last executing test programs:

2m59.064875375s ago: executing program 3 (id=2825):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000240))
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0) (async)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) (async)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
unshare(0x2040200) (async)
unshare(0x2040200)
recvmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0, 0x94}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0)
sendmsg$netlink(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="380100002a00000827bd7000fcdbdf253100c580c48ca20fca20ddceb00eec4f0005b195b6a7a4535602a5621a9439e5000af4440917ea53a5ec7b509ea9a05b3700000004001b00ee002f80040017808463edd93f326c2f597e5d647323704132db491af66c1fd0ffcb0c001400030000000000000004004080b500fb0095475d71fb262a11760b3b261754b75497925dcb81f5e494a289b2f1a16b77e7976721dc5d73bde25df772159b0c24d323cc6c1e5923fc2c727b6ebecab6ce00385b75cd577430c75746ec25d89908150b5ae4b7acc4f61ad3ee02276af48b6377b34144c635a8081212be8456e515a6d4eb3e927cf51e4afc52103231dbf656812430b33934619bbcec9933be66f15260369d24f47ba9cbec06af97fd035092215c61c61e80e39deab8e53d9efd818be9a52a9da893e02369c1c73caa000700000032800000"], 0x138}], 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000)

2m58.800248518s ago: executing program 3 (id=2827):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40800000000000073114000000000008510000002000000b7000000000000009500c200000000009500001200000000f593d26bc6fa2d343eac9290dcd80ae286e2d02b53c0a1a0284786a4715338416e7ab1f3a8b3163df0353c209c42e1e46c9b6f9acfb9db20783be91d051bbfa1512dc8a244e4d473dc55ad"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'wlan0\x00', 0x600})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x3, &(0x7f0000000240)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x51}}, &(0x7f0000000040)='syzkaller\x00', 0x6}, 0x90)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x800, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xfff3, 0xfff2}, {0xffe0, 0x3}, {0xd, 0x4}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x401}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x90)

2m58.373181463s ago: executing program 3 (id=2832):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x45c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xb, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x1, 0x9, 0x10000000}}, @TCA_TBF_RTAB={0x404, 0x2, [0xfffffbff, 0x8, 0x0, 0xffff, 0x7c, 0xc1, 0x4, 0x6, 0x964, 0x0, 0x5, 0x7, 0xf2, 0x4, 0x1, 0x9, 0x101, 0xf, 0x4, 0x1, 0x556, 0x1, 0x8, 0x5, 0x4, 0xe, 0x3, 0x9, 0x1, 0x4, 0xdd, 0x6, 0xb, 0x17, 0x115e, 0x4, 0x4, 0x7, 0xfffffffb, 0x4, 0xff, 0x8, 0x2, 0x6, 0x4, 0x44c, 0xfc9, 0xaa4, 0x9, 0x1, 0x8, 0x6, 0x6b8c, 0x3, 0x6, 0x5, 0x2, 0x149, 0x574, 0x9, 0x1, 0x4, 0x5, 0xffffff52, 0xed, 0x4, 0x7, 0x74dc, 0x80000000, 0x73ca526a, 0x10, 0x81, 0xb, 0xffffff80, 0x80000001, 0x3, 0x80000001, 0xffffffff, 0xd0a8, 0x8, 0x1, 0xb, 0x6, 0x5, 0xea5, 0x0, 0xffff406f, 0x3ff, 0x2, 0x8000, 0xff, 0x2, 0xe, 0x80000000, 0x80, 0x3fb4, 0x7e5, 0x10000, 0x0, 0x4, 0x7fff, 0x3, 0xb26, 0x800, 0x1, 0x40, 0x3, 0x80, 0x2, 0xfbe, 0x3ba, 0x5, 0xbfc, 0x7, 0x8, 0x3, 0x8, 0x10000, 0x1, 0x10, 0xffff3fad, 0xfffffffa, 0x800, 0x6, 0x7, 0x8, 0x0, 0x4, 0x8, 0x200, 0x4, 0x8, 0x1, 0x7, 0xd, 0x6, 0x9, 0x401, 0x8001, 0xb9ea, 0x1, 0x7fff, 0xfffffffe, 0x2, 0x7ec, 0x7fff, 0x7, 0x6, 0x8, 0x6, 0x1, 0x7, 0xffff, 0x9, 0x8, 0xac000000, 0x97, 0x8000, 0x2, 0x0, 0x0, 0x3, 0x6, 0x200, 0x4, 0x7, 0x3ff, 0x6, 0x5, 0x8, 0x200, 0x2c9, 0x4, 0x4, 0x4, 0x7, 0x5, 0x6, 0xc, 0x9, 0xf, 0x260b, 0x2, 0x2, 0x9, 0x100, 0x4, 0x2, 0x80000, 0x7, 0x1, 0x1, 0x2, 0x40, 0x3, 0x3, 0x100, 0x8, 0x1, 0x8, 0x3, 0xc4, 0x1d6, 0xffffff80, 0x9, 0xf, 0x1, 0x8, 0x8001, 0x7ff, 0x7, 0x0, 0x7, 0x4e47, 0x2, 0x2, 0x8, 0xfffffff7, 0x8a35, 0x3, 0x2e599023, 0x8, 0x7, 0x2, 0x10, 0xe, 0x5, 0x7fff, 0xfffffffb, 0x9, 0x5, 0xb236, 0x6, 0x400, 0x5, 0x80, 0x4, 0x2, 0x8001, 0x5, 0x4, 0x7, 0x4, 0xd4bd, 0x3, 0x6, 0x1, 0x5, 0x80000000, 0x3, 0x2, 0x3, 0xaa36, 0x1000, 0x6, 0x5]}]}}]}, 0x45c}}, 0x44080)
sendto$unix(r0, &(0x7f0000000080)="06d6e95f141b03ffbf805a974160d603200a5d1f57c83f5614eaf02ebbbf0087d1b8e4b5997713595db491bc80e253ae609554911d6d5173685e3c25ad2e9c3365d3e8d83a8380c857411962427abdc7a03a1e2f02f90673d6b92eda66b3d79e98c37d460fea6cc1ab23030ba28bdba06a6d0868b99bcfee9bce24ccdb1252ce0f88a1aa42610a4b80848c3b8737c6b9064d18a937c52cd7044a02b58c6bda6c832f064a4e81f10c93f6e0a0f8b5031ece99bbabb091ddcd565e027e70152f703caa1b8b12f694d6df7fb564f9d9e86961dd483bebb28c700d4f7164ee3b", 0xde, 0x4080, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)

2m58.024745144s ago: executing program 3 (id=2833):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
socket$inet(0x2, 0x6, 0x7fd) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x44, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd}]}]}, 0x44}}, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x80)
r5 = socket(0x28, 0x5, 0x0)
r6 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async)
listen(r6, 0x4) (async)
connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async, rerun: 64)
sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) (async, rerun: 64)
r7 = accept4$unix(r6, 0x0, 0x0, 0x800)
recvfrom$unix(r7, &(0x7f0000000140)=""/248, 0xf8, 0x40, 0x0, 0x0)
write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x6a) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xe6445995d9064ed7}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}]]}, 0x2c}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0xd, 0x5, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$SIOCX25GCALLUSERDATA(r9, 0x89e4, &(0x7f0000000100)={0x3, "dbb766ca2101b14eed50afc3fe10730b907dcde320bb0ecf54b9de55374b185aabd46c8e3afa91ba15b6a8bf9de60c3ef94ddaf4963464c184f5fb702b9fca40589e5c905d9e296231da375aa19e5467eb72ea43d4bb323ef876b92d26e1ae93bee1f5748c88013ab7cbf46e6c77a3dcdb09f1130a8004f1412b1621da884150"})
ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000a00)={{r0}, "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"})
r10 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNDEL(r10, 0x400442c9, &(0x7f0000001380)={0x1000, @broadcast})

2m57.420677692s ago: executing program 3 (id=2836):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000040), &(0x7f00000000c0)=0xc)
socket$unix(0x1, 0x1, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x4, &(0x7f00000001c0)=[{0x25, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x37cb7880}, {0x0, 0xfe, 0x1}, {0x6, 0x0, 0x0, 0x8007}]})

2m57.111390695s ago: executing program 3 (id=2838):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
socketpair(0x1, 0x20000000000001, 0x0, 0x0) (async)
socketpair(0x1, 0x20000000000001, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000080), 0x12) (async)
write$cgroup_pid(r4, &(0x7f0000000080), 0x12)
write$cgroup_pid(r2, &(0x7f00000005c0), 0x12)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5e}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5e}, 0x94)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000000c0)={0x3, 'veth0_vlan\x00', {0x1000}, 0x2}) (async)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000000c0)={0x3, 'veth0_vlan\x00', {0x1000}, 0x2})
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x7, 0x4)
socket(0xa, 0x3, 0x3a) (async)
r5 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000140)={0x7, 'ip6_vti0\x00', {0xb1}, 0x4})
setsockopt$MRT6_FLUSH(r5, 0x29, 0xd1, 0x0, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000640)=ANY=[@ANYRES16=r1, @ANYRES64=r3], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0xca, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000940)={'gre0\x00', <r11=>0x0, 0x40, 0x8, 0x9, 0x4, {{0x1d, 0x4, 0x0, 0x8, 0x74, 0x68, 0x0, 0xfa, 0x4, 0x0, @empty, @rand_addr=0x64010101, {[@ssrr={0x89, 0x2b, 0xda, [@multicast1, @broadcast, @loopback, @broadcast, @remote, @empty, @remote, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x24, 0x12, 0x3, 0x4, [{@empty, 0x7}, {@multicast1, 0x7ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffe}, {@broadcast, 0x9}]}, @generic={0x44, 0x11, "2ed5c38181a54c340b984e3969ae09"}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', <r12=>0x0, 0x2f, 0x7, 0x1, 0x5b, 0x4, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x700, 0x6, 0x5f66}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="813320163fd36e1631dcce77fc8cc0472b70ef40aaf0bf73336e2fb6aeeaa1808d5d2bb171", @ANYRES16=r7, @ANYBLOB="00042cbd7000fbdbdf2504000000300001801400020070696d36726567300000000000000000080003000200000008000300010000000800030001000000580001800800030000000000140002007767300000000000000000000000000008000300000000001400020076657468305f746f5f626f6e64000000140002006d61637674617030000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000300020000001400020070696d726567300000000000000000003000018008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="140002006d6163766c616e3000003d672470e9561d0a0100", @ANYRES32=r12, @ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="813320163fd36e1631dcce77fc8cc0472b70ef40aaf0bf73336e2fb6aeeaa1808d5d2bb171", @ANYRES16=r7, @ANYBLOB="00042cbd7000fbdbdf2504000000300001801400020070696d36726567300000000000000000080003000200000008000300010000000800030001000000580001800800030000000000140002007767300000000000000000000000000008000300000000001400020076657468305f746f5f626f6e64000000140002006d61637674617030000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000300020000001400020070696d726567300000000000000000003000018008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="140002006d6163766c616e3000003d672470e9561d0a0100", @ANYRES32=r12, @ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x80)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)

2m41.885060392s ago: executing program 32 (id=2838):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
socketpair(0x1, 0x20000000000001, 0x0, 0x0) (async)
socketpair(0x1, 0x20000000000001, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000080), 0x12) (async)
write$cgroup_pid(r4, &(0x7f0000000080), 0x12)
write$cgroup_pid(r2, &(0x7f00000005c0), 0x12)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5e}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5e}, 0x94)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000000c0)={0x3, 'veth0_vlan\x00', {0x1000}, 0x2}) (async)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000000c0)={0x3, 'veth0_vlan\x00', {0x1000}, 0x2})
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x7, 0x4)
socket(0xa, 0x3, 0x3a) (async)
r5 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000140)={0x7, 'ip6_vti0\x00', {0xb1}, 0x4})
setsockopt$MRT6_FLUSH(r5, 0x29, 0xd1, 0x0, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000640)=ANY=[@ANYRES16=r1, @ANYRES64=r3], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0xca, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000940)={'gre0\x00', <r11=>0x0, 0x40, 0x8, 0x9, 0x4, {{0x1d, 0x4, 0x0, 0x8, 0x74, 0x68, 0x0, 0xfa, 0x4, 0x0, @empty, @rand_addr=0x64010101, {[@ssrr={0x89, 0x2b, 0xda, [@multicast1, @broadcast, @loopback, @broadcast, @remote, @empty, @remote, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x24, 0x12, 0x3, 0x4, [{@empty, 0x7}, {@multicast1, 0x7ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffe}, {@broadcast, 0x9}]}, @generic={0x44, 0x11, "2ed5c38181a54c340b984e3969ae09"}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', <r12=>0x0, 0x2f, 0x7, 0x1, 0x5b, 0x4, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x700, 0x6, 0x5f66}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="813320163fd36e1631dcce77fc8cc0472b70ef40aaf0bf73336e2fb6aeeaa1808d5d2bb171", @ANYRES16=r7, @ANYBLOB="00042cbd7000fbdbdf2504000000300001801400020070696d36726567300000000000000000080003000200000008000300010000000800030001000000580001800800030000000000140002007767300000000000000000000000000008000300000000001400020076657468305f746f5f626f6e64000000140002006d61637674617030000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000300020000001400020070696d726567300000000000000000003000018008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="140002006d6163766c616e3000003d672470e9561d0a0100", @ANYRES32=r12, @ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="813320163fd36e1631dcce77fc8cc0472b70ef40aaf0bf73336e2fb6aeeaa1808d5d2bb171", @ANYRES16=r7, @ANYBLOB="00042cbd7000fbdbdf2504000000300001801400020070696d36726567300000000000000000080003000200000008000300010000000800030001000000580001800800030000000000140002007767300000000000000000000000000008000300000000001400020076657468305f746f5f626f6e64000000140002006d61637674617030000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000300020000001400020070696d726567300000000000000000003000018008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="140002006d6163766c616e3000003d672470e9561d0a0100", @ANYRES32=r12, @ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x80)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)

1m36.454409039s ago: executing program 0 (id=2609):
r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000080)={0x8, 'geneve1\x00', {'veth1_virt_wifi\x00'}, 0xe7}) (async)
r2 = socket$inet(0x2, 0x80000, 0x8) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000000c0)=0x10001, 0x4)
getsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000100)={@multicast2, @multicast1, @loopback}, &(0x7f0000000140)=0xc) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'veth1_virt_wifi\x00', 0x2})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [<r4=>0x0]}, &(0x7f0000000200)=0x8)
socket$inet(0x2, 0x80000, 0xe) (async)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r4, 0x9, 0xfffffffd}, &(0x7f0000000280)=0xc) (async)
pselect6(0x40, &(0x7f00000002c0)={0x40, 0x4, 0x0, 0x6, 0x2a7, 0x3eb, 0xfffffffffffffff9, 0x401}, &(0x7f0000000300)={0xa, 0x649, 0xfffffffffffffffa, 0x4, 0x100000001, 0x5, 0xb, 0x596}, &(0x7f0000000340)={0x8, 0x800, 0x2, 0x800, 0x4, 0xf415, 0x7fffffff, 0x3}, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x4]}, 0x8}) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x20000, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000480)={'wg0\x00'}) (async)
setsockopt$inet_mreqn(r2, 0x0, 0xd75cd0160be1243e, &(0x7f00000004c0)={@rand_addr=0x64010101, @rand_addr=0x64010100, r1}, 0xc) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x27}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x8c01}, 0x1) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r5) (async)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), r6)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xac, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040090}, 0x0) (async)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000800)=[@in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e22, 0x7, @loopback, 0x5}, @in6={0xa, 0x4e23, 0x4, @remote, 0x10000}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e22, 0x7bc, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x5}], 0x74)
ioctl$BTRFS_IOC_BALANCE(r6, 0x5000940c, 0x0) (async)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000880)=r4, 0x4) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = accept4(r2, 0x0, &(0x7f00000008c0), 0x0)
setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000900)=[{{0x0, 0x0, 0x1, 0x1}, {0x3}}, {{0x4, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x2, 0x0, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x3, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1}}, {{0x4}, {0x3, 0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x1}}], 0x48)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000000980)={r4, @in={{0x2, 0x4e23, @remote}}, [0x9, 0x8000, 0x8, 0x6, 0x4, 0x3, 0x401, 0xd, 0x1000, 0xe, 0x9, 0x8, 0xffffffff, 0xffffffffffffffff]}, &(0x7f0000000a80)=0x100)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000ac0)={0xbba, 0x5, 0x678a, 0x5, 0x4}, 0x14) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r10, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40001000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf8}]}, 0x34}}, 0x4000000)

1m30.220977176s ago: executing program 5 (id=3235):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg2\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa, r2}, 0x10) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000)=0xa36, 0x12) (async, rerun: 64)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={0x0, 0x0, 0x4004}, 0x18) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000001, 0x11, r3, 0x0)

1m22.138416578s ago: executing program 0 (id=2609):
r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000080)={0x8, 'geneve1\x00', {'veth1_virt_wifi\x00'}, 0xe7}) (async)
r2 = socket$inet(0x2, 0x80000, 0x8) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000000c0)=0x10001, 0x4)
getsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000100)={@multicast2, @multicast1, @loopback}, &(0x7f0000000140)=0xc) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'veth1_virt_wifi\x00', 0x2})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [<r4=>0x0]}, &(0x7f0000000200)=0x8)
socket$inet(0x2, 0x80000, 0xe) (async)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r4, 0x9, 0xfffffffd}, &(0x7f0000000280)=0xc) (async)
pselect6(0x40, &(0x7f00000002c0)={0x40, 0x4, 0x0, 0x6, 0x2a7, 0x3eb, 0xfffffffffffffff9, 0x401}, &(0x7f0000000300)={0xa, 0x649, 0xfffffffffffffffa, 0x4, 0x100000001, 0x5, 0xb, 0x596}, &(0x7f0000000340)={0x8, 0x800, 0x2, 0x800, 0x4, 0xf415, 0x7fffffff, 0x3}, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x4]}, 0x8}) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x20000, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000480)={'wg0\x00'}) (async)
setsockopt$inet_mreqn(r2, 0x0, 0xd75cd0160be1243e, &(0x7f00000004c0)={@rand_addr=0x64010101, @rand_addr=0x64010100, r1}, 0xc) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x27}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x8c01}, 0x1) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r5) (async)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), r6)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xac, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040090}, 0x0) (async)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000800)=[@in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e22, 0x7, @loopback, 0x5}, @in6={0xa, 0x4e23, 0x4, @remote, 0x10000}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e22, 0x7bc, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x5}], 0x74)
ioctl$BTRFS_IOC_BALANCE(r6, 0x5000940c, 0x0) (async)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000880)=r4, 0x4) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = accept4(r2, 0x0, &(0x7f00000008c0), 0x0)
setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000900)=[{{0x0, 0x0, 0x1, 0x1}, {0x3}}, {{0x4, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x2, 0x0, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x3, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1}}, {{0x4}, {0x3, 0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x1}}], 0x48)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000000980)={r4, @in={{0x2, 0x4e23, @remote}}, [0x9, 0x8000, 0x8, 0x6, 0x4, 0x3, 0x401, 0xd, 0x1000, 0xe, 0x9, 0x8, 0xffffffff, 0xffffffffffffffff]}, &(0x7f0000000a80)=0x100)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000ac0)={0xbba, 0x5, 0x678a, 0x5, 0x4}, 0x14) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r10, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40001000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf8}]}, 0x34}}, 0x4000000)

1m15.854768405s ago: executing program 5 (id=3235):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg2\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa, r2}, 0x10) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000)=0xa36, 0x12) (async, rerun: 64)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={0x0, 0x0, 0x4004}, 0x18) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000001, 0x11, r3, 0x0)

1m7.241449901s ago: executing program 0 (id=2609):
r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000080)={0x8, 'geneve1\x00', {'veth1_virt_wifi\x00'}, 0xe7}) (async)
r2 = socket$inet(0x2, 0x80000, 0x8) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000000c0)=0x10001, 0x4)
getsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000100)={@multicast2, @multicast1, @loopback}, &(0x7f0000000140)=0xc) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'veth1_virt_wifi\x00', 0x2})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [<r4=>0x0]}, &(0x7f0000000200)=0x8)
socket$inet(0x2, 0x80000, 0xe) (async)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r4, 0x9, 0xfffffffd}, &(0x7f0000000280)=0xc) (async)
pselect6(0x40, &(0x7f00000002c0)={0x40, 0x4, 0x0, 0x6, 0x2a7, 0x3eb, 0xfffffffffffffff9, 0x401}, &(0x7f0000000300)={0xa, 0x649, 0xfffffffffffffffa, 0x4, 0x100000001, 0x5, 0xb, 0x596}, &(0x7f0000000340)={0x8, 0x800, 0x2, 0x800, 0x4, 0xf415, 0x7fffffff, 0x3}, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x4]}, 0x8}) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x20000, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000480)={'wg0\x00'}) (async)
setsockopt$inet_mreqn(r2, 0x0, 0xd75cd0160be1243e, &(0x7f00000004c0)={@rand_addr=0x64010101, @rand_addr=0x64010100, r1}, 0xc) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x27}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x8c01}, 0x1) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r5) (async)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), r6)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xac, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040090}, 0x0) (async)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000800)=[@in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e22, 0x7, @loopback, 0x5}, @in6={0xa, 0x4e23, 0x4, @remote, 0x10000}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e22, 0x7bc, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x5}], 0x74)
ioctl$BTRFS_IOC_BALANCE(r6, 0x5000940c, 0x0) (async)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000880)=r4, 0x4) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = accept4(r2, 0x0, &(0x7f00000008c0), 0x0)
setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000900)=[{{0x0, 0x0, 0x1, 0x1}, {0x3}}, {{0x4, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x2, 0x0, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x3, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1}}, {{0x4}, {0x3, 0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x1}}], 0x48)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000000980)={r4, @in={{0x2, 0x4e23, @remote}}, [0x9, 0x8000, 0x8, 0x6, 0x4, 0x3, 0x401, 0xd, 0x1000, 0xe, 0x9, 0x8, 0xffffffff, 0xffffffffffffffff]}, &(0x7f0000000a80)=0x100)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000ac0)={0xbba, 0x5, 0x678a, 0x5, 0x4}, 0x14) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r10, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40001000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf8}]}, 0x34}}, 0x4000000)

1m1.356850536s ago: executing program 5 (id=3235):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg2\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa, r2}, 0x10) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000)=0xa36, 0x12) (async, rerun: 64)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={0x0, 0x0, 0x4004}, 0x18) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000001, 0x11, r3, 0x0)

50.570447944s ago: executing program 0 (id=2609):
r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000080)={0x8, 'geneve1\x00', {'veth1_virt_wifi\x00'}, 0xe7}) (async)
r2 = socket$inet(0x2, 0x80000, 0x8) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000000c0)=0x10001, 0x4)
getsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000100)={@multicast2, @multicast1, @loopback}, &(0x7f0000000140)=0xc) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'veth1_virt_wifi\x00', 0x2})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [<r4=>0x0]}, &(0x7f0000000200)=0x8)
socket$inet(0x2, 0x80000, 0xe) (async)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r4, 0x9, 0xfffffffd}, &(0x7f0000000280)=0xc) (async)
pselect6(0x40, &(0x7f00000002c0)={0x40, 0x4, 0x0, 0x6, 0x2a7, 0x3eb, 0xfffffffffffffff9, 0x401}, &(0x7f0000000300)={0xa, 0x649, 0xfffffffffffffffa, 0x4, 0x100000001, 0x5, 0xb, 0x596}, &(0x7f0000000340)={0x8, 0x800, 0x2, 0x800, 0x4, 0xf415, 0x7fffffff, 0x3}, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x4]}, 0x8}) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x20000, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000480)={'wg0\x00'}) (async)
setsockopt$inet_mreqn(r2, 0x0, 0xd75cd0160be1243e, &(0x7f00000004c0)={@rand_addr=0x64010101, @rand_addr=0x64010100, r1}, 0xc) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x27}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x8c01}, 0x1) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r5) (async)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), r6)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xac, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040090}, 0x0) (async)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000800)=[@in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e22, 0x7, @loopback, 0x5}, @in6={0xa, 0x4e23, 0x4, @remote, 0x10000}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e22, 0x7bc, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x5}], 0x74)
ioctl$BTRFS_IOC_BALANCE(r6, 0x5000940c, 0x0) (async)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000880)=r4, 0x4) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = accept4(r2, 0x0, &(0x7f00000008c0), 0x0)
setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000900)=[{{0x0, 0x0, 0x1, 0x1}, {0x3}}, {{0x4, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x2, 0x0, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x3, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1}}, {{0x4}, {0x3, 0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x1}}], 0x48)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000000980)={r4, @in={{0x2, 0x4e23, @remote}}, [0x9, 0x8000, 0x8, 0x6, 0x4, 0x3, 0x401, 0xd, 0x1000, 0xe, 0x9, 0x8, 0xffffffff, 0xffffffffffffffff]}, &(0x7f0000000a80)=0x100)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000ac0)={0xbba, 0x5, 0x678a, 0x5, 0x4}, 0x14) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r10, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40001000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf8}]}, 0x34}}, 0x4000000)

48.930047797s ago: executing program 5 (id=3235):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg2\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa, r2}, 0x10) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000)=0xa36, 0x12) (async, rerun: 64)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={0x0, 0x0, 0x4004}, 0x18) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000001, 0x11, r3, 0x0)

29.054332536s ago: executing program 0 (id=2609):
r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000080)={0x8, 'geneve1\x00', {'veth1_virt_wifi\x00'}, 0xe7}) (async)
r2 = socket$inet(0x2, 0x80000, 0x8) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000000c0)=0x10001, 0x4)
getsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000100)={@multicast2, @multicast1, @loopback}, &(0x7f0000000140)=0xc) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'veth1_virt_wifi\x00', 0x2})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [<r4=>0x0]}, &(0x7f0000000200)=0x8)
socket$inet(0x2, 0x80000, 0xe) (async)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r4, 0x9, 0xfffffffd}, &(0x7f0000000280)=0xc) (async)
pselect6(0x40, &(0x7f00000002c0)={0x40, 0x4, 0x0, 0x6, 0x2a7, 0x3eb, 0xfffffffffffffff9, 0x401}, &(0x7f0000000300)={0xa, 0x649, 0xfffffffffffffffa, 0x4, 0x100000001, 0x5, 0xb, 0x596}, &(0x7f0000000340)={0x8, 0x800, 0x2, 0x800, 0x4, 0xf415, 0x7fffffff, 0x3}, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x4]}, 0x8}) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x20000, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000480)={'wg0\x00'}) (async)
setsockopt$inet_mreqn(r2, 0x0, 0xd75cd0160be1243e, &(0x7f00000004c0)={@rand_addr=0x64010101, @rand_addr=0x64010100, r1}, 0xc) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x27}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x8c01}, 0x1) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r5) (async)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), r6)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xac, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040090}, 0x0) (async)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000800)=[@in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e22, 0x7, @loopback, 0x5}, @in6={0xa, 0x4e23, 0x4, @remote, 0x10000}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e22, 0x7bc, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x5}], 0x74)
ioctl$BTRFS_IOC_BALANCE(r6, 0x5000940c, 0x0) (async)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000880)=r4, 0x4) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = accept4(r2, 0x0, &(0x7f00000008c0), 0x0)
setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000900)=[{{0x0, 0x0, 0x1, 0x1}, {0x3}}, {{0x4, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x2, 0x0, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x3, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1}}, {{0x4}, {0x3, 0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x1}}], 0x48)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000000980)={r4, @in={{0x2, 0x4e23, @remote}}, [0x9, 0x8000, 0x8, 0x6, 0x4, 0x3, 0x401, 0xd, 0x1000, 0xe, 0x9, 0x8, 0xffffffff, 0xffffffffffffffff]}, &(0x7f0000000a80)=0x100)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000ac0)={0xbba, 0x5, 0x678a, 0x5, 0x4}, 0x14) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r10, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40001000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf8}]}, 0x34}}, 0x4000000)

28.404299439s ago: executing program 5 (id=3235):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg2\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa, r2}, 0x10) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000)=0xa36, 0x12) (async, rerun: 64)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={0x0, 0x0, 0x4004}, 0x18) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000001, 0x11, r3, 0x0)

16.836921825s ago: executing program 2 (id=3935):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001a00), r0)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x1c, r1, 0xd524283ca41e15a7, 0x70bd29, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x20008081}, 0x10)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
epoll_create1(0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x5, 0x4}}, 0x10)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x600, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x12, 0x7, 0x0, &(0x7f00000000c0))
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x88, 0x1403, 0x1, 0x70bd28, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8001}, 0x44014)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)

14.402714168s ago: executing program 0 (id=2609):
r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000080)={0x8, 'geneve1\x00', {'veth1_virt_wifi\x00'}, 0xe7}) (async)
r2 = socket$inet(0x2, 0x80000, 0x8) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000000c0)=0x10001, 0x4)
getsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000100)={@multicast2, @multicast1, @loopback}, &(0x7f0000000140)=0xc) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'veth1_virt_wifi\x00', 0x2})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [<r4=>0x0]}, &(0x7f0000000200)=0x8)
socket$inet(0x2, 0x80000, 0xe) (async)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r4, 0x9, 0xfffffffd}, &(0x7f0000000280)=0xc) (async)
pselect6(0x40, &(0x7f00000002c0)={0x40, 0x4, 0x0, 0x6, 0x2a7, 0x3eb, 0xfffffffffffffff9, 0x401}, &(0x7f0000000300)={0xa, 0x649, 0xfffffffffffffffa, 0x4, 0x100000001, 0x5, 0xb, 0x596}, &(0x7f0000000340)={0x8, 0x800, 0x2, 0x800, 0x4, 0xf415, 0x7fffffff, 0x3}, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x4]}, 0x8}) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x20000, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000480)={'wg0\x00'}) (async)
setsockopt$inet_mreqn(r2, 0x0, 0xd75cd0160be1243e, &(0x7f00000004c0)={@rand_addr=0x64010101, @rand_addr=0x64010100, r1}, 0xc) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x27}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x8c01}, 0x1) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r5) (async)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), r6)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xac, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040090}, 0x0) (async)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000800)=[@in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e22, 0x7, @loopback, 0x5}, @in6={0xa, 0x4e23, 0x4, @remote, 0x10000}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e22, 0x7bc, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x5}], 0x74)
ioctl$BTRFS_IOC_BALANCE(r6, 0x5000940c, 0x0) (async)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000880)=r4, 0x4) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = accept4(r2, 0x0, &(0x7f00000008c0), 0x0)
setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000900)=[{{0x0, 0x0, 0x1, 0x1}, {0x3}}, {{0x4, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x2, 0x0, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x3, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1}}, {{0x4}, {0x3, 0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x1}}], 0x48)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000000980)={r4, @in={{0x2, 0x4e23, @remote}}, [0x9, 0x8000, 0x8, 0x6, 0x4, 0x3, 0x401, 0xd, 0x1000, 0xe, 0x9, 0x8, 0xffffffff, 0xffffffffffffffff]}, &(0x7f0000000a80)=0x100)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000ac0)={0xbba, 0x5, 0x678a, 0x5, 0x4}, 0x14) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r10, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40001000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf8}]}, 0x34}}, 0x4000000)

12.607959887s ago: executing program 5 (id=3235):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg2\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa, r2}, 0x10) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000)=0xa36, 0x12) (async, rerun: 64)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={0x0, 0x0, 0x4004}, 0x18) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000001, 0x11, r3, 0x0)

11.162282745s ago: executing program 2 (id=3954):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r1, &(0x7f00000024c0)=[{&(0x7f0000000240)="0d850ecd33a42b86f08a86e396e0af7133653b85edbd976c2a338c922a667eae1c94c629c93d8fda25f9670238c3ed769485a3df4c091e882367ad5d9caedcd48a", 0x41}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000700)=0xc, 0x2d)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYRES8=r0], 0x1c}], 0x1, 0x0, 0x42, 0x4040}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r3, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000700)='Ir;', 0x0}, 0x50)
r4 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, 0x0, 0x4)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, 0xb, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010102, 0x4e23, 0x3, 'wrr\x00', 0x1, 0x7, 0x49}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x0, @loopback, 0x4e20, 0x800003, 'wrr\x00', 0x2, 0x7e, 0x7}, {@multicast1, 0x4e21, 0x0, 0x3, 0xffffffff, 0x12d58}}, 0x44)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x40, 0x0, 0x0, 0x8f2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffe, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="280000003e000701feffffff00000000017c00000800428004000800080001800400ad8004000280b313460edaf07f4eda0a62df33885bb4b4e5c2a680c349079ff5f7f619a016eea9b5bc84f6f99f3c09ce027cd1336fb8318f023bc58d6ce8a5b514eed435d59f5b2cf7435ed56303603125d5167258104f548cfa20fe00"/143], 0x28}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
close(r0)
pipe(&(0x7f00000001c0)={<r8=>0xffffffffffffffff})
mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r8, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000006c0)={'geneve1\x00', 0x100})
openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x181000, 0x0)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000002f0effffffff0000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7aeea6ec76dd33a6c03000000000000850000008300000095000002000000001844e500feffffff0000000000000000bf91000000000000b7020000010000008500000085733400b70000000000000095000000b2d13200"/112], &(0x7f0000000280)='GPL\x00', 0x7fffffff, 0x47, &(0x7f0000000a40)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xffffffff, 0x3, 0x401, 0xfffffff4}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0xffffffffffffffff, 0x1], &(0x7f00000003c0)=[{0x1, 0x1, 0xc, 0x3}, {0x5, 0x5, 0xa, 0x4}, {0x4, 0x5, 0x9, 0x8}, {0x5, 0x2, 0xd, 0x6}, {0x3, 0x5, 0x2, 0x4}, {0x1, 0x4, 0x5, 0xb}], 0x10, 0xd}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@cgroup=r1, 0x31, 0x1, 0x2, &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], <r10=>0x0}, 0x40)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xce00}, 0x50)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB='\'\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r9, @ANYBLOB, @ANYRES32=r11, @ANYBLOB="774e458b1ef58a05d5834c7f0c82aab26cf2a4c6e3112adbf141ebaf3ddff8a7c8", @ANYRES64=r10], 0x20)

9.585132865s ago: executing program 2 (id=3959):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x20000007, 0x3}, 0xfffffffffffffc7a)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
bind$tipc(r1, 0x0, 0x0)
write(r2, 0x0, 0x0)
close(0x4)

9.324245014s ago: executing program 2 (id=3961):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
close(r4) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) (async)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r6, r5, 0x2, 0x6, 0x4000}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x88}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x90)

9.147451962s ago: executing program 2 (id=3964):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0)
sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000000))
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10)
close(r1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
recvmsg(r0, &(0x7f0000000900)={0x0, 0x4, &(0x7f0000000380)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000001100001400168010001b0000000000d14c6f8fb63ede27ae968aed1598093b8fced6132ce978344a1421897a06fb98d37882e75e7e1bfd7afb282265334d83ee5e3dabcefbab5f6e0b8c7badecb41fa0ea4145f1d623b4176ba255657b1e0e0ad693b727260000000000000000000000000000000027cd8ee829202ddc8cfb5f9581c55ce2e6640eb2f036f2eed6480acf9914f98ca9693001425fff85b15f66944331c1311ab67fc44768fb3cc508dd2251c7680e80ab9dedb22f69fd9c388dcec194095415140f587a7722885514c9620716aa99b9a90037dba026ad0ba84fbb0f52ae7556b179e027b342aab9f61c2d1f7e6649130b5b172d5a7691a50f228827e36a143af1c8f3bca4cb54cec22da04a9d7b06f6560f34bbeea207e4c45bd63998211e61347388b1ef97ac5821f07dc5965679d37a54daab658af78f3f7ffae4d42568fd67d8fc18df40"], 0x3c}}, 0x0)

8.613008354s ago: executing program 2 (id=3968):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', <r3=>0x0}) (rerun: 32)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x3f, 0x0, 0xfd}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)={0x2d8, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x36}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x9}, @NL80211_ATTR_IE={0xd6, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @challenge={0x10, 0x1, 0x78}, @dsss={0x3, 0x1, 0x9d}, @perr={0x84, 0xba, {0x8, 0xa, [{{0x0, 0x1}, @device_b, 0x6, @value, 0x2a}, {{0x0, 0x1}, @device_b, 0x14bdc065, @value=@broadcast, 0x3}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0xd}, {{0x0, 0x1}, @device_a, 0xfff, @value, 0x24}, {{0x0, 0x1}, @broadcast, 0x7ff, @value, 0x33}, {{}, @device_b, 0x3, @void, 0x15}, {{0x0, 0x1}, @broadcast, 0x10001, @value=@broadcast, 0xd}, {{0x0, 0x1}, @device_a, 0x2, @value, 0x12}, {{0x0, 0x1}, @broadcast, 0x5358, @value=@broadcast, 0x4}, {{0x0, 0x1}, @device_b, 0x82, @value=@broadcast, 0x1}]}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x1cf, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x0, 0x40, 0xa0}}, @tim={0x5, 0xc5, {0x3, 0x50, 0x6, "1a1a8b2c5a6395d2c69e6002558005c0224e07e041d62ad06ae1a329e483edab1f9b98e969433fde654927e19982314073691fe953c3efa1aa02b0d63d2b5a0ff688d0bd1ef995c6a0bb37be7282820852346b9f6359ba4b96a2b7c778bdc3c4e846303e6b421f0d73fd492a2a0dc963151bbda469c57c0cfb887e2c04d2d2a1221cd0a95e34cae6cfd8e1bc1f0b4caa3693fa0ead3a830ada0410935b5251c936f3bfd4970c2578726d97aeef00db36f22066a9cc9b81c04c1431721475d1ef9029"}}, @dsss={0x3, 0x1, 0x64}, @dsss={0x3, 0x1, 0xb6}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x3, 0x84, 0x16}}, @dsss={0x3, 0x1, 0x6c}, @mesh_chsw={0x76, 0x6, {0xe, 0x8, 0x22, 0x7fff}}, @random_vendor={0xdd, 0xe5, "1f139ad02061cd978baa36f0dabca482292484511a23172fece1e8ee3be7b108ee6f831ba4750918a02d72426155b3b7c915825c29d5bb7a167a97b8c9ad671c5694e882ff9c264b8530ad746bdc513258cddf2e449625509e7fb8c3736e52504f5201e9f61d44a9dcf335549d752396f60ea9961ec91affbd736b9ff0783d0d9cc5e8084f2433f39fc5cdf0c1045fbf7baed397a3b2829b626ad5b7bbb0e27e7ffd2007b748a4ba22573d05e433cd7becc3393ac90be9f10c3cba64b064ffef0fbcc0096631472f433e4fdd515adce278f7f39ccb22fa7ff684dff4db095e9fc34faf52c3"}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x20004800}, 0x440c0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', <r6=>0x0}) (async)
r7 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x1c4, r7, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x164, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x62}}}]}}, {{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000000000000000000d0400000000000000000000050000000000000000000000090300000000000000610095bf2fe077edd5fc2f64269e0deed030eba62d8618acf7f0cf36a37602f84bd1fbe78f38cccd2d69533ed321dc5839c40316ea1e617ac203de4771ead0fbc9a81b13ac2a2e7b59d67fe73b3767c72d"], 0x0, 0x52}, 0x20) (async)
connect$unix(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x2, 0x57, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2b}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24008080)

2.112731548s ago: executing program 1 (id=4006):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x5, 0x2}, 0x1c) (async)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
pselect6(0x40, &(0x7f0000000280)={0x7, 0x7, 0x3, 0x1, 0x8, 0x1, 0x80000001, 0x7e3e2d82}, &(0x7f0000000300)={0x8000000000000000, 0x9, 0x3, 0xfffffffffffffff3, 0x3, 0x1, 0x4, 0x7}, &(0x7f00000003c0)={0x8, 0x7fffffffffffffff, 0x2, 0xffff, 0x7, 0x4, 0x1, 0xc0000}, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000680)={&(0x7f0000000640)={[0x9]}, 0x8})
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
setsockopt$sock_int(r5, 0x1, 0x31, &(0x7f0000001600), 0x4) (async)
socket$kcm(0x29, 0x2, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000500)={0x1fe, {{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @local}, 0x2}}}, 0x88) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, r9, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x19}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, r9, 0x77a5768982e879e3, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000005}, 0x40000)

2.040833493s ago: executing program 1 (id=4007):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40044}, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x20)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r3, 0x34da2000)

1.884927629s ago: executing program 1 (id=4008):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01000000000000000000030000009e422bd06ae18be45cb8f217723f09ade4746363a9ac1dd9fddbb0097a7bd6ef7d1f77f3206261f66bda91d1854dfdb0df583c01371321a2229cb65c3cc064146056f7c6ca2305fc436d79815f8c323b00139988efe2c4bd682d64c5d682d40901353e90573a4f155ac84c19827e9289d062f356fc330b22f14cff591d1dfe1bcd4404a5f352fdc6ca7cf2571dcc3dcfe430ad050a4a2c973c2975b745fcd04c0f63fb2a9fec811bef5e111ef833e52fea9fe99df4c5f8cc80707b4578cb081196d5d0bf8089db72af4f9425b45dc333e23c9d68d59f176949b8b963b1287fff7f60"], 0x14}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c900}, 0x28880)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x2, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50)
socket(0x1e, 0x80000, 0x7fff)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x18c, r3, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x75, 0x45, "522ee5b91aca969f376c2b97d959d59c9ce8a3d9f1f776210ced2d98f174eeeba17473235240a7b4b9788fbc97636a5af77ac7f037035c51334aded36106e06ffae5c195a19c467f9c33a68dea3ed9913e6f4aa799517b158eac76d778c37f8d7f240e76d2d2b31e52eac1bc8fa8183fc7"}, @NL80211_ATTR_TESTDATA={0x49, 0x45, "23b28bd8eb9cbdcab3fab9eaf607236ad9ceeb5950163eacb48b8aca6fdc9e79d64ae79ac96150b12bc43b06ab8250f1c105e7f0c68b19604ec320b8e3e3f53e8e24b72b4b"}, @NL80211_ATTR_TESTDATA={0xb3, 0x45, "6bdbe5a465a0667fda3c17acf5c4b937f2ebab2b5b9027caaf9be9df56e823c981c8f51a74617828a438b20548b641df29e01aaa3c577b578dcb58a7283ac44e73ece42db831487a4b175a8db8abc84e61f0db0c1796f9558929b3a69dda41903aa1a0bb7468782aba6a68d5a59bf0abbea0bb8e691d6cfe746008a6c665849667490c27626e6f2c7ec4024ba6ca0ceeaab962210dc1c414feae9e8013a950bff9251a49a00f3a420a390b5b001df5"}]}, 0x18c}}, 0x40000)

1.736411983s ago: executing program 1 (id=4009):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$kcm(0x10, 0x2, 0x0) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) (rerun: 32)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f00000001c0), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) (async)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) (async, rerun: 64)
r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xfe, r4}, [@IFA_ADDRESS={0x8, 0x1, @multicast2}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}]}, 0x28}}, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, <r6=>0x0}, &(0x7f0000000040)=0xc)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r6}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@getpolicy={0xd0, 0x15, 0x8, 0x70bd2d, 0x25dfdbff, {{@in=@multicast2, @in=@local, 0x4e24, 0x79ae, 0x4e20, 0x6, 0xa, 0x80, 0x80, 0x5e, r4, r6}, 0x6e6bbb, 0x2}, [@replay_val={0x10, 0xa, {0x70bd28, 0x70bd29, 0xf}}, @mark={0xc, 0x15, {0x350759, 0x80000001}}, @user_kmaddress={0x2c, 0x13, {@in=@broadcast, @in=@loopback, 0x0, 0xa}}, @proto={0x5, 0x19, 0x2b}, @proto={0x5, 0x19, 0x33}, @lastused={0xc, 0xf, 0x80000000}, @etimer_thresh={0x8, 0xc, 0x9}, @srcaddr={0x14, 0xd, @in=@multicast1}]}, 0xd0}}, 0x4004) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x465c13919b7775a7}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) (async, rerun: 32)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32)
sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5c}, {0x0, 0x0, 0x9, 0x0, 0x6, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10)

1.469364984s ago: executing program 1 (id=4010):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
getsockopt$ax25_int(r2, 0x101, 0x2, 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xfb5, 0xfffffffe}, 0x10) (async)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600156f"], 0x18}}, 0x8080) (async)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000240)={0x100, 0x25, 0x1, 0x0, 0x0, "", [@generic="b6fb55ffdf713d9989afd324cdaeb6988f84e568037df72d603861c457d2edfe4f9a95008c52640b4f7b75aa7701b1443a460ee4a052ee048c6a5e88cb82caa78f4b52418cd68e3ff1a539d6b275579d0a4a3d3d98a286346e02a1bc6613865cad0a5528da5b3480cf32a3edf78fb9884c8a959994ecb49ab327ceb446941d902f69d8e9975c8eacb43e30bf044978f81bc5c327db1a4fbd5b0722961fe609a487f436f09ecdd6cc748db6e0491966929e50ab69669a08162a4e14aaaa247fb0af4c7da361447eb40c83c51ccdc2bd6b7583ae64a00575ac128519940afce5f5987e13ab98e2bf907c75d5605eca22"]}, 0x100}], 0x1, 0x0, 0x0, 0x4008004}, 0x0)

1.104959984s ago: executing program 1 (id=4012):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000021000100000000000000000002000000000000000000000005001e"], 0x24}}, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r3, 0x331, 0x2, 0x0, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x0, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x59, 0xb, 0x11}]}, 0xfffffffffffffe77}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) (async, rerun: 64)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000240)=ANY=[@ANYBLOB="040001"]) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r10) (async)
socket(0x400000000010, 0x3, 0x0) (async)
ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc804f9fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) (async, rerun: 64)
connect$bt_sco(r0, 0x0, 0x0) (async, rerun: 64)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r12, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffc})
ioctl(r12, 0x8b22, &(0x7f0000000040))

565.151725ms ago: executing program 4 (id=4016):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd8d7351616e30000000001acbdf760000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000844)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = gettid()
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010ef03f239de91eaeb2a3918bc99c984", @ANYRES32=r4, @ANYBLOB="049c01000750050008001300", @ANYRES32=r6, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x854)
ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000080)=r6)
pipe(&(0x7f00000055c0)={<r7=>0xffffffffffffffff})
shutdown(r7, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="a80000001800000228bd7000fedbdf251c14100ffc00c80a000a00000800010000000000840013000000000000000a00000000000000030000000000000601000000070000000000000000000000000000000000000000000000000000000300000000000000000000000f00"/168], 0xa8}, 0x1, 0x0, 0x0, 0x400c4}, 0x1)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req={0x0, 0xff}, 0x10)

435.910812ms ago: executing program 4 (id=4017):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r1, 0x891b, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1e2febc4, 0x0, 0x8}, 0x10, 0xffffffffffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000e00)={0xa, 0x4e22, 0xde, @mcast1, 0x91}, 0x1c)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1af8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000007209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', <r8=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r5, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x40, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f00000002c0), 0x8, 0x90, 0x8, 0x8, &(0x7f0000000300)}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x5c, r7, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @mcast_rejoin_interval={{}, {}, {0x0, 0x4, 0x8002}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x2400c940)

256.120578ms ago: executing program 4 (id=4018):
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000200)='F', 0x1}], 0x1) (async)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x500000a, 0x10012, 0xffffffffffffffff, 0x0) (async)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @local}, 0x4, 0x3, 0x0, 0x2}}, 0x26)
socket(0x2a, 0x4, 0xfffffffe) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f00000001c0)={0x21, 0x0, 0x2, 0x3}, 0x8) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000002e00000000000a14000000060a0104000000000000000202000000140000001100010000000000000000000200000a"], 0x3c}}, 0x1)

199.173231ms ago: executing program 4 (id=4019):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000008000000e27f00000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000849e1d63ffa883893e9f33f3b8b91de821b1251e7bf58e51d63f50475325a9f2474757172e276da2f70058cccf13a232b34de989946198c69a13e24cad70c67d4cd29e0ce036502a514f468c5e7527eef3287ca155c371c9e9b6a15f0463727cf3c06df30bb84f9965bc4ac47bafa6fb69b5e636d14333c4761e984ec5e032414e68555dc505b0c1c6bd28983b1ad3"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000040), 0x0}, 0x20)

139.014849ms ago: executing program 4 (id=4020):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x38, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffe00}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40005)

0s ago: executing program 4 (id=4021):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40a000040000900000000000000000003000000040060809c0a01"], 0xab4}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r1 = socket(0x840000000002, 0x3, 0xff)
connect$unix(r1, &(0x7f0000000600)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
close(0x3)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl2\x00', <r2=>0x0, 0x29, 0x1, 0x81, 0xa, 0x40, @mcast2, @rand_addr=' \x01\x00', 0x40, 0x80, 0x5, 0x3}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000100)={'sit0\x00', <r3=>0x0, 0x80, 0x700, 0x5a95, 0x10, {{0x1e, 0x4, 0x3, 0x8, 0x78, 0x66, 0x0, 0xfe, 0x2f, 0x0, @loopback, @broadcast, {[@rr={0x7, 0xb, 0xd3, [@loopback, @rand_addr=0x64010102]}, @rr={0x7, 0xf, 0x6a, [@empty, @remote, @broadcast]}, @lsrr={0x83, 0xf, 0xaa, [@remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0xf, 0xe5, [@dev={0xac, 0x14, 0x14, 0x41}, @multicast1, @remote]}, @noop, @rr={0x7, 0x2b, 0x89, [@rand_addr=0x64010100, @loopback, @broadcast, @broadcast, @multicast1, @remote, @broadcast, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x78, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xb, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
sendmsg$nl_route(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="58000000550004002bbd7000fcdbdf2507000000", @ANYRES32=r2, @ANYBLOB="050053d9", @ANYRES32=r3, @ANYBLOB="01030300fe88000000000000000000000000000186dd000020000100", @ANYRES32=r4, @ANYBLOB="00000000fe80000000000000000000000000001c08000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x880)

kernel console output (not intermixed with test programs):

ng as an active interface with an up link
[  393.342114][T17800] syzkaller0: entered promiscuous mode
[  393.347659][T17800] syzkaller0: entered allmulticast mode
[  393.471019][T17798] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  393.483028][T17811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3333'.
[  393.514993][T17811] xt_nat: multiple ranges no longer supported
[  393.562591][T17797] tipc: Resetting bearer <eth:syzkaller0>
[  393.634333][T17797] tipc: Disabling bearer <eth:syzkaller0>
[  393.664588][T17814] syz_tun: entered promiscuous mode
[  393.671397][T17814] batadv_slave_0: entered promiscuous mode
[  393.678505][T17814] hsr1: entered allmulticast mode
[  393.688049][T17814] syz_tun: entered allmulticast mode
[  393.694525][T17814] batadv_slave_0: entered allmulticast mode
[  393.761387][T17816] 8021q: adding VLAN 0 to HW filter on device bond1
[  393.768945][T17816] bridge0: port 3(bond1) entered blocking state
[  393.775522][T17816] bridge0: port 3(bond1) entered disabled state
[  393.784677][T17816] bond1: entered allmulticast mode
[  393.792925][T17816] bond1: entered promiscuous mode
[  393.798800][T17816] bridge0: port 3(bond1) entered blocking state
[  393.806144][T17816] bridge0: port 3(bond1) entered forwarding state
[  393.916181][T17723] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.930706][T17723] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.938149][T17723] bridge_slave_0: entered allmulticast mode
[  393.965962][T17723] bridge_slave_0: entered promiscuous mode
[  393.987579][T17723] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.006828][T17723] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.070536][T17723] bridge_slave_1: entered allmulticast mode
[  394.097054][T17723] bridge_slave_1: entered promiscuous mode
[  394.118606][T17822] netdevsim netdevsim4: Direct firmware load for 	 failed with error -2
[  394.135308][T17822] netdevsim netdevsim4: Falling back to sysfs fallback for: 	
[  394.205996][T12501] bridge0: port 3(bond1) entered disabled state
[  394.218982][T17836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3339'.
[  394.228399][T12501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  394.246889][T17837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3338'.
[  394.256672][T12501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  394.275235][T17833] x_tables: duplicate underflow at hook 1
[  394.284736][T17837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3338'.
[  394.298424][T17833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3338'.
[  394.325904][T17723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  394.417269][T12501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  394.442374][T17723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  394.449061][T12501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  394.590218][ T5872] Bluetooth: hci2: command tx timeout
[  394.603749][T17723] team0: Port device team_slave_0 added
[  394.643639][T17723] team0: Port device team_slave_1 added
[  394.864581][T17845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3342'.
[  394.879174][T17845] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3342'.
[  394.889476][T17723] batman_adv: batadv0: Adding interface: batadv_slave_0
[  394.911770][T17723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.935996][T17854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3344'.
[  394.947767][T17723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  394.999523][T17723] batman_adv: batadv0: Adding interface: batadv_slave_1
[  395.016111][T17723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  395.065997][T17723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  395.173975][T17861] sch_fq: defrate 0 ignored.
[  395.229066][   T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.283713][T17863] tipc: Enabled bearer <eth:ipvlan0>, priority 10
[  395.316505][T17866] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3345'.
[  395.367172][T17723] hsr_slave_0: entered promiscuous mode
[  395.376710][T17723] hsr_slave_1: entered promiscuous mode
[  395.384630][T17723] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  395.397859][T17723] Cannot create hsr debugfs directory
[  395.448030][   T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.548213][T17872] netlink: 'syz.2.3348': attribute type 6 has an invalid length.
[  395.559286][T17873] netlink: 'syz.2.3348': attribute type 6 has an invalid length.
[  395.696918][   T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.860984][   T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.109101][T17894] netlink: 'syz.2.3356': attribute type 1 has an invalid length.
[  396.293816][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  396.305617][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  396.318985][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  396.328794][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  396.337821][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  396.680183][ T5869] Bluetooth: hci2: command tx timeout
[  396.855626][   T36] bridge_slave_1: left allmulticast mode
[  396.865874][   T36] bridge_slave_1: left promiscuous mode
[  396.875837][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.924349][   T36] bridge_slave_0: left allmulticast mode
[  396.947756][   T36] bridge_slave_0: left promiscuous mode
[  396.955731][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.668517][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  397.679787][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  397.690247][   T36] bond0 (unregistering): Released all slaves
[  398.079466][T17948] x_tables: unsorted underflow at hook 4
[  398.443295][ T5869] Bluetooth: hci0: command tx timeout
[  398.463419][   T36] hsr_slave_0: left promiscuous mode
[  398.469614][   T36] hsr_slave_1: left promiscuous mode
[  398.477579][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  398.485650][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  398.498429][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  398.506570][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  398.535565][T17973] netlink: 'syz.4.3381': attribute type 83 has an invalid length.
[  398.541304][   T36] veth1_macvtap: left promiscuous mode
[  398.550227][   T36] veth0_macvtap: left promiscuous mode
[  398.556694][   T36] veth1_vlan: left promiscuous mode
[  398.560951][T17971] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  398.562217][   T36] veth0_vlan: left promiscuous mode
[  398.750870][ T5869] Bluetooth: hci2: command tx timeout
[  399.095566][   T36] team0 (unregistering): Port device team_slave_1 removed
[  399.143141][   T36] team0 (unregistering): Port device team_slave_0 removed
[  399.723076][T17969] netem: change failed
[  399.938217][T17723] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  399.989106][T17723] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  400.015106][T17995] __nla_validate_parse: 4 callbacks suppressed
[  400.015125][T17995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3383'.
[  400.018703][T17723] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  400.031172][T17995] IPv6: NLM_F_CREATE should be specified when creating new route
[  400.105345][T17995] ipvlan3: entered promiscuous mode
[  400.125826][T17995] bridge0: port 2(ipvlan3) entered blocking state
[  400.140567][T17995] bridge0: port 2(ipvlan3) entered disabled state
[  400.147317][T17995] ipvlan3: entered allmulticast mode
[  400.153372][T17995] bridge0: entered allmulticast mode
[  400.160954][T17995] ipvlan3: left allmulticast mode
[  400.166105][T17995] bridge0: left allmulticast mode
[  400.197616][T17723] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  400.387104][T17897] chnl_net:caif_netlink_parms(): no params data found
[  400.515893][ T5869] Bluetooth: hci0: command tx timeout
[  400.684963][T17897] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.695739][T17897] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.704727][T17897] bridge_slave_0: entered allmulticast mode
[  400.714320][T17897] bridge_slave_0: entered promiscuous mode
[  400.755624][T17897] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.763668][T17897] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.776246][T17897] bridge_slave_1: entered allmulticast mode
[  400.792962][T17897] bridge_slave_1: entered promiscuous mode
[  400.926942][T18020] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3388'.
[  401.049320][T17897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  401.092004][T17897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  401.203961][T17897] team0: Port device team_slave_0 added
[  401.248126][T17723] 8021q: adding VLAN 0 to HW filter on device bond0
[  401.305578][T17897] team0: Port device team_slave_1 added
[  401.477958][T17897] batman_adv: batadv0: Adding interface: batadv_slave_0
[  401.500829][T17897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  401.557357][T17897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  401.595426][T17897] batman_adv: batadv0: Adding interface: batadv_slave_1
[  401.616862][T17897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  401.675316][T17897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  401.750173][T17723] 8021q: adding VLAN 0 to HW filter on device team0
[  401.785956][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  401.793233][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  401.974430][T17897] hsr_slave_0: entered promiscuous mode
[  401.986283][T18058] netlink: 4344 bytes leftover after parsing attributes in process `syz.1.3398'.
[  401.997504][T17897] hsr_slave_1: entered promiscuous mode
[  402.003944][T18058] openvswitch: netlink: Flow key attr not present in new flow.
[  402.026154][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.033410][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  402.044879][T18059] veth1_to_team: entered allmulticast mode
[  402.307953][T18075] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3404'.
[  402.591246][ T5869] Bluetooth: hci0: command tx timeout
[  402.618280][T18083] can: request_module (can-proto-0) failed.
[  402.747837][T18092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3408'.
[  402.874553][T18097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3411'.
[  402.988326][T17723] 8021q: adding VLAN 0 to HW filter on device batadv0
[  403.166892][T17723] veth0_vlan: entered promiscuous mode
[  403.229753][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  403.295099][T17897] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  403.329843][T18113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3413'.
[  403.363573][T17723] veth1_vlan: entered promiscuous mode
[  403.413443][T17897] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  403.457818][T17897] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  403.496284][T17897] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  403.512270][T18120] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  403.676251][T17723] veth0_macvtap: entered promiscuous mode
[  403.743477][T17723] veth1_macvtap: entered promiscuous mode
[  403.853513][T17723] batman_adv: batadv0: Interface activated: batadv_slave_0
[  403.858467][T18144] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3421'.
[  403.898982][T17723] batman_adv: batadv0: Interface activated: batadv_slave_1
[  403.984385][T17723] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  404.019070][T17723] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  404.049382][T18145] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3419'.
[  404.059555][T17723] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  404.081498][T17723] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  404.127528][T18137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3419'.
[  404.259211][T18154] netlink: 'syz.2.3423': attribute type 2 has an invalid length.
[  404.287685][T17897] 8021q: adding VLAN 0 to HW filter on device bond0
[  404.357710][T17897] 8021q: adding VLAN 0 to HW filter on device team0
[  404.376875][ T7064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.395736][ T7064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.418132][ T7064] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.425564][ T7064] bridge0: port 1(bridge_slave_0) entered forwarding state
[  404.466678][T12499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.489071][ T7064] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.496497][ T7064] bridge0: port 2(bridge_slave_1) entered forwarding state
[  404.515995][T12499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.670394][ T5869] Bluetooth: hci0: command tx timeout
[  405.136904][ T7070] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.207329][T17897] 8021q: adding VLAN 0 to HW filter on device batadv0
[  405.255322][ T7070] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.405655][ T7070] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.526349][ T7070] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.715797][ T7070] bridge_slave_1: left allmulticast mode
[  405.723746][ T7070] bridge_slave_1: left promiscuous mode
[  405.729486][ T7070] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.741037][ T7070] bridge_slave_0: left allmulticast mode
[  405.746743][ T7070] bridge_slave_0: left promiscuous mode
[  405.752729][ T7070] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.146748][ T7070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  406.159405][ T7070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  406.170285][ T7070] bond0 (unregistering): Released all slaves
[  406.317869][T18192] __nla_validate_parse: 3 callbacks suppressed
[  406.317890][T18192] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3433'.
[  406.487296][T18199] netdevsim netdevsim2: Direct firmware load for 	 failed with error -2
[  406.493556][T17897] veth0_vlan: entered promiscuous mode
[  406.511044][T18199] netdevsim netdevsim2: Falling back to sysfs fallback for: 	
[  406.579872][T17897] veth1_vlan: entered promiscuous mode
[  406.763000][T18210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3439'.
[  406.837373][ T7070] hsr_slave_0: left promiscuous mode
[  406.858250][ T7070] hsr_slave_1: left promiscuous mode
[  406.867473][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  406.886533][ T7070] batman_adv: batadv0: Removing interface: batadv_slave_0
[  406.895369][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  406.905479][ T7070] batman_adv: batadv0: Removing interface: batadv_slave_1
[  406.956133][ T7070] veth1_macvtap: left promiscuous mode
[  406.963163][ T7070] veth0_macvtap: left promiscuous mode
[  406.969007][ T7070] veth1_vlan: left promiscuous mode
[  406.974889][ T7070] veth0_vlan: left promiscuous mode
[  407.006685][ T5872] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  407.023683][ T5872] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  407.038480][ T5872] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  407.047888][ T5872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  407.060570][ T5872] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  407.607650][ T7070] team0 (unregistering): Port device team_slave_1 removed
[  407.635205][T18218] netlink: 'syz.1.3441': attribute type 4 has an invalid length.
[  407.659469][ T7070] team0 (unregistering): Port device team_slave_0 removed
[  407.689716][T18219] netlink: 'syz.1.3441': attribute type 4 has an invalid length.
[  408.165825][T18210] xfrm1: entered promiscuous mode
[  408.180169][T18210] xfrm1: entered allmulticast mode
[  408.224171][T17897] veth0_macvtap: entered promiscuous mode
[  408.272114][T17897] veth1_macvtap: entered promiscuous mode
[  408.364070][T17897] batman_adv: batadv0: Interface activated: batadv_slave_0
[  408.405801][T18228] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3443'.
[  408.434227][T18228] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3443'.
[  408.484549][T18228] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3443'.
[  408.576025][T17897] batman_adv: batadv0: Interface activated: batadv_slave_1
[  408.738255][T17897] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  408.747824][T17897] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  408.805366][T17897] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  408.816472][T18249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3447'.
[  408.837443][T17897] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  408.999192][T18254] sctp: [Deprecated]: syz.1.3449 (pid 18254) Use of int in maxseg socket option.
[  408.999192][T18254] Use struct sctp_assoc_value instead
[  409.150222][ T5869] Bluetooth: hci2: command tx timeout
[  409.276265][T18214] chnl_net:caif_netlink_parms(): no params data found
[  409.340365][T18257] netlink: 14476 bytes leftover after parsing attributes in process `syz.4.3450'.
[  409.401988][T18273] netlink: 'syz.2.3454': attribute type 1 has an invalid length.
[  409.596457][T18275] 8021q: adding VLAN 0 to HW filter on device bond3
[  409.608300][T18275] bond2: (slave bond3): making interface the new active one
[  409.617204][T18275] bond2: (slave bond3): Enslaving as an active interface with an up link
[  409.644452][T18273] bond2: (slave gretap1): Enslaving as a backup interface with an up link
[  409.845170][T18297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3460'.
[  409.962597][ T7064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  409.973173][T18214] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.990729][ T7064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  409.991374][T18214] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.027232][T18214] bridge_slave_0: entered allmulticast mode
[  410.044967][T18214] bridge_slave_0: entered promiscuous mode
[  410.093062][T18214] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.100509][T18214] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.108248][T18214] bridge_slave_1: entered allmulticast mode
[  410.122375][T18214] bridge_slave_1: entered promiscuous mode
[  410.252905][T18214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  410.337813][T18214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  410.428569][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.455501][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  410.472414][T18214] team0: Port device team_slave_0 added
[  410.520801][T18319] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3467'.
[  410.550101][T18319] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3467'.
[  410.563145][T18214] team0: Port device team_slave_1 added
[  410.597745][T18324] netlink: 'syz.2.3469': attribute type 1 has an invalid length.
[  410.685163][T18214] batman_adv: batadv0: Adding interface: batadv_slave_0
[  410.701560][T18214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  410.728870][T18214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  410.769453][T18331] netlink: 'syz.1.3471': attribute type 30 has an invalid length.
[  410.806109][T18326] 8021q: adding VLAN 0 to HW filter on device bond5
[  410.822543][T18326] bond4: (slave bond5): making interface the new active one
[  410.833245][T18334] netlink: 'syz.4.3472': attribute type 2 has an invalid length.
[  410.851816][T18326] bond4: (slave bond5): Enslaving as an active interface with an up link
[  410.864570][T18214] batman_adv: batadv0: Adding interface: batadv_slave_1
[  410.898405][T18214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  410.954473][T18338] netlink: 'syz.1.3471': attribute type 1 has an invalid length.
[  410.971863][T18214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  410.992050][T18331] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  411.001716][T18331] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  411.230464][ T5869] Bluetooth: hci2: command tx timeout
[  411.263763][T18214] hsr_slave_0: entered promiscuous mode
[  411.279432][T18214] hsr_slave_1: entered promiscuous mode
[  411.286958][T18214] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  411.295301][T18214] Cannot create hsr debugfs directory
[  411.439649][ T7070] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.583604][ T7070] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.679033][ T7070] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.956530][ T7070] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.997025][T18370] xt_socket: unknown flags 0x3c
[  412.003977][T18369] tipc: MTU too low for tipc bearer
[  412.025365][T18369] netlink: 'syz.4.3482': attribute type 1 has an invalid length.
[  412.040378][T18369] netlink: 'syz.4.3482': attribute type 1 has an invalid length.
[  412.058070][T18369] openvswitch: netlink: IP tunnel dst address not specified
[  412.351267][ T7070] bridge_slave_1: left allmulticast mode
[  412.371932][ T7070] bridge_slave_1: left promiscuous mode
[  412.401279][ T7070] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.462043][ T7070] bridge_slave_0: left allmulticast mode
[  412.479740][ T7070] bridge_slave_0: left promiscuous mode
[  412.492298][ T7070] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.545308][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  412.556530][ T5872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  412.567316][ T5872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  412.576397][ T5872] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  412.585667][ T5872] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  412.984112][ T7070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  412.997541][ T7070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  413.022726][ T7070] bond0 (unregistering): Released all slaves
[  413.311867][ T5869] Bluetooth: hci2: command tx timeout
[  413.330424][T18397] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3491'.
[  413.365284][T18214] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  413.436913][T18214] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  413.455990][T18214] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  413.527115][T18214] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  413.632148][ T7070] hsr_slave_0: left promiscuous mode
[  413.648760][ T7070] hsr_slave_1: left promiscuous mode
[  413.660871][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  413.668342][ T7070] batman_adv: batadv0: Removing interface: batadv_slave_0
[  413.706422][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  413.726474][ T7070] batman_adv: batadv0: Removing interface: batadv_slave_1
[  413.774461][ T7070] veth1_macvtap: left promiscuous mode
[  413.780780][ T7070] veth0_macvtap: left promiscuous mode
[  413.787060][ T7070] veth1_vlan: left promiscuous mode
[  413.798167][ T7070] veth0_vlan: left promiscuous mode
[  413.874491][T18429] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3498'.
[  414.402942][ T7070] team0 (unregistering): Port device team_slave_1 removed
[  414.451100][ T7070] team0 (unregistering): Port device team_slave_0 removed
[  414.671255][ T5869] Bluetooth: hci0: command tx timeout
[  415.104166][T18436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3499'.
[  415.114111][T18434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3501'.
[  415.121039][T18436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3499'.
[  415.144664][T18435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3501'.
[  415.162691][T18436] netlink: 'syz.2.3499': attribute type 14 has an invalid length.
[  415.176296][T18436] netlink: 'syz.2.3499': attribute type 13 has an invalid length.
[  415.391696][ T5869] Bluetooth: hci2: command tx timeout
[  415.555733][T18214] 8021q: adding VLAN 0 to HW filter on device bond0
[  415.585662][T18383] chnl_net:caif_netlink_parms(): no params data found
[  415.973779][T18214] 8021q: adding VLAN 0 to HW filter on device team0
[  416.011308][T18472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3510'.
[  416.062129][T12499] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.069548][T12499] bridge0: port 1(bridge_slave_0) entered forwarding state
[  416.091080][T18475] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3510'.
[  416.162129][ T3000] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.169345][ T3000] bridge0: port 2(bridge_slave_1) entered forwarding state
[  416.195879][T18484] netlink: 'syz.2.3511': attribute type 1 has an invalid length.
[  416.415346][T18383] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.441305][T18383] bridge0: port 1(bridge_slave_0) entered disabled state
[  416.460635][T18383] bridge_slave_0: entered allmulticast mode
[  416.490914][T18383] bridge_slave_0: entered promiscuous mode
[  416.535803][T18383] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.563433][T18383] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.591201][T18383] bridge_slave_1: entered allmulticast mode
[  416.599203][T18383] bridge_slave_1: entered promiscuous mode
[  416.735198][T18214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  416.750348][ T5869] Bluetooth: hci0: command tx timeout
[  416.875913][T18383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  416.925248][T18383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  417.066962][T18383] team0: Port device team_slave_0 added
[  417.156046][T18383] team0: Port device team_slave_1 added
[  417.178709][T18507] netlink: zone id is out of range
[  417.212047][T18507] netlink: zone id is out of range
[  417.237519][T18507] netlink: zone id is out of range
[  417.289491][T18507] netlink: zone id is out of range
[  417.298217][T18507] netlink: zone id is out of range
[  417.305117][T18507] netlink: zone id is out of range
[  417.325676][T18507] netlink: zone id is out of range
[  417.337574][T18383] batman_adv: batadv0: Adding interface: batadv_slave_0
[  417.351027][T18383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  417.378856][T18507] netlink: zone id is out of range
[  417.400704][T18507] netlink: zone id is out of range
[  417.407160][T18507] netlink: zone id is out of range
[  417.423607][T18383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  417.460695][T18512] syzkaller1: entered promiscuous mode
[  417.466236][T18512] syzkaller1: entered allmulticast mode
[  417.501043][T18383] batman_adv: batadv0: Adding interface: batadv_slave_1
[  417.508046][T18383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  417.566983][T18383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  417.649058][T18214] 8021q: adding VLAN 0 to HW filter on device batadv0
[  417.799619][T18383] hsr_slave_0: entered promiscuous mode
[  417.805858][T18520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3520'.
[  417.841706][T18383] hsr_slave_1: entered promiscuous mode
[  418.045720][T18214] veth0_vlan: entered promiscuous mode
[  418.137407][T18214] veth1_vlan: entered promiscuous mode
[  418.274511][T18214] veth0_macvtap: entered promiscuous mode
[  418.333397][T18214] veth1_macvtap: entered promiscuous mode
[  418.378681][T18214] batman_adv: batadv0: Interface activated: batadv_slave_0
[  418.439900][T18214] batman_adv: batadv0: Interface activated: batadv_slave_1
[  418.463973][T18214] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  418.480709][T18214] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  418.489819][T18214] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  418.499315][T18214] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  418.738699][ T7064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  418.764755][ T7064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  418.830085][ T5869] Bluetooth: hci0: command tx timeout
[  418.871102][T18383] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  418.887008][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  418.888045][T18383] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  418.910993][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  418.936845][T18383] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  418.954875][T18383] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  419.390794][T18577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3539'.
[  419.399858][T18577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3539'.
[  419.434401][ T7070] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.582479][ T7070] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.634158][T18383] 8021q: adding VLAN 0 to HW filter on device bond0
[  419.675745][T18383] 8021q: adding VLAN 0 to HW filter on device team0
[  419.696004][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.703189][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  419.718902][ T3000] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.726111][ T3000] bridge0: port 2(bridge_slave_1) entered forwarding state
[  419.759165][ T7070] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.895873][ T7070] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.015471][T18383] 8021q: adding VLAN 0 to HW filter on device batadv0
[  420.311225][ T7070] bridge_slave_1: left allmulticast mode
[  420.316930][ T7070] bridge_slave_1: left promiscuous mode
[  420.324080][ T7070] bridge0: port 2(bridge_slave_1) entered disabled state
[  420.334372][ T7070] bridge_slave_0: left allmulticast mode
[  420.341895][ T7070] bridge_slave_0: left promiscuous mode
[  420.347635][ T7070] bridge0: port 1(bridge_slave_0) entered disabled state
[  420.673278][T18596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3541'.
[  420.754694][T18599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3541'.
[  420.914110][ T5869] Bluetooth: hci0: command tx timeout
[  420.944895][ T7070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  420.957350][ T7070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  420.968972][ T7070] bond0 (unregistering): Released all slaves
[  421.057419][T18600] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  421.291148][ T5872] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  421.307066][ T5872] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  421.324170][ T5872] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  421.335074][ T5872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  421.352054][ T5872] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  421.369273][T18383] veth0_vlan: entered promiscuous mode
[  421.447269][T18383] veth1_vlan: entered promiscuous mode
[  421.684961][T18632] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3551'.
[  421.837555][ T7070] hsr_slave_0: left promiscuous mode
[  421.857933][ T7070] hsr_slave_1: left promiscuous mode
[  421.865179][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  421.873266][ T7070] batman_adv: batadv0: Removing interface: batadv_slave_0
[  421.882141][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  421.890904][ T7070] batman_adv: batadv0: Removing interface: batadv_slave_1
[  421.916711][T18648] sock: sock_timestamping_bind_phc: sock not bind to device
[  421.926375][ T7070] veth1_macvtap: left promiscuous mode
[  421.932453][ T7070] veth0_macvtap: left promiscuous mode
[  421.938191][ T7070] veth1_vlan: left promiscuous mode
[  421.954244][ T7070] veth0_vlan: left promiscuous mode
[  422.475770][ T7070] team0 (unregistering): Port device team_slave_1 removed
[  422.523057][ T7070] team0 (unregistering): Port device team_slave_0 removed
[  423.050658][T18383] veth0_macvtap: entered promiscuous mode
[  423.191118][T18383] veth1_macvtap: entered promiscuous mode
[  423.256096][T18664] net_ratelimit: 9 callbacks suppressed
[  423.256118][T18664] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  423.261673][T18663] netlink: 'syz.1.3557': attribute type 1 has an invalid length.
[  423.359377][T18663] 8021q: adding VLAN 0 to HW filter on device bond23
[  423.405559][T18663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3557'.
[  423.453502][T18665] bridge0: port 2(veth0_to_bridge) entered blocking state
[  423.466045][T18665] bridge0: port 2(veth0_to_bridge) entered disabled state
[  423.478047][T18665] veth0_to_bridge: entered allmulticast mode
[  423.480607][ T5869] Bluetooth: hci2: command tx timeout
[  423.494824][T18665] veth0_to_bridge: entered promiscuous mode
[  423.545553][T18663] ip6erspan0: entered promiscuous mode
[  423.687460][T18383] batman_adv: batadv0: Interface activated: batadv_slave_0
[  423.707090][T18383] batman_adv: batadv0: Interface activated: batadv_slave_1
[  423.759862][T18383] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  423.810349][T18383] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  423.819130][T18383] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  423.842109][T18383] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  423.878585][T18611] chnl_net:caif_netlink_parms(): no params data found
[  423.963072][T18687] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  424.334727][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.369841][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.417268][T18611] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.427083][T18611] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.427611][T18698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3568'.
[  424.439355][T18611] bridge_slave_0: entered allmulticast mode
[  424.459810][T18611] bridge_slave_0: entered promiscuous mode
[  424.516710][T18611] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.524305][T18611] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.550309][T18611] bridge_slave_1: entered allmulticast mode
[  424.559227][T18611] bridge_slave_1: entered promiscuous mode
[  424.679209][T18611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  424.719350][ T7070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.725503][T18611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  424.729475][ T7070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.945260][T18611] team0: Port device team_slave_0 added
[  424.979117][T18611] team0: Port device team_slave_1 added
[  425.505783][T18611] batman_adv: batadv0: Adding interface: batadv_slave_0
[  425.514727][T18611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  425.552931][ T5869] Bluetooth: hci2: command tx timeout
[  425.588119][T18611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  425.656887][T18611] batman_adv: batadv0: Adding interface: batadv_slave_1
[  425.673489][T18611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  425.715486][T18611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  425.882680][T18611] hsr_slave_0: entered promiscuous mode
[  425.889559][T18611] hsr_slave_1: entered promiscuous mode
[  425.897373][T18611] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  425.905130][T18611] Cannot create hsr debugfs directory
[  426.040669][ T7070] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.168626][ T7070] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.254466][ T7070] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.313588][ T7070] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.463551][ T7070] bridge_slave_1: left allmulticast mode
[  426.469276][ T7070] bridge_slave_1: left promiscuous mode
[  426.484641][ T7070] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.494409][ T7070] bridge_slave_0: left allmulticast mode
[  426.500492][ T7070] bridge_slave_0: left promiscuous mode
[  426.506319][ T7070] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.729276][T18743] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3584'.
[  426.767033][T18743] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  427.100333][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  427.118320][ T5872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  427.128497][ T5872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  427.140769][ T5872] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  427.149683][ T5872] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  427.415568][ T7070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  427.427274][ T7070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  427.439067][ T7070] bond0 (unregistering): Released all slaves
[  427.457244][T18740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3581'.
[  427.467362][T18740] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3581'.
[  427.529773][T18752] geneve2: entered promiscuous mode
[  427.538562][T18752] geneve2: entered allmulticast mode
[  427.577835][T18753] tc_dump_action: action bad kind
[  427.627002][T18755] netlink: 'syz.4.3587': attribute type 3 has an invalid length.
[  427.641256][ T5872] Bluetooth: hci2: command tx timeout
[  427.822252][T18761] netlink: 'syz.2.3590': attribute type 1 has an invalid length.
[  427.938057][T18768] netdevsim netdevsim4: Direct firmware load for /.€ failed with error -2
[  427.964483][T18768] netdevsim netdevsim4: Falling back to sysfs fallback for: /.€
[  427.990171][T18611] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  428.028188][T18611] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  428.080195][ T7070] hsr_slave_0: left promiscuous mode
[  428.105614][ T7070] hsr_slave_1: left promiscuous mode
[  428.121145][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  428.128657][ T7070] batman_adv: batadv0: Removing interface: batadv_slave_0
[  428.149824][T18774] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3593'.
[  428.151300][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  428.180078][ T7070] batman_adv: batadv0: Removing interface: batadv_slave_1
[  428.228158][ T7070] veth1_macvtap: left promiscuous mode
[  428.234170][ T7070] veth0_macvtap: left promiscuous mode
[  428.240261][ T7070] veth1_vlan: left promiscuous mode
[  428.245678][ T7070] veth0_vlan: left promiscuous mode
[  428.295933][T18782] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3595'.
[  428.846196][ T7070] team0 (unregistering): Port device team_slave_1 removed
[  428.856018][T18789] x_tables: duplicate underflow at hook 1
[  428.918706][ T7070] team0 (unregistering): Port device team_slave_0 removed
[  429.233116][ T5872] Bluetooth: hci0: command tx timeout
[  429.437914][T18611] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  429.450653][T18611] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  429.656008][T18810] tipc: Resetting bearer <eth:ipvlan0>
[  429.720043][ T5872] Bluetooth: hci2: command tx timeout
[  429.818397][T18812] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3601'.
[  429.897718][T18812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3601'.
[  430.095194][T18749] chnl_net:caif_netlink_parms(): no params data found
[  430.138170][T18611] 8021q: adding VLAN 0 to HW filter on device bond0
[  430.245385][T18611] 8021q: adding VLAN 0 to HW filter on device team0
[  430.417655][ T3000] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.425015][ T3000] bridge0: port 1(bridge_slave_0) entered forwarding state
[  430.517629][ T3000] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.524864][ T3000] bridge0: port 2(bridge_slave_1) entered forwarding state
[  430.567638][T18749] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.577661][T18749] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.585410][T18749] bridge_slave_0: entered allmulticast mode
[  430.596401][T18845] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3608'.
[  430.606514][T18749] bridge_slave_0: entered promiscuous mode
[  430.624860][T18749] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.640523][T18749] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.648003][T18749] bridge_slave_1: entered allmulticast mode
[  430.656930][T18749] bridge_slave_1: entered promiscuous mode
[  430.774672][T18749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  430.788223][T18850] openvswitch: netlink: Multiple metadata blocks provided
[  430.846058][T18749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  430.942609][T18749] team0: Port device team_slave_0 added
[  430.998770][T18749] team0: Port device team_slave_1 added
[  431.115615][T18749] batman_adv: batadv0: Adding interface: batadv_slave_0
[  431.131503][T18857] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3613'.
[  431.140137][T18749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  431.169042][T18749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  431.314285][ T5872] Bluetooth: hci0: command tx timeout
[  431.319901][T18864] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3615'.
[  431.462649][T18857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  431.484972][T18857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  431.509261][T18857] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  431.529628][T18857] bond0 (unregistering): Released all slaves
[  431.552514][T18749] batman_adv: batadv0: Adding interface: batadv_slave_1
[  431.559634][T18749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  431.586290][T18749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  431.674998][T18611] 8021q: adding VLAN 0 to HW filter on device batadv0
[  431.845835][T18881] atomic_op ffff88807c0e7998 conn xmit_atomic 0000000000000000
[  431.856732][T18749] hsr_slave_0: entered promiscuous mode
[  431.887483][T18749] hsr_slave_1: entered promiscuous mode
[  432.238644][T18611] veth0_vlan: entered promiscuous mode
[  432.258695][T18894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3626'.
[  432.275946][T18895] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3625'.
[  432.292476][T18895] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3625'.
[  432.336330][T18611] veth1_vlan: entered promiscuous mode
[  432.627315][T18611] veth0_macvtap: entered promiscuous mode
[  432.651275][T18906] syzkaller1: entered promiscuous mode
[  432.656855][T18906] syzkaller1: entered allmulticast mode
[  432.712000][T18611] veth1_macvtap: entered promiscuous mode
[  432.789773][T18611] batman_adv: batadv0: Interface activated: batadv_slave_0
[  432.843065][T18611] batman_adv: batadv0: Interface activated: batadv_slave_1
[  432.871400][T18611] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  432.890077][T18611] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  432.907460][T18611] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  432.917248][T18611] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  433.025657][T18920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3632'.
[  433.158678][T18924] netlink: 'syz.2.3633': attribute type 12 has an invalid length.
[  433.285463][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  433.309712][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  433.400902][ T5872] Bluetooth: hci0: command tx timeout
[  433.565948][T18749] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  433.606448][T18749] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  433.648444][ T7070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  433.660463][ T7070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  433.679530][T18749] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  433.693512][T18749] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  433.938559][T18947] netlink: 'syz.2.3638': attribute type 2 has an invalid length.
[  433.960798][T18947] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.3638'.
[  434.086183][T18956] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  434.149693][T18749] 8021q: adding VLAN 0 to HW filter on device bond0
[  434.300346][T12499] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.342260][T18749] 8021q: adding VLAN 0 to HW filter on device team0
[  434.369202][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.376469][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  434.466638][T12499] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.513149][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.520322][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  434.584529][T12499] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.625341][T18749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  434.669299][T12499] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.949646][T12499] bridge_slave_1: left allmulticast mode
[  434.957501][T12499] bridge_slave_1: left promiscuous mode
[  434.964957][T12499] bridge0: port 2(bridge_slave_1) entered disabled state
[  434.976373][T12499] bridge_slave_0: left allmulticast mode
[  434.982890][T12499] bridge_slave_0: left promiscuous mode
[  434.988767][T12499] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.338610][T12499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  435.355269][T12499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  435.365769][T12499] bond0 (unregistering): Released all slaves
[  435.392804][T18749] 8021q: adding VLAN 0 to HW filter on device batadv0
[  435.471523][ T5872] Bluetooth: hci0: command tx timeout
[  435.900549][T12499] hsr_slave_0: left promiscuous mode
[  435.940545][T12499] hsr_slave_1: left promiscuous mode
[  435.954760][T12499] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  435.985677][T12499] batman_adv: batadv0: Removing interface: batadv_slave_0
[  436.023823][T12499] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  436.037228][T12499] batman_adv: batadv0: Removing interface: batadv_slave_1
[  436.151340][T12499] veth1_macvtap: left promiscuous mode
[  436.158488][T12499] veth0_macvtap: left promiscuous mode
[  436.169322][T12499] veth1_vlan: left promiscuous mode
[  436.177017][T12499] veth0_vlan: left promiscuous mode
[  436.429090][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  436.440196][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  436.450071][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  436.459547][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  436.468065][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  436.985349][T12499] team0 (unregistering): Port device team_slave_1 removed
[  437.037875][T12499] team0 (unregistering): Port device team_slave_0 removed
[  437.488127][T18995] __nla_validate_parse: 1 callbacks suppressed
[  437.488149][T18995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3650'.
[  437.709206][T18749] veth0_vlan: entered promiscuous mode
[  437.766941][T19021] netlink: 'syz.2.3655': attribute type 1 has an invalid length.
[  437.792944][T19021] netlink: 'syz.2.3655': attribute type 1 has an invalid length.
[  437.816878][T19021] netlink: 'syz.2.3655': attribute type 1 has an invalid length.
[  437.826780][T19021] netlink: 'syz.2.3655': attribute type 2 has an invalid length.
[  437.843266][T19021] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3655'.
[  437.871490][T18749] veth1_vlan: entered promiscuous mode
[  438.009075][T19021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  438.092449][T19032] sctp: [Deprecated]: syz.1.3656 (pid 19032) Use of struct sctp_assoc_value in delayed_ack socket option.
[  438.092449][T19032] Use struct sctp_sack_info instead
[  438.146335][T18749] veth0_macvtap: entered promiscuous mode
[  438.188229][T18749] veth1_macvtap: entered promiscuous mode
[  438.276387][T18749] batman_adv: batadv0: Interface activated: batadv_slave_0
[  438.307038][T18749] batman_adv: batadv0: Interface activated: batadv_slave_1
[  438.426884][T18749] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  438.438145][T18749] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  438.459178][T18749] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  438.468203][T18749] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  438.497435][T19005] chnl_net:caif_netlink_parms(): no params data found
[  438.516460][ T5869] Bluetooth: hci2: command tx timeout
[  438.700489][T19043] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  438.815657][T19005] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.840564][T19005] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.867454][T19005] bridge_slave_0: entered allmulticast mode
[  438.893019][T19005] bridge_slave_0: entered promiscuous mode
[  438.908306][T19005] bridge0: port 2(bridge_slave_1) entered blocking state
[  438.916696][T19005] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.931980][T19005] bridge_slave_1: entered allmulticast mode
[  438.942538][T19005] bridge_slave_1: entered promiscuous mode
[  438.973860][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  439.011727][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  439.116610][T19054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3663'.
[  439.136287][T19054] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  439.195587][T19005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  439.222719][T19005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  439.513123][T19005] team0: Port device team_slave_0 added
[  439.543097][T19005] team0: Port device team_slave_1 added
[  439.604299][ T7070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  439.630529][ T7070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  439.700832][T19005] batman_adv: batadv0: Adding interface: batadv_slave_0
[  439.707847][T19005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  439.764999][T19005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  440.013841][T19005] batman_adv: batadv0: Adding interface: batadv_slave_1
[  440.030639][T19005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  440.096875][T19005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  440.097620][T19070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3668'.
[  440.190366][T19071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3668'.
[  440.424798][   T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.548272][T19005] hsr_slave_0: entered promiscuous mode
[  440.556139][T19005] hsr_slave_1: entered promiscuous mode
[  440.562709][T19005] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  440.571410][T19005] Cannot create hsr debugfs directory
[  440.590360][ T5869] Bluetooth: hci2: command tx timeout
[  440.633709][   T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.843964][   T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.974143][   T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.097864][T19075] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3669'.
[  441.153806][T19077] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0
[  441.190122][T19077] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0
[  441.212685][T19077] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0
[  441.235518][T19077] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0
[  441.260471][T19077] geneve3: entered promiscuous mode
[  441.265768][T19077] geneve3: entered allmulticast mode
[  441.346930][T19078] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  441.466351][T19078] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3670'.
[  441.750933][   T36] bridge_slave_1: left allmulticast mode
[  441.781036][   T36] bridge_slave_1: left promiscuous mode
[  441.786868][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.819012][   T36] bridge_slave_0: left allmulticast mode
[  441.833814][   T36] bridge_slave_0: left promiscuous mode
[  441.839659][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  441.955550][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  441.967287][ T5872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  441.992199][ T5872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  442.006364][ T5872] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  442.031060][ T5872] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  442.674416][ T5872] Bluetooth: hci2: command tx timeout
[  442.697378][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  442.716494][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  442.735839][   T36] bond0 (unregistering): Released all slaves
[  443.393430][T19112] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3677'.
[  443.407456][T19112] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3677'.
[  443.422209][   T36] hsr_slave_0: left promiscuous mode
[  443.428918][   T36] hsr_slave_1: left promiscuous mode
[  443.435363][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  443.443643][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  443.454624][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  443.466898][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  443.538919][   T36] veth1_macvtap: left promiscuous mode
[  443.544749][   T36] veth0_macvtap: left promiscuous mode
[  443.561664][   T36] veth1_vlan: left promiscuous mode
[  443.567067][   T36] veth0_vlan: left promiscuous mode
[  443.848775][T19042] Set syz1 is full, maxelem 65536 reached
[  444.111213][ T5872] Bluetooth: hci0: command tx timeout
[  444.399757][   T36] team0 (unregistering): Port device team_slave_1 removed
[  444.447971][   T36] team0 (unregistering): Port device team_slave_0 removed
[  444.751040][ T5872] Bluetooth: hci2: command tx timeout
[  445.206360][T19005] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  445.277703][T19095] chnl_net:caif_netlink_parms(): no params data found
[  445.279046][T19137] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3682'.
[  445.324674][T19005] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  445.375534][T19005] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  445.393588][T19005] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  445.548169][T19147] x_tables: duplicate underflow at hook 3
[  445.579793][T19159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3685'.
[  445.617302][T19095] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.627013][T19095] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.638682][T19161] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3686'.
[  445.641029][T19095] bridge_slave_0: entered allmulticast mode
[  445.660611][T19095] bridge_slave_0: entered promiscuous mode
[  445.669570][T19095] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.677276][T19095] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.684711][T19095] bridge_slave_1: entered allmulticast mode
[  445.692627][T19095] bridge_slave_1: entered promiscuous mode
[  445.804054][T19095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  445.837977][T19095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  445.920564][T19166] netlink: 'syz.1.3687': attribute type 1 has an invalid length.
[  445.929729][T19166] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3687'.
[  445.989040][T19005] 8021q: adding VLAN 0 to HW filter on device bond0
[  446.017335][T19095] team0: Port device team_slave_0 added
[  446.105610][T19095] team0: Port device team_slave_1 added
[  446.192237][ T5872] Bluetooth: hci0: command tx timeout
[  446.293662][T19095] batman_adv: batadv0: Adding interface: batadv_slave_0
[  446.305879][T19095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  446.371401][T19190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3693'.
[  446.380794][T19095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  446.396790][T19095] batman_adv: batadv0: Adding interface: batadv_slave_1
[  446.405934][T19095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  446.435317][T19190] No such timeout policy "syz0"
[  446.447483][T19095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  446.698398][T19005] 8021q: adding VLAN 0 to HW filter on device team0
[  446.772191][ T7060] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.779374][ T7060] bridge0: port 1(bridge_slave_0) entered forwarding state
[  446.797350][T19095] hsr_slave_0: entered promiscuous mode
[  446.814814][T19095] hsr_slave_1: entered promiscuous mode
[  446.907644][ T7060] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.915091][ T7060] bridge0: port 2(bridge_slave_1) entered forwarding state
[  447.040947][T19209] openvswitch: netlink: IPv4 tun info is not correct
[  447.465749][T19227] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3704'.
[  447.491164][T19227] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3704'.
[  448.049910][T19251] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3708'.
[  448.066721][T19095] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  448.127072][T19095] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  448.173563][T19095] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  448.209703][T19095] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  448.273390][ T5872] Bluetooth: hci0: command tx timeout
[  448.329005][T19005] 8021q: adding VLAN 0 to HW filter on device batadv0
[  448.367486][T19267] xt_CT: You must specify a L4 protocol and not use inversions on it
[  448.444771][T19267] __nla_validate_parse: 1 callbacks suppressed
[  448.444795][T19267] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3712'.
[  448.490574][T19267] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3712'.
[  448.585925][T19005] veth0_vlan: entered promiscuous mode
[  448.623960][T19005] veth1_vlan: entered promiscuous mode
[  448.717181][T19279] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  448.851606][T19278] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  448.861312][T19278] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  448.871316][T19278] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  448.880734][T19278] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  448.921579][T19278] vlan0: left allmulticast mode
[  448.926524][T19278] veth0_vlan: left allmulticast mode
[  448.942226][T19278] vlan0: left promiscuous mode
[  448.954941][T19278] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0
[  448.964737][T19278] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0
[  448.974617][T19278] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0
[  448.985287][T19278] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0
[  449.016497][T19095] 8021q: adding VLAN 0 to HW filter on device bond0
[  449.095375][T19095] 8021q: adding VLAN 0 to HW filter on device team0
[  449.124109][ T7060] bridge0: port 1(bridge_slave_0) entered blocking state
[  449.131355][ T7060] bridge0: port 1(bridge_slave_0) entered forwarding state
[  449.152033][T19005] veth0_macvtap: entered promiscuous mode
[  449.189076][T19291] smc: net device erspan0 applied user defined pnetid SYZ0
[  449.192684][T19005] veth1_macvtap: entered promiscuous mode
[  449.241366][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  449.248595][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  449.341258][T19005] batman_adv: batadv0: Interface activated: batadv_slave_0
[  449.395389][T19005] batman_adv: batadv0: Interface activated: batadv_slave_1
[  449.429305][T19005] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  449.443729][T19005] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  449.455642][T19005] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  449.465510][T19005] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  449.754950][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  449.771523][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  449.926883][ T7060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  449.960029][ T7060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  450.134238][T19095] 8021q: adding VLAN 0 to HW filter on device batadv0
[  450.140103][T19324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3732'.
[  450.350329][ T5872] Bluetooth: hci0: command tx timeout
[  450.905918][T19350] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3737'.
[  450.986060][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  451.006441][   T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.126016][   T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.162677][T19095] veth0_vlan: entered promiscuous mode
[  451.182638][T19095] veth1_vlan: entered promiscuous mode
[  451.266339][   T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.287623][T19095] veth0_macvtap: entered promiscuous mode
[  451.299032][T19095] veth1_macvtap: entered promiscuous mode
[  451.328249][   T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.356911][T19095] batman_adv: batadv0: Interface activated: batadv_slave_0
[  451.371170][T19095] batman_adv: batadv0: Interface activated: batadv_slave_1
[  451.383885][T19095] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  451.395241][T19095] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  451.404229][T19095] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  451.413038][T19095] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  451.586242][ T7060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  451.619727][ T7060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  451.633508][   T36] bridge_slave_1: left allmulticast mode
[  451.639214][   T36] bridge_slave_1: left promiscuous mode
[  451.649982][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.659339][   T36] bridge_slave_0: left allmulticast mode
[  451.665407][   T36] bridge_slave_0: left promiscuous mode
[  451.671970][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  452.073394][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  452.085230][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  452.097027][   T36] bond0 (unregistering): Released all slaves
[  452.134369][ T7060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  452.143177][ T7060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  452.578471][   T36] hsr_slave_0: left promiscuous mode
[  452.596631][   T36] hsr_slave_1: left promiscuous mode
[  452.611744][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  452.637474][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  452.650529][T19373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3745'.
[  452.669896][T19373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3745'.
[  452.683316][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  452.700127][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  452.785972][   T36] veth1_macvtap: left promiscuous mode
[  452.812137][   T36] veth0_macvtap: left promiscuous mode
[  452.830704][   T36] veth1_vlan: left promiscuous mode
[  452.851167][   T36] veth0_vlan: left promiscuous mode
[  453.194286][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  453.214615][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  453.224291][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  453.238300][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  453.248151][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  453.699223][   T36] team0 (unregistering): Port device team_slave_1 removed
[  453.746851][   T36] team0 (unregistering): Port device team_slave_0 removed
[  454.148304][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  454.167504][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  454.176341][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  454.198841][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  454.207478][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  454.379387][T19371] veth0: entered promiscuous mode
[  454.461297][T19371] veth0: left promiscuous mode
[  455.103914][T19409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3752'.
[  455.130336][T19409] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3752'.
[  455.188282][T19407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3750'.
[  455.222041][T19406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3750'.
[  455.294428][T19415] tipc: Started in network mode
[  455.299725][T19415] tipc: Node identity 42e3631900a5, cluster identity 4711
[  455.315208][T19415] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  455.396855][ T5869] Bluetooth: hci0: command tx timeout
[  455.422715][T19415] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  455.426380][T19421] netlink: 'syz.4.3755': attribute type 10 has an invalid length.
[  455.440158][T19421] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3755'.
[  455.447270][T19405] syzkaller0: entered promiscuous mode
[  455.455531][T19419] Bluetooth: MGMT ver 1.23
[  455.455681][T19405] syzkaller0: entered allmulticast mode
[  455.466635][T19405] tipc: Resetting bearer <eth:syzkaller0>
[  455.470843][T19419] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3753'.
[  455.502991][T19388] chnl_net:caif_netlink_parms(): no params data found
[  455.710734][ T7060] tipc: Resetting bearer <eth:syzkaller0>
[  455.735007][T19404] tipc: Resetting bearer <eth:syzkaller0>
[  456.272561][ T5869] Bluetooth: hci2: command tx timeout
[  456.440525][ T5932] tipc: Node number set to 1111909145
[  457.369057][T19404] tipc: Disabling bearer <eth:syzkaller0>
[  457.384164][T19425] netlink: 'syz.1.3753': attribute type 1 has an invalid length.
[  457.399530][T19385] chnl_net:caif_netlink_parms(): no params data found
[  457.476448][ T5869] Bluetooth: hci0: command tx timeout
[  457.689901][T19453] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  457.832703][   T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.946160][T19460] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3762'.
[  458.071600][   T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.112047][T19385] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.134300][T19385] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.151925][T19385] bridge_slave_0: entered allmulticast mode
[  458.168554][T19385] bridge_slave_0: entered promiscuous mode
[  458.227742][   T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.247518][T19385] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.256897][T19385] bridge0: port 2(bridge_slave_1) entered disabled state
[  458.273114][T19385] bridge_slave_1: entered allmulticast mode
[  458.289501][T19385] bridge_slave_1: entered promiscuous mode
[  458.329339][T19388] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.348015][T19388] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.356727][ T5869] Bluetooth: hci2: command tx timeout
[  458.363373][T19388] bridge_slave_0: entered allmulticast mode
[  458.377439][T19388] bridge_slave_0: entered promiscuous mode
[  458.387110][T19388] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.394956][T19388] bridge0: port 2(bridge_slave_1) entered disabled state
[  458.416030][T19388] bridge_slave_1: entered allmulticast mode
[  458.425120][T19388] bridge_slave_1: entered promiscuous mode
[  458.490480][   T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.604373][T19385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  458.624620][T19385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  458.660885][T19388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  458.675233][T19388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  458.911754][T19385] team0: Port device team_slave_0 added
[  458.947737][T19385] team0: Port device team_slave_1 added
[  458.976255][T19388] team0: Port device team_slave_0 added
[  458.999904][T19490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  459.059418][T19388] team0: Port device team_slave_1 added
[  459.127317][T19385] batman_adv: batadv0: Adding interface: batadv_slave_0
[  459.134572][T19385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  459.162839][T19495] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3768'.
[  459.164269][T19385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  459.187132][T19385] batman_adv: batadv0: Adding interface: batadv_slave_1
[  459.194428][T19385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  459.223783][T19385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  459.318688][T19388] batman_adv: batadv0: Adding interface: batadv_slave_0
[  459.336179][T19388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  459.363554][T19388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  459.412924][T19388] batman_adv: batadv0: Adding interface: batadv_slave_1
[  459.420653][T19388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  459.447149][T19388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  459.550146][ T5869] Bluetooth: hci0: command tx timeout
[  459.588998][T19385] hsr_slave_0: entered promiscuous mode
[  459.601703][T19385] hsr_slave_1: entered promiscuous mode
[  459.608341][T19385] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  459.626603][T19385] Cannot create hsr debugfs directory
[  459.639655][   T36] bridge_slave_1: left allmulticast mode
[  459.649025][   T36] bridge_slave_1: left promiscuous mode
[  459.660855][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.682768][   T36] bridge_slave_0: left allmulticast mode
[  459.702940][   T36] bridge_slave_0: left promiscuous mode
[  459.724710][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  460.235422][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  460.247804][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  460.261487][   T36] bond0 (unregistering): Released all slaves
[  460.319194][T19388] hsr_slave_0: entered promiscuous mode
[  460.326704][T19388] hsr_slave_1: entered promiscuous mode
[  460.342405][T19388] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  460.357869][T19388] Cannot create hsr debugfs directory
[  460.430224][ T5869] Bluetooth: hci2: command tx timeout
[  461.044320][   T36] hsr_slave_0: left promiscuous mode
[  461.061561][   T36] hsr_slave_1: left promiscuous mode
[  461.067839][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  461.075950][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  461.086869][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  461.100435][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  461.163655][   T36] veth1_macvtap: left promiscuous mode
[  461.176281][   T36] veth0_macvtap: left promiscuous mode
[  461.185364][   T36] veth1_vlan: left promiscuous mode
[  461.197252][   T36] veth0_vlan: left promiscuous mode
[  461.630369][ T5869] Bluetooth: hci0: command tx timeout
[  461.725077][   T36] team0 (unregistering): Port device team_slave_1 removed
[  461.777842][   T36] team0 (unregistering): Port device team_slave_0 removed
[  462.510575][ T5869] Bluetooth: hci2: command tx timeout
[  462.679428][T19550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3787'.
[  462.929575][T19555] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3789'.
[  463.063262][   T36] bridge_slave_0: left allmulticast mode
[  463.071239][   T36] bridge_slave_0: left promiscuous mode
[  463.077087][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  463.226615][T19568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3791'.
[  463.253080][T19567] netlink: 'syz.1.3794': attribute type 1 has an invalid length.
[  463.397215][T19578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3795'.
[  463.529808][   T36] bond2 (unregistering): (slave gretap1): Releasing backup interface
[  463.555362][   T36] bond20 (unregistering): (slave gretap2): Releasing active interface
[  463.994643][   T36] bond1 (unregistering): Released all slaves
[  464.119221][   T36] bond2 (unregistering): (slave bond3): Releasing backup interface
[  464.128753][   T36] bond2 (unregistering): Released all slaves
[  464.245470][   T36] bond3 (unregistering): Released all slaves
[  464.366112][   T36] bond4 (unregistering): (slave bond5): Releasing backup interface
[  464.374859][   T36] bond4 (unregistering): Released all slaves
[  464.487333][   T36] bond5 (unregistering): Released all slaves
[  464.599154][   T36] bond6 (unregistering): (slave bond7): Releasing backup interface
[  464.608252][   T36] bond6 (unregistering): Released all slaves
[  464.722459][   T36] bond7 (unregistering): Released all slaves
[  464.839851][   T36] bond8 (unregistering): Released all slaves
[  464.966141][   T36] bond9 (unregistering): (slave bond10): Releasing backup interface
[  464.975314][   T36] bond9 (unregistering): Released all slaves
[  465.094725][   T36] bond10 (unregistering): Released all slaves
[  465.208676][   T36] bond11 (unregistering): Released all slaves
[  465.226212][   T36] bond12 (unregistering): Released all slaves
[  465.240960][   T36] bond13 (unregistering): Released all slaves
[  465.356650][   T36] bond14 (unregistering): Released all slaves
[  465.477098][   T36] bond15 (unregistering): (slave bond16): Releasing backup interface
[  465.487129][   T36] bond15 (unregistering): Released all slaves
[  465.594913][   T36] bond16 (unregistering): Released all slaves
[  465.713251][   T36] bond17 (unregistering): (slave bond18): Releasing backup interface
[  465.725888][   T36] bond17 (unregistering): Released all slaves
[  465.849038][   T36] bond18 (unregistering): Released all slaves
[  465.878105][   T36] bond0 (unregistering): (slave bond19): Releasing backup interface
[  465.887484][   T36] bond0 (unregistering): Released all slaves
[  466.058776][   T36] bond19 (unregistering): Released all slaves
[  466.077249][   T36] bond20 (unregistering): Released all slaves
[  466.103181][T19567] workqueue: Failed to create a rescuer kthread for wq "bond24": -EINTR
[  466.126641][T19574] workqueue: Failed to create a rescuer kthread for wq "bond24": -EINTR
[  466.243314][T19388] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  466.309821][T19388] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  466.338731][T19388] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  466.383156][   T36] tipc: Disabling bearer <udp:syz2>
[  466.397963][   T36] tipc: Disabling bearer <eth:team0>
[  466.413769][   T36] tipc: Left network mode
[  466.463717][T19590] nbd: must specify a device to reconfigure
[  466.615408][T19388] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  466.708384][T19595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3799'.
[  467.055605][   T36] hsr_slave_0: left promiscuous mode
[  467.453662][T19621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3804'.
[  467.825835][   T36] team0 (unregistering): Port device team_slave_1 removed
[  467.877813][   T36] team0 (unregistering): Port device team_slave_0 removed
[  468.309282][T19610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3802'.
[  468.472854][T19388] 8021q: adding VLAN 0 to HW filter on device bond0
[  468.632297][T19388] 8021q: adding VLAN 0 to HW filter on device team0
[  468.697394][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state
[  468.705121][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state
[  468.723058][T19637] netlink: 'syz.4.3808': attribute type 1 has an invalid length.
[  468.767961][T19385] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  468.896754][T19640] 8021q: adding VLAN 0 to HW filter on device bond15
[  468.905821][T19640] bond14: (slave bond15): making interface the new active one
[  468.914837][T19640] bond14: (slave bond15): Enslaving as an active interface with an up link
[  468.928299][T19385] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  469.017735][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  469.025013][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  469.056330][T19385] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  469.098673][T19385] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  469.376867][T19385] 8021q: adding VLAN 0 to HW filter on device bond0
[  469.433873][T19385] 8021q: adding VLAN 0 to HW filter on device team0
[  469.439807][   T36] IPVS: stop unused estimator thread 0...
[  469.504171][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  469.511441][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  469.540892][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  469.548100][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  469.694089][T19670] netlink: 'syz.2.3816': attribute type 10 has an invalid length.
[  469.730273][T19385] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  469.759678][T19385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  469.815364][T19670] team0: Device ipvlan1 failed to register rx_handler
[  469.906150][T19388] 8021q: adding VLAN 0 to HW filter on device batadv0
[  470.013712][T19684] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3819'.
[  470.237397][T19694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3822'.
[  470.262648][T19694] 8021q: VLANs not supported on wlan0
[  470.413302][T19698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3824'.
[  470.497978][T19705] openvswitch: netlink: Missing key (keys=40, expected=80)
[  470.503121][T19385] 8021q: adding VLAN 0 to HW filter on device batadv0
[  470.562763][T19705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3825'.
[  470.587861][T19709] netlink: 'syz.4.3826': attribute type 4 has an invalid length.
[  470.602438][T19712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3825'.
[  470.626411][T19705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3825'.
[  470.715488][T19385] veth0_vlan: entered promiscuous mode
[  470.749328][T19385] veth1_vlan: entered promiscuous mode
[  470.895671][T19388] veth0_vlan: entered promiscuous mode
[  470.936936][T19388] veth1_vlan: entered promiscuous mode
[  470.954762][T19385] veth0_macvtap: entered promiscuous mode
[  471.028350][T19385] veth1_macvtap: entered promiscuous mode
[  471.116586][T19385] batman_adv: batadv0: Interface activated: batadv_slave_0
[  471.182183][T19732] openvswitch: netlink: Flow key attr not present in new flow.
[  471.182861][T19385] batman_adv: batadv0: Interface activated: batadv_slave_1
[  471.215439][T19388] veth0_macvtap: entered promiscuous mode
[  471.226684][T19385] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  471.237805][T19385] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  471.247778][T19385] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  471.257621][T19385] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  471.278210][T19388] veth1_macvtap: entered promiscuous mode
[  471.334282][T19388] batman_adv: batadv0: Interface activated: batadv_slave_0
[  471.392963][T19388] batman_adv: batadv0: Interface activated: batadv_slave_1
[  471.443357][T19388] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  471.459148][T19388] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  471.482994][T19388] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  471.494674][T19388] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  471.643645][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.690522][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.865565][ T7060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.876314][ T7060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.924321][ T7060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.958537][ T7060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  472.089701][T12499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  472.113525][T12499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  472.207362][T19767] x_tables: unsorted underflow at hook 1
[  472.487434][T19777] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3842'.
[  472.633841][   T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.758384][   T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.155806][   T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.299741][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  473.311829][ T5872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  473.320166][ T5872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  473.329015][ T5872] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  473.341010][ T5872] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  473.404545][   T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.576477][   T36] bridge_slave_1: left allmulticast mode
[  473.582497][   T36] bridge_slave_1: left promiscuous mode
[  473.588328][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.607818][   T36] bridge_slave_0: left allmulticast mode
[  473.614140][   T36] bridge_slave_0: left promiscuous mode
[  473.619958][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.275274][ T5872] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  474.292501][ T5872] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  474.308395][ T5872] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  474.318408][ T5872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  474.327969][ T5872] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  474.408149][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  474.420402][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  474.434992][   T36] bond0 (unregistering): Released all slaves
[  474.458803][T19797] vxcan1: entered allmulticast mode
[  474.464432][T19801] vxcan1: left allmulticast mode
[  474.827860][T19784] chnl_net:caif_netlink_parms(): no params data found
[  474.948468][T19825] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3856'.
[  475.091482][T19834] netlink: 'syz.1.3859': attribute type 10 has an invalid length.
[  475.126894][   T36] hsr_slave_0: left promiscuous mode
[  475.137992][T19830] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3858'.
[  475.147833][   T36] hsr_slave_1: left promiscuous mode
[  475.162931][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  475.170497][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  475.178832][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  475.186528][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  475.227195][   T36] veth1_macvtap: left promiscuous mode
[  475.233531][   T36] veth0_macvtap: left promiscuous mode
[  475.239241][   T36] veth1_vlan: left promiscuous mode
[  475.244863][   T36] veth0_vlan: left promiscuous mode
[  475.404448][ T5872] Bluetooth: hci0: command tx timeout
[  475.765716][   T36] team0 (unregistering): Port device team_slave_1 removed
[  475.818124][   T36] team0 (unregistering): Port device team_slave_0 removed
[  476.441385][ T5872] Bluetooth: hci2: command tx timeout
[  476.559163][T19855] netlink: 'syz.4.3864': attribute type 1 has an invalid length.
[  476.652588][T19784] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.663885][T19784] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.675088][T19784] bridge_slave_0: entered allmulticast mode
[  476.682753][T19784] bridge_slave_0: entered promiscuous mode
[  476.692677][T19784] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.700288][T19784] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.707716][T19784] bridge_slave_1: entered allmulticast mode
[  476.716059][T19784] bridge_slave_1: entered promiscuous mode
[  476.724505][T19861] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3864'.
[  476.823122][T19857] 8021q: adding VLAN 0 to HW filter on device bond17
[  476.835535][T19857] bond16: (slave bond17): making interface the new active one
[  476.847841][T19857] bond16: (slave bond17): Enslaving as an active interface with an up link
[  476.946603][T19861] 8021q: adding VLAN 0 to HW filter on device bond16
[  477.009757][T19869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3867'.
[  477.061778][T19784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  477.122124][T19784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  477.228125][T19881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3869'.
[  477.458220][T19784] team0: Port device team_slave_0 added
[  477.470844][ T5872] Bluetooth: hci0: command tx timeout
[  477.527221][T19784] team0: Port device team_slave_1 added
[  477.576599][T19895] tipc: Enabled bearer <eth:ipvlan0>, priority 10
[  477.635907][T19809] chnl_net:caif_netlink_parms(): no params data found
[  477.749532][T19784] batman_adv: batadv0: Adding interface: batadv_slave_0
[  477.761327][T19784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  477.793258][T19784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  477.864681][   T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.915862][T19784] batman_adv: batadv0: Adding interface: batadv_slave_1
[  477.928338][T19784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  477.964311][T19784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  477.981763][T19906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3879'.
[  477.992433][T19906] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3879'.
[  478.093774][T19915] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3881'.
[  478.143407][   T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.269778][   T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.435256][   T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.474138][T19784] hsr_slave_0: entered promiscuous mode
[  478.481902][T19784] hsr_slave_1: entered promiscuous mode
[  478.514150][ T5872] Bluetooth: hci2: command tx timeout
[  478.674645][T19809] bridge0: port 1(bridge_slave_0) entered blocking state
[  478.682220][T19809] bridge0: port 1(bridge_slave_0) entered disabled state
[  478.689556][T19809] bridge_slave_0: entered allmulticast mode
[  478.695734][ T8937] tipc: Node number set to 1732351157
[  478.704111][T19809] bridge_slave_0: entered promiscuous mode
[  478.715385][T19809] bridge0: port 2(bridge_slave_1) entered blocking state
[  478.723011][T19809] bridge0: port 2(bridge_slave_1) entered disabled state
[  478.730795][T19809] bridge_slave_1: entered allmulticast mode
[  478.739654][T19809] bridge_slave_1: entered promiscuous mode
[  478.985584][T19809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  479.019180][T19809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  479.059582][T19947] netem: unknown loss type 0
[  479.080411][T19947] netem: change failed
[  479.306654][T19959] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3892'.
[  479.323853][T19809] team0: Port device team_slave_0 added
[  479.338840][T19809] team0: Port device team_slave_1 added
[  479.396497][   T36] bridge_slave_1: left allmulticast mode
[  479.418780][   T36] bridge_slave_1: left promiscuous mode
[  479.426923][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.447363][   T36] bridge_slave_0: left allmulticast mode
[  479.458390][   T36] bridge_slave_0: left promiscuous mode
[  479.467614][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.498149][T19967] netlink: 'syz.2.3891': attribute type 1 has an invalid length.
[  479.537279][T19970] netlink: 'syz.4.3895': attribute type 2 has an invalid length.
[  479.547586][T19970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3895'.
[  479.557638][ T5872] Bluetooth: hci0: command tx timeout
[  479.563566][T19970] netlink: 'syz.4.3895': attribute type 7 has an invalid length.
[  479.891562][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  479.904333][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  479.918154][   T36] bond0 (unregistering): Released all slaves
[  480.168526][T19809] batman_adv: batadv0: Adding interface: batadv_slave_0
[  480.183515][T19809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  480.218813][T19809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  480.272282][T19809] batman_adv: batadv0: Adding interface: batadv_slave_1
[  480.290355][T19809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  480.337625][T19809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  480.459030][T19981] netlink: 'syz.2.3900': attribute type 21 has an invalid length.
[  480.600520][ T5872] Bluetooth: hci2: command tx timeout
[  480.608192][   T36] hsr_slave_0: left promiscuous mode
[  480.640170][   T36] hsr_slave_1: left promiscuous mode
[  480.656366][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  480.673632][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  480.686769][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  480.699137][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  480.745015][   T36] veth1_macvtap: left promiscuous mode
[  480.770499][   T36] veth0_macvtap: left promiscuous mode
[  480.776244][   T36] veth1_vlan: left promiscuous mode
[  480.784671][   T36] veth0_vlan: left promiscuous mode
[  481.058010][T19998] __nla_validate_parse: 1 callbacks suppressed
[  481.058030][T19998] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3904'.
[  481.468221][   T36] team0 (unregistering): Port device team_slave_1 removed
[  481.516486][   T36] team0 (unregistering): Port device team_slave_0 removed
[  481.630945][ T5872] Bluetooth: hci0: command tx timeout
[  482.006789][T19809] hsr_slave_0: entered promiscuous mode
[  482.013935][T19809] hsr_slave_1: entered promiscuous mode
[  482.020868][T19809] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  482.028614][T19809] Cannot create hsr debugfs directory
[  482.059411][T19996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3903'.
[  482.069486][T19996] gretap0: entered promiscuous mode
[  482.203313][T20007] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3906'.
[  482.583269][T20023] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  482.670624][ T5872] Bluetooth: hci2: command tx timeout
[  482.706549][T20031] veth0_to_bridge: left allmulticast mode
[  482.713446][T20031] veth0_to_bridge: left promiscuous mode
[  482.719395][T20031] bridge0: port 2(veth0_to_bridge) entered disabled state
[  482.737573][T20031] bond16: (slave bond17): Releasing backup interface
[  482.753720][T20031] batadv1: left allmulticast mode
[  482.766387][T20031] batadv1: left promiscuous mode
[  482.775639][T20031] bridge0: port 1(batadv1) entered disabled state
[  482.805647][T20031] bond18: (slave bond19): Releasing backup interface
[  482.817312][T20031] bond19: left promiscuous mode
[  482.845742][T20031] bond21: (slave bond22): Releasing backup interface
[  482.963552][T19784] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  483.074302][T19784] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  483.099570][T19784] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  483.123724][T19784] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  483.227682][T20059] openvswitch: netlink: Missing key (keys=40, expected=80)
[  483.239817][T20059] openvswitch: netlink: Missing key (keys=40, expected=80)
[  483.255711][T20058] netlink: 'syz.2.3920': attribute type 11 has an invalid length.
[  483.266052][T20058] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3920'.
[  483.308763][T20058] openvswitch: netlink: IPv4 tun info is not correct
[  483.675598][T19784] 8021q: adding VLAN 0 to HW filter on device bond0
[  483.774952][T19784] 8021q: adding VLAN 0 to HW filter on device team0
[  483.966330][ T7064] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.973640][ T7064] bridge0: port 1(bridge_slave_0) entered forwarding state
[  484.039560][ T7064] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.046832][ T7064] bridge0: port 2(bridge_slave_1) entered forwarding state
[  484.083555][T19809] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  484.092190][T20096] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3927'.
[  484.137238][T19809] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  484.149747][T19809] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  484.209396][T19809] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  484.567294][T19809] 8021q: adding VLAN 0 to HW filter on device bond0
[  484.654299][T19809] 8021q: adding VLAN 0 to HW filter on device team0
[  484.688673][ T7060] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.695879][ T7060] bridge0: port 1(bridge_slave_0) entered forwarding state
[  484.752741][ T7060] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.760084][ T7060] bridge0: port 2(bridge_slave_1) entered forwarding state
[  484.769806][T20134] netlink: 'syz.2.3935': attribute type 13 has an invalid length.
[  484.865513][T20134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  484.946687][T19784] 8021q: adding VLAN 0 to HW filter on device batadv0
[  484.999308][T20142] Bluetooth: MGMT ver 1.23
[  485.143230][T19784] veth0_vlan: entered promiscuous mode
[  485.177583][T19784] veth1_vlan: entered promiscuous mode
[  485.309324][T19784] veth0_macvtap: entered promiscuous mode
[  485.395209][T19784] veth1_macvtap: entered promiscuous mode
[  485.478122][T19784] batman_adv: batadv0: Interface activated: batadv_slave_0
[  485.534801][T19784] batman_adv: batadv0: Interface activated: batadv_slave_1
[  485.585789][T19784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  485.635654][T20136] infiniband syz0: set down
[  485.636269][T19784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  485.649858][T19784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  485.672479][T20136] infiniband syz0: added ipvlan1
[  485.675677][T19784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  485.688449][T20136] syz0: rxe_create_cq: returned err = -12
[  485.712688][T20136] infiniband syz0: Couldn't create ib_mad CQ
[  485.718948][T20136] infiniband syz0: Couldn't open port 1
[  485.860874][T19809] 8021q: adding VLAN 0 to HW filter on device batadv0
[  485.872163][T20136] RDS/IB: syz0: added
[  485.884438][T20136] smc: adding ib device syz0 with port count 1
[  485.909483][T20136] smc:    ib device syz0 port 1 has pnetid 
[  485.982258][ T7070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  486.015456][ T7070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  486.065436][T20166] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3945'.
[  486.156488][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  486.177079][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  486.809373][T19809] veth0_vlan: entered promiscuous mode
[  486.899373][T19809] veth1_vlan: entered promiscuous mode
[  487.003036][T19809] veth0_macvtap: entered promiscuous mode
[  487.143649][T19809] veth1_macvtap: entered promiscuous mode
[  487.219174][ T7064] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.333863][ T7064] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.380644][T19809] batman_adv: batadv0: Interface activated: batadv_slave_0
[  487.417455][T19809] batman_adv: batadv0: Interface activated: batadv_slave_1
[  487.454258][T19809] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  487.470800][T19809] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  487.479562][T19809] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  487.509982][T19809] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  487.624073][ T7064] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.731747][ T7064] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.754692][ T7060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  487.768508][ T7060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  487.831084][ T7070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  487.856050][ T7070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  488.017813][ T7064] bridge_slave_1: left allmulticast mode
[  488.025825][ T7064] bridge_slave_1: left promiscuous mode
[  488.032144][ T7064] bridge0: port 2(bridge_slave_1) entered disabled state
[  488.070519][ T7064] bridge_slave_0: left allmulticast mode
[  488.076538][ T7064] bridge_slave_0: left promiscuous mode
[  488.101962][ T7064] bridge0: port 1(bridge_slave_0) entered disabled state
[  488.278846][ T5869] Bluetooth: hci5: command 0x0406 tx timeout
[  488.565646][ T7064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  488.578800][ T7064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  488.589389][ T7064] bond0 (unregistering): Released all slaves
[  488.957363][T20196] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3952'.
[  489.525482][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  489.535250][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  489.543711][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  489.555682][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  489.566536][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  490.077984][ T7064] hsr_slave_0: left promiscuous mode
[  490.085295][ T7064] hsr_slave_1: left promiscuous mode
[  490.096577][ T7064] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  490.104607][ T7064] batman_adv: batadv0: Removing interface: batadv_slave_0
[  490.113876][ T7064] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  490.121805][ T7064] batman_adv: batadv0: Removing interface: batadv_slave_1
[  490.147153][ T7064] veth1_macvtap: left promiscuous mode
[  490.153222][ T7064] veth0_macvtap: left promiscuous mode
[  490.158865][ T7064] veth1_vlan: left promiscuous mode
[  490.164719][ T7064] veth0_vlan: left promiscuous mode
[  490.460789][T20208] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  490.492743][T20208] IPVS: set_ctl: invalid protocol: 34061 51.164.43.134:61578
[  490.522042][T20213] sctp: [Deprecated]: syz.4.3955 (pid 20213) Use of int in maxseg socket option.
[  490.522042][T20213] Use struct sctp_assoc_value instead
[  490.670232][T20219] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3957'.
[  490.859563][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  490.876930][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  490.886546][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  490.895605][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  490.905081][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  491.166633][ T7064] team0 (unregistering): Port device team_slave_1 removed
[  491.213376][ T7064] team0 (unregistering): Port device team_slave_0 removed
[  491.630659][ T5872] Bluetooth: hci0: command tx timeout
[  491.886452][T20227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3960'.
[  492.136514][T20199] chnl_net:caif_netlink_parms(): no params data found
[  492.331546][T20240] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3962'.
[  492.359815][T20245] netlink: 'syz.1.3963': attribute type 1 has an invalid length.
[  492.487236][T20245] 8021q: adding VLAN 0 to HW filter on device bond24
[  492.617781][T17142] syz_tun (unregistering): left promiscuous mode
[  492.704413][T20199] bridge0: port 1(bridge_slave_0) entered blocking state
[  492.712527][T20199] bridge0: port 1(bridge_slave_0) entered disabled state
[  492.725507][T20199] bridge_slave_0: entered allmulticast mode
[  492.738159][T20199] bridge_slave_0: entered promiscuous mode
[  492.799411][T20199] bridge0: port 2(bridge_slave_1) entered blocking state
[  492.817246][T20199] bridge0: port 2(bridge_slave_1) entered disabled state
[  492.832255][T20199] bridge_slave_1: entered allmulticast mode
[  492.851543][T20199] bridge_slave_1: entered promiscuous mode
[  492.922062][T20254] netlink: 'syz.4.3967': attribute type 1 has an invalid length.
[  492.972269][T20199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  492.990823][ T5872] Bluetooth: hci2: command tx timeout
[  493.019035][T20199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  493.204426][ T7064] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.263562][T20199] team0: Port device team_slave_0 added
[  493.292672][T20199] team0: Port device team_slave_1 added
[  493.342408][T20265] netlink: 'syz.4.3971': attribute type 4 has an invalid length.
[  493.402462][ T7064] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.426754][T20266] netlink: 'syz.4.3971': attribute type 4 has an invalid length.
[  493.482394][T20269] Bluetooth: MGMT ver 1.23
[  493.676283][ T7064] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.825979][ T5869] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  493.836370][ T5869] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  493.844763][ T5869] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  493.858634][ T5869] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  493.866470][ T5869] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  493.867105][T20199] batman_adv: batadv0: Adding interface: batadv_slave_0
[  493.918884][T20199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  493.953344][T20199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  493.988553][T20199] batman_adv: batadv0: Adding interface: batadv_slave_1
[  494.007297][T20199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  494.037563][T20282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3974'.
[  494.044126][T20199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  494.106076][ T7064] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.138940][T20221] chnl_net:caif_netlink_parms(): no params data found
[  494.185376][T20287] netlink: 'syz.1.3975': attribute type 4 has an invalid length.
[  494.401458][T20199] hsr_slave_0: entered promiscuous mode
[  494.418817][T20199] hsr_slave_1: entered promiscuous mode
[  494.837565][T20221] bridge0: port 1(bridge_slave_0) entered blocking state
[  494.861725][T20221] bridge0: port 1(bridge_slave_0) entered disabled state
[  494.869063][T20221] bridge_slave_0: entered allmulticast mode
[  494.889107][T20221] bridge_slave_0: entered promiscuous mode
[  494.903850][T20221] bridge0: port 2(bridge_slave_1) entered blocking state
[  494.920423][T20221] bridge0: port 2(bridge_slave_1) entered disabled state
[  494.927982][T20221] bridge_slave_1: entered allmulticast mode
[  494.946660][T20221] bridge_slave_1: entered promiscuous mode
[  495.051969][ T7064] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.070638][ T5869] Bluetooth: hci2: command tx timeout
[  495.117944][T20315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3981'.
[  495.138150][T20315] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3981'.
[  495.193338][T20221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  495.282750][ T7064] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.314729][T20221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  495.353095][T20323] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3982'.
[  495.495437][ T7064] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.518643][T20221] team0: Port device team_slave_0 added
[  495.564480][T20221] team0: Port device team_slave_1 added
[  495.662455][ T7064] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.804900][T20336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3987'.
[  495.822180][T20221] batman_adv: batadv0: Adding interface: batadv_slave_0
[  495.829168][T20221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  495.865930][T20221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  495.943066][T20221] batman_adv: batadv0: Adding interface: batadv_slave_1
[  495.954326][ T5869] Bluetooth: hci5: command tx timeout
[  495.962168][T20221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  495.988846][T20221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  496.121579][T20341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3989'.
[  496.143405][T20221] hsr_slave_0: entered promiscuous mode
[  496.157197][T20221] hsr_slave_1: entered promiscuous mode
[  496.164100][T20221] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  496.171833][T20221] Cannot create hsr debugfs directory
[  496.526134][T20351] openvswitch: netlink: Geneve opt len 63 is not a multiple of 4.
[  496.588521][ T7064] bond1: left allmulticast mode
[  496.595634][ T7064] bond1: left promiscuous mode
[  496.616007][ T7064] bridge0: port 3(bond1) entered disabled state
[  496.647445][T20355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3992'.
[  496.658543][T20355] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3992'.
[  496.682147][ T7064] bridge_slave_1: left allmulticast mode
[  496.696230][ T7064] bridge_slave_1: left promiscuous mode
[  496.712170][ T7064] bridge0: port 2(bridge_slave_1) entered disabled state
[  496.734474][ T7064] bridge_slave_0: left allmulticast mode
[  496.740629][ T7064] bridge_slave_0: left promiscuous mode
[  496.747052][ T7064] bridge0: port 1(bridge_slave_0) entered disabled state
[  496.766745][ T7064] bridge_slave_1: left allmulticast mode
[  496.779080][ T7064] bridge_slave_1: left promiscuous mode
[  496.785365][ T7064] bridge0: port 2(bridge_slave_1) entered disabled state
[  496.804882][ T7064] bridge_slave_0: left allmulticast mode
[  496.818220][ T7064] bridge_slave_0: left promiscuous mode
[  496.824672][ T7064] bridge0: port 1(bridge_slave_0) entered disabled state
[  497.021453][T20362] netlink: 'syz.4.3996': attribute type 58 has an invalid length.
[  497.036549][T20362] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3996'.
[  497.150558][ T5869] Bluetooth: hci2: command tx timeout
[  497.165133][ T7064] bond2 (unregistering): (slave gretap1): Releasing backup interface
[  497.502156][ T7064] bond1 (unregistering): Released all slaves
[  497.526655][ T7064] bond2 (unregistering): (slave bond3): Releasing backup interface
[  497.541684][ T7064] bond2 (unregistering): Released all slaves
[  497.666156][ T7064] bond3 (unregistering): Released all slaves
[  497.682940][ T7064] bond4 (unregistering): (slave bond5): Releasing backup interface
[  497.691753][ T7064] bond4 (unregistering): Released all slaves
[  497.827878][ T7064] bond5 (unregistering): Released all slaves
[  498.030463][ T5869] Bluetooth: hci5: command tx timeout
[  498.173477][ T7064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  498.184847][ T7064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  498.196400][ T7064] bond0 (unregistering): Released all slaves
[  498.499261][ T7064] tipc: Left network mode
[  498.519184][T20276] chnl_net:caif_netlink_parms(): no params data found
[  498.568216][T20371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3999'.
[  498.583296][T20372] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4000'.
[  498.597308][T20372] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4000'.
[  498.688932][T20371] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3999'.
[  498.698280][T20371] netlink: 21 bytes leftover after parsing attributes in process `syz.1.3999'.
[  498.707996][T20371] netlink: 21 bytes leftover after parsing attributes in process `syz.1.3999'.
[  498.971989][T20199] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  499.139208][T20199] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  499.206542][T20199] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  499.239392][ T5869] Bluetooth: hci2: command tx timeout
[  499.285837][T20199] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  499.349016][T20276] bridge0: port 1(bridge_slave_0) entered blocking state
[  499.356560][T20276] bridge0: port 1(bridge_slave_0) entered disabled state
[  499.366307][T20276] bridge_slave_0: entered allmulticast mode
[  499.382027][T20276] bridge_slave_0: entered promiscuous mode
[  499.403475][T20276] bridge0: port 2(bridge_slave_1) entered blocking state
[  499.410878][T20276] bridge0: port 2(bridge_slave_1) entered disabled state
[  499.418175][T20276] bridge_slave_1: entered allmulticast mode
[  499.431753][T20276] bridge_slave_1: entered promiscuous mode
[  499.447951][T20403] netlink: 'syz.1.4007': attribute type 1 has an invalid length.
[  499.456172][T20403] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4007'.
[  499.486095][   T30] audit: type=1804 audit(1751323896.364:7): pid=20403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4007" name="/newroot/966/cgroup.controllers" dev="tmpfs" ino=4941 res=1 errno=0
[  499.508945][   T30] audit: type=1800 audit(1751323896.364:8): pid=20403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4007" name="cgroup.controllers" dev="tmpfs" ino=4941 res=0 errno=0
[  499.654807][T20276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  499.669725][T20276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  499.691087][T20415] netlink: 'syz.1.4009': attribute type 39 has an invalid length.
[  499.891630][T20276] team0: Port device team_slave_0 added
[  499.928128][T20276] team0: Port device team_slave_1 added
[  500.110252][ T5869] Bluetooth: hci5: command tx timeout
[  500.165062][T20276] batman_adv: batadv0: Adding interface: batadv_slave_0
[  500.210311][T20276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  500.224293][T20430] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4011'.
[  500.258314][T20276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  500.304195][T20430] xt_l2tp: invalid flags combination: 4
[  500.321265][T20276] batman_adv: batadv0: Adding interface: batadv_slave_1
[  500.328256][T20276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  500.393587][T20276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  500.668023][ T7064] batadv_slave_0: left promiscuous mode
[  500.687739][ T7064] hsr_slave_0: left promiscuous mode
[  500.707135][ T7064] hsr_slave_1: left promiscuous mode
[  500.713812][ T7064] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  500.722365][ T7064] batman_adv: batadv0: Removing interface: batadv_slave_0
[  500.733560][ T7064] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  500.750110][ T7064] batman_adv: batadv0: Removing interface: batadv_slave_1
[  500.772625][ T7064] hsr_slave_0: left promiscuous mode
[  500.778856][ T7064] hsr_slave_1: left promiscuous mode
[  500.785725][ T7064] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  500.793437][ T7064] batman_adv: batadv0: Removing interface: batadv_slave_0
[  500.810985][ T7064] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  500.818603][ T7064] batman_adv: batadv0: Removing interface: batadv_slave_1
[  500.904099][ T7064] veth1_macvtap: left promiscuous mode
[  500.909734][ T7064] veth0_macvtap: left promiscuous mode
[  500.916766][ T7064] veth1_vlan: left promiscuous mode
[  500.922711][ T7064] veth0_vlan: left promiscuous mode
[  500.929880][ T7064] veth1_macvtap: left promiscuous mode
[  500.935660][ T7064] veth0_macvtap: left promiscuous mode
[  500.941681][ T7064] veth1_vlan: left promiscuous mode
[  500.947037][ T7064] veth0_vlan: left promiscuous mode
[  501.035944][T20450] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4017'.
[  501.046439][T20450] netlink: zone id is out of range
[  501.051987][T20450] netlink: zone id is out of range
[  501.057366][T20450] netlink: zone id is out of range
[  501.065168][T20450] netlink: zone id is out of range
[  501.071188][T20450] netlink: get zone limit has 8 unknown bytes
[  501.407751][T20460] netlink: 'syz.4.4021': attribute type 1 has an invalid length.
[  501.468728][ T3000] smc: removing ib device syz0
[  501.815691][ T7064] team0 (unregistering): Port device team_slave_1 removed
[  501.865076][ T7064] team0 (unregistering): Port device team_slave_0 removed
[  502.190371][ T5869] Bluetooth: hci5: command tx timeout
[  502.762981][ T7064] team0 (unregistering): Port device team_slave_1 removed
[  502.813624][ T7064] team0 (unregistering): Port device team_slave_0 removed
[  503.424713][T20276] hsr_slave_0: entered promiscuous mode
[  503.441778][T20276] hsr_slave_1: entered promiscuous mode
[  503.447995][T20276] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  503.462473][T20276] Cannot create hsr debugfs directory
[  503.468200][  T977] ==================================================================
[  503.476483][  T977] BUG: KFENCE: use-after-free read in __ethtool_get_link_ksettings+0x74/0x190
[  503.476483][  T977] 
[  503.487616][  T977] Use-after-free read at 0xffff88823bfc82e8 (in kfence-#227):
[  503.495084][  T977]  __ethtool_get_link_ksettings+0x74/0x190
[  503.500922][  T977]  ib_get_eth_speed+0x15e/0x7b0
[  503.505884][  T977]  rxe_query_port+0x93/0x3b0
[  503.510491][  T977]  ib_query_port+0x16d/0x830
[  503.515116][  T977]  smc_ib_port_event_work+0x15a/0x940
[  503.520511][  T977]  process_scheduled_works+0xae1/0x17b0
[  503.526094][  T977]  worker_thread+0x8a0/0xda0
[  503.530696][  T977]  kthread+0x70e/0x8a0
[  503.534767][  T977]  ret_from_fork+0x3fc/0x770
[  503.539362][  T977]  ret_from_fork_asm+0x1a/0x30
[  503.544143][  T977] 
[  503.546473][  T977] kfence-#227: 0xffff88823bfc8000-0xffff88823bfc8da7, size=3496, cache=kmalloc-cg-4k
[  503.546473][  T977] 
[  503.558097][  T977] allocated by task 17142 on cpu 0 at 368.300564s (135.257532s ago):
[  503.566245][  T977]  __kvmalloc_node_noprof+0x547/0x5f0
[  503.571621][  T977]  alloc_netdev_mqs+0xa6/0x11e0
[  503.576480][  T977]  rtnl_create_link+0x31f/0xd10
[  503.581428][  T977]  rtnl_newlink_create+0x25c/0xb00
[  503.586562][  T977]  rtnl_newlink+0x16d6/0x1c70
[  503.591247][  T977]  rtnetlink_rcv_msg+0x7cc/0xb70
[  503.596195][  T977]  netlink_rcv_skb+0x205/0x470
[  503.600968][  T977]  netlink_unicast+0x758/0x8d0
[  503.605735][  T977]  netlink_sendmsg+0x805/0xb30
[  503.610509][  T977]  __sock_sendmsg+0x219/0x270
[  503.615226][  T977]  __sys_sendto+0x3bd/0x520
[  503.619728][  T977]  __x64_sys_sendto+0xde/0x100
[  503.624491][  T977]  do_syscall_64+0xfa/0x3b0
[  503.629003][  T977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.634895][  T977] 
[  503.637217][  T977] freed by task 7064 on cpu 1 at 503.431242s (0.205973s ago):
[  503.644690][  T977]  device_release+0x99/0x1c0
[  503.649280][  T977]  kobject_put+0x22b/0x480
[  503.653713][  T977]  netdev_run_todo+0xd2e/0xea0
[  503.658484][  T977]  default_device_exit_batch+0x81e/0x890
[  503.664122][  T977]  ops_undo_list+0x522/0x990
[  503.668714][  T977]  cleanup_net+0x4c5/0x800
[  503.673128][  T977]  process_scheduled_works+0xae1/0x17b0
[  503.678684][  T977]  worker_thread+0x8a0/0xda0
[  503.683288][  T977]  kthread+0x70e/0x8a0
[  503.687466][  T977]  ret_from_fork+0x3fc/0x770
[  503.692061][  T977]  ret_from_fork_asm+0x1a/0x30
[  503.696919][  T977] 
[  503.699255][  T977] CPU: 0 UID: 0 PID: 977 Comm: kworker/0:2 Not tainted 6.16.0-rc3-syzkaller-00122-g60f7f4afaf6d #0 PREEMPT(full) 
[  503.711230][  T977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  503.721476][  T977] Workqueue: events smc_ib_port_event_work
[  503.727304][  T977] RIP: 0010:__ethtool_get_link_ksettings+0x74/0x190
[  503.733983][  T977] Code: 00 00 00 fc ff df 4d 8d be e8 02 00 00 4c 89 fd 48 c1 ed 03 42 80 7c 2d 00 00 74 08 4c 89 ff e8 32 dc 94 f8 41 bc e0 01 00 00 <4d> 03 27 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 13
[  503.753681][  T977] RSP: 0018:ffffc90003aff7a8 EFLAGS: 00010246
[  503.759836][  T977] RAX: ffffffff898ef5c2 RBX: ffffc90003aff820 RCX: ffff8880256d3c00
[  503.767829][  T977] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  503.775888][  T977] RBP: 1ffff110477f905d R08: ffffffff8f50fee7 R09: 1ffffffff1ea1fdc
[  503.783950][  T977] R10: dffffc0000000000 R11: fffffbfff1ea1fdd R12: 00000000000001e0
[  503.791926][  T977] R13: dffffc0000000000 R14: ffff88823bfc8000 R15: ffff88823bfc82e8
[  503.799906][  T977] FS:  0000000000000000(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000
[  503.808850][  T977] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  503.815439][  T977] CR2: ffff88823bfc82e8 CR3: 0000000075d8c000 CR4: 00000000003526f0
[  503.823415][  T977] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  503.831490][  T977] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  503.839461][  T977] Call Trace:
[  503.842740][  T977]  <TASK>
[  503.845678][  T977]  ib_get_eth_speed+0x15e/0x7b0
[  503.850543][  T977]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  503.855921][  T977]  ? do_raw_spin_unlock+0x122/0x240
[  503.861215][  T977]  rxe_query_port+0x93/0x3b0
[  503.865821][  T977]  ib_query_port+0x16d/0x830
[  503.870418][  T977]  smc_ib_port_event_work+0x15a/0x940
[  503.875888][  T977]  ? _raw_spin_unlock_irq+0x23/0x50
[  503.881177][  T977]  ? process_scheduled_works+0x9ef/0x17b0
[  503.886906][  T977]  ? process_scheduled_works+0x9ef/0x17b0
[  503.892810][  T977]  process_scheduled_works+0xae1/0x17b0
[  503.898385][  T977]  ? __pfx_process_scheduled_works+0x10/0x10
[  503.904402][  T977]  worker_thread+0x8a0/0xda0
[  503.909044][  T977]  kthread+0x70e/0x8a0
[  503.913390][  T977]  ? __pfx_worker_thread+0x10/0x10
[  503.918520][  T977]  ? __pfx_kthread+0x10/0x10
[  503.923292][  T977]  ? _raw_spin_unlock_irq+0x23/0x50
[  503.928609][  T977]  ? lockdep_hardirqs_on+0x9c/0x150
[  503.933822][  T977]  ? __pfx_kthread+0x10/0x10
[  503.938419][  T977]  ret_from_fork+0x3fc/0x770
[  503.943209][  T977]  ? __pfx_ret_from_fork+0x10/0x10
[  503.948347][  T977]  ? __switch_to_asm+0x39/0x70
[  503.953127][  T977]  ? __switch_to_asm+0x33/0x70
[  503.957901][  T977]  ? __pfx_kthread+0x10/0x10
[  503.962522][  T977]  ret_from_fork_asm+0x1a/0x30
[  503.967301][  T977]  </TASK>
[  503.970323][  T977] ==================================================================
[  503.978407][  T977] Kernel panic - not syncing: KFENCE: panic_on_warn set ...
[  503.986141][  T977] CPU: 0 UID: 0 PID: 977 Comm: kworker/0:2 Not tainted 6.16.0-rc3-syzkaller-00122-g60f7f4afaf6d #0 PREEMPT(full) 
[  503.998149][  T977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  504.008228][  T977] Workqueue: events smc_ib_port_event_work
[  504.014058][  T977] Call Trace:
[  504.017351][  T977]  <TASK>
[  504.020288][  T977]  dump_stack_lvl+0x99/0x250
[  504.024899][  T977]  ? __asan_memcpy+0x40/0x70
[  504.029502][  T977]  ? __pfx_dump_stack_lvl+0x10/0x10
[  504.034713][  T977]  ? __pfx__printk+0x10/0x10
[  504.039327][  T977]  panic+0x2db/0x790
[  504.043265][  T977]  ? __pfx_panic+0x10/0x10
[  504.047703][  T977]  ? _printk+0xcf/0x120
[  504.051871][  T977]  ? __pfx__printk+0x10/0x10
[  504.056475][  T977]  check_panic_on_warn+0x89/0xb0
[  504.061438][  T977]  kfence_report_error+0x748/0xa40
[  504.066570][  T977]  ? __pfx_kfence_report_error+0x10/0x10
[  504.072243][  T977]  ? __ethtool_get_link_ksettings+0x74/0x190
[  504.078249][  T977]  ? ib_get_eth_speed+0x15e/0x7b0
[  504.083381][  T977]  ? rxe_query_port+0x93/0x3b0
[  504.088160][  T977]  ? ib_query_port+0x16d/0x830
[  504.093030][  T977]  ? smc_ib_port_event_work+0x15a/0x940
[  504.098672][  T977]  ? process_scheduled_works+0xae1/0x17b0
[  504.104403][  T977]  ? worker_thread+0x8a0/0xda0
[  504.109176][  T977]  ? kthread+0x70e/0x8a0
[  504.113441][  T977]  ? ret_from_fork+0x3fc/0x770
[  504.118225][  T977]  ? ret_from_fork_asm+0x1a/0x30
[  504.123212][  T977]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  504.128596][  T977]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  504.134498][  T977]  ? search_bpf_extables+0x26/0x3c0
[  504.139716][  T977]  kfence_handle_page_fault+0x358/0x4d0
[  504.145271][  T977]  page_fault_oops+0x19f/0xa10
[  504.150052][  T977]  ? __pfx_fixup_exception+0x10/0x10
[  504.155434][  T977]  ? __pfx_page_fault_oops+0x10/0x10
[  504.160730][  T977]  ? is_prefetch+0x403/0x640
[  504.165346][  T977]  ? do_raw_spin_lock+0x121/0x290
[  504.170404][  T977]  ? __pfx_is_prefetch+0x10/0x10
[  504.175369][  T977]  __bad_area_nosemaphore+0x11a/0x780
[  504.180788][  T977]  ? __pfx___bad_area_nosemaphore+0x10/0x10
[  504.186711][  T977]  ? spurious_kernel_fault+0x1c7/0x6b0
[  504.192189][  T977]  ? do_kern_addr_fault+0x30/0x80
[  504.197231][  T977]  exc_page_fault+0xc3/0xf0
[  504.201755][  T977]  asm_exc_page_fault+0x26/0x30
[  504.206611][  T977] RIP: 0010:__ethtool_get_link_ksettings+0x74/0x190
[  504.213222][  T977] Code: 00 00 00 fc ff df 4d 8d be e8 02 00 00 4c 89 fd 48 c1 ed 03 42 80 7c 2d 00 00 74 08 4c 89 ff e8 32 dc 94 f8 41 bc e0 01 00 00 <4d> 03 27 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 13
[  504.232835][  T977] RSP: 0018:ffffc90003aff7a8 EFLAGS: 00010246
[  504.238913][  T977] RAX: ffffffff898ef5c2 RBX: ffffc90003aff820 RCX: ffff8880256d3c00
[  504.246914][  T977] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  504.254887][  T977] RBP: 1ffff110477f905d R08: ffffffff8f50fee7 R09: 1ffffffff1ea1fdc
[  504.262867][  T977] R10: dffffc0000000000 R11: fffffbfff1ea1fdd R12: 00000000000001e0
[  504.270870][  T977] R13: dffffc0000000000 R14: ffff88823bfc8000 R15: ffff88823bfc82e8
[  504.278859][  T977]  ? __ethtool_get_link_ksettings+0x32/0x190
[  504.284859][  T977]  ? __ethtool_get_link_ksettings+0x32/0x190
[  504.290850][  T977]  ib_get_eth_speed+0x15e/0x7b0
[  504.295709][  T977]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  504.301120][  T977]  ? do_raw_spin_unlock+0x122/0x240
[  504.306336][  T977]  rxe_query_port+0x93/0x3b0
[  504.310959][  T977]  ib_query_port+0x16d/0x830
[  504.315651][  T977]  smc_ib_port_event_work+0x15a/0x940
[  504.321046][  T977]  ? _raw_spin_unlock_irq+0x23/0x50
[  504.326259][  T977]  ? process_scheduled_works+0x9ef/0x17b0
[  504.331994][  T977]  ? process_scheduled_works+0x9ef/0x17b0
[  504.337731][  T977]  process_scheduled_works+0xae1/0x17b0
[  504.343325][  T977]  ? __pfx_process_scheduled_works+0x10/0x10
[  504.349349][  T977]  worker_thread+0x8a0/0xda0
[  504.353986][  T977]  kthread+0x70e/0x8a0
[  504.358171][  T977]  ? __pfx_worker_thread+0x10/0x10
[  504.363325][  T977]  ? __pfx_kthread+0x10/0x10
[  504.367951][  T977]  ? _raw_spin_unlock_irq+0x23/0x50
[  504.373162][  T977]  ? lockdep_hardirqs_on+0x9c/0x150
[  504.378371][  T977]  ? __pfx_kthread+0x10/0x10
[  504.382974][  T977]  ret_from_fork+0x3fc/0x770
[  504.387597][  T977]  ? __pfx_ret_from_fork+0x10/0x10
[  504.392739][  T977]  ? __switch_to_asm+0x39/0x70
[  504.397515][  T977]  ? __switch_to_asm+0x33/0x70
[  504.402284][  T977]  ? __pfx_kthread+0x10/0x10
[  504.406881][  T977]  ret_from_fork_asm+0x1a/0x30
[  504.411801][  T977]  </TASK>
[  504.415099][  T977] Kernel Offset: disabled
[  504.419897][  T977] Rebooting in 86400 seconds..