000000, 0xff], [0xff000000, 0xffff7f], 'ip_vti0\x00', 'sit0\x00', {}, {0xff}, 0x2f, 0x9, 0x2, 0x58}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r7=>0x0})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0x1, <r8=>0xffffffffffffffff}, 0x4)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x8b, 0x0, 0x1, 0x9, '\x00', r3, r4, 0x3, 0x3, 0x2}, 0x50)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x10, r4}, 0x18)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2b, '\x00', r3, r4, 0x2, 0x5, 0x4}, 0x50)
r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001100)={0x0, 0x5}, 0xc)
r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r13}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x18, 0x14, &(0x7f0000000fc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0xa}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x1, 0x13, &(0x7f00000005c0)=""/19, 0x40f00, 0x1, '\x00', r7, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001140)=[r4, r5, r8, 0x1, r9, r10, r11, r12, r13], &(0x7f0000001180)=[{0x2, 0x1, 0xe}, {0x4, 0x2, 0xe, 0xc}], 0x10, 0xfff}, 0x94)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_newroute={0x3c, 0x18, 0x309, 0x0, 0x0, {0xa, 0x14, 0x80, 0x0, 0xfc, 0x0, 0xfd}, [@RTA_OIF={0x8, 0x4, r7}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0xff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x10004044)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000190000000002000000000000001840000002000000000000000000000095000000000000009500000000000200"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x1}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x12, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@jmp={0x5, 0x0, 0xd, 0xa, 0x1, 0xffffffffffffffe0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query, @map_idx={0x18, 0x1, 0x5, 0x0, 0xe}, @ldst={0x1, 0x2, 0x4, 0x0, 0x2, 0x100, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0xe, 0x2, 0x8, 0x20, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1e, 0x16, &(0x7f0000000100)=""/22, 0x40f00, 0x75, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000200)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x4, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94)

2.610849862s ago: executing program 3 (id=953):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x7, 0x8, 0xe48, 0x100, {{0x11, 0x4, 0x3, 0x2, 0x44, 0x64, 0x0, 0x8, 0x0, 0x0, @empty, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x6f, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}]}, @timestamp_prespec={0x44, 0x24, 0x40, 0x3, 0xa, [{@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x1}, {@empty, 0xb7be}, {@broadcast, 0x2}]}]}}}}})
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3], 0x38}}, 0x0)

2.535267833s ago: executing program 4 (id=954):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000008002b00000008000300", @ANYRES32=r2, @ANYBLOB="050034006e000000080026006c0900001e00940000080100000000000000009c007f00050000000104000000000200001e001f0020230005001000000000080b020000"], 0x74}, 0x1, 0x0, 0x0, 0x884}, 0x40804)
r3 = socket$kcm(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r4)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000fc0)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fddbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="4400028040000100240001006c625f686173685f73746174730000000000007cd6df1dbb1a48fe0000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x884)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffffffffffffb3, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x8c4)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000080)={<r7=>r3, 0x7fffffffffffffff, 0x82, 0xb7})
recvmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0xfde2, &(0x7f0000000100)=[{&(0x7f0000003300)=""/4066, 0x100e}, {&(0x7f0000000200)=""/183, 0xb7}, {&(0x7f0000000180)=""/46, 0x2e}], 0x3}, 0x12100)

2.257414934s ago: executing program 3 (id=955):
r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0xde)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=<r2=>r1, 0x33, 0x0, 0x10000, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
r4 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r4, 0x5000940e, &(0x7f0000000240)={{r1}, "c96eb819d2531d9ae6dc483597dfbfd510ec0c4493cbdb5aaa901d938cd214a53ebdf33ca5e366fc57a3e20139406ced7c40b35ac9384a5f16c9734e3604f986497a45922fa013a60f7744d21033c20ded7cf3a8ea540a2ccd1f9c74950d48dcb6239ca46eaf5e78e4457c9a6d07fe5bd2b14c936bbb1d5b0181cbf4a181b4f660125f8b1f7bc2a9d3e2c3eb1170fd80b99ea7b4bc792b445276c61ba3b0a84dbe23500822284679c64577201765eebb94707cacba70cd1af29855c596cf72e2d46fb1c8bf1015af7dcb32be8f9812b67e4957ab69482cac5cba8e33b264349c2a8be2836579c8e0592cd36b2fa86a7d82b9dbbe62f21540347b16db6eff4938db0a9a5bfce596bda2ed4063f371175eaab3454e5af22bfc1f9fd8a4d076fed10cb538b53f001cfe6290ef04d17b5b52885d54d0557139d772807bd8e1988904ee2c77672966117160be53c347450ab3279ab92448b2c48089e03d8036d63fbc1129ca8c2687e0cc7050df0b56545619fce6e8735ddf2e722f2dd3beac1fdc17c2f6da44678a48bbf6c3562b58866bcb71e58405b2c909fafbef40bde2df1a73fdbb0d2ff51aae31f0c609bf402dceb3d645fec4fe1946701ef7046ecae0656a6e8e2d13e348b2d6f642dc86004bbe87595c8d1413830897995d1bdd21bcb87d6d76717fd48e1a1f3cd0325560305c40628f3bce656437519b191bfebe8d27ac6f226ea35badb04388c88f7224d783e7f35b6f79fc900f584ce642177be71472c3bfaf7a908b9fbce610a7e41f74d1cea3301942b00803ed6d80061f725ceb00e129c9e4b0a9a5f9c787dea66ce10a94ee06a240c390916ecb96d83cdadd78d321e0b38c77654cab5dd116d560f5ab50a91e6e5e5801e18b5c8de46bdd6afa94d6ef238d57c4dc8515122f0cff180d59577551a37db2ea5e8569128d30520db446b677b3a6c57018723fc250f0a5ec07f0f164f883ff477c518d3a9fcc880a85d772ea6c735c912bb59b927175c93c381cbb2198cf01a3b357c2367d07b4411f99b8e7ad90d62cdb795d482c4e1e3c711b152a2df8ffd36c9502ebd606097e1b64b2985df6abdefd96123a3364ad48bb1decce291428c8a2dbde8d264196b95857a4242e8a113f8c247ea5d2af8d9d93bc1a6b19c2bc38fc76744459485310fb5985b47fbb79e85d1a40ec35c8dcda6dbabce82cd6c5ead975dd634ca5b619e59e88619e265a4e335c0bf9ccaef13c2287662f0e7ea3626b4a3575e64b5fc6b705e2d4ad5f7400441b4b92b5e639bd82f12bbf78ff909c4e0591ea11a4881dfb85cfdd7a0a8e234b1cd82c59d33a05344effdbbf656a46f9f9afc0f8273062fe31bb7d8a7f64cbb8cc309891f323a2076bbfe6474ba2cfc15988593e9052e0fe2ef600892318bc9977aeed8f04727fb2041dbe9a7799d027cbba1a2b0b68923a2d29441f48a731c3339fc22c04d4bd5560627697773d1bfcf59a810513ca18b7494a00b271c6ffbee4b7648d71001d13b4e5b937b192a9d9e93f5cc68f680b0b092d9a3fa7dcdc74cca9caa58aa494728b95531ae3f3ca8477353fabc2ef894990286043d9860873a104508724299e0d410d025e2f35b29a1a9f2375b3c264ffe236e0bf991e5f497cf21a955b1c2e69e81f2485b563626dc4216b0512d2399facbb0f7021a58a63d6e43757f3af1c0c01270fa00a9bfdefe2f41507364b0e2715028b5224b115a3cb0f8521edd2800b1d9f1ad68b61ef2845b19b75fcedb779f68e4d3d0c2827e4d3899459579eab38747f9a7d3b0e764102893c1ee21127c5697bd06460e7b243678d0b0ad0f86f822c9121c71f8f2382506e3e8eb50f5994c84aceeaf40969d097880cf7ce500234726be3d0b3147a56801b356c42b31fb7cb9c92490ede6e2237326caae4cbd92620345a923e7b497277b77fd1af09bff82524f24ac5c2f16097b168a3580aaba6365f51746ca129e4512f2a911ddd81f5b1653c8c706ec1d619bf71d2025156201a4d4fa37bd11ad6bdc14b62e86b1887ef9c9ee0fe9ec17cadb15634e2ec3ff35c95e7e6360c7eff413930dd0e0c94bb9563c635fb58cf5afbdcc0c3f8726e958e44110af6871d60d941f6d180b48a86edf14c794a8ba50b74d86682afba70a9a4b6074dcea8762d75be9a39e2759a310751f9a40c5f59931a2ee21059e74676c4443b36cea6e1abf22885323b32f6a03da91ba02ceb48f0b2e8ff32b15716c554ae921a8cc3cac259f1c69c4aaf4f312a73f506e870adf1056eaa39dfc16623d589360ae3df0539dd515d78127606064f6454a33a703e7c1139e484a56c5e205a9bbc6988e1bee7fb18b77c6e70c2f5f13611c23b6b600e9cb6bd9c913bf135db6b9cee1f1948ab167686003b0e5c5f4db48df77f5746e67f8867d6077cdea41c43b682d4c82338b1ec5c18246b36d01cbcd8c06d3f7f200491c05406ad19d5c897c1f56badf3e9f91e5174855d7251cc6e03aa2856d09a52f3d651edae1e72a5127602ddadf86a2de0dd7855e9591d64b42729f2580c4c11ad158de8ff819c5817f2043f0a4e3b872f35185b670f5c79509760e7e449acbb78497305bb3e1340577fa7021c148ea24e5efb2069d10d54a2eb9f42b3a89d4bee4b1e3bf5e7c3b1c4f131145eb2b07b428d8c4b0686d09fa6ed97f196226cc6e85c2e7082f93298712c73335ef28fea50c79993ff01266b2886b073f1b2566f071085cc71a43561d506c5d7b6c2e129d222ff4fb1f3bcd26eb4abcc8d3c7fde82216acc14347c94a847cb73c9c9bd9eff5916dfc77403c80f8e7c44c529baea1990b523cf126c2f6d3145629724d04f2f23de3287a2cb3a052432642d840ca96bf153c6dc7d8d9f1c117f7c432c8e5c9e56bebd06360e0e43f375a19e29a61c8315bf6594dcb5b24c9b5d3571584e86428a249a7dba16ff1e4ded5c0e64491748f32e8bcafd9da08a5a8ee7054523edb249ca288f422c058dd1ca32a827886608d00eb6911276c45bf0b948b9e11e5be6282d93d527ef15ab68fd906ef1cdde5d52e674917d4b14dadcbc3dd34215954c1b9760662336dcb311585f7b4fa478ea8279f0aac555d4fe4312743db40c4836a45a341ca2cfa856dcee3685a8c850d40c01c1b5d4c8460978988ad2c719d13bfa33e1d31b84e1e84b813bb146dbf68383ff823de8cf9f8579165e02ac24d3a196fe25e5c404a241306db1c2a5c0860dcbb51a23bd7e36d7f4434bacd89b832f6c2c61223ccb412c1491d7c32aac16c3745e3a9baa5351c5c5c73dc4d7db92789c392a9b65f8728b0c089cb4915cdf469790d1b45383aec114b89b4ff85e6768bd798bfd1bc90ca43583e4b7a09717c30437794602e73e7c8fae782b125469438126f70fae772aeb85e3125406f3cc7174102c15717f0708afa808deaa79fc1476ae4d83edf69bac3ac4a1877ffd8ddebf20539e7a638e5c5b14747309f1f2d7e6a3e2c2b81af8c09d85c61dda00fa9354df501cdf53949987f14de835230add6057084885746f33a06a2ead3f8d022d696ab6db06b3f50d5c7ee02e41312bbe1c17ff836353f82535ec0810591c2ce327636fca1a25d9a906072373a3ce92a80c1a660de090eceb82c1d0872cb71da49a3840969fd07389f7875ba180c9ab70d95326af9f7363df41098d677fc2f5232dc0083d079466a4d16e9fc184e18b0324ca1874808e88d2f378e5205ca1c959bc8355098bbae51d24b1c61145fc356d82c13db054112b32f1314ca1d22ed87e02e6bbd4c561c3c649ba546aa28c3656950f8ee72c719e54f60cb76d28c1c2f04301784b218e81f63a21cae6aa6cb0d7a9e7b095cb7ff05f278ebc9bfc6ff9c3e59c34f5387c76e87ae53ea73b36e622c1e8b5770cf5fefc97175f3eb514805cc3d5e985939a4e4bf0dd3d70c2d4da1dc5cad1d911e2670765bbf92fd2b91bae370dc1c5d938513b37aa29bd1ca152d03e5c7f129ac37cb5973c8ccb3bf4a39eaacdd03bd6269964830d9397a1fdf217d87c0c5c1b80b8bf0b3339a17c774c2f705c910e7e3ff8ddf69f0c3a8b53648b2153a6cd41aad59711823145810bee57b83eedd6f2b7657d153f25bdbbe0d035851ea691d5cce7faaffc75f1be5cbfa9ccbd5de804a6d6f0f92ef6237c64a775b72d8220cd37edd0cee56ee6c782d2cde767c4e16ada33b20c915cafcb902a7f69cfff94142d33b6791fd96a7ec130b40e232eb27d0afb800d9fb9cef065b27be9dcabe36d6367fbcb8c39449b07a75b33edfd26f713fdaea59ff609b8b228f70b1159d77c2f4789109265bc6e50b3993e18694c3da03fc21bda2f0220c59001511acf79dfd2f9eec0fec704bd1735a7b08f785f662e5c03a6e425c2ee46d103f6b21656af455a39ceb1bad325a32a5c828e57120f108e153deb617ad2a836684670e0f56176652ecaffb06656b8368bee911ec0f31a53db9f34f6d51414b4fb711f4ccd66dea2e83ee6c65174d8846a6ec6b545614856de810a9df5ba69cd99fdf26cfd5c678618fa879575e67188d535c06a89b433dbbe3f6ea6f3c75385f79700db446ff3ac272bf1b2b85095e9e703bed98a4ffa4b576840301e66b32fb3764cd383c3a83cecb15a418bfdc8e4b562a5b171453129b0b520f7dcd0d15e3d6ac1d529989567f4ba5c0d1ecb7aa26cf9835c7a66fd2582abda780f291e285c81efae34cc2eff6650d7752b721a89769e861007f655ba73d4ffa6033aa439f69065068454652af31a0623dbd66fa394d9e037a9f0fe914a170c217da7ffc1f027546869f57618f3d0371a3434ed576e750836ba2db3b29dd8f3bccd07a88875e76da4b8846fd0eb182c0032c9b7b35ec9425a23f3ff4325f6d27e684e67f05ce67a22d0c61a076112baab1a6d06993ef68e00eb3c55457db707c121c84afda928db8dab3489cbed4170b428ffb5aa3e3685d6cefbd570c26650af6d9920ca6e05a94fae5736f4fa53dd31ee7b265dfb70d334d8299a98361ba77ebef0a53e9be2e4c57ea83301f8962406be5ea39f46a42ea33f04cb487386160bd8aef6fa0b3bf91770a899b39fa18444f7d15ad33680b0a12b3ec7ae0d0609a66691249573534a697e6a5e5186ff0e43410be1ff6de48d8cfd985213d0931110db8dfe66aea633b7b3d93788a1dd7cc990ce5a99000890a0a609343833ceff393afac5efa9894582158c26a2729ba0f87ae43d50390460cc0ae6e07276d03eeeef789abbaa11df980a684e3812d7b1a5a30c79c473eb3d8d31e0542f454c74357dc3a36fe0aed6836262a1840f7c686d17d9ffd5eb3b469c81c688656a223746c83db3b11c5d82533cad9dbdafa82da224461d8b3834baefb1f6ad157605f1d3eb5848c05beeddd09140afb293bdb11d6430787a735c4d6e79b284f241673d17cd11e49a374680731232b0f3736438cf5b6d97ddfdca1484676bf3f11bdfd2a3abaa010d4982533365d37ab460684895a42f75daf71804bbafaf940f06a7f7ea1413691f6a2eb9b72593ff46cd2ca02fdb56306b603202ad1eb1ffba347c568cf2aef6b71befb7c46cd4099b880b442bab55833b8d2f994d796b4799767141a3331e1e33e09f0be5216f11d48d7df419c45f1b2f948a48898909fa99501ef92e4da3cd69ebc754a682a8f948007c66a8696b1a11e5e8e491b116143e5c03393575c06274bd59dffe20f096737e9622690f7ff0127a5eb8a5473cf0c3b4812695f18c377a71b3568bb6cbfe0f2730b10b40f2f287b7e9efc90ce6852d6a9a7ed2e5ae2d"})
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000001240))
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000001280)=0x9, 0x4)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f00000012c0)=""/96, &(0x7f0000001340)=0x60)
preadv(r2, &(0x7f0000002580)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/255, 0xff}, {&(0x7f0000002480)=""/208, 0xd0}], 0x3, 0x0, 0x6)
ioctl$PPPIOCGDEBUG(r4, 0x80047441, &(0x7f00000025c0))
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000002600), &(0x7f0000002640)=0x4)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000002680))
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000026c0), &(0x7f0000002700)=0x14)
sendto$inet(r4, &(0x7f0000002740)="aabcd0eaf78ed89917b8d7bccd9984b582af141e8c186e2b087d7382e1679e8dcfa7c3c5c9d5c741fc62c1919b76cce789fda83cce727b68fab0b7e12c1600b6a1a22e5bc39a2a6bfa1dd7b887d9fdfbb41ab2109b791e26e9e501630d44bc8412e1aa3a9a2359f6c20e9575039a6527c9a16a50ab66af40886c0bfb435b9b652fcfe461d2358e6d512bae6a94a9d20895ace584195eeaec6bbf2b68e7936af8e3a3ca34d87f530f59fc0ca5521b876638ec", 0xb2, 0x4000000, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000002800)=<r6=>0x0)
sendmsg$nfc_llcp(r4, &(0x7f0000002b00)={&(0x7f0000002840)={0x27, r6, 0xffffffffffffffff, 0x1, 0x83, 0x2, "ddb1de48a9807e2e5c6cf85f5acbaf8bfef6b57ee9e380ea2856d932aae210929348c74ce6c374916fca96183489bbd126509c7cba500d08ce6926d72e25fb", 0x3f}, 0x60, &(0x7f00000029c0)=[{&(0x7f00000028c0)="37f35f58bd2940d4cfb9526a385a2b62f6266ae8f23477e46664712ef91aa02ed239e6f13a84034758f6d5f18a38d64871fdd9cf246ce27fcc082ec5229394746d6fd43c73ba56c3316554fcc0c244cf9ae9f547bb1a1f1e6740ecc797e3087d550e5a42733de90d5c559ee67db6d4076393dcaf3637f95695edd059d4411c57c42400792491294e96b898d906a4430cee0cef494dda24fa2ff1391c9aec540afb642168305702ed59b15a07a40e4a59ff834f23a613927ccccfdf3d13ebab1c0f1f7c92f61f7db84e3e36ef798fef7c3e005dd8e866b75bf622", 0xda}], 0x1, &(0x7f0000002a00)={0x100, 0x6, 0x9, "15f72b78d88cee2246b88249c9f7238dcae24178ef87344581ad3b7613d47f454acb171200d67fd919b627b92097234e0c440852d1f4fdea05e832e11ef9c18c4c30bc22320bb3af9d5043f1c5fe5f668d81bbdbd73d9017087d0c37c7ae97666945405ea4a491091d911caa3e47b8dbb4077a12916bfc7664e7fef5ad907127143cf620c8c6c49397233066aad3609927ce0ec063e3a301c8b6b19d2e00082dfa07ec0bf06bbffc0bbec215cf6728651a955992fbf4756cd312f050df24d7ba2c50a89986e3eea28100ef7f7d80521dc3c218c198ed729cf2ee24345bcf76b66c8f887221fac47a2498a21790"}, 0x100, 0x40}, 0x40000)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000002b40)=0x5, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002e80)={r4, 0xe0, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002bc0)=[0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000002c00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002c40)=[0x0, 0x0, 0x0], 0x0, 0xa, &(0x7f0000002c80)=[{}], 0x8, 0x10, &(0x7f0000002cc0), &(0x7f0000002d00), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000002d40)}}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f0000003040)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003000)={&(0x7f0000002ec0)=@newqdisc={0x110, 0x24, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xfff3}, {0xffe0, 0x4}, {0xa, 0xe}}, [@TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x5, 0x7, 0x6, 0x2, 0x7c, 0x4, 0x4}}, {0xc, 0x2, [0x7, 0x4, 0x2, 0x3]}}, {{0x1c, 0x1, {0xfe, 0xc, 0x3, 0x2, 0x2, 0x4, 0x1000, 0x4}}, {0xc, 0x2, [0x0, 0x5, 0x3, 0x7]}}]}, @TCA_STAB={0x70, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x95, 0x69, 0x9c70, 0x60, 0x2, 0x2, 0x575d4fa0}}, {0x4}}, {{0x1c, 0x1, {0x52, 0x7, 0x3ff, 0x3, 0x2, 0x3ff, 0x40, 0x3}}, {0xa, 0x2, [0x8, 0x8, 0x7]}}, {{0x1c, 0x1, {0x6, 0x9, 0xfffe, 0xffffffff, 0x1, 0x80000000, 0x1, 0x2}}, {0x8, 0x2, [0x7f, 0x8]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xb9d}, @TCA_RATE={0x6, 0x5, {0x2, 0xd}}, @TCA_RATE={0x6, 0x5, {0x17, 0x7}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x800}, @TCA_INGRESS_BLOCK={0x8}]}, 0x110}, 0x1, 0x0, 0x0, 0x4}, 0x2080)
getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000030c0)=<r8=>0x0, &(0x7f0000003100)=0x4)
sendmsg$nl_xfrm(r4, &(0x7f0000003240)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003200)={&(0x7f0000003140)=@delpolicy={0x8c, 0x14, 0x400, 0x70bd26, 0x25dfdbfe, {{@in=@rand_addr=0x64010100, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0x2, 0xa, 0x80, 0x20, 0x3c, r7, 0xffffffffffffffff}, 0x6e6bb8, 0x2}, [@offload={0xc, 0x1c, {r7}}, @tfcpad={0x8, 0x16, 0xe}, @encap={0x1c, 0x4, {0xfffffffffffffffa, 0x4e24, 0x4e21, @in6=@loopback}}, @offload={0xc, 0x1c, {r8, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48810)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), r4)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003300)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f00000033c0)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x10020000}, 0xc, &(0x7f0000003380)={&(0x7f0000003340)={0x3c, r9, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x723, 0x33}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3f}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008080)
getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000003400)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000003440)=0x2c)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)

2.084071714s ago: executing program 4 (id=956):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x1adbc, 0x1004, 0x0, 0x7, 0x1})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1)

1.980454433s ago: executing program 3 (id=957):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x9c}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$inet6(r2, &(0x7f0000007100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="9433ddb02192333d0ddf82345dd51f69e790c9aa6b7a2dd9f3d62389ae3f5de6958517ffa2604658020102be1ff80346a75e730a563a3c399a69", 0x3a}, {&(0x7f00000002c0)="d528114f7555af2259f49941fa70efaf87cfeb690e915573a720c22cc7f5d76d2a", 0x21}, {&(0x7f0000000300)="1e7dcf6c7d328f08118be502714b26ffb667cfaa99e9b1d73a76001675d56fd8840bf93f2f35", 0x26}], 0x3}}], 0x1, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9b, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r3, 0x58, &(0x7f0000000080)}, 0x10)

1.901898069s ago: executing program 4 (id=958):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'bond0\x00'}}, 0x1e)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1)
ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
socket$pppoe(0x18, 0x1, 0x0) (async)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'bond0\x00'}}, 0x1e) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) (async)
ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) (async)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async)

1.76242405s ago: executing program 0 (id=133):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@ccm_128={{0x303}, "76eb7f1af1bfab6e", "628050e7130f301c4e4dc8080ca5bd46", "e440a888", "da6933c61038fcd1"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xba98575a95aeb70d)
write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
sendfile(r0, r1, 0x0, 0xffffffff002)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="8000000000060000f10800"/20, @ANYRESDEC=r1, @ANYRES64=r0, @ANYRESDEC], 0x48)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r5, &(0x7f0000000240), 0x0}, 0x20)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r8}, &(0x7f0000000a00), &(0x7f0000000a40)=r7}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r8}, &(0x7f0000000880), &(0x7f00000008c0)=r7}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r5, @ANYBLOB="00000000000000000000000000005a259c343c64eab444000000000000c7e6f157bb39f7fd11689d", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="25a7c4f6efd7fb0500000005000000040000000000009f0000000600"], 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r9, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, &(0x7f0000001400)=[{&(0x7f00000004c0)="5f74a874eec639d0a431865ae40232b2c254da19197c3cca19", 0x19}], 0x1}, 0x4000014)

1.715764424s ago: executing program 3 (id=959):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140))
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000100))
ioctl$PPPIOCNEWUNIT(r1, 0x4004743b, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2], 0x30, 0x40400d1}}], 0x1, 0x10)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0x400000, 0x0)
ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f00000000c0)=0x8)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

616.298098ms ago: executing program 2 (id=736):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
pipe(&(0x7f0000000600))
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4)
setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0xff, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="379500000000000000007200000008000300", @ANYRES32=r5], 0x1c}}, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)

605.936796ms ago: executing program 3 (id=960):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000e31b0000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={<r1=>0x0, 0x5, 0x10}, &(0x7f0000000080)=0xc)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0x2}, &(0x7f0000000100)=0x8)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r3 = socket$netlink(0x10, 0x3, 0xc)
r4 = epoll_create(0x7)
r5 = epoll_create1(0x0)
r6 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000001c0)={0x20000000})
r7 = epoll_create1(0x0)
r8 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000140)={0xf0006010})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000100))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r10, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000200)={0x2})
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r11 = socket(0x2b, 0x80801, 0x1)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(r11, 0x0, 0x40041)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6040000000140600fe80007834000000000015002d49d49dabfc17c400f0ffff0000000000000000000000003d775cf942bcc4482a7cf154de3f5073eca5dfbabd4873d6fdccbcf0894000eb717d29bc591768590dcc1caa13f72994", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES64=r0], 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_TIMESTAMP(r12, 0x1, 0x3f, &(0x7f0000000080)=0x9, 0x4)
setsockopt$SO_TIMESTAMP(r12, 0x1, 0x1d, &(0x7f00000000c0)=0xa, 0x4)
socket$pppl2tp(0x18, 0x1, 0x1)

604.491112ms ago: executing program 4 (id=961):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r1, 0x8b32, &(0x7f0000000040))
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x30, r2, 0x223, 0x270bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000440)=@ethtool_drvinfo={0x3, "7d92b42d063115c362c8a907e5e9b3bd554d5648e059b7a508b4413ddadbe535", "2accccc59b52517872fe74aa06470fc45c044b1e418a7eba53196678ea9d18c6", "11ec925561e5180f4ca7c860aa9077967436795364e21ac7fb81e9091ebce89a", "b12fbfee5c7217523fde7f59954f153c26428aab505ae1b41e5f21a8f866882a", "4988f2d64c78be0d18597d12f5ffbbbeb551a98db17322b1bb0f3897ab7be1e7", "4e34f0db39b883accca5962e", 0x1, 0x0, 0x0, 0x0, 0x1}})
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x140a, 0x100, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40008084}, 0x80)

338.766066ms ago: executing program 3 (id=962):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00)
r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x5, @private=0xa010100}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r4, 0x84, 0x85, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000)
r5 = getpid()
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x20040600)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x400}, 0x48)
writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)
socket(0x5, 0x0, 0x3d)
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000001080)=r5)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000)

251.860817ms ago: executing program 1 (id=963):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket(0x2, 0x80805, 0x0)
socket$inet(0x2, 0x80001, 0x84)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket(0xa, 0x3, 0x3a)
socket$inet6(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}})
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r5}]}, 0x1c}}, 0x20000080) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r5}]}, 0x1c}}, 0x20000080)
sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async)
sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'vlan0\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "a418677b458acc7314b528ed5308778a8994cb84383611c0ee6b030b63a8dedd", "d1bb4da57c30cd497a0e00b6dbc41a2db117a710c7de150f1ce79a63780614fa", "b409faa2df8a73767748c3f3fa48240569f98e06451be5d6b06171321d22d40f", "f8ce98c8de29835ba3eb8e51c18946d8ce0d7e5c2bbb15eed2091c4b8606ea0c", "e77196ba0032b7265147ccafa506fdc700", "67ad31fff1906765610a2a06", 0xffffffff, 0x4, 0x4, 0x1fe, 0x4}}) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'vlan0\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "a418677b458acc7314b528ed5308778a8994cb84383611c0ee6b030b63a8dedd", "d1bb4da57c30cd497a0e00b6dbc41a2db117a710c7de150f1ce79a63780614fa", "b409faa2df8a73767748c3f3fa48240569f98e06451be5d6b06171321d22d40f", "f8ce98c8de29835ba3eb8e51c18946d8ce0d7e5c2bbb15eed2091c4b8606ea0c", "e77196ba0032b7265147ccafa506fdc700", "67ad31fff1906765610a2a06", 0xffffffff, 0x4, 0x4, 0x1fe, 0x4}})
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$AUDIT_TRIM(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3f6, 0x2, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) (async)
sendmsg$AUDIT_TRIM(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3f6, 0x2, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xdc, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xc8, 0x1, [@m_skbedit={0xc4, 0x10, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0xff, 0x10000000, 0x5, 0x5}}]}, {0x7f, 0x6, "6dffadc6477accf4f8f8fd8e19ef7a14605ad8f8a053d8a469565be3c4796718d7e9f9ef9ef7b42b9e97be70c15b21064a742107e550eca4b17413b2f9c960bbfc0120295b272ed678c99c42f5c0d2411bfdf368c0c2e6134bec54f8662a5bdc6d016f048efcb2ada05fcabc10f41037f4fbed1936787995009351"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0xdc}}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xdc, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xc8, 0x1, [@m_skbedit={0xc4, 0x10, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0xff, 0x10000000, 0x5, 0x5}}]}, {0x7f, 0x6, "6dffadc6477accf4f8f8fd8e19ef7a14605ad8f8a053d8a469565be3c4796718d7e9f9ef9ef7b42b9e97be70c15b21064a742107e550eca4b17413b2f9c960bbfc0120295b272ed678c99c42f5c0d2411bfdf368c0c2e6134bec54f8662a5bdc6d016f048efcb2ada05fcabc10f41037f4fbed1936787995009351"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0xdc}}, 0x0)
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY(r7, 0x0, 0x1, 0x0, &(0x7f0000000380))

0s ago: executing program 1 (id=964):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @local, @local, [@hopopts={0x11}], "fafb17c133d11e59bb99c35bdfcf89f5"}}}}}}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipmr_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_PREFSRC={0x8, 0x7, @multicast2}]}, 0x30}}, 0x0)

kernel console output (not intermixed with test programs):

ng interface batadv_slave_0 (retrying later): interface not active
[   84.026618][ T5847] team0: Port device team_slave_0 added
[   84.035547][ T5847] team0: Port device team_slave_1 added
[   84.041259][ T5856] Bluetooth: hci0: command tx timeout
[   84.041285][ T5851] Bluetooth: hci4: command tx timeout
[   84.052700][ T5850] Bluetooth: hci1: command tx timeout
[   84.058918][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.065905][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.091991][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.105041][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.112150][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.138627][ T5850] Bluetooth: hci3: command tx timeout
[   84.144303][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.170742][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.182086][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.208398][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.285233][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.294002][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.320305][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.332913][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.339962][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.365945][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.394813][ T5841] hsr_slave_0: entered promiscuous mode
[   84.401366][ T5841] hsr_slave_1: entered promiscuous mode
[   84.409041][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.415982][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.442183][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.455024][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.462381][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.488516][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.594051][ T5854] hsr_slave_0: entered promiscuous mode
[   84.600995][ T5854] hsr_slave_1: entered promiscuous mode
[   84.607137][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.614964][ T5854] Cannot create hsr debugfs directory
[   84.646388][ T5846] hsr_slave_0: entered promiscuous mode
[   84.652808][ T5846] hsr_slave_1: entered promiscuous mode
[   84.659283][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.666892][ T5846] Cannot create hsr debugfs directory
[   84.691049][ T5852] hsr_slave_0: entered promiscuous mode
[   84.699362][ T5852] hsr_slave_1: entered promiscuous mode
[   84.705528][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.713404][ T5852] Cannot create hsr debugfs directory
[   84.829257][ T5847] hsr_slave_0: entered promiscuous mode
[   84.835516][ T5847] hsr_slave_1: entered promiscuous mode
[   84.842826][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.850607][ T5847] Cannot create hsr debugfs directory
[   85.331821][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   85.351757][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   85.365086][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   85.384104][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   85.444154][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   85.456249][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   85.474897][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   85.486913][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   85.555593][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   85.595482][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   85.606106][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   85.616370][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   85.711427][ T5852] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   85.722657][ T5852] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   85.757663][ T5852] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   85.769920][ T5852] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   85.799135][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.861680][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.892463][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   85.915746][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   85.922893][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   85.939040][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   85.963825][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   85.976541][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.983862][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.023844][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.031040][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.047637][ T5850] Bluetooth: hci2: command tx timeout
[   86.064979][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   86.099584][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.106719][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.117492][ T5850] Bluetooth: hci0: command tx timeout
[   86.122951][ T5851] Bluetooth: hci1: command tx timeout
[   86.123131][ T5856] Bluetooth: hci4: command tx timeout
[   86.152904][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.170559][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.177800][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.197438][ T5856] Bluetooth: hci3: command tx timeout
[   86.296806][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   86.360262][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.370598][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.378106][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.392706][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.399878][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.510772][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   86.555676][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   86.601898][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.609105][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.689942][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.697146][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.715549][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.769109][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.862527][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   86.930165][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.937478][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.992847][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.000061][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.041828][ T5841] veth0_vlan: entered promiscuous mode
[   87.091655][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.143184][ T5841] veth1_vlan: entered promiscuous mode
[   87.308546][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.319867][ T5841] veth0_macvtap: entered promiscuous mode
[   87.368682][ T5854] veth0_vlan: entered promiscuous mode
[   87.409293][ T5841] veth1_macvtap: entered promiscuous mode
[   87.430106][ T5854] veth1_vlan: entered promiscuous mode
[   87.474765][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.565234][ T5846] veth0_vlan: entered promiscuous mode
[   87.574874][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.592657][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.604868][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.614406][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.623169][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.645498][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.684626][ T5846] veth1_vlan: entered promiscuous mode
[   87.748252][ T5854] veth0_macvtap: entered promiscuous mode
[   87.762385][ T5854] veth1_macvtap: entered promiscuous mode
[   87.776194][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.853199][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.866384][ T5846] veth0_macvtap: entered promiscuous mode
[   87.920676][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.936835][ T5846] veth1_macvtap: entered promiscuous mode
[   87.955982][ T5854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.967088][ T5854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.975989][ T5854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.984855][ T5854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.015733][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.025161][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.042129][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.052802][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.063754][ T5846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.068763][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.073233][ T5846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.088800][ T5846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.120529][ T5856] Bluetooth: hci2: command tx timeout
[   88.149399][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.160250][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.191396][ T5847] veth0_vlan: entered promiscuous mode
[   88.200489][ T5856] Bluetooth: hci1: command tx timeout
[   88.205921][ T5856] Bluetooth: hci4: command tx timeout
[   88.212409][ T5850] Bluetooth: hci0: command tx timeout
[   88.273767][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   88.290274][ T5850] Bluetooth: hci3: command tx timeout
[   88.304126][ T5847] veth1_vlan: entered promiscuous mode
[   88.422334][ T5852] veth0_vlan: entered promiscuous mode
[   88.436975][ T5852] veth1_vlan: entered promiscuous mode
[   88.456768][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.475064][ T5964] Driver unsupported XDP return value 0 on prog  (id 2) dev N/A, expect packet loss!
[   88.483931][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.515602][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.529866][ T5847] veth0_macvtap: entered promiscuous mode
[   88.542655][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.581164][ T5847] veth1_macvtap: entered promiscuous mode
[   88.582640][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.615650][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.633743][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.657693][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.703398][ T5852] veth0_macvtap: entered promiscuous mode
[   88.741491][ T5852] veth1_macvtap: entered promiscuous mode
[   88.766259][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.790977][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.832792][ T5969] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6'.
[   88.861507][ T5847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.889214][ T5847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.913447][ T5847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.954602][ T5847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.982088][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.021280][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.060407][ T5852] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.091540][ T5852] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.100518][ T5852] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.109780][ T5852] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.119318][ T5981] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7'.
[   89.247127][ T5986] netlink: 'syz.0.9': attribute type 2 has an invalid length.
[   89.261449][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.282656][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.319050][ T5986] team0: Device vti0 is of different type
[   89.381409][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.409899][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.647023][ T5999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12'.
[   89.728655][ T5994] netlink: 'syz.1.12': attribute type 1 has an invalid length.
[   89.730765][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.744657][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.774024][ T6001] ieee802154 phy0 wpan0: encryption failed: -22
[   89.783115][ T5994] netlink: 'syz.1.12': attribute type 1 has an invalid length.
[   89.796869][ T6001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'.
[   89.822515][ T6001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'.
[   89.970649][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.989488][ T6006] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[   89.989913][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.003431][ T6007] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[   90.135425][ T6008] sctp: failed to load transform for md5: -2
[   90.151566][ T6007] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16'.
[   90.162369][ T6006] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16'.
[   90.198945][ T5850] Bluetooth: hci2: command tx timeout
[   90.277584][ T5850] Bluetooth: hci0: command tx timeout
[   90.283046][ T5850] Bluetooth: hci4: command tx timeout
[   90.288564][ T5856] Bluetooth: hci1: command tx timeout
[   90.309061][ T6020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20'.
[   90.362754][ T5851] Bluetooth: hci3: command tx timeout
[   90.469564][ T6029] netlink: 'syz.2.22': attribute type 64 has an invalid length.
[   90.479360][ T6029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22'.
[   90.513622][ T6024] veth3: entered promiscuous mode
[   90.521432][ T6024] bridge1: port 1(veth3) entered blocking state
[   90.528723][ T6024] bridge1: port 1(veth3) entered disabled state
[   90.536275][ T6031] netlink: 32 bytes leftover after parsing attributes in process `syz.2.22'.
[   90.536972][ T6024] veth3: entered allmulticast mode
[   90.737178][ T6038] netlink: 'syz.4.25': attribute type 1 has an invalid length.
[   90.969502][ T6043] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   91.049903][ T6050] vlan2: entered allmulticast mode
[   91.055072][ T6050] veth1: entered allmulticast mode
[   91.684275][   T10] cfg80211: failed to load regulatory.db
[   91.837980][ T6083] syz.2.34 uses obsolete (PF_INET,SOCK_PACKET)
[   92.226832][ T6109] netlink: 'syz.3.43': attribute type 1 has an invalid length.
[   92.561752][ T6128] IPVS: set_ctl: invalid protocol: 11612 172.20.20.187:21
[   92.689640][ T6134] netlink: 'syz.0.48': attribute type 11 has an invalid length.
[   92.715841][ T6126] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.723920][ T6126] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.002917][ T6145] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb
[   93.018247][ T6151] netlink: 'syz.3.52': attribute type 21 has an invalid length.
[   93.737616][ T6177] netlink: 'syz.4.60': attribute type 39 has an invalid length.
[   93.890721][ T6189] x_tables: ip_tables: osf match: only valid for protocol 6
[   94.000178][ T6199] __nla_validate_parse: 7 callbacks suppressed
[   94.000196][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.66'.
[   94.296981][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.68'.
[   94.395719][ T6210] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[   95.052400][ T6244] netlink: 24 bytes leftover after parsing attributes in process `syz.4.78'.
[   95.130428][ T6233] Zero length message leads to an empty skb
[   95.140864][ T6237] bridge: RTM_NEWNEIGH with invalid state 0x8
[   95.295117][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'.
[   95.324287][ T6253] trusted_key: syz.1.79 sent an empty control message without MSG_MORE.
[   95.348134][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'.
[   95.407861][ T6262] netlink: 'syz.3.81': attribute type 10 has an invalid length.
[   95.434423][ T6262] netlink: 40 bytes leftover after parsing attributes in process `syz.3.81'.
[   95.501334][ T6262] team0: Port device geneve0 added
[   95.517780][ T6267] x_tables: duplicate underflow at hook 1
[   95.539054][ T6265] netlink: 'syz.4.83': attribute type 7 has an invalid length.
[   95.547659][ T6265] netlink: 'syz.4.83': attribute type 8 has an invalid length.
[   95.571975][ T6268] x_tables: duplicate underflow at hook 1
[   95.873258][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'.
[   95.906194][ T6282] netlink: 44 bytes leftover after parsing attributes in process `syz.0.88'.
[   95.929448][ T6282] netlink: 43 bytes leftover after parsing attributes in process `syz.0.88'.
[   95.949568][ T6282] netlink: 'syz.0.88': attribute type 6 has an invalid length.
[   95.971585][ T6282] netlink: 'syz.0.88': attribute type 5 has an invalid length.
[   96.003251][ T6282] netlink: 43 bytes leftover after parsing attributes in process `syz.0.88'.
[   96.193283][ T6295] netlink: 'syz.0.92': attribute type 1 has an invalid length.
[   96.541872][ T6307] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   96.751580][ T6314] Bluetooth: MGMT ver 1.23
[   96.812438][ T6323] bridge: RTM_NEWNEIGH with invalid state 0x8
[   96.944822][ T6335] netlink: 'syz.2.104': attribute type 2 has an invalid length.
[   97.351867][ T6359] veth1_macvtap: left promiscuous mode
[   97.436467][ T6361] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   97.774226][ T6378] netlink: 'syz.4.118': attribute type 8 has an invalid length.
[   97.801538][ T6381] lo speed is unknown, defaulting to 1000
[   97.808302][ T6381] lo speed is unknown, defaulting to 1000
[   97.815815][ T6381] lo speed is unknown, defaulting to 1000
[   97.869767][ T6381] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   97.922624][ T6381] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -1
[   98.067251][ T6381] lo speed is unknown, defaulting to 1000
[   98.073694][ T6390] ipt_ECN: cannot use operation on non-tcp rule
[   98.088414][ T6381] lo speed is unknown, defaulting to 1000
[   98.110048][ T6390] netlink: 'syz.2.121': attribute type 12 has an invalid length.
[   98.135848][ T6394] x_tables: ip_tables: udp match: only valid for protocol 17
[   98.178209][ T6381] lo speed is unknown, defaulting to 1000
[   98.203223][ T6381] lo speed is unknown, defaulting to 1000
[   98.235000][ T6381] lo speed is unknown, defaulting to 1000
[   98.340602][ T6397] warning: `syz.4.123' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   98.554937][ T6401] macvtap1: entered promiscuous mode
[   98.577265][ T6401] vlan0: entered promiscuous mode
[   98.582671][ T6401] macvtap1: entered allmulticast mode
[   98.611677][ T6401] vlan0: entered allmulticast mode
[   98.616846][ T6401] veth0_vlan: entered allmulticast mode
[   98.816021][ T6415] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   99.278170][ T6442] netlink: 'syz.1.132': attribute type 10 has an invalid length.
[   99.290729][ T6424] bridge_slave_1: left allmulticast mode
[   99.296444][ T6413] __nla_validate_parse: 18 callbacks suppressed
[   99.296458][ T6413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.129'.
[   99.297135][ T6424] bridge_slave_1: left promiscuous mode
[   99.332565][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.346711][ T6424] bridge_slave_0: left allmulticast mode
[   99.354116][ T6424] bridge_slave_0: left promiscuous mode
[   99.360354][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.570390][ T6442] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   99.670674][   T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.840602][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   99.853640][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   99.862821][   T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.881747][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   99.895687][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   99.906787][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  100.086086][   T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.211525][ T6453] lo speed is unknown, defaulting to 1000
[  100.274208][   T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.337075][ T6480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.143'.
[  100.357096][ T6480] netlink: 6 bytes leftover after parsing attributes in process `syz.3.143'.
[  100.454721][ T6483] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.462258][ T6483] bridge0: port 2(bridge_slave_1) entered listening state
[  100.469688][ T6483] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.476876][ T6483] bridge0: port 1(bridge_slave_0) entered listening state
[  100.497099][ T6483] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.533521][ T6478] lo speed is unknown, defaulting to 1000
[  100.641429][ T6482] lo speed is unknown, defaulting to 1000
[  100.853679][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.149'.
[  101.136569][ T6509] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.151'.
[  101.154441][   T36] bridge_slave_1: left allmulticast mode
[  101.161764][   T36] bridge_slave_1: left promiscuous mode
[  101.168846][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.265661][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.151'.
[  101.278085][   T36] bridge_slave_0: left allmulticast mode
[  101.283757][   T36] bridge_slave_0: left promiscuous mode
[  101.299714][ T6516] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.151'.
[  101.304205][   T30] audit: type=1800 audit(1752325973.877:2): pid=6509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.151" name="memory.events" dev="tmpfs" ino=197 res=0 errno=0
[  101.317620][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.708706][ T6544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.158'.
[  101.718043][ T6544] netlink: 56 bytes leftover after parsing attributes in process `syz.3.158'.
[  101.773538][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'.
[  101.958650][ T5851] Bluetooth: hci4: command tx timeout
[  102.252746][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.264040][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.275446][   T36] bond0 (unregistering): Released all slaves
[  102.571320][ T6453] chnl_net:caif_netlink_parms(): no params data found
[  102.721842][ T6586] validate_nla: 1 callbacks suppressed
[  102.721859][ T6586] netlink: 'syz.2.165': attribute type 4 has an invalid length.
[  103.107988][ T6601] netlink: 'syz.2.172': attribute type 39 has an invalid length.
[  103.135082][ T6603] netlink: 'syz.4.173': attribute type 4 has an invalid length.
[  103.493674][ T6453] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.522583][ T6453] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.543228][ T6453] bridge_slave_0: entered allmulticast mode
[  103.556966][ T6453] bridge_slave_0: entered promiscuous mode
[  103.575995][ T6453] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.591981][ T6453] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.602507][ T6453] bridge_slave_1: entered allmulticast mode
[  103.611275][ T6453] bridge_slave_1: entered promiscuous mode
[  103.694184][   T36] hsr_slave_0: left promiscuous mode
[  103.733169][   T36] hsr_slave_1: left promiscuous mode
[  103.768130][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.791848][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.820599][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.834276][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.896675][   T36] veth0_macvtap: left promiscuous mode
[  103.910213][   T36] veth1_vlan: left promiscuous mode
[  103.916177][   T36] veth0_vlan: left promiscuous mode
[  104.042126][ T5851] Bluetooth: hci4: command tx timeout
[  104.441858][ T6655] __nla_validate_parse: 4 callbacks suppressed
[  104.441873][ T6655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.182'.
[  104.511691][   T36] team0 (unregistering): Port device team_slave_1 removed
[  104.541912][   T36] team0 (unregistering): Port device team_slave_0 removed
[  104.927391][ T6453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.981198][ T5914] lo speed is unknown, defaulting to 1000
[  104.987076][ T5914] infiniband syz2: ib_query_port failed (-19)
[  105.022105][ T6650] netlink: 176 bytes leftover after parsing attributes in process `syz.3.181'.
[  105.057581][ T6650] ip6gretap0: entered promiscuous mode
[  105.184215][ T6453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.207090][ T6665] netlink: 40 bytes leftover after parsing attributes in process `syz.2.185'.
[  105.282050][ T6453] team0: Port device team_slave_0 added
[  105.288892][ T6663] syz_tun: entered allmulticast mode
[  105.315067][ T6453] team0: Port device team_slave_1 added
[  105.328371][ T6661] syz_tun: left allmulticast mode
[  105.535541][ T6453] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.577825][ T6453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.636026][ T6453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.647820][ T6687] netlink: 36 bytes leftover after parsing attributes in process `syz.4.191'.
[  105.679370][ T6453] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.686345][ T6453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.786770][ T6699] netlink: 'syz.3.193': attribute type 10 has an invalid length.
[  105.803881][ T6453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.893158][ T6699] team0: Device veth1_macvtap failed to register rx_handler
[  106.117349][ T5851] Bluetooth: hci4: command tx timeout
[  106.334303][ T6453] hsr_slave_0: entered promiscuous mode
[  106.355747][ T6453] hsr_slave_1: entered promiscuous mode
[  106.368189][ T6453] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  106.385810][ T6453] Cannot create hsr debugfs directory
[  106.977427][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'.
[  107.054950][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'.
[  107.176244][ T6753] netlink: 16 bytes leftover after parsing attributes in process `syz.4.203'.
[  107.219477][ T6753] netlink: 16 bytes leftover after parsing attributes in process `syz.4.203'.
[  107.257046][ T6747] netlink: 764 bytes leftover after parsing attributes in process `syz.4.203'.
[  107.270923][ T6757] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535)
[  107.298593][ T6747] openvswitch: netlink: Flow key attr not present in new flow.
[  107.380026][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'.
[  107.649184][ T6453] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  107.690400][ T6453] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  107.726851][ T6453] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  107.751897][ T6453] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  107.835649][ T6784] sctp: [Deprecated]: syz.1.210 (pid 6784) Use of int in max_burst socket option.
[  107.835649][ T6784] Use struct sctp_assoc_value instead
[  108.199329][ T5851] Bluetooth: hci4: command tx timeout
[  110.735935][ T6786] vlan2: entered allmulticast mode
[  110.742719][ T6786] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  110.976029][ T6863] ipt_ECN: cannot use operation on non-tcp rule
[  111.006433][ T6453] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.018764][ T6863] tipc: Started in network mode
[  111.023729][ T6863] tipc: Node identity ae68b3bd2925, cluster identity 4711
[  111.036593][ T6863] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.120755][ T6863] syzkaller0: entered allmulticast mode
[  111.171986][ T6453] 8021q: adding VLAN 0 to HW filter on device team0
[  111.224335][ T6863] tipc: Resetting bearer <eth:syzkaller0>
[  111.260518][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.267774][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.294477][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.301696][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.323702][ T6862] tipc: Disabling bearer <eth:syzkaller0>
[  111.396811][ T6879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.220'.
[  111.853441][ T6900] netlink: 'syz.3.226': attribute type 23 has an invalid length.
[  112.061465][ T6453] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.066307][ T6916] netlink: 'syz.4.229': attribute type 1 has an invalid length.
[  112.114721][ T6916] netlink: 'syz.4.229': attribute type 11 has an invalid length.
[  112.127873][ T6916] netlink: 220 bytes leftover after parsing attributes in process `syz.4.229'.
[  112.247609][ T6453] veth0_vlan: entered promiscuous mode
[  112.284769][ T6453] veth1_vlan: entered promiscuous mode
[  112.391765][ T6453] veth0_macvtap: entered promiscuous mode
[  112.441510][ T6453] veth1_macvtap: entered promiscuous mode
[  112.450283][ T6924] netlink: 'syz.2.231': attribute type 32 has an invalid length.
[  112.664598][ T6453] batman_adv: batadv0: Interface activated: batadv_slave_0
[  112.690342][ T6948] netlink: 72 bytes leftover after parsing attributes in process `syz.1.235'.
[  112.712844][ T6453] batman_adv: batadv0: Interface activated: batadv_slave_1
[  112.767035][ T6948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.235'.
[  112.799491][ T6953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.236'.
[  112.819344][ T6956] netlink: 72 bytes leftover after parsing attributes in process `syz.1.235'.
[  112.829253][ T6453] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.849002][ T6453] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.859891][ T6453] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.879918][ T6453] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.239106][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.246983][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.247088][ T6968] vlan0: entered allmulticast mode
[  113.274232][ T6968] veth1: entered allmulticast mode
[  113.332097][ T6976] macvtap2: entered allmulticast mode
[  113.372902][ T6976] veth0_macvtap: entered allmulticast mode
[  113.425427][ T6980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.243'.
[  113.478983][ T6984] netlink: 44 bytes leftover after parsing attributes in process `syz.4.243'.
[  113.505608][ T6984] netlink: 43 bytes leftover after parsing attributes in process `syz.4.243'.
[  113.516585][ T6984] netlink: 'syz.4.243': attribute type 6 has an invalid length.
[  113.556410][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.558144][ T6984] netlink: 'syz.4.243': attribute type 5 has an invalid length.
[  113.587606][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.595103][ T6984] netlink: 43 bytes leftover after parsing attributes in process `syz.4.243'.
[  113.898781][ T6998] netlink: 'syz.3.250': attribute type 2 has an invalid length.
[  113.927419][ T6998] netlink: 'syz.3.250': attribute type 2 has an invalid length.
[  113.962650][ T6998] netlink: 'syz.3.250': attribute type 2 has an invalid length.
[  114.100793][ T7008] netlink: 'syz.2.254': attribute type 2 has an invalid length.
[  114.183318][ T7010] tipc: Started in network mode
[  114.191766][ T7010] tipc: Node identity 0acba89740e, cluster identity 4711
[  114.199818][ T7010] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.229060][ T7010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  114.282385][ T7010] syzkaller0: MTU too low for tipc bearer
[  114.288375][ T7010] tipc: Disabling bearer <eth:syzkaller0>
[  114.480988][ T6698] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.606052][ T6698] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.764035][ T6698] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.950445][ T6698] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.014547][ T7044] Bluetooth: MGMT ver 1.23
[  115.421062][ T6698] bridge_slave_1: left allmulticast mode
[  115.442089][ T6698] bridge_slave_1: left promiscuous mode
[  115.465587][ T6698] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.534746][ T6698] bridge_slave_0: left allmulticast mode
[  115.557532][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  115.570689][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  115.580321][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  115.593659][ T6698] bridge_slave_0: left promiscuous mode
[  115.600627][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  115.610913][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  115.637814][ T6698] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.278164][ T6698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.299563][ T6698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.324673][ T6698] bond0 (unregistering): Released all slaves
[  116.396355][ T7081] geneve2: entered promiscuous mode
[  116.585042][ T7099] __nla_validate_parse: 5 callbacks suppressed
[  116.585058][ T7099] netlink: 192 bytes leftover after parsing attributes in process `syz.1.277'.
[  116.807475][ T7105] x_tables: duplicate underflow at hook 3
[  116.977306][ T7118] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  117.071461][ T7124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.284'.
[  117.243228][ T7129] netlink: 'syz.2.285': attribute type 1 has an invalid length.
[  117.252344][ T7129] netlink: 224 bytes leftover after parsing attributes in process `syz.2.285'.
[  117.261719][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'.
[  117.585074][ T7146] openvswitch: netlink: Flow key attribute not present in set flow.
[  117.605513][ T6698] hsr_slave_0: left promiscuous mode
[  117.617631][ T7143] ieee802154 phy0 wpan0: encryption failed: -22
[  117.631963][ T6698] hsr_slave_1: left promiscuous mode
[  117.658899][ T6698] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.666319][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.711014][ T6698] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.719443][ T5850] Bluetooth: hci4: command tx timeout
[  117.725698][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_1
[  117.759757][ T6698] veth1_macvtap: left promiscuous mode
[  117.765676][ T6698] veth0_macvtap: left promiscuous mode
[  117.771897][ T6698] veth1_vlan: left promiscuous mode
[  117.778133][ T6698] veth0_vlan: left promiscuous mode
[  117.962441][ T7161] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.178280][ T6698] team0 (unregistering): Port device team_slave_1 removed
[  118.213043][ T6698] team0 (unregistering): Port device team_slave_0 removed
[  118.530124][ T7153] batadv1: entered allmulticast mode
[  118.536702][ T7153] 8021q: adding VLAN 0 to HW filter on device batadv1
[  118.786992][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.298'.
[  119.020901][ T7060] chnl_net:caif_netlink_parms(): no params data found
[  119.021384][ T7188] netlink: 'syz.1.301': attribute type 25 has an invalid length.
[  119.267103][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.302'.
[  119.517089][ T7060] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.534850][ T7060] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.551923][ T7060] bridge_slave_0: entered allmulticast mode
[  119.564681][ T7060] bridge_slave_0: entered promiscuous mode
[  119.595538][ T7060] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.621240][ T7060] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.648688][ T7060] bridge_slave_1: entered allmulticast mode
[  119.681336][ T7060] bridge_slave_1: entered promiscuous mode
[  119.799643][ T5850] Bluetooth: hci4: command tx timeout
[  119.881388][ T7230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.307'.
[  119.950165][ T7060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.052330][ T7060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.075100][ T7229] x_tables: duplicate underflow at hook 3
[  120.220993][ T7060] team0: Port device team_slave_0 added
[  120.234936][ T7239] netlink: 28 bytes leftover after parsing attributes in process `syz.3.309'.
[  120.252703][ T7239] netlink: set zone limit has 8 unknown bytes
[  120.259594][ T7060] team0: Port device team_slave_1 added
[  120.445365][ T7060] batman_adv: batadv0: Adding interface: batadv_slave_0
[  120.456885][ T7060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.498962][ T7060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  120.512835][ T7060] batman_adv: batadv0: Adding interface: batadv_slave_1
[  120.538443][ T7060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.566882][ T7060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  120.841490][ T7060] hsr_slave_0: entered promiscuous mode
[  120.883733][ T7265] Cannot find del_set index 17 as target
[  120.895855][ T7060] hsr_slave_1: entered promiscuous mode
[  120.905188][ T7060] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  120.936168][ T7060] Cannot create hsr debugfs directory
[  121.147998][ T7278] netlink: 5212 bytes leftover after parsing attributes in process `syz.2.319'.
[  121.191851][ T7279] netlink: 16 bytes leftover after parsing attributes in process `syz.4.320'.
[  121.587890][ T7296] __nla_validate_parse: 1 callbacks suppressed
[  121.587906][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.324'.
[  121.879727][ T5850] Bluetooth: hci4: command tx timeout
[  122.157693][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.329'.
[  122.477581][ T7285] netlink: 'syz.1.322': attribute type 1 has an invalid length.
[  122.650087][ T7330] bridge0: port 3(bond0) entered blocking state
[  122.677149][ T7330] bridge0: port 3(bond0) entered disabled state
[  122.684057][ T7330] bond0: entered allmulticast mode
[  122.722998][ T7330] bond_slave_0: entered allmulticast mode
[  122.750556][ T7330] bond_slave_1: entered allmulticast mode
[  122.768118][ T7330] bond0: entered promiscuous mode
[  122.773183][ T7330] bond_slave_0: entered promiscuous mode
[  122.779776][ T7330] bond_slave_1: entered promiscuous mode
[  122.790611][ T7330] bridge0: port 3(bond0) entered blocking state
[  122.797566][ T7330] bridge0: port 3(bond0) entered forwarding state
[  122.873630][ T7346] netlink: 'syz.2.333': attribute type 4 has an invalid length.
[  122.934047][ T7349] netlink: 'syz.2.333': attribute type 4 has an invalid length.
[  123.060298][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.336'.
[  123.145673][ T7357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.336'.
[  123.212965][ T7359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  123.644616][ T7380] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  123.700874][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'.
[  123.725288][ T7387] x_tables: duplicate underflow at hook 1
[  123.732454][ T7060] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  123.763102][ T7060] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  123.817996][ T7060] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  123.860070][ T7060] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  123.949993][ T7402] openvswitch: netlink: IP tunnel TTL not specified.
[  123.958868][ T5850] Bluetooth: hci4: command tx timeout
[  123.998531][ T7394] netlink: 72 bytes leftover after parsing attributes in process `syz.2.345'.
[  124.165368][ T7394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.345'.
[  124.192120][ T7414] netlink: 36 bytes leftover after parsing attributes in process `syz.3.350'.
[  124.263863][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'.
[  124.605082][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.354'.
[  124.664594][ T7438] veth0: entered promiscuous mode
[  124.693568][ T7060] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.707959][ T7437] veth0: left promiscuous mode
[  124.766113][ T7060] 8021q: adding VLAN 0 to HW filter on device team0
[  124.818904][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.826060][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state
[  124.879085][ T6698] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.886259][ T6698] bridge0: port 2(bridge_slave_1) entered forwarding state
[  124.953531][ T1114] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[  125.131940][ T7458] ipt_ECN: cannot use operation on non-tcp rule
[  125.271582][ T7465] ip6tnl0: entered promiscuous mode
[  125.514539][ T7060] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.616208][ T7060] veth0_vlan: entered promiscuous mode
[  125.639247][ T7060] veth1_vlan: entered promiscuous mode
[  125.725457][ T7060] veth0_macvtap: entered promiscuous mode
[  125.767480][ T7060] veth1_macvtap: entered promiscuous mode
[  125.865225][ T7060] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.939504][ T7060] batman_adv: batadv0: Interface activated: batadv_slave_1
[  126.021221][ T7459] ip6tnl0: left promiscuous mode
[  126.059363][ T7060] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.110203][ T7060] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.157341][ T7060] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.166083][ T7060] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.344525][ T7499] pimreg3: entered allmulticast mode
[  126.499869][ T7510] x_tables: duplicate underflow at hook 2
[  126.646784][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.670899][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.671697][ T7515] __nla_validate_parse: 3 callbacks suppressed
[  126.671713][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.371'.
[  126.737008][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'.
[  126.820638][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.844414][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.950748][ T7534] xt_hashlimit: invalid interval
[  128.064272][   T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.226479][   T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.411808][ T7579] netlink: 'syz.3.381': attribute type 1 has an invalid length.
[  128.452885][ T7579] netlink: 224 bytes leftover after parsing attributes in process `syz.3.381'.
[  128.456351][ T7582] netlink: 'syz.2.383': attribute type 9 has an invalid length.
[  128.949111][   T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.984079][ T7607] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.388'.
[  129.176087][   T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.355195][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  129.366197][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  129.380310][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  129.401521][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  129.422668][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  129.696512][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.393'.
[  129.809436][   T49] bridge_slave_1: left allmulticast mode
[  129.862960][   T49] bridge_slave_1: left promiscuous mode
[  129.879286][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.922314][   T49] bridge_slave_0: left allmulticast mode
[  129.941124][   T49] bridge_slave_0: left promiscuous mode
[  129.982652][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.375325][ T7670] netlink: 108 bytes leftover after parsing attributes in process `syz.1.398'.
[  130.434527][ T7670] netlink: 108 bytes leftover after parsing attributes in process `syz.1.398'.
[  130.462463][ T7670] netlink: 108 bytes leftover after parsing attributes in process `syz.1.398'.
[  130.505979][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.401'.
[  130.587067][ T7670] netlink: 108 bytes leftover after parsing attributes in process `syz.1.398'.
[  130.677334][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[  130.685094][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  131.130520][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  131.142108][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.154322][   T49] bond0 (unregistering): Released all slaves
[  131.477768][ T5851] Bluetooth: hci4: command tx timeout
[  132.089735][ T7735] __nla_validate_parse: 6 callbacks suppressed
[  132.089752][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.408'.
[  132.331836][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805bca4800: rx timeout, send abort
[  132.495908][ T7740] lo speed is unknown, defaulting to 1000
[  132.509510][ T7740] lo speed is unknown, defaulting to 1000
[  132.516120][ T7740] lo speed is unknown, defaulting to 1000
[  132.561643][ T7749] Bluetooth: MGMT ver 1.23
[  132.706416][ T7749] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  132.913639][ T7763] netlink: 'syz.2.413': attribute type 83 has an invalid length.
[  133.055116][ T7770] netlink: 'syz.3.415': attribute type 11 has an invalid length.
[  133.094873][ T7770] netlink: 224 bytes leftover after parsing attributes in process `syz.3.415'.
[  133.111420][   T49] hsr_slave_0: left promiscuous mode
[  133.130187][ T7775] netlink: 16 bytes leftover after parsing attributes in process `syz.3.415'.
[  133.143749][   T49] hsr_slave_1: left promiscuous mode
[  133.160100][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.199890][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  133.222897][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  133.236951][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  133.285079][   T49] veth1_macvtap: left promiscuous mode
[  133.296357][   T49] veth0_macvtap: left promiscuous mode
[  133.314343][   T49] veth1_vlan: left promiscuous mode
[  133.324631][   T49] veth0_vlan: left promiscuous mode
[  133.351538][ T7740] infiniband syz0: set active
[  133.356695][ T7740] infiniband syz0: added lo
[  133.415521][ T7740] RDS/IB: syz0: added
[  133.423196][ T7740] smc: adding ib device syz0 with port count 1
[  133.429612][ T7740] smc:    ib device syz0 port 1 has pnetid 
[  133.557402][ T5851] Bluetooth: hci4: command tx timeout
[  133.743371][   T49] team0 (unregistering): Port device team_slave_1 removed
[  133.781431][   T49] team0 (unregistering): Port device team_slave_0 removed
[  134.142605][ T7775] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.153729][ T5914] lo speed is unknown, defaulting to 1000
[  134.190216][ T7620] chnl_net:caif_netlink_parms(): no params data found
[  134.226358][ T5921] lo speed is unknown, defaulting to 1000
[  134.301992][ T7740] lo speed is unknown, defaulting to 1000
[  134.624480][ T7810] netlink: 56 bytes leftover after parsing attributes in process `syz.2.423'.
[  134.665947][ T7810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.423'.
[  134.737014][ T7810] netlink: 31 bytes leftover after parsing attributes in process `syz.2.423'.
[  134.807435][ T7810] netlink: 'syz.2.423': attribute type 3 has an invalid length.
[  134.847480][ T7810] netlink: 'syz.2.423': attribute type 2 has an invalid length.
[  134.855184][ T7810] netlink: 31 bytes leftover after parsing attributes in process `syz.2.423'.
[  134.941833][ T7822] IPVS: set_ctl: invalid protocol: 167 172.30.0.5:20000
[  134.985726][ T7822] delete_channel: no stack
[  135.035943][ T7620] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.064779][ T7620] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.091390][ T7620] bridge_slave_0: entered allmulticast mode
[  135.118125][ T7620] bridge_slave_0: entered promiscuous mode
[  135.158908][ T7620] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.216131][ T7620] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.243823][ T7620] bridge_slave_1: entered allmulticast mode
[  135.330436][ T7620] bridge_slave_1: entered promiscuous mode
[  135.506100][ T7620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.520500][ T7841] sctp: [Deprecated]: syz.3.428 (pid 7841) Use of int in maxseg socket option.
[  135.520500][ T7841] Use struct sctp_assoc_value instead
[  135.556988][ T7740] lo speed is unknown, defaulting to 1000
[  135.562979][ T7620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.637420][ T5851] Bluetooth: hci4: command tx timeout
[  135.689053][ T7849] netlink: 'syz.2.431': attribute type 4 has an invalid length.
[  135.704967][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.429'.
[  135.714220][ T7849] netlink: 17 bytes leftover after parsing attributes in process `syz.2.431'.
[  135.744207][ T7620] team0: Port device team_slave_0 added
[  135.759720][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.431'.
[  135.781436][ T7620] team0: Port device team_slave_1 added
[  135.995223][ T7854] !
: renamed from dummy0 (while UP)
[  136.102710][ T7620] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.130127][ T7620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.215596][ T7620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.266083][ T7620] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.307445][ T7620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.366971][ T7620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.471080][ T7740] lo speed is unknown, defaulting to 1000
[  136.708974][ T7620] hsr_slave_0: entered promiscuous mode
[  136.721057][ T7893] openvswitch: netlink: nsh attr 8196 is out of range max 3
[  136.721128][ T7620] hsr_slave_1: entered promiscuous mode
[  136.737027][ T7620] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  136.745126][ T7893] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.780587][ T7620] Cannot create hsr debugfs directory
[  137.402736][ T7740] lo speed is unknown, defaulting to 1000
[  137.409057][ T7908] __nla_validate_parse: 2 callbacks suppressed
[  137.409072][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.444'.
[  137.718342][ T5851] Bluetooth: hci4: command tx timeout
[  137.911588][ T7620] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  137.941739][ T7620] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  137.969097][ T7620] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  137.999992][ T7620] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  138.243231][ T7740] lo speed is unknown, defaulting to 1000
[  138.333402][ T7620] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.388438][ T7952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'.
[  138.441885][ T7954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.451'.
[  138.495744][ T7620] 8021q: adding VLAN 0 to HW filter on device team0
[  138.548457][ T7956] pim6reg1: entered promiscuous mode
[  138.568908][ T7956] pim6reg1: entered allmulticast mode
[  138.731424][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.738700][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.762061][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.769260][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.901310][ T7968] xt_l2tp: v2 tid > 0xffff: 150994944
[  139.006410][ T7620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  139.095339][ T7975] netlink: 160 bytes leftover after parsing attributes in process `syz.2.456'.
[  139.164355][ T7979] netlink: 48 bytes leftover after parsing attributes in process `syz.3.457'.
[  139.190198][ T7975] netlink: 160 bytes leftover after parsing attributes in process `syz.2.456'.
[  139.261245][ T7987] af_packet: tpacket_rcv: packet too big, clamped from 240 to 4294967272. macoff=96
[  139.421653][ T7995] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  139.910149][ T7620] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.067013][ T7620] veth0_vlan: entered promiscuous mode
[  140.076177][ T8037] 
: renamed from bridge_slave_0 (while UP)
[  140.112672][ T7620] veth1_vlan: entered promiscuous mode
[  140.234728][ T7620] veth0_macvtap: entered promiscuous mode
[  140.270897][ T7620] veth1_macvtap: entered promiscuous mode
[  140.325269][ T7620] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.331757][ T8047] netlink: 'syz.1.471': attribute type 10 has an invalid length.
[  140.411772][ T8047] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.423270][ T8047] team0: Port device bond0 added
[  140.441585][ T8049] netlink: 92 bytes leftover after parsing attributes in process `syz.1.471'.
[  140.449306][ T6698] bond0: (slave wlan1): link status definitely down, disabling slave
[  140.468912][ T7620] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.490008][ T7620] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.504201][ T7620] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.515189][ T7620] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.532167][ T7620] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.594952][ T8053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.472'.
[  140.748921][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.766435][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.877883][ T6698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.909521][ T6698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.036866][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'.
[  141.070074][ T8060] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  141.115564][ T8060] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (3)
[  141.331809][ T8069] netlink: 252 bytes leftover after parsing attributes in process `syz.2.477'.
[  141.917432][   T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.144464][   T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.521516][   T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.654911][ T8130] netlink: 36 bytes leftover after parsing attributes in process `syz.1.484'.
[  142.680600][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.486'.
[  142.681228][   T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.697951][ T8138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.486'.
[  143.112505][ T8156] netlink: 14 bytes leftover after parsing attributes in process `syz.3.491'.
[  143.208150][ T8156] bridge0: port 3(bond0) entered disabled state
[  143.276045][ T8159] netlink: 191164 bytes leftover after parsing attributes in process `syz.4.492'.
[  143.324710][ T8159] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.582063][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  143.589171][ T8156] bond0 (unregistering): left allmulticast mode
[  143.589192][ T8156] bond_slave_0: left allmulticast mode
[  143.589208][ T8156] bond_slave_1: left allmulticast mode
[  143.589224][ T8156] bond0 (unregistering): left promiscuous mode
[  143.589237][ T8156] bond_slave_0: left promiscuous mode
[  143.624849][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  143.638259][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  143.656437][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  143.668384][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  143.677683][ T8156] bond_slave_1: left promiscuous mode
[  143.698398][ T8156] bridge0: port 3(bond0) entered disabled state
[  143.727796][ T8156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.762106][ T8156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.798387][ T8156] bond0 (unregistering): Released all slaves
[  143.885155][ T8179] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.050477][ T8184] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.081711][ T8179] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.141407][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.499'.
[  144.169067][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'.
[  144.184860][ T8191] vcan0: tx address claim with dest, not broadcast
[  144.341679][ T8199] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.368376][ T8197] netlink: 'syz.2.501': attribute type 1 has an invalid length.
[  144.376076][ T8197] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.497597][ T8210] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  144.806124][ T8173] lo speed is unknown, defaulting to 1000
[  144.833031][ T8213] netlink: 64 bytes leftover after parsing attributes in process `syz.2.504'.
[  144.863340][   T49] bridge_slave_1: left allmulticast mode
[  144.888252][   T49] bridge_slave_1: left promiscuous mode
[  144.909240][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.962549][   T49] bridge_slave_0: left allmulticast mode
[  144.975789][   T49] bridge_slave_0: left promiscuous mode
[  144.996699][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.565486][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  145.576622][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  145.586679][   T49] bond0 (unregistering): Released all slaves
[  145.734116][ T5851] Bluetooth: hci4: command tx timeout
[  146.228887][ T8271] netlink: 'syz.1.514': attribute type 10 has an invalid length.
[  146.292456][ T8274] netlink: 16 bytes leftover after parsing attributes in process `syz.1.514'.
[  146.322380][ T8271] bridge0: port 3(team0) entered blocking state
[  146.352697][ T8274] netlink: 32 bytes leftover after parsing attributes in process `syz.1.514'.
[  146.363553][ T8271] bridge0: port 3(team0) entered disabled state
[  146.445898][ T8271] team0: entered allmulticast mode
[  146.482820][ T8271] team_slave_0: entered allmulticast mode
[  146.495290][ T8271] team_slave_1: entered allmulticast mode
[  146.502016][ T8271] bond0: entered allmulticast mode
[  146.511687][ T8271] bond_slave_0: entered allmulticast mode
[  146.520031][ T8271] bond_slave_1: entered allmulticast mode
[  146.525915][ T8271] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  146.542863][ T8271] team0: entered promiscuous mode
[  146.551576][ T8271] team_slave_0: entered promiscuous mode
[  146.557988][ T8271] team_slave_1: entered promiscuous mode
[  146.563982][ T8271] bond0: entered promiscuous mode
[  146.571519][ T8271] bond_slave_0: entered promiscuous mode
[  146.577948][ T8271] bond_slave_1: entered promiscuous mode
[  146.585048][ T8271] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  146.614603][ T8271] bridge0: port 3(team0) entered blocking state
[  146.621058][ T8271] bridge0: port 3(team0) entered forwarding state
[  146.722438][ T8274] gretap1: entered promiscuous mode
[  146.727811][ T8274] gretap1: entered allmulticast mode
[  146.774119][ T8173] chnl_net:caif_netlink_parms(): no params data found
[  147.687664][   T49] hsr_slave_0: left promiscuous mode
[  147.722182][ T8340] __nla_validate_parse: 2 callbacks suppressed
[  147.724574][ T8340] netlink: 24 bytes leftover after parsing attributes in process `syz.1.528'.
[  147.740089][   T49] hsr_slave_1: left promiscuous mode
[  147.746196][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.754432][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.763741][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.773902][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.807696][ T5851] Bluetooth: hci4: command tx timeout
[  147.808720][   T49] veth1_macvtap: left promiscuous mode
[  147.823013][   T49] veth0_macvtap: left promiscuous mode
[  147.858686][   T49] veth1_vlan: left promiscuous mode
[  147.873440][   T49] veth0_vlan: left promiscuous mode
[  148.603095][   T49] team0 (unregistering): Port device team_slave_1 removed
[  148.632915][   T49] team0 (unregistering): Port device team_slave_0 removed
[  148.920988][ T8173] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.928591][ T8173] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.936788][ T8173] bridge_slave_0: entered allmulticast mode
[  148.944178][ T8173] bridge_slave_0: entered promiscuous mode
[  148.953004][ T8328] tipc: Started in network mode
[  148.958270][ T8328] tipc: Node identity 56d8df7607a, cluster identity 4711
[  148.965458][ T8328] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.011283][ T8173] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.044056][ T8173] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.058621][ T8173] bridge_slave_1: entered allmulticast mode
[  149.092021][ T8173] bridge_slave_1: entered promiscuous mode
[  149.114402][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.531'.
[  149.224722][ T8328] tipc: Disabling bearer <eth:syzkaller0>
[  149.264050][ T8364] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64)
[  149.292381][ T8173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.329712][ T8173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.363699][ T8377] netlink: 'syz.4.534': attribute type 1 has an invalid length.
[  149.392605][ T8377] netlink: 20 bytes leftover after parsing attributes in process `syz.4.534'.
[  149.600974][ T8173] team0: Port device team_slave_0 added
[  149.666535][ T8173] team0: Port device team_slave_1 added
[  149.879503][ T5851] Bluetooth: hci4: command tx timeout
[  149.966400][ T8173] batman_adv: batadv0: Adding interface: batadv_slave_0
[  149.976728][ T8173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.003280][ T8173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.098433][ T8173] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.109235][ T8412] xt_hashlimit: max too large, truncated to 1048576
[  150.116017][ T8173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.147616][ T8413] xt_hashlimit: max too large, truncated to 1048576
[  150.172868][ T8173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  150.258060][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'.
[  150.462331][ T8423] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.585628][ T8423] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.719509][ T8438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.545'.
[  150.741091][ T8173] hsr_slave_0: entered promiscuous mode
[  150.751521][ T8173] hsr_slave_1: entered promiscuous mode
[  150.761333][ T8173] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  150.776505][ T8173] Cannot create hsr debugfs directory
[  151.046623][ T8455] sctp: [Deprecated]: syz.1.548 (pid 8455) Use of int in maxseg socket option.
[  151.046623][ T8455] Use struct sctp_assoc_value instead
[  151.703192][ T8480] netlink: 20 bytes leftover after parsing attributes in process `syz.2.554'.
[  151.755806][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.554'.
[  151.856855][ T8480] veth5: entered allmulticast mode
[  151.900993][ T8484] bridge0: port 3(team0) entered disabled state
[  151.963794][ T5851] Bluetooth: hci4: command tx timeout
[  152.122223][ T8484] team0 (unregistering): left allmulticast mode
[  152.141757][ T8484] team_slave_0: left allmulticast mode
[  152.162246][ T8484] team_slave_1: left allmulticast mode
[  152.184334][ T8484] bond0: left allmulticast mode
[  152.199408][ T8484] bond_slave_0: left allmulticast mode
[  152.206234][ T8484] bond_slave_1: left allmulticast mode
[  152.214200][ T8484] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  152.226422][ T8484] team0 (unregistering): left promiscuous mode
[  152.232941][ T8484] team_slave_0: left promiscuous mode
[  152.243210][ T8484] team_slave_1: left promiscuous mode
[  152.244082][ T8500] netlink: 256 bytes leftover after parsing attributes in process `syz.3.558'.
[  152.249222][ T8484] bond0: left promiscuous mode
[  152.262980][ T8484] bond_slave_0: left promiscuous mode
[  152.275338][ T8484] bond_slave_1: left promiscuous mode
[  152.293338][ T8484] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  152.309124][ T8484] bridge0: port 3(team0) entered disabled state
[  152.369957][ T8484] team0 (unregistering): Port device team_slave_0 removed
[  152.392774][ T8484] team0 (unregistering): Port device team_slave_1 removed
[  152.421012][ T8484] team0 (unregistering): Port device bond0 removed
[  152.674570][ T8507] netlink: 'syz.1.560': attribute type 10 has an invalid length.
[  152.791679][ T8518] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  152.916468][ T8173] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  152.994183][ T8173] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  153.041909][ T8173] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  153.069416][ T8173] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  153.406740][ T8173] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.470112][ T8173] 8021q: adding VLAN 0 to HW filter on device team0
[  153.501335][ T8554] netlink: 'syz.4.570': attribute type 83 has an invalid length.
[  153.521889][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.529074][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.599021][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.606204][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.835452][ T8173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  153.912197][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'.
[  154.553352][ T8173] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.694957][ T8602] netlink: 388 bytes leftover after parsing attributes in process `syz.3.581'.
[  154.754949][ T8604] sctp: [Deprecated]: syz.4.582 (pid 8604) Use of struct sctp_assoc_value in delayed_ack socket option.
[  154.754949][ T8604] Use struct sctp_sack_info instead
[  154.821514][ T8173] veth0_vlan: entered promiscuous mode
[  154.885903][ T8616] netlink: 28 bytes leftover after parsing attributes in process `syz.2.583'.
[  154.984026][ T8173] veth1_vlan: entered promiscuous mode
[  155.030552][ T8615] netlink: 83 bytes leftover after parsing attributes in process `syz.3.581'.
[  155.181986][ T8173] veth0_macvtap: entered promiscuous mode
[  155.219059][ T8173] veth1_macvtap: entered promiscuous mode
[  155.295121][ T8173] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.337695][ T8173] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.355262][ T8173] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.384449][ T8173] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.420504][ T8173] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.445658][ T8173] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.681893][ T8642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.589'.
[  155.913034][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.948949][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.075437][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.103793][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.602982][ T8674] netlink: 9 bytes leftover after parsing attributes in process `syz.1.595'.
[  156.634463][ T8674] gretap0: entered promiscuous mode
[  156.657873][ T8680] openvswitch: netlink: Message has 92 unknown bytes.
[  156.703413][ T8674] netlink: 5 bytes leftover after parsing attributes in process `syz.1.595'.
[  156.797070][ T8685] openvswitch: netlink: IPv6 tunnel dst address is zero
[  156.812060][   T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.870489][ T8674] 0ªX¹¦D: renamed from gretap0
[  156.879846][ T8674] 0ªX¹¦D: left promiscuous mode
[  156.907382][ T8674] 0ªX¹¦D: entered allmulticast mode
[  156.923122][ T8674] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  156.978745][   T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.100358][   T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.199383][   T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.528944][   T49] bridge_slave_1: left allmulticast mode
[  157.534659][   T49] bridge_slave_1: left promiscuous mode
[  157.542051][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.561055][   T49] bridge_slave_0: left allmulticast mode
[  157.566743][   T49] bridge_slave_0: left promiscuous mode
[  157.581696][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.795066][ T8710] Unsupported ieee802154 address type: 0
[  158.195230][ T8733] netlink: 28 bytes leftover after parsing attributes in process `syz.2.604'.
[  158.245225][ T8733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.604'.
[  158.701705][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  158.711025][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.711342][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  158.730144][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  158.741097][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.751948][   T49] bond0 (unregistering): Released all slaves
[  158.758517][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  158.767784][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  158.807066][ T8724] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  158.978311][ T8750] lo speed is unknown, defaulting to 1000
[  159.026377][ T8757] xt_ecn: cannot match TCP bits for non-tcp packets
[  159.220712][ T8767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.613'.
[  159.231211][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.611'.
[  159.271007][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'.
[  159.284630][ T8767] netlink: 'syz.2.613': attribute type 7 has an invalid length.
[  159.305080][ T8767] netlink: 'syz.2.613': attribute type 8 has an invalid length.
[  159.314978][ T8768] netlink: 'syz.4.611': attribute type 12 has an invalid length.
[  159.339764][ T8768] netlink: 'syz.4.611': attribute type 11 has an invalid length.
[  159.360526][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.613'.
[  159.405365][ T8773] xt_CT: You must specify a L4 protocol and not use inversions on it
[  159.942785][ T8799] netlink: 'syz.3.621': attribute type 13 has an invalid length.
[  160.027522][ T8799] veth0_macvtap: left promiscuous mode
[  160.050105][ T8799] macvtap0: entered allmulticast mode
[  160.082603][ T8799] macvtap0: refused to change device tx_queue_len
[  160.518534][ T8824] netlink: 88 bytes leftover after parsing attributes in process `syz.1.627'.
[  160.684484][   T49] hsr_slave_0: left promiscuous mode
[  160.706119][   T49] hsr_slave_1: left promiscuous mode
[  160.740013][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.758103][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.765290][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.772633][    C1] bridge0: topology change detected, propagating
[  160.779424][    C1] bridge0: port 1(
) entered forwarding state
[  160.785532][    C1] bridge0: topology change detected, propagating
[  160.794045][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.809590][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.837397][ T5851] Bluetooth: hci4: command tx timeout
[  160.846078][   T49] veth1_macvtap: left promiscuous mode
[  160.846844][ T8838] openvswitch: netlink: Missing key (keys=40, expected=100)
[  160.858616][   T49] veth0_macvtap: left promiscuous mode
[  160.868864][ T8838] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20003
[  160.871739][   T49] veth1_vlan: left promiscuous mode
[  160.891045][   T49] veth0_vlan: left promiscuous mode
[  160.924786][ T8842] netlink: 56 bytes leftover after parsing attributes in process `syz.3.630'.
[  161.484096][   T49] team0 (unregistering): Port device team_slave_1 removed
[  161.519315][   T49] team0 (unregistering): Port device team_slave_0 removed
[  161.839666][ T8830] veth0: entered promiscuous mode
[  161.856040][ T8834] veth0: left promiscuous mode
[  161.934444][ T8857] netlink: 'syz.1.634': attribute type 3 has an invalid length.
[  161.979944][ T8839] syzkaller1: entered promiscuous mode
[  161.987255][ T8839] syzkaller1: entered allmulticast mode
[  162.237822][ T8872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.637'.
[  162.291271][ T8872] netlink: 92 bytes leftover after parsing attributes in process `syz.2.637'.
[  162.336899][ T8750] chnl_net:caif_netlink_parms(): no params data found
[  162.672195][ T8897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.644'.
[  162.682813][ T8897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.644'.
[  162.733873][ T8903] sctp: [Deprecated]: syz.4.645 (pid 8903) Use of int in maxseg socket option.
[  162.733873][ T8903] Use struct sctp_assoc_value instead
[  162.761930][ T8903] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000
[  162.807876][ T8897] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  162.816812][ T8897] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  162.825720][ T8897] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  162.834549][ T8897] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  162.917869][ T5851] Bluetooth: hci4: command tx timeout
[  163.187560][ T8750] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.224105][ T8750] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.243929][ T8750] bridge_slave_0: entered allmulticast mode
[  163.281844][ T8750] bridge_slave_0: entered promiscuous mode
[  163.328676][ T8933] netlink: 'syz.4.649': attribute type 4 has an invalid length.
[  163.341929][ T8750] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.343257][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.359792][ T8933] netlink: 'syz.4.649': attribute type 1 has an invalid length.
[  163.367705][ T8750] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.385075][ T8750] bridge_slave_1: entered allmulticast mode
[  163.389791][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.410657][ T8750] bridge_slave_1: entered promiscuous mode
[  163.761631][ T8750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.869072][ T8750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.203046][ T8958] xt_hashlimit: size too large, truncated to 1048576
[  164.212673][ T8750] team0: Port device team_slave_0 added
[  164.262332][ T8750] team0: Port device team_slave_1 added
[  164.502517][ T8981] __nla_validate_parse: 5 callbacks suppressed
[  164.502534][ T8981] netlink: 216 bytes leftover after parsing attributes in process `syz.1.662'.
[  164.509385][ T8750] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.533967][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'.
[  164.541187][ T8750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.577759][ T8750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.631894][ T8750] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.641444][ T8750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.675795][ T8985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.664'.
[  164.709837][ T8750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.997325][ T5850] Bluetooth: hci4: command tx timeout
[  165.062846][ T8750] hsr_slave_0: entered promiscuous mode
[  165.106339][ T8750] hsr_slave_1: entered promiscuous mode
[  165.121648][ T9014] netlink: 56 bytes leftover after parsing attributes in process `syz.4.669'.
[  165.133247][ T8750] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  165.170291][ T8750] Cannot create hsr debugfs directory
[  165.361618][ T9024] netlink: 132 bytes leftover after parsing attributes in process `syz.4.672'.
[  165.409498][ T9028] x_tables: unsorted underflow at hook 1
[  165.763247][ T9043] netlink: 'syz.2.676': attribute type 3 has an invalid length.
[  165.794989][ T9042] netlink: 16 bytes leftover after parsing attributes in process `syz.1.675'.
[  166.057127][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.678'.
[  166.828644][ T8750] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  166.927824][ T8750] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  166.955049][ T8750] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  166.995201][ T8750] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  167.088482][ T5850] Bluetooth: hci4: command 0x0419 tx timeout
[  167.380422][ T8750] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.427939][ T9129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.691'.
[  167.458357][ T9131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.693'.
[  167.473932][ T8750] 8021q: adding VLAN 0 to HW filter on device team0
[  167.508216][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.515366][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.601974][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.609182][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.882979][ T9151] netlink: 80 bytes leftover after parsing attributes in process `syz.2.696'.
[  168.314437][ T9165] netlink: 'syz.4.700': attribute type 12 has an invalid length.
[  168.426834][ T8750] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.572531][ T8750] veth0_vlan: entered promiscuous mode
[  168.588197][ T8750] veth1_vlan: entered promiscuous mode
[  168.769458][ T8750] veth0_macvtap: entered promiscuous mode
[  168.813799][ T8750] veth1_macvtap: entered promiscuous mode
[  168.904278][ T8750] batman_adv: batadv0: Interface activated: batadv_slave_0
[  168.931025][ T9203] netlink: 'syz.1.708': attribute type 7 has an invalid length.
[  168.956399][ T8750] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.957477][ T9201] xt_bpf: check failed: parse error
[  169.001555][ T8750] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.029007][ T8750] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.047311][ T8750] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.056042][ T8750] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.163037][ T5851] Bluetooth: hci4: command 0x0419 tx timeout
[  169.487439][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.495317][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.515611][ T9228] __nla_validate_parse: 8 callbacks suppressed
[  169.515625][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.714'.
[  169.668789][ T9232] tipc: Can't bind to reserved service type 0
[  169.674193][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.683326][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.791436][ T9231] lo speed is unknown, defaulting to 1000
[  169.832543][ T9237] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3
[  169.870627][ T9237] netlink: 72 bytes leftover after parsing attributes in process `syz.1.718'.
[  169.900599][ T9241] netlink: 204 bytes leftover after parsing attributes in process `syz.4.719'.
[  170.522392][ T1114] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.553455][ T9270] No such timeout policy "syz0"
[  170.769420][ T1114] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.001107][ T1114] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.185347][ T1114] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.319783][ T1114] bridge_slave_1: left allmulticast mode
[  171.325486][ T1114] bridge_slave_1: left promiscuous mode
[  171.340184][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.351195][ T1114] bridge_slave_0: left allmulticast mode
[  171.356877][ T1114] bridge_slave_0: left promiscuous mode
[  171.363996][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.596509][ T9281] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  171.604995][ T5914] IPVS: starting estimator thread 0...
[  171.720066][ T9286] IPVS: using max 30 ests per chain, 72000 per kthread
[  171.749001][ T9292] netlink: 24 bytes leftover after parsing attributes in process `syz.4.728'.
[  171.756158][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.729'.
[  171.812496][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.825777][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.841469][ T1114] bond0 (unregistering): Released all slaves
[  171.882475][ T9290] macvtap3: entered promiscuous mode
[  171.899125][ T9290] macvtap3: entered allmulticast mode
[  171.998788][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  172.010799][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  172.021599][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  172.031707][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  172.044449][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  172.134711][ T9294] syz.2.729 (9294) used greatest stack depth: 18136 bytes left
[  172.233895][ T9295] syz.2.729 (9295) used greatest stack depth: 17992 bytes left
[  172.310964][ T9297] lo speed is unknown, defaulting to 1000
[  172.572636][ T9316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.734'.
[  172.598288][ T9318] Cannot find del_set index 17 as target
[  172.710113][ T9322] openvswitch: netlink: Message has 24 unknown bytes.
[  172.721815][ T9322] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.396446][ T9336] veth5: entered allmulticast mode
[  173.563811][ T1114] hsr_slave_0: left promiscuous mode
[  173.580970][ T1114] hsr_slave_1: left promiscuous mode
[  173.599659][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.607087][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0
[  173.628214][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.635640][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.680461][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  173.685224][ T1114] veth1_macvtap: left promiscuous mode
[  173.690523][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  173.700797][ T1114] veth0_macvtap: left promiscuous mode
[  173.701132][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  173.706674][ T1114] veth1_vlan: left promiscuous mode
[  173.714733][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  173.725559][ T1114] veth0_vlan: left promiscuous mode
[  173.726923][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  174.112701][ T1114] team0 (unregistering): Port device team_slave_1 removed
[  174.127911][ T5851] Bluetooth: hci4: command tx timeout
[  174.151303][ T1114] team0 (unregistering): Port device team_slave_0 removed
[  174.518372][ T9348] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  174.683246][ T9347] lo speed is unknown, defaulting to 1000
[  174.729084][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.743'.
[  174.780004][ T9297] chnl_net:caif_netlink_parms(): no params data found
[  175.000911][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.747'.
[  175.315026][ T9297] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.335294][ T9297] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.346191][ T9297] bridge_slave_0: entered allmulticast mode
[  175.357806][ T9297] bridge_slave_0: entered promiscuous mode
[  175.373058][ T9392] tipc: Cannot configure node identity twice
[  175.401088][ T9297] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.411458][ T9297] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.420901][ T9297] bridge_slave_1: entered allmulticast mode
[  175.433905][ T9297] bridge_slave_1: entered promiscuous mode
[  175.441101][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'.
[  175.441785][ T9392] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  175.678699][ T9297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  175.731109][ T9297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  175.783339][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'.
[  175.802465][ T5851] Bluetooth: hci1: command tx timeout
[  175.821914][ T9408] netlink: 5 bytes leftover after parsing attributes in process `syz.1.754'.
[  175.876835][ T9415] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[  175.940208][ T9297] team0: Port device team_slave_0 added
[  175.956140][ T9297] team0: Port device team_slave_1 added
[  176.133027][ T9424] 
: left allmulticast mode
[  176.142843][ T9424] 
: left promiscuous mode
[  176.148817][ T9424] bridge0: port 1(
) entered disabled state
[  176.165168][ T9424] bridge_slave_1: left allmulticast mode
[  176.171067][ T9424] bridge_slave_1: left promiscuous mode
[  176.179130][ T9424] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.190300][ T9424] bond0: (slave bond_slave_0): Releasing backup interface
[  176.201854][ T9424] bond0: (slave bond_slave_1): Releasing backup interface
[  176.209475][ T5851] Bluetooth: hci4: command tx timeout
[  176.233132][ T9424] team0: Port device team_slave_0 removed
[  176.242882][ T9424] team0: Port device team_slave_1 removed
[  176.252706][ T9424] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.260458][ T9424] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.271881][ T9424] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.285430][ T9424] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.301100][ T9297] batman_adv: batadv0: Adding interface: batadv_slave_0
[  176.308433][ T9297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.347406][ T9297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  176.378839][ T9297] batman_adv: batadv0: Adding interface: batadv_slave_1
[  176.395985][ T9297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.439484][ T9426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.759'.
[  176.445031][ T9297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  176.488420][ T9427] team0: Mode changed to "loadbalance"
[  176.504509][ T9428] dvmrp0: entered allmulticast mode
[  176.756209][ T9442] netlink: 'syz.4.762': attribute type 10 has an invalid length.
[  176.768507][ T9297] hsr_slave_0: entered promiscuous mode
[  176.780369][ T9297] hsr_slave_1: entered promiscuous mode
[  176.786943][ T9297] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  176.804156][ T9297] Cannot create hsr debugfs directory
[  176.844460][ T9442] team0: Device veth1_macvtap failed to register rx_handler
[  177.141074][ T9347] chnl_net:caif_netlink_parms(): no params data found
[  177.264623][ T9456] netlink: 20 bytes leftover after parsing attributes in process `syz.1.764'.
[  177.288253][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.764'.
[  177.877881][ T5851] Bluetooth: hci1: command tx timeout
[  178.095137][ T9476] netlink: 'syz.1.769': attribute type 1 has an invalid length.
[  178.103728][ T9476] netlink: 140 bytes leftover after parsing attributes in process `syz.1.769'.
[  178.114543][ T9476] netlink: 'syz.1.769': attribute type 1 has an invalid length.
[  178.224154][ T9347] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.239674][ T9347] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.246961][ T9347] bridge_slave_0: entered allmulticast mode
[  178.263521][ T9347] bridge_slave_0: entered promiscuous mode
[  178.277843][ T5851] Bluetooth: hci4: command tx timeout
[  178.310618][ T9347] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.350624][ T9347] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.377451][ T9347] bridge_slave_1: entered allmulticast mode
[  178.411441][ T9347] bridge_slave_1: entered promiscuous mode
[  178.451727][ T9490] netlink: 236 bytes leftover after parsing attributes in process `syz.4.772'.
[  178.603690][ T9347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  178.873649][ T9347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  179.101054][ T9347] team0: Port device team_slave_0 added
[  179.243868][ T9347] team0: Port device team_slave_1 added
[  179.360664][ T9347] batman_adv: batadv0: Adding interface: batadv_slave_0
[  179.377801][ T9347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.421807][ T9347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  179.434885][ T9347] batman_adv: batadv0: Adding interface: batadv_slave_1
[  179.444703][ T9347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.471240][ T9347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  179.801088][ T9347] hsr_slave_0: entered promiscuous mode
[  179.814421][ T9347] hsr_slave_1: entered promiscuous mode
[  179.838853][ T9347] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  179.859857][ T9347] Cannot create hsr debugfs directory
[  179.958319][ T5851] Bluetooth: hci1: command tx timeout
[  180.120112][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.786'.
[  180.165490][ T9559] netlink: 32 bytes leftover after parsing attributes in process `syz.3.784'.
[  180.208107][ T9559] sctp: [Deprecated]: syz.3.784 (pid 9559) Use of int in maxseg socket option.
[  180.208107][ T9559] Use struct sctp_assoc_value instead
[  180.240864][ T9566] vlan0: entered allmulticast mode
[  180.266315][ T9566] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  180.315038][ T9297] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  180.351176][ T9297] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  180.360449][ T5851] Bluetooth: hci4: command tx timeout
[  180.572552][ T9297] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  180.600628][ T9586] netlink: 10 bytes leftover after parsing attributes in process `syz.3.789'.
[  180.619897][ T9297] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  180.636458][ T9586] netlink: 'syz.3.789': attribute type 1 has an invalid length.
[  180.685537][ T9586] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.689393][ T9592] netlink: 20 bytes leftover after parsing attributes in process `syz.3.789'.
[  180.913388][ T9347] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.953889][ T9602] delete_channel: no stack
[  181.056907][ T9347] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.176050][ T9347] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.244379][ T9613] xt_CT: No such helper "snmp"
[  181.289559][ T9347] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.339979][ T9297] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.341217][ T9619] netlink: 28 bytes leftover after parsing attributes in process `syz.1.798'.
[  181.425618][ T9297] 8021q: adding VLAN 0 to HW filter on device team0
[  181.461703][ T6698] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.468937][ T6698] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.495279][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.502450][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.715329][ T9347] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  181.775281][ T9347] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  181.862495][ T9347] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  181.888948][ T9347] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  181.935937][ T9648] raw_sendmsg: syz.4.802 forgot to set AF_INET. Fix it!
[  181.994669][ T9647] netlink: 72 bytes leftover after parsing attributes in process `syz.3.803'.
[  182.037374][ T5851] Bluetooth: hci1: command tx timeout
[  182.372116][ T9671] : entered promiscuous mode
[  182.440183][ T9675] netlink: 40 bytes leftover after parsing attributes in process `syz.1.807'.
[  182.468221][ T9675] netlink: 104 bytes leftover after parsing attributes in process `syz.1.807'.
[  182.586506][ T9347] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.685358][ T9347] 8021q: adding VLAN 0 to HW filter on device team0
[  182.794633][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.801824][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.886635][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.893869][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.064398][ T9700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.812'.
[  183.156667][ T9297] 8021q: adding VLAN 0 to HW filter on device batadv0
[  183.221370][ T9711] netlink: 256 bytes leftover after parsing attributes in process `syz.4.814'.
[  183.267538][ T9711] unsupported nlmsg_type 40
[  183.336909][ T9297] veth0_vlan: entered promiscuous mode
[  183.357092][ T9297] veth1_vlan: entered promiscuous mode
[  183.492523][ T9297] veth0_macvtap: entered promiscuous mode
[  183.529961][ T9297] veth1_macvtap: entered promiscuous mode
[  183.632694][ T9297] batman_adv: batadv0: Interface activated: batadv_slave_0
[  183.685122][ T9297] batman_adv: batadv0: Interface activated: batadv_slave_1
[  183.735257][ T9297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.779509][ T9297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.804194][ T9297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.823705][ T9297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.890346][ T9740] syzkaller1: entered promiscuous mode
[  183.920679][ T9740] syzkaller1: entered allmulticast mode
[  184.686225][ T9347] 8021q: adding VLAN 0 to HW filter on device batadv0
[  185.021613][ T9347] veth0_vlan: entered promiscuous mode
[  185.055374][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.106340][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.240279][ T9347] veth1_vlan: entered promiscuous mode
[  185.314359][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.357738][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.394685][ T9789] __nla_validate_parse: 3 callbacks suppressed
[  185.394700][ T9789] netlink: 28 bytes leftover after parsing attributes in process `syz.1.830'.
[  185.428756][ T9789] netlink: 32 bytes leftover after parsing attributes in process `syz.1.830'.
[  185.431476][ T9347] veth0_macvtap: entered promiscuous mode
[  185.533166][ T9347] veth1_macvtap: entered promiscuous mode
[  185.720445][ T9347] batman_adv: batadv0: Interface activated: batadv_slave_0
[  185.720590][ T9800] IPVS: set_ctl: invalid protocol: 1 172.30.1.2:20000
[  185.772164][ T9347] batman_adv: batadv0: Interface activated: batadv_slave_1
[  185.815977][ T9347] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.848087][ T9347] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.867584][ T9347] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.876328][ T9347] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.065166][   T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.104533][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.835'.
[  186.143088][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.835'.
[  186.230376][   T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.391283][   T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.453804][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.473935][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.521212][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.530248][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.610018][   T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.850799][   T49] bridge_slave_1: left allmulticast mode
[  186.856503][   T49] bridge_slave_1: left promiscuous mode
[  186.893571][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.920787][   T49] bridge_slave_0: left allmulticast mode
[  186.936765][   T49] bridge_slave_0: left promiscuous mode
[  186.959301][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.004517][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  188.014874][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  188.024118][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  188.033187][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  188.054072][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  188.134449][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  188.162429][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  188.189037][   T49] bond0 (unregistering): Released all slaves
[  188.198172][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  188.206506][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  188.214617][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  188.224203][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  188.233455][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  188.293703][ T3195] lo speed is unknown, defaulting to 1000
[  188.626204][ T9863] lo speed is unknown, defaulting to 1000
[  188.647897][ T9883] openvswitch: netlink: Port 10289156 exceeds max allowable 65535
[  188.749588][ T9887] netlink: 'syz.4.842': attribute type 1 has an invalid length.
[  189.153387][ T9902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.847'.
[  189.347857][ T9913] netlink: 'syz.4.849': attribute type 1 has an invalid length.
[  189.355666][ T9913] netlink: 184 bytes leftover after parsing attributes in process `syz.4.849'.
[  189.516022][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.850'.
[  189.599360][ T9866] lo speed is unknown, defaulting to 1000
[  189.750423][ T9930] x_tables: duplicate underflow at hook 3
[  190.103552][ T9948] xt_bpf: check failed: parse error
[  190.118648][ T5851] Bluetooth: hci1: command tx timeout
[  190.296693][ T5851] Bluetooth: hci4: command tx timeout
[  190.602992][ T9863] chnl_net:caif_netlink_parms(): no params data found
[  191.104348][   T49] hsr_slave_0: left promiscuous mode
[  191.134003][   T49] hsr_slave_1: left promiscuous mode
[  191.143761][ T9993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.864'.
[  191.153469][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.166536][ T9997] Unsupported ieee802154 address type: 0
[  191.167011][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.238905][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.246349][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.311616][T10006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.867'.
[  191.321973][   T49] veth1_macvtap: left promiscuous mode
[  191.329592][   T49] veth0_macvtap: left promiscuous mode
[  191.335366][   T49] veth1_vlan: left promiscuous mode
[  191.341953][   T49] veth0_vlan: left promiscuous mode
[  191.382206][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.867'.
[  191.725937][   T49] team0 (unregistering): Port device team_slave_1 removed
[  191.760705][   T49] team0 (unregistering): Port device team_slave_0 removed
[  192.202634][ T5851] Bluetooth: hci1: command tx timeout
[  192.275896][ T9866] chnl_net:caif_netlink_parms(): no params data found
[  192.303424][ T9863] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.305439][T10021] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  192.311106][ T9863] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.329816][ T9863] bridge_slave_0: entered allmulticast mode
[  192.337138][T10022] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.869'.
[  192.350112][ T9863] bridge_slave_0: entered promiscuous mode
[  192.357340][ T5851] Bluetooth: hci4: command tx timeout
[  192.376209][T10021] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  192.396269][ T9863] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.403585][ T9863] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.411279][ T9863] bridge_slave_1: entered allmulticast mode
[  192.419146][ T9863] bridge_slave_1: entered promiscuous mode
[  192.540239][T10027] netlink: 24 bytes leftover after parsing attributes in process `syz.4.870'.
[  192.572443][ T9863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.633089][ T9863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.931077][ T9863] team0: Port device team_slave_0 added
[  192.961875][ T9863] team0: Port device team_slave_1 added
[  193.002384][ T9866] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.022199][ T9866] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.040416][ T9866] bridge_slave_0: entered allmulticast mode
[  193.076207][ T9866] bridge_slave_0: entered promiscuous mode
[  193.302758][ T9866] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.312797][ T9866] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.344564][ T9866] bridge_slave_1: entered allmulticast mode
[  193.355631][ T9866] bridge_slave_1: entered promiscuous mode
[  193.444509][T10065] netlink: 'syz.4.876': attribute type 1 has an invalid length.
[  193.458595][ T9863] batman_adv: batadv0: Adding interface: batadv_slave_0
[  193.465575][ T9863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.505908][ T9863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  193.507146][T10065] netlink: 224 bytes leftover after parsing attributes in process `syz.4.876'.
[  193.547277][T10065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.876'.
[  193.556419][T10068] netlink: 'syz.4.876': attribute type 27 has an invalid length.
[  193.688098][   T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.726357][ T9863] batman_adv: batadv0: Adding interface: batadv_slave_1
[  193.733619][ T9863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.761826][ T9863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  193.776636][T10077] ip6t_srh: unknown srh match flags  536B
[  193.788107][ T9866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  193.802239][ T9866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  193.929872][   T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.052702][ T9866] team0: Port device team_slave_0 added
[  194.067456][T10086] netlink: 16 bytes leftover after parsing attributes in process `syz.4.883'.
[  194.095969][T10086] netlink: 16 bytes leftover after parsing attributes in process `syz.4.883'.
[  194.129840][ T9866] team0: Port device team_slave_1 added
[  194.201283][   T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.277979][ T5851] Bluetooth: hci1: command tx timeout
[  194.361944][ T9863] hsr_slave_0: entered promiscuous mode
[  194.385880][ T9863] hsr_slave_1: entered promiscuous mode
[  194.405117][T10109] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20001
[  194.409521][ T9863] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  194.413558][T10107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.888'.
[  194.429623][ T9863] Cannot create hsr debugfs directory
[  194.437396][ T5851] Bluetooth: hci4: command tx timeout
[  194.461923][   T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.956242][ T9866] batman_adv: batadv0: Adding interface: batadv_slave_0
[  194.964880][ T9866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.017888][ T9866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  195.179851][ T9866] batman_adv: batadv0: Adding interface: batadv_slave_1
[  195.186877][ T9866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.250235][ T9866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  195.693055][T10157] netlink: 'syz.1.898': attribute type 1 has an invalid length.
[  195.701493][ T9866] hsr_slave_0: entered promiscuous mode
[  195.709023][ T9866] hsr_slave_1: entered promiscuous mode
[  195.715245][ T9866] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  195.748903][ T9866] Cannot create hsr debugfs directory
[  195.781716][T10160] netlink: 'syz.4.899': attribute type 9 has an invalid length.
[  195.855762][T10164] netlink: 'syz.4.899': attribute type 1 has an invalid length.
[  195.897530][T10165] netlink: 'syz.1.900': attribute type 2 has an invalid length.
[  196.325077][   T49] bridge_slave_1: left allmulticast mode
[  196.337255][   T49] bridge_slave_1: left promiscuous mode
[  196.343572][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.357659][ T5851] Bluetooth: hci1: command tx timeout
[  196.375000][   T49] bridge_slave_0: left allmulticast mode
[  196.391678][   T49] bridge_slave_0: left promiscuous mode
[  196.399521][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.524443][ T5851] Bluetooth: hci4: command tx timeout
[  196.556325][T10192] __nla_validate_parse: 10 callbacks suppressed
[  196.556341][T10192] netlink: 56 bytes leftover after parsing attributes in process `syz.4.906'.
[  196.580702][T10192] netlink: 24 bytes leftover after parsing attributes in process `syz.4.906'.
[  196.977824][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  196.998329][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  197.020032][   T49] bond0 (unregistering): Released all slaves
[  197.130375][T10191] IPVS: Error connecting to the multicast addr
[  197.719785][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.915'.
[  197.786603][T10229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.916'.
[  197.801141][T10219] netlink: 11 bytes leftover after parsing attributes in process `syz.4.914'.
[  198.188280][T10240] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.238391][T10245] netlink: 'syz.1.919': attribute type 6 has an invalid length.
[  198.342996][T10244] veth0_virt_wifi: renamed from veth0_macvtap
[  198.401482][   T49] hsr_slave_0: left promiscuous mode
[  198.414287][   T49] hsr_slave_1: left promiscuous mode
[  198.443333][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  198.473936][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  198.493041][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  198.512713][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  198.576514][   T49] veth1_macvtap: left promiscuous mode
[  198.595976][   T49] veth0_macvtap: left promiscuous mode
[  198.613368][   T49] veth1_vlan: left promiscuous mode
[  198.626579][   T49] veth0_vlan: left promiscuous mode
[  198.790101][T10271] netlink: 24 bytes leftover after parsing attributes in process `syz.3.925'.
[  198.799760][T10272] netlink: 24 bytes leftover after parsing attributes in process `syz.3.925'.
[  198.841987][T10273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.925'.
[  198.861374][T10273] netlink: 24 bytes leftover after parsing attributes in process `syz.3.925'.
[  199.105761][T10275] netlink: 636 bytes leftover after parsing attributes in process `syz.4.926'.
[  199.231270][   T49] team0 (unregistering): Port device team_slave_1 removed
[  199.271735][   T49] team0 (unregistering): Port device team_slave_0 removed
[  199.649755][ T9863] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  199.748604][ T9863] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  199.805236][ T9863] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  199.841527][ T9863] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  200.305422][ T9863] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.389553][ T9866] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  200.429206][ T9863] 8021q: adding VLAN 0 to HW filter on device team0
[  200.444159][ T9866] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  200.489709][ T9866] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  200.522463][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.529659][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.567941][ T9866] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  200.590869][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.598070][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.734383][T10331] lo: entered allmulticast mode
[  200.795241][ T3195] lo speed is unknown, defaulting to 1000
[  200.814046][ T3195] syz0: Port: 1 Link DOWN
[  200.855022][   T48] lo speed is unknown, defaulting to 1000
[  200.863117][ T9863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  201.295218][ T9866] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.356210][ T9866] 8021q: adding VLAN 0 to HW filter on device team0
[  201.454863][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.462046][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.548987][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.556203][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.676031][ T9866] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  201.737321][ T9866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  201.763085][T10368] __nla_validate_parse: 5 callbacks suppressed
[  201.763100][T10368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.943'.
[  201.851061][ T9863] 8021q: adding VLAN 0 to HW filter on device batadv0
[  201.908936][T10380] xt_connbytes: Forcing CT accounting to be enabled
[  202.091709][ T9863] veth0_vlan: entered promiscuous mode
[  202.166786][ T9863] veth1_vlan: entered promiscuous mode
[  202.302246][T10396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.948'.
[  202.416369][ T9863] veth0_macvtap: entered promiscuous mode
[  202.462369][ T9863] veth1_macvtap: entered promiscuous mode
[  202.522026][ T9866] 8021q: adding VLAN 0 to HW filter on device batadv0
[  202.551909][ T9863] batman_adv: batadv0: Interface activated: batadv_slave_0
[  202.590924][ T9863] batman_adv: batadv0: Interface activated: batadv_slave_1
[  202.646492][ T9863] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  202.666063][ T9863] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  202.678767][ T9863] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  202.687925][ T9863] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.716033][T10415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.951'.
[  202.832395][ T9866] veth0_vlan: entered promiscuous mode
[  202.873645][ T9866] veth1_vlan: entered promiscuous mode
[  203.025929][ T6698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.051875][T10420] IPv6: NLM_F_CREATE should be specified when creating new route
[  203.064472][ T6698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.165630][ T9866] veth0_macvtap: entered promiscuous mode
[  203.195821][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.954'.
[  203.199581][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.208445][ T9866] veth1_macvtap: entered promiscuous mode
[  203.233563][T10427] netlink: 16 bytes leftover after parsing attributes in process `syz.4.954'.
[  203.238036][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.279222][T10427] netlink: 16 bytes leftover after parsing attributes in process `syz.4.954'.
[  203.314999][ T9866] batman_adv: batadv0: Interface activated: batadv_slave_0
[  203.346998][ T9866] batman_adv: batadv0: Interface activated: batadv_slave_1
[  203.398502][ T9866] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.408551][ T9866] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.418680][ T9866] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.436673][ T9866] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.575812][T10438] sit0: entered promiscuous mode
[  203.629903][T10438] netlink: 'syz.4.956': attribute type 1 has an invalid length.
[  203.659881][T10438] netlink: 1 bytes leftover after parsing attributes in process `syz.4.956'.
[  203.845840][T10446] netlink: 'syz.4.958': attribute type 1 has an invalid length.
[  203.886464][T10446] netlink: 224 bytes leftover after parsing attributes in process `syz.4.958'.
[  203.913922][T10446] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR
[  203.984037][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.030233][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.064741][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.114972][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.158135][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.166003][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.344248][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.521315][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.820579][   T12] bridge_slave_1: left allmulticast mode
[  204.848340][   T12] bridge_slave_1: left promiscuous mode
[  204.854121][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.900584][   T12] bridge_slave_0: left allmulticast mode
[  204.906269][   T12] bridge_slave_0: left promiscuous mode
[  204.912223][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.016637][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  206.016679][ T5165] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  206.033534][ T5165] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  206.042874][ T5165] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  206.048100][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  206.057797][ T5165] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  206.058510][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  206.073221][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  206.073862][ T5165] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  206.091669][ T5859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  206.200591][ T3195] Oops: general protection fault, probably for non-canonical address 0xfbd5a5d5a0000000: 0000 [#1] SMP KASAN PTI
[  206.212641][ T3195] KASAN: maybe wild-memory-access in range [0xdead4ead00000000-0xdead4ead00000007]
[  206.221929][ T3195] CPU: 1 UID: 0 PID: 3195 Comm: kworker/1:2 Not tainted 6.16.0-rc5-syzkaller-00182-g7727ec1523d7 #0 PREEMPT(full) 
[  206.233986][ T3195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  206.244045][ T3195] Workqueue: events_long br_fdb_cleanup
[  206.249632][ T3195] RIP: 0010:br_switchdev_event+0x47/0x530
[  206.255361][ T3195] Code: 00 00 fc ff df e8 79 04 7a f7 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 13 87 dd f7 4c 8b 33 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 fa 86 dd f7 49 8b 2e 48 89 ee 48
[  206.274964][ T3195] RSP: 0018:ffffc9000c11f6a0 EFLAGS: 00010a06
[  206.281033][ T3195] RAX: 1bd5a9d5a0000000 RBX: ffffc9000c11f7e0 RCX: ffff8880301a8000
[  206.289005][ T3195] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8f64e040
[  206.296977][ T3195] RBP: 00000000ffffffff R08: ffffffff8fa1f3f7 R09: 1ffffffff1f43e7e
[  206.304955][ T3195] R10: dffffc0000000000 R11: ffffffff8a4631d0 R12: 0000000000000004
[  206.312938][ T3195] R13: 0000000000000000 R14: dead4ead00000000 R15: dffffc0000000000
[  206.320908][ T3195] FS:  0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000
[  206.329838][ T3195] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  206.336431][ T3195] CR2: 0000200000ffd000 CR3: 000000005365a000 CR4: 00000000003526f0
[  206.344416][ T3195] Call Trace:
[  206.347789][ T3195]  <TASK>
[  206.350738][ T3195]  notifier_call_chain+0x1b3/0x3e0
[  206.355871][ T3195]  ? atomic_notifier_call_chain+0x26/0x180
[  206.361705][ T3195]  atomic_notifier_call_chain+0xda/0x180
[  206.367346][ T3195]  br_switchdev_fdb_notify+0x361/0x3e0
[  206.372828][ T3195]  ? __pfx_br_switchdev_fdb_notify+0x10/0x10
[  206.378839][ T3195]  ? rht_lock+0x114/0x220
[  206.383172][ T3195]  ? rht_lock+0xff/0x220
[  206.387430][ T3195]  fdb_notify+0x89/0x160
[  206.391694][ T3195]  fdb_delete+0xec4/0x1160
[  206.396119][ T3195]  ? fdb_delete+0x39a/0x1160
[  206.400725][ T3195]  ? __pfx_fdb_delete+0x10/0x10
[  206.405587][ T3195]  ? br_fdb_cleanup+0x270/0x4d0
[  206.410461][ T3195]  br_fdb_cleanup+0x2aa/0x4d0
[  206.415152][ T3195]  ? br_fdb_cleanup+0xb1/0x4d0
[  206.419937][ T3195]  ? process_scheduled_works+0x9ef/0x17b0
[  206.425676][ T3195]  process_scheduled_works+0xae1/0x17b0
[  206.431238][ T3195]  ? __pfx_process_scheduled_works+0x10/0x10
[  206.437236][ T3195]  worker_thread+0x8a0/0xda0
[  206.441843][ T3195]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  206.448183][ T3195]  ? __kthread_parkme+0x7b/0x200
[  206.453130][ T3195]  kthread+0x70e/0x8a0
[  206.457215][ T3195]  ? __pfx_worker_thread+0x10/0x10
[  206.462345][ T3195]  ? __pfx_kthread+0x10/0x10
[  206.466946][ T3195]  ? _raw_spin_unlock_irq+0x23/0x50
[  206.472164][ T3195]  ? lockdep_hardirqs_on+0x9c/0x150
[  206.477373][ T3195]  ? __pfx_kthread+0x10/0x10
[  206.481980][ T3195]  ret_from_fork+0x3fc/0x770
[  206.486595][ T3195]  ? __pfx_ret_from_fork+0x10/0x10
[  206.491723][ T3195]  ? __switch_to_asm+0x39/0x70
[  206.496495][ T3195]  ? __switch_to_asm+0x33/0x70
[  206.501306][ T3195]  ? __pfx_kthread+0x10/0x10
[  206.505922][ T3195]  ret_from_fork_asm+0x1a/0x30
[  206.510701][ T3195]  </TASK>
[  206.513717][ T3195] Modules linked in:
[  206.517729][ T3195] ---[ end trace 0000000000000000 ]---
[  206.523215][ T3195] RIP: 0010:br_switchdev_event+0x47/0x530
[  206.528996][ T3195] Code: 00 00 fc ff df e8 79 04 7a f7 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 13 87 dd f7 4c 8b 33 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 fa 86 dd f7 49 8b 2e 48 89 ee 48
[  206.548650][ T3195] RSP: 0018:ffffc9000c11f6a0 EFLAGS: 00010a06
[  206.554749][ T3195] RAX: 1bd5a9d5a0000000 RBX: ffffc9000c11f7e0 RCX: ffff8880301a8000
[  206.562780][ T3195] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8f64e040
[  206.570808][ T3195] RBP: 00000000ffffffff R08: ffffffff8fa1f3f7 R09: 1ffffffff1f43e7e
[  206.578834][ T3195] R10: dffffc0000000000 R11: ffffffff8a4631d0 R12: 0000000000000004
[  206.586839][ T3195] R13: 0000000000000000 R14: dead4ead00000000 R15: dffffc0000000000
[  206.590741][ T5856] Bluetooth: hci2: command 0x0406 tx timeout
[  206.594849][ T3195] FS:  0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000
[  206.609822][ T3195] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  206.616424][ T3195] CR2: 0000200000ffd000 CR3: 000000005365a000 CR4: 00000000003526f0
[  206.624464][ T3195] Kernel panic - not syncing: Fatal exception in interrupt
[  206.632027][ T3195] Kernel Offset: disabled
[  206.636372][ T3195] Rebooting in 86400 seconds..