last executing test programs:

2m44.130133965s ago: executing program 2 (id=671):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000000)="169204dc50065a0b3554f8df45010a25e8c7c7d1976b1210eda359e513d9271ff04e1806ed195e52bf2f92d8a6efef6a1f51fd920a381c4b809ea6e01b2888d1e69ed7c916ef321a94519ba4507981d74cb4c79794cccf24705bf7c67ab37e99dc455f5f9a1dd5bc02133b296bd666bd31e6f35b6afaa4b82470e6bd06ca")
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfc}, 0x14}}, 0x0)
setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f00000001c0)=0x4, 0x4)
setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000200)=@rose={'rose', 0x0}, 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r4, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="c1e752d5e5e0"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x9, 0xcc}}]}, 0x3c}}, 0x8)
getsockname(r2, &(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff}}, &(0x7f0000000480)=0x80)
getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0, <r8=>0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8)
sendmsg$nl_generic(r2, &(0x7f0000000ac0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4020}, 0xc, &(0x7f0000000a80)={&(0x7f0000000640)={0x440, 0x1b, 0x200, 0x70bd2b, 0x25dfdbfc, {0x1e}, [@nested={0x4c, 0x71, 0x0, 0x1, [@nested={0x4, 0xbc}, @nested={0x4, 0x111}, @typed={0x8, 0xa3, 0x0, 0x0, @u32=0x6}, @generic="6994b5600d66ca0440d248bcd7b1cc2d96f6f75471f61a90032683cf81705695704cd72de236a7c4b8ed5aab1f4ee13d", @typed={0x8, 0xb8, 0x0, 0x0, @fd=r2}]}, @nested={0xf8, 0x140, 0x0, 0x1, [@typed={0x4, 0xf0}, @generic="763792636710b052c227df9b20c6b0b24ffabd833d12972c031dc1009290863cdbc5fc8eade0f34cb0b2eff00b0309d896cadcb001156f9b8e24f928a4698438474e03c3a9d41aa42b9880771be393ad032e0ef299d5a751243e4742d28f91d1", @nested={0x4, 0xec}, @generic="9a65e809ed569f58659ce9526fb33320f61eab9ebbd5e5073c8b9b281413a1206d459aab293024d602ae8dfeb91d5540eda61dd94d43cc781d5f2faa95fe3dfe1fd996ce092541d9a17dd448e7a95fcdb679028f6aa10e27963ee1f1895b217de866246aab60fadb46cd956c419e328809beacb10345e3e14909c2ce7d5075595a622db0c74ed2972eb7fe7c"]}, @nested={0xfc, 0x13a, 0x0, 0x1, [@nested={0x4, 0x125}, @nested={0x4, 0xc5}, @typed={0x8, 0xac, 0x0, 0x0, @uid=r8}, @generic="b6b3b28745b3da4693be7f9e1ed8c7bcae880455d29ef427266b591781fac1b277997da0cd6f41fd1e6c71da85f7108833769190ddabe32e6ef919cb30d1ee5dbc80037629e07f4c2005b0ff433f9ac0249cfbf1ffbb64", @generic="bd802a3b6ce0f6a05a5e160c9a806ca60a6abd7d482964517a38a6caf511f2cf7c2c854124cbfabb59921612437ced0251e057815c90b1d65e6f9a26f9aec48c6241dbc4850dffcd872f81de38720f2360f2371106d667c12d32f199968e6fdf842c1215553f507bdfa85dd28468d34a50b42ecfe94545301a6691e7a9fb8d110b40455a0ca9435243", @typed={0x8, 0x59, 0x0, 0x0, @ipv4=@remote}]}, @nested={0xc, 0x51, 0x0, 0x1, [@typed={0x8, 0x93, 0x0, 0x0, @u32=0x845}]}, @nested={0x1d3, 0x120, 0x0, 0x1, [@nested={0x4, 0xba}, @nested={0x4, 0x42}, @typed={0x12, 0x7a, 0x0, 0x0, @binary="7875e35d8edb64e478a700793907"}, @generic="183c617f29d890cd0b17cc97209493f042c9ce1735d19850dfa37a405c4c11fc9cd6943625f53d2b950723914b4bf66b0ae38e4c5a688f45225baedc21ebdfb9621aeaa5591468fb197f08892a66f4f8a2cad64c81879fbefdfb5d528b1c5e300473b31da7d4734d", @typed={0x29, 0x68, 0x0, 0x0, @binary="affd8f37573273380c43276bd572e30cb9530b4a496bf91ba7b43bda0f504cd2ab699bc6c6"}, @generic="4cdf77e21667ef0347b02c1d5f68d099aa1bc9931d6a21d2a721dc75e8fa91f6bc28b8f7070e7206376b7721b9f12543997ff03dc0108af314118706392c28c97d0f4ba92c61a2f356bc313bb6e209c8cf49ef058a3178fdc53defe652f34c24229f00dd6f9e7d83bed4c008abed091118d2b5bfcfef13076f8b6b139fd5", @typed={0x6, 0x133, 0x0, 0x0, @str='$\x00'}, @nested={0x4, 0x22}, @generic="6bd04306f43d5920dd371373749155c7a752bccd171f9aed1c83f5e7483a85b9896da58eb9c666d23e814203f1fa851ad2b557ca10fb140e7bbee10dcdc3fcdca98b733a9f74772a3635014d446608886fadadf93dddc812e5215d8de8e71ef895935b6be1fea809d835ecc03a877b2b6459116585e2e4ef1f8425e99f2c83c8c3d1bc229ffbde9753c441b86be4c77ebd08d17ef8"]}, @generic="f0e0f40342d9726968"]}, 0x440}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c1)
getpeername$packet(r6, &(0x7f0000000b00)={0x11, 0x0, <r9=>0x0}, &(0x7f0000000b40)=0x14)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b80)={'tunl0\x00', r9, 0x40, 0x10000, 0xfc, 0xb, {{0x16, 0x4, 0x2, 0x11, 0x58, 0x66, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty, {[@noop, @end, @generic={0x86, 0x8, "87de9ba3d7d1"}, @ssrr={0x89, 0x23, 0x5c, [@dev={0xac, 0x14, 0x14, 0xe}, @multicast1, @local, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x17, 0x8f, [@broadcast, @dev={0xac, 0x14, 0x14, 0x19}, @broadcast, @private=0xa010101, @rand_addr=0x64010101]}]}}}}})
setsockopt$inet6_tcp_int(r6, 0x6, 0x1b, &(0x7f0000000c40)=0x1, 0x4)
getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000c80)={0x0, 0x101, 0x8001, 0x100, 0x6, 0x1, 0x1, 0x3, {<r10=>0x0, @in={{0x2, 0x4e23, @empty}}, 0x5, 0x2, 0x1, 0x8, 0x10}}, &(0x7f0000000d40)=0xb0)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000d80)={r10, 0x7, 0x0, 0x3, 0xe}, &(0x7f0000000dc0)=0x18)
socket$inet6_sctp(0xa, 0x0, 0x84)
r11 = accept(r6, &(0x7f0000000e00)=@pppoe, &(0x7f0000000e80)=0x80)
sendmsg$nl_route_sched(r11, &(0x7f00000013c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001380)={&(0x7f0000000f00)=@delqdisc={0x458, 0x25, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xe, 0xffff}, {0x0, 0x10}, {0x6, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x41c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xf}, @TCA_TBF_RATE64={0xc, 0x4, 0x20e669dd31ff9d8}, @TCA_TBF_PTAB={0x404, 0x3, [0x4f7, 0x9, 0x1, 0x8, 0x3ff, 0x9, 0x7, 0x4, 0xd, 0x6, 0x9028, 0x5, 0x5, 0x7, 0x8, 0x1, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x1, 0x40, 0x16, 0x7, 0x5, 0x8, 0x6, 0x2, 0x5, 0x10000, 0x0, 0x6, 0x7ff, 0x7, 0xe2, 0x1, 0x7, 0x2, 0x6, 0x5, 0x8, 0x8f2, 0x8e27, 0x1, 0x8, 0x1, 0x4, 0x7, 0x9, 0x7, 0xffffffff, 0x21ac64a8, 0x61b, 0x1000, 0x6, 0x3b2, 0x0, 0xf6, 0x7, 0x5, 0x401, 0x9, 0x200, 0x9, 0x4, 0x2f, 0x5, 0x10, 0x2, 0x5, 0x7, 0x1, 0x1, 0xff, 0x2, 0x4, 0x0, 0x4, 0x8, 0xd, 0xfffffff5, 0xc02, 0x2, 0x7fffffff, 0x0, 0x7, 0x3, 0x2, 0x8, 0x2bd, 0x88e16ec2, 0x80000000, 0x3, 0x2, 0x8, 0x5, 0x1, 0x8000, 0xc834, 0x5, 0x80000000, 0xa86, 0x3, 0x6, 0x100, 0x6, 0x8, 0x7f, 0x5, 0x3, 0x7f, 0x800, 0x7fffffff, 0x70, 0xfffeffff, 0x200, 0x5, 0x4d9d, 0x5, 0x2, 0xb, 0x800, 0xa, 0xb9a, 0x9, 0x5, 0x8, 0x0, 0x7, 0x4133, 0x0, 0x23bf, 0xc2f4, 0x8, 0xffffffff, 0x1ff, 0x4, 0x4, 0x7, 0x5, 0x5, 0x0, 0x7, 0x3, 0x3, 0x1ff, 0x0, 0x0, 0xfffffffe, 0x9, 0xff6, 0x4, 0x4, 0x0, 0xb5, 0x7, 0x1, 0x0, 0x4, 0xc95, 0xdbb, 0x8, 0xeead, 0x2, 0x7, 0x3ff, 0x3, 0x4, 0x0, 0x9, 0xe000000, 0x6, 0x41, 0x1, 0xfffffffd, 0x7, 0x9, 0x0, 0x7e47, 0x2, 0x6149, 0xd330, 0x3, 0xf635, 0x0, 0x3, 0x91, 0x5d, 0x7, 0x81, 0x2, 0x5, 0x8f8, 0x3, 0x10001, 0x7fff, 0x80, 0xfc6, 0x4, 0x7, 0xc71, 0xcc1, 0x8, 0x36fed0e1, 0x7f, 0xaa, 0x8, 0xfffffff8, 0x390, 0x3, 0xab, 0x0, 0x6, 0x7, 0xf, 0x7, 0x5, 0x2, 0xfffffff7, 0x40, 0x6, 0x2, 0x1, 0x80, 0x5, 0xb7, 0x2bb, 0x0, 0x80000001, 0xe6, 0x8, 0xfffffffd, 0x4, 0x0, 0x2dad, 0x9, 0x0, 0x9, 0x66e, 0xd, 0x3ff, 0x101, 0x3, 0x8dc, 0xf, 0x8, 0x9, 0xfff, 0x5, 0x6, 0x0, 0x0, 0xff, 0x0, 0x4]}]}}, @TCA_EGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10001}]}, 0x458}, 0x1, 0x0, 0x0, 0x8}, 0x4000001)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001500)={&(0x7f0000001440)={0xa0, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x24}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
openat$cgroup_int(r3, &(0x7f0000001580)='memory.swap.max\x00', 0x2, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000015c0), r11)
bind$netlink(0xffffffffffffffff, &(0x7f0000001600)={0x10, 0x0, 0x25dfdbfd, 0x20000}, 0xc)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r12, 0x29, 0x41, &(0x7f0000001640)={'nat\x00', 0x1000, "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"}, &(0x7f0000002680)=0x1024)
socket$kcm(0x29, 0x2, 0x0)

2m43.982452374s ago: executing program 2 (id=674):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) (async)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) (async)
sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001200010026bd7000fedb2355cb1d"], 0x24}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)) (async)
r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10, 0x800)
bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061103800000000005e050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

2m43.980102137s ago: executing program 2 (id=676):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1d, 0x4, &(0x7f0000000300)=ANY=[@ANYRES32], &(0x7f0000000040)='syzkaller\x00', 0x400, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = getpid()
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010000000000000000003cbb000008000100", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c000000030601020000000000000000000000fdafc27feacc77776e909332e0f5070500010007000000090001200700000005000100c900000023"], 0x2c}, 0x1, 0x0, 0x0, 0x9080}, 0x804)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000021000000000000000000000000000000000000000000000000ffffffff0000000000000000100000000000000000000000000000000000000000000000000000000400000000000000ffffffff0000000000000000000000000000000000000000000000000040000000000000000000000000000000000000ffffffff020000000300000000000000ffff0000000000000000000000000000000062726983676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e61740000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000edffffff0000000000"]}, 0x3c0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0xfffffffc, @local, 0x9}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r7}, 0x10)
pipe(&(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
vmsplice(r8, &(0x7f00000001c0)=[{&(0x7f0000000180)="fdc6d6adb8", 0x5}], 0x1, 0x5) (async)
vmsplice(r8, &(0x7f00000001c0)=[{&(0x7f0000000180)="fdc6d6adb8", 0x5}], 0x1, 0x5)
vmsplice(r9, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
socket$kcm(0x10, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r12=>0xffffffffffffffff})
socket$inet(0x2, 0x3, 0x33) (async)
socket$inet(0x2, 0x3, 0x33)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r13=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r6, @ANYRESOCT=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r6, @ANYRESOCT=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}}, 0x400c025)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e0000008c0d000000800000ff7f000000020000", @ANYRES32=r8, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00', @ANYRES32=r13, @ANYRES32=r12, @ANYBLOB="0400000000000000020000000a00"/28], 0x50)

2m43.08039145s ago: executing program 2 (id=688):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2d, 0x25dfdc03, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0x2, 0xfff1}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x240410c0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x84, r1, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FAMILY={0x5, 0xd, 0x2b}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x84}}, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a000000000000000000000005000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a010102000000000000000000000000fe8000000000000000000000000000aa010016"], 0xd0}}, 0x40)
socket$vsock_stream(0x28, 0x1, 0x0)

2m42.954439297s ago: executing program 2 (id=690):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="64000080f9ff0004000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001a8018000a8014000700fe8000000000000000000000000000001400030069"], 0x64}}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r1)
sendmsg$SMC_PNETID_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x40010)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

2m42.891749749s ago: executing program 2 (id=691):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000001580)='syzkaller\x00', 0x9}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="0000e20000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x400c000)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000200000000000000000009400000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
recvmmsg(r3, &(0x7f0000009280)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2001, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400000010000104000000000044000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028004001200060018000900000005001700010000000500160002000000"], 0x54}}, 0x0)
r5 = socket(0x10, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000500)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x400c844)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r9 = socket$inet6(0x10, 0x2, 0x0)
write(r9, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x18, @mcast1, @mcast2={0xff, 0x3}, 0x8, 0x80, 0xfffffffe, 0x80}})

2m27.761363088s ago: executing program 32 (id=691):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000001580)='syzkaller\x00', 0x9}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="0000e20000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x400c000)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000200000000000000000009400000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
recvmmsg(r3, &(0x7f0000009280)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2001, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400000010000104000000000044000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028004001200060018000900000005001700010000000500160002000000"], 0x54}}, 0x0)
r5 = socket(0x10, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000500)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x400c844)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r9 = socket$inet6(0x10, 0x2, 0x0)
write(r9, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x18, @mcast1, @mcast2={0xff, 0x3}, 0x8, 0x80, 0xfffffffe, 0x80}})

1m19.250721204s ago: executing program 0 (id=1373):
r0 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0x10}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000240)="63eced000000000a9f33c9f7b9e5", 0x0, 0xc698, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0)
socketpair(0x6, 0x5, 0x100, 0x0)
sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}}, 0x48080)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={<r6=>0x0, 0x10, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x38000000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}]}, &(0x7f00000002c0)=0xfffffffffffffcec)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000000c0)={0x800, 0x201, 0xb, 0x99, r6}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r7, 0x3}, 0x8)

1m19.172532633s ago: executing program 0 (id=1374):
r0 = socket$netlink(0x10, 0x3, 0xb)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x900, &(0x7f0000002f40)={&(0x7f00000003c0)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x800}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="8400000010000104feffffff0300000000000000", @ANYRES32=r5, @ANYBLOB="824a008000000000640037800b0001006970366772650000540002"], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r7, 0x8c63f0f4ea39b516, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1)
r8 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="10003d0000000000001001000002000000a3b3a7060bb55555c5f8a08c984608226d6b6cfad4f13c227fe76563e262ca08c19f1eb50df65f5c631bfad6261234f9d72b03c791f95cf73069bd6cfbf287c0ea213fb77e72e7e11e512989869ad85b3820e61d306884679f474b171a0ef1e4689ce47143d4219f1e3c8f3dec48660b304da2b0de0bc930de66910f88577fc02e7464192bd0e27846fc14091bd9bd8a6c2ede654a7a477c80c83e0b388d43b1335082ae"], 0x10}, 0x404f444)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r9 = socket(0x22, 0x2, 0x4)
ioctl$IMGETDEVINFO(r9, 0x80044944, &(0x7f0000000000))
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=@canfd={{0x1, 0x1}, 0x39, 0x0, 0x0, 0x0, "3992ca995e968b0b065f7922b761528f0199602d1e09faf0c0f1c2db040f957a34b2aa413157e3ec06fdcf6128269e6763e9c19b00d4eb026a6375a22b930a64"}, 0x48}, 0x1, 0x0, 0x0, 0x8490}, 0x1)
r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)="88b0bae0e826425499f4d4ddb99bbe211a", 0x11}, 0x1, 0x0, 0x0, 0x8004}, 0x24044044)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
r11 = socket(0x10, 0x803, 0x0)
sendto(r11, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r11, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000900)={0x64, r7, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xa3, 0x68}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4044)
recvmmsg(r11, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
r13 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
getsockname$packet(r13, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)

1m19.081950654s ago: executing program 0 (id=1375):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
r1 = socket$packet(0x11, 0x3, 0x300) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000180)="0b031200e0ff64000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14)
sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r4) (async)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x5, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @struct={0x8, 0x1, 0x0, 0x4, 0x1, 0x100, [{0xa, 0x1, 0x1}]}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x1, [{0xb, 0x2, 0x3}]}, @const={0x1, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x2e, 0x30, 0x5f]}}, &(0x7f0000000640)=""/185, 0x71, 0xb9, 0x1, 0x9}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x400, '\x00', r5, r6, 0x3, 0x1, 0x1}, 0x50)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000040)={0x3ff, 0x10000, 0xc, 0x9fe}, 0x10) (async)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r5, 0x225, 0x68020}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

1m19.012445058s ago: executing program 0 (id=1376):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x44, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4ad}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x17}}, {0x8, 0x2, @private=0xa010102}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB=')D\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r3, 0x0, 0x0}, 0x20)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
socket(0x10, 0x3, 0x0)
socket(0x10, 0x2, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r4, &(0x7f00000001c0), 0x37)
listen(r4, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000040), 0x4)
socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
socket$packet(0x11, 0x2, 0x300)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r8, &(0x7f00000000c0), 0x9)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x0, '\x00', 0x0, r7, 0x8}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000500)=""/73}, 0x20)

1m18.932366614s ago: executing program 0 (id=1377):
r0 = socket$netlink(0x10, 0x3, 0xc) (async)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000100)={0x64, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x10, 0x0, 0x1, [@typed={0x49, 0x0, 0x0, 0x0, @binary="990d59906040c6226d83b3dd9fa584140a972beb7bb2e6afdd6ee1b52f5b7186508ea84b4900077fd8998d20c90e01f5bae80da358cd54297825c2d1c678d77df25140553e"}]}]}, 0x64}}, 0x0) (async)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="743a7e8fda507a810de04357144000000010001ffffefffffd0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000300010100000800040002000000"], 0x40}}, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0)

1m18.931033143s ago: executing program 0 (id=1378):
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64)
unshare(0x68040200)
unshare(0x40040100) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002536702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600640006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) (async, rerun: 32)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0) (async, rerun: 64)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004004) (async, rerun: 64)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000340)) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1bcd000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x88) (async, rerun: 32)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESOCT=r2], 0x48) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f"], 0x104}}, 0x0) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x20, 0x7, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) (async, rerun: 64)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) (async, rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009b0fbaeac7e46c71d71b47934208e9456406583921007e20855d396113f0a71ac9118e2d92a5799e08501543c204536354d2612958ac2df21a01c438186da34714cd54952fcd0d1f71a7111d397e53e72b7df1f2f5b2a9261aa3e739e034ea6322386d3505d11aef205115ae1372180a0f57a1e7719a51ed8a917d1b7fe0d4626bacdf9a8349775280df2a8cb1040f542d8e279805ece976396792993fb149cac322753e698d91d553844ab2d57609c79111532f0b5fb1628207040b21adbf45650000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
bind$bt_rfcomm(r0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

1m16.166363419s ago: executing program 3 (id=1004):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getpid()
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000200)="89e75d615d22a581ac69c508026530d8078bab714846dc4bd29e3ead2a7c11548df0e2fcf85fd1800bca", &(0x7f0000000280)=@udp6=r2, 0x2}, 0x20)
getsockopt$inet_int(0xffffffffffffffff, 0x111, 0x5, 0x0, &(0x7f0000000140))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x8010, r0, 0x6190e000)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r3, @ANYRESHEX=r3], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'batadv0\x00', {0x1}, 0x4})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRES8, @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES16=r6, @ANYRES32=r5], 0x7c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$xdp(0x2c, 0x3, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x4005}, 0x20040880)
r10 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000000)=0x587, 0x4)
sendmmsg$inet6(r10, &(0x7f0000000e00)=[{{&(0x7f00000002c0)={0xa, 0x4e22, 0xf58, @empty, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x40408c5)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'sit0\x00'})
setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x24, 0x4)

1m3.521399033s ago: executing program 33 (id=1378):
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64)
unshare(0x68040200)
unshare(0x40040100) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002536702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600640006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) (async, rerun: 32)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0) (async, rerun: 64)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004004) (async, rerun: 64)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000340)) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1bcd000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x88) (async, rerun: 32)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESOCT=r2], 0x48) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f"], 0x104}}, 0x0) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x20, 0x7, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) (async, rerun: 64)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) (async, rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009b0fbaeac7e46c71d71b47934208e9456406583921007e20855d396113f0a71ac9118e2d92a5799e08501543c204536354d2612958ac2df21a01c438186da34714cd54952fcd0d1f71a7111d397e53e72b7df1f2f5b2a9261aa3e739e034ea6322386d3505d11aef205115ae1372180a0f57a1e7719a51ed8a917d1b7fe0d4626bacdf9a8349775280df2a8cb1040f542d8e279805ece976396792993fb149cac322753e698d91d553844ab2d57609c79111532f0b5fb1628207040b21adbf45650000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
bind$bt_rfcomm(r0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

32.845238589s ago: executing program 3 (id=1004):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getpid()
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000200)="89e75d615d22a581ac69c508026530d8078bab714846dc4bd29e3ead2a7c11548df0e2fcf85fd1800bca", &(0x7f0000000280)=@udp6=r2, 0x2}, 0x20)
getsockopt$inet_int(0xffffffffffffffff, 0x111, 0x5, 0x0, &(0x7f0000000140))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x8010, r0, 0x6190e000)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r3, @ANYRESHEX=r3], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'batadv0\x00', {0x1}, 0x4})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRES8, @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES16=r6, @ANYRES32=r5], 0x7c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$xdp(0x2c, 0x3, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x4005}, 0x20040880)
r10 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000000)=0x587, 0x4)
sendmmsg$inet6(r10, &(0x7f0000000e00)=[{{&(0x7f00000002c0)={0xa, 0x4e22, 0xf58, @empty, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x40408c5)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'sit0\x00'})
setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x24, 0x4)

26.889576258s ago: executing program 3 (id=1004):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getpid()
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000200)="89e75d615d22a581ac69c508026530d8078bab714846dc4bd29e3ead2a7c11548df0e2fcf85fd1800bca", &(0x7f0000000280)=@udp6=r2, 0x2}, 0x20)
getsockopt$inet_int(0xffffffffffffffff, 0x111, 0x5, 0x0, &(0x7f0000000140))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x8010, r0, 0x6190e000)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r3, @ANYRESHEX=r3], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'batadv0\x00', {0x1}, 0x4})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRES8, @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES16=r6, @ANYRES32=r5], 0x7c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$xdp(0x2c, 0x3, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x4005}, 0x20040880)
r10 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000000)=0x587, 0x4)
sendmmsg$inet6(r10, &(0x7f0000000e00)=[{{&(0x7f00000002c0)={0xa, 0x4e22, 0xf58, @empty, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x40408c5)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'sit0\x00'})
setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x24, 0x4)

19.578089892s ago: executing program 3 (id=1004):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getpid()
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000200)="89e75d615d22a581ac69c508026530d8078bab714846dc4bd29e3ead2a7c11548df0e2fcf85fd1800bca", &(0x7f0000000280)=@udp6=r2, 0x2}, 0x20)
getsockopt$inet_int(0xffffffffffffffff, 0x111, 0x5, 0x0, &(0x7f0000000140))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x8010, r0, 0x6190e000)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r3, @ANYRESHEX=r3], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'batadv0\x00', {0x1}, 0x4})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRES8, @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES16=r6, @ANYRES32=r5], 0x7c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$xdp(0x2c, 0x3, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x4005}, 0x20040880)
r10 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000000)=0x587, 0x4)
sendmmsg$inet6(r10, &(0x7f0000000e00)=[{{&(0x7f00000002c0)={0xa, 0x4e22, 0xf58, @empty, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x40408c5)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'sit0\x00'})
setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x24, 0x4)

13.097623236s ago: executing program 3 (id=1004):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getpid()
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000200)="89e75d615d22a581ac69c508026530d8078bab714846dc4bd29e3ead2a7c11548df0e2fcf85fd1800bca", &(0x7f0000000280)=@udp6=r2, 0x2}, 0x20)
getsockopt$inet_int(0xffffffffffffffff, 0x111, 0x5, 0x0, &(0x7f0000000140))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x8010, r0, 0x6190e000)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r3, @ANYRESHEX=r3], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'batadv0\x00', {0x1}, 0x4})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRES8, @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES16=r6, @ANYRES32=r5], 0x7c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$xdp(0x2c, 0x3, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x4005}, 0x20040880)
r10 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000000)=0x587, 0x4)
sendmmsg$inet6(r10, &(0x7f0000000e00)=[{{&(0x7f00000002c0)={0xa, 0x4e22, 0xf58, @empty, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x40408c5)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'sit0\x00'})
setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x24, 0x4)

5.341175175s ago: executing program 4 (id=2120):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
pipe(&(0x7f0000000080))
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socket$kcm(0x2, 0x5, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x100000}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000000000000100000d030000000000000003000000000000000000000604000000040000000000001202000000000000005f"], 0x0, 0x4a}, 0x20)
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2719, 0x0, &(0x7f0000000040)=0x4f)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x7, 0x10001, 0x9, 0x1}, 0x50)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000400000071108c000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
nanosleep(&(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000240))

5.28136579s ago: executing program 4 (id=2123):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac0100001000330600000f0000000000fc000000000000000000000000000000ffffffff00ffffffff00000000ffff0000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000e000000200000000000000000000000023030000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00200000004e2200000000ac1414bb0000000000000000000000001c00040002004e2100000000fc00000000000000000000000000000108000c000400000008000b00070000002c0017"], 0x1ac}}, 0x0)

5.203514253s ago: executing program 3 (id=1004):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getpid()
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000200)="89e75d615d22a581ac69c508026530d8078bab714846dc4bd29e3ead2a7c11548df0e2fcf85fd1800bca", &(0x7f0000000280)=@udp6=r2, 0x2}, 0x20)
getsockopt$inet_int(0xffffffffffffffff, 0x111, 0x5, 0x0, &(0x7f0000000140))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x8010, r0, 0x6190e000)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r3, @ANYRESHEX=r3], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'batadv0\x00', {0x1}, 0x4})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRES8, @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES16=r6, @ANYRES32=r5], 0x7c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$xdp(0x2c, 0x3, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x4005}, 0x20040880)
r10 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000000)=0x587, 0x4)
sendmmsg$inet6(r10, &(0x7f0000000e00)=[{{&(0x7f00000002c0)={0xa, 0x4e22, 0xf58, @empty, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x40408c5)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'sit0\x00'})
setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x24, 0x4)

3.06709904s ago: executing program 4 (id=2124):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r2, 0x1, 0x0, 0x0, {0x3}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x3c}}, 0x4048004)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x3, 0x8000, 0x0, 0x8000, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5, 0x7}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4040055)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x2, 0x6, "2ed69a", 0x8, 0x11, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {0x4e24, 0x4e23, 0x8}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000003c000b0000000000fcffffff04000000040000800c000100091c", @ANYRES8=r12], 0x24}, 0x1, 0x0, 0x0, 0x91}, 0x0)
r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r14, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xfff, 0x75}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
ioctl$PPPIOCNEWUNIT(r13, 0xc004743e, &(0x7f0000000140))
pwritev(r13, &(0x7f0000000600)=[{&(0x7f0000000380)="80fd01fff140", 0x1}, {&(0x7f0000000480)="e9f239e771b157d5a518ce01a6707133a50bb75322454b0799eced511fb024277158e7f7c23f27e02ec64c9e63c100662ed6964bd8e685e3f24a205bc65b75d3f5efa197140fab8cd7b1aaba6a9ee0e862a9fe4993f0e0c24ea08ff771bf36cc8dc9d2d6f3dc7dbaa4a8c36a6ab92e52bf6e7cb148c353280307a919de71ed25e89636edd566770db05e321938481b46a33a8ee494048456e431578196b5fd881458e7c1d34098d22f6d800cee16bf9bc714cf3d09f842e6332df315e9099426e817b9189017599fd62e09438275b4a9c3c7be42071cdcbb04cd21efd2abf76c87b169da751b97b3c6a94f8385873974567200"}], 0x1, 0xfffffffe, 0x4)
sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0)

2.922064213s ago: executing program 4 (id=2126):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10)
socket$l2tp6(0xa, 0x2, 0x73)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711278000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)

2.841994373s ago: executing program 4 (id=2128):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000065f9bfff00000000fdffffff850000002c00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c99176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)

2.530973395s ago: executing program 4 (id=2129):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x2, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000011c0)=@newtfilter={0x4c, 0x2c, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x88856965c50dcb12, 0xf}, {0x0, 0xe}, {0x2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0xd}}, @TCA_RATE={0x6, 0x5, {0x81, 0x8}}, @TCA_RATE={0x6, 0x5, {0xf, 0x82}}, @TCA_RATE={0x6, 0x5, {0x5}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000005}, 0x40000)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582a, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="04010000", @ANYRES16=r0, @ANYBLOB="080028bd6fdfbd6500000008000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000649000000cd005b00237d1815b056286e420b7f39d01fbe6a4a14cb1496ff0dd92686167051ff0d288c176007b2964e00315a595830949db9668f15881be1fa887ec8a3232ef5e71049b0ccc8d23b8aa9abe789bd928c10b4098a660b6258e1153ea9cd2225b846239a94503ea630bde082b8b3fc2870a4079c80fef63367f471e8cc985fdf9213ce71fec25ef7feccd69be551412128404fd536e8b656dbdeb237dd904ceb69c5a589d31361a86f4a2be60f45a4f738276811ebd5405157ebb810a7461a192662c56c519790c9e9bdc81500000004005b000600650001800000"], 0x104}, 0x1, 0x0, 0x0, 0x40040}, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
write$tun(r2, 0x0, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000540)='syzkaller\x00', 0xffffffff}, 0x94)
r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8)
close(r8)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r8, 0x0, 0x0}, 0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000580)={0x0, 0x5, 0x10}, &(0x7f00000005c0)=0xc)
socket$packet(0x11, 0x2, 0x300)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="a00084093fdc18467d4ba67da35bb0a1000007bbcae0c180ede1d9d32a3c40b277770f35116c8691f98e217ef0f9409163706aed4647d5c9479642f6e598ae67ab18ed88df00f47ddd291a8670f7f44472641826934328385fde2c2df98ade76ec4a547f05ad3f945b5f988805cb7b7fdec7a5ebf77a9006848eda83470293ed8e31f397b3916e2f19b254d58ce786e700db57da53824092b9fe70546ec3ef9aaea6f510b9c52ce00cd8e4e23aff183ff0b61b00d2270a8df839c5010fa1d11948f620fe8dc7f9e2d44b1f70482f91892b0a051d692b55d685a164", @ANYRES16=r0, @ANYBLOB="050000000000030000000f00000008000300", @ANYRES32=r1, @ANYBLOB="51000e0080000000ffffffffffff08021100000008021100000000000000000000000000640043a00100040603077f00fc0025030034042a01013c040102b308710700000000010e08760609027fffe900000000080026006c09000008000c006400000008000d000000000018005a8014007593830080040002000700010005040b0004000200"], 0xa0}}, 0x0)

719.804602ms ago: executing program 1 (id=2140):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800b000100697036746e6c00003800028014000200fe8000000000000000000000000000aa08000100", @ANYBLOB="040013001400030017"], 0x68}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r1, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000080)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xb43, @remote, 0x8}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="3eadc8e0bd0bc0449e49456af8c34ba2be0c49bb7690c13cdac287613d3f20436ff5ce8663005d837a410ac52eff3b91a16667382128e2224c9d90eb8b6be4803f20d56481d8c9c079c7966a621e12ea3597b625c3b76d1d5cf6587aab28fd35961447288d550626a03aed0948dc40b65eaae5cbc296d9b35d0c3eb29622b7a60bf01cd20e159307b2a672f02dd0b085c7ac13c6720d81ba81b028af1def01263b48d5720d513dca7d5545d3c8a60e88c10c62c00ccb665ecd015008b8b5f3bd9d4f95345eb8e632d6afae74ca93ec9b11695f511a9ca4b50d6dcf216b4b06d6bae8", 0xe2}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x148}}], 0x1, 0x20000040)

602.010735ms ago: executing program 1 (id=2141):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0)
r2 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x8, 0x0, @broadcast}, 0x10, &(0x7f0000000300)=[{&(0x7f00000003c0)="08003b117c124057", 0x8}], 0x1}, 0x2004c880)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x11, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x4, 'ovf\x00', 0x0, 0x3, 0x1a}, 0x2c)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000800))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) (async)
socket$inet(0x2, 0x2, 0x1) (async)
sendmsg$inet(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x8, 0x0, @broadcast}, 0x10, &(0x7f0000000300)=[{&(0x7f00000003c0)="08003b117c124057", 0x8}], 0x1}, 0x2004c880) (async)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x11, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x4, 'ovf\x00', 0x0, 0x3, 0x1a}, 0x2c) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000800)) (async)

411.433076ms ago: executing program 1 (id=2142):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f00000002c0)={0x18, 0x2, {0x0, @dev, 'ip6gre0\x00'}}, 0x1e)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0900000000000000000002000000140001"], 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffe, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x21}}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x4000)

316.257447ms ago: executing program 1 (id=2143):
unshare(0x24040400)
listen(0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000100), &(0x7f0000000180)=""/177}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000)="4d7114af42196d99788add6626a2f72ba6ec9be2af920ed52ab094c202", &(0x7f0000000040)=""/182}, 0x20)

112.038336ms ago: executing program 1 (id=2144):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0xf0, r4, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10, 0x64}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_TX_RATES={0x80, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x7}, {0x5}, {0x4, 0x6}, {0x0, 0x8}, {0x7, 0x9}, {0x7, 0x4}, {0x0, 0x5}, {0x2, 0x2}, {0x7}, {}, {0x0, 0x3}, {0x2, 0x2}, {}, {0x4, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x0, 0x5, 0x0, 0x16, 0xb, 0x18, 0x16, 0x12, 0x30, 0xc, 0x5b, 0x12, 0x9, 0x48, 0x1, 0x2, 0xeeb3e24409b1fad8, 0x18, 0x6, 0xb, 0x9, 0xc, 0x12, 0x4, 0x48, 0x6, 0x36]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x4}, {0x1, 0xa}, {0x0, 0x6}, {0x3, 0x2}, {0x5, 0x5}, {0x6, 0x4}, {0x4, 0x2}, {0x0, 0xa}, {0x5, 0x4}, {0x3, 0x8}, {0x5, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x6, 0x3}, {0x1, 0x4}, {0x7, 0xa}, {0x0, 0x7}, {0x6, 0x7}, {0x0, 0xa}, {0x2, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x1}, {0x7, 0x3}, {0x1}, {0x1, 0x2}, {0x7, 0x4}, {0x3}, {0x2, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x2, 0x3}, {0x1, 0x7}, {0x7, 0x8}, {0x5, 0x5}, {0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x1, 0x3}, {0x0, 0x6}, {0x4, 0x6}, {0x0, 0x8}, {0x3, 0x9}, {0x0, 0x2}, {0x2, 0x2}, {0x6, 0x4}, {0x0, 0xa}]}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x10000}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2609}]]}, 0xf0}, 0x1, 0x0, 0x0, 0x200040c5}, 0x4000814)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02000000020000", @ANYRES64=0x0], 0x10)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)

0s ago: executing program 1 (id=2145):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$key(0xf, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, 0x0, 0x40408c0)
openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x20000895)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5b0, 0x0, 0x5b8, 0x388, 0x120, 0x5b8, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x8, 0xc179e396e11dd30, 0x1}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x7}}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffff00, 0xff, 0xff, 0xffffffff], [0xff, 0xff000000, 0xff0001fe, 0xff000000], 'ip6gretap0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x84, 0x5, 0x1, 0x58}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x3}, {0x0, 0x2, 0x5}, 0x3}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0xffffffff, 0xff000000, 0xffffff00, 0xffffffff], [0xffffffff, 0x0, 0xff000000], 'batadv_slave_0\x00', 'veth1\x00', {0xff}, {0xff}, 0x2a, 0x6, 0x4}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x2, 0x2}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', [0xff000000, 0xff000000, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0xff000000, 0xff], '\x00', 'pim6reg\x00', {}, {}, 0x2c, 0x62, 0x2, 0x40}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x5, 0xfa}}}, {{@ipv6={@local, @remote, [0xff000000, 0xffffffff, 0xffffff00], [0xff, 0xff000000, 0x0, 0xff000000], 'syzkaller1\x00', 'ip6gre0\x00', {0xff}, {}, 0xd6b176579170002a, 0x1, 0x3}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x4001, 0x3, 0x4b8, 0x0, 0x0, 0x148, 0x158, 0x148, 0x420, 0x240, 0x240, 0x420, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x16, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x100000, 0x1ff, 0x100000, 0x0, 0xed, 0x7}, {0x4}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x7}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x2e, 0x2, 0x4}, 0x0, 0x260, 0x2c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @common=@inet=@recent0={{0xf8}, {0x9, 0x7fff, 0x5, 0x0, 'syz0\x00', 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x4e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x518)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000008000000600ad30660a1dcaaaaaaaaa69aa080049090074006400000111907864010102ac1414bb4428b12000000080000000070000000100000080000000060000000100000004000000070000000c831fc90a010100ffffffffac1414aa6401010000008d4fac1e0001ac90d66b917cfde04e224e214110907842ff0000800000000000000000"], 0x90)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000010140)=ANY=[@ANYBLOB="4401000010000100000000000000000000000000000000000000ffff7f000001ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000006c000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c", @ANYRES32=0x0, @ANYBLOB="50af"], 0x144}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0x8, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000000100000000000000000100020308000542000000020600074000030000060094400003000008000b0073697000b65444c086b91a2b16ed0a53527ed7b8ef82cf06ca1f8abf7b8e7cd452e084bbd5fc68cb356a36c451556c370eba3979bb1156d2e8e94a41c128b8d984a862460dc59052da9299cf5225952c7e7f70a45123439fc1b261ae2c59d6dc3def4067ec80f5cf7c903a2881af37719c15000000"], 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x4004042)
socket(0x15, 0x5, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x8, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000003c0)=""/8, 0xa98, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)

kernel console output (not intermixed with test programs):

evice team_slave_1 added
[  147.543228][T10274] batman_adv: batadv0: Adding interface: batadv_slave_0
[  147.546580][T10274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.558312][T10274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  147.563909][T10274] batman_adv: batadv0: Adding interface: batadv_slave_1
[  147.566526][T10274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.575557][T10274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  147.611952][T10274] hsr_slave_0: entered promiscuous mode
[  147.616140][T10274] hsr_slave_1: entered promiscuous mode
[  147.619056][T10274] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  147.622184][T10274] Cannot create hsr debugfs directory
[  147.755506][T10274] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.841487][T10274] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.914219][T10274] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.972143][T10274] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.088021][T10274] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  148.093992][T10274] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  148.100188][T10274] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  148.106238][T10274] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  148.132014][T10274] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.135123][T10274] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.138358][T10274] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.141244][T10274] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.208872][T10274] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.220907][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.225834][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.238846][T10274] 8021q: adding VLAN 0 to HW filter on device team0
[  148.249874][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.252852][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.267308][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.269614][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.401211][T10274] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.435929][T10274] veth0_vlan: entered promiscuous mode
[  148.441117][T10274] veth1_vlan: entered promiscuous mode
[  148.458490][T10274] veth0_macvtap: entered promiscuous mode
[  148.463218][T10274] veth1_macvtap: entered promiscuous mode
[  148.475651][T10274] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.488847][T10274] batman_adv: batadv0: Interface activated: batadv_slave_1
[  148.494550][T10274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.497529][T10274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.500428][T10274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.503331][T10274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.545094][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.547690][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.563775][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.567153][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.028362][ T5205] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  152.032478][ T5205] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  152.036574][ T5205] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  152.040441][ T5205] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  152.043968][ T5205] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  152.081574][T10293] lo speed is unknown, defaulting to 1000
[  152.327512][T10293] chnl_net:caif_netlink_parms(): no params data found
[  152.375846][T10293] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.378482][T10293] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.381089][T10293] bridge_slave_0: entered allmulticast mode
[  152.384313][T10293] bridge_slave_0: entered promiscuous mode
[  152.388432][T10293] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.390968][T10293] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.393274][T10293] bridge_slave_1: entered allmulticast mode
[  152.396439][T10293] bridge_slave_1: entered promiscuous mode
[  152.423004][T10293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  152.429940][T10293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  152.467721][T10293] team0: Port device team_slave_0 added
[  152.472721][T10293] team0: Port device team_slave_1 added
[  152.500652][T10293] batman_adv: batadv0: Adding interface: batadv_slave_0
[  152.503584][T10293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.514644][T10293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  152.520718][T10293] batman_adv: batadv0: Adding interface: batadv_slave_1
[  152.523588][T10293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.534635][T10293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.575626][T10293] hsr_slave_0: entered promiscuous mode
[  152.578172][T10293] hsr_slave_1: entered promiscuous mode
[  152.580416][T10293] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  152.583337][T10293] Cannot create hsr debugfs directory
[  152.674792][T10293] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.746409][T10293] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.822625][T10293] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.884030][T10293] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.992029][T10293] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  153.005450][T10293] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  153.011415][T10293] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  153.026851][T10293] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  153.056228][T10293] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.058730][T10293] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.061704][T10293] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.064081][T10293] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.102375][T10293] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.110505][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.114003][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.129253][T10293] 8021q: adding VLAN 0 to HW filter on device team0
[  153.139976][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.142554][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.152237][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.154802][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.292013][T10293] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.332405][T10293] veth0_vlan: entered promiscuous mode
[  153.342737][T10293] veth1_vlan: entered promiscuous mode
[  153.367305][T10293] veth0_macvtap: entered promiscuous mode
[  153.373319][T10293] veth1_macvtap: entered promiscuous mode
[  153.389217][T10293] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.396455][T10293] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.402626][T10293] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.406743][T10293] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.409619][T10293] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.412382][T10293] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.474782][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.477983][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.500492][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.503031][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.833797][   T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  156.840803][   T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  156.843633][   T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  156.847586][   T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  156.850384][   T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  156.877920][T10312] lo speed is unknown, defaulting to 1000
[  157.076042][T10312] chnl_net:caif_netlink_parms(): no params data found
[  157.147042][T10312] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.149455][T10312] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.151860][T10312] bridge_slave_0: entered allmulticast mode
[  157.154883][T10312] bridge_slave_0: entered promiscuous mode
[  157.158468][T10312] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.160825][T10312] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.163261][T10312] bridge_slave_1: entered allmulticast mode
[  157.166330][T10312] bridge_slave_1: entered promiscuous mode
[  157.189228][T10312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.194281][T10312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.218744][T10312] team0: Port device team_slave_0 added
[  157.222366][T10312] team0: Port device team_slave_1 added
[  157.239172][T10312] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.241447][T10312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.249874][T10312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.254709][T10312] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.257058][T10312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.266691][T10312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.309787][T10312] hsr_slave_0: entered promiscuous mode
[  157.313271][T10312] hsr_slave_1: entered promiscuous mode
[  157.316745][T10312] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  157.319924][T10312] Cannot create hsr debugfs directory
[  157.460901][T10312] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.527360][T10312] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.575971][T10312] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.620350][T10312] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.704065][T10312] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  157.714257][T10312] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  157.722973][T10312] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  157.727150][T10312] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  157.746372][T10312] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.748840][T10312] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.751601][T10312] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.754441][T10312] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.792044][T10312] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.812159][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.820605][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.830801][T10312] 8021q: adding VLAN 0 to HW filter on device team0
[  157.841394][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.844052][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.849360][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.852167][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.998527][T10312] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.032168][T10312] veth0_vlan: entered promiscuous mode
[  158.038136][T10312] veth1_vlan: entered promiscuous mode
[  158.055432][T10312] veth0_macvtap: entered promiscuous mode
[  158.059410][T10312] veth1_macvtap: entered promiscuous mode
[  158.069178][T10312] batman_adv: batadv0: Interface activated: batadv_slave_0
[  158.076793][T10312] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.082285][T10312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.085385][T10312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.088242][T10312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.091060][T10312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.148094][ T8631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.150569][ T8631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.167751][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.170516][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.956586][T10341] __nla_validate_parse: 2 callbacks suppressed
[  158.956601][T10341] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1252'.
[  158.989772][T10342] bridge5: entered promiscuous mode
[  158.991962][T10342] bridge5: entered allmulticast mode
[  159.083285][T10332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1251'.
[  159.143330][T10346] netlink: 'syz.1.1253': attribute type 32 has an invalid length.
[  159.183490][T10348] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1254'.
[  159.263854][T10356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1255'.
[  159.465429][T10371] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  159.477076][T10372] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  159.520356][T10376] nbd: must specify an index to disconnect
[  159.572357][T10379] @: renamed from vlan0 (while UP)
[  159.730802][T10384] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1262'.
[  159.748614][T10384] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1262'.
[  159.954210][T10397] netlink: 'syz.1.1264': attribute type 1 has an invalid length.
[  161.409857][T10423] xt_CT: No such helper "snmp"
[  161.534028][ T5205] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  161.538656][ T5205] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  161.552894][ T5205] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  161.565856][ T5205] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  161.570382][ T5205] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  161.677961][T10433] lo speed is unknown, defaulting to 1000
[  161.997598][T10433] chnl_net:caif_netlink_parms(): no params data found
[  162.174165][T10433] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.194036][T10433] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.206446][T10433] bridge_slave_0: entered allmulticast mode
[  162.210432][T10433] bridge_slave_0: entered promiscuous mode
[  162.228213][T10433] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.231276][T10433] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.238505][T10433] bridge_slave_1: entered allmulticast mode
[  162.242600][T10433] bridge_slave_1: entered promiscuous mode
[  162.310252][T10433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  162.327411][T10433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  162.394301][T10433] team0: Port device team_slave_0 added
[  162.410528][T10433] team0: Port device team_slave_1 added
[  162.428153][T10463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1279'.
[  162.478755][T10433] batman_adv: batadv0: Adding interface: batadv_slave_0
[  162.481771][T10433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.507784][T10433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  162.513987][T10433] batman_adv: batadv0: Adding interface: batadv_slave_1
[  162.526791][T10433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.552686][T10433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  162.646942][T10433] hsr_slave_0: entered promiscuous mode
[  162.652472][T10468] tipc: Failed to remove unknown binding: 66,3,3/1184158082:3678617394/3678617395
[  162.654935][T10433] hsr_slave_1: entered promiscuous mode
[  162.658032][T10433] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  162.664555][T10433] Cannot create hsr debugfs directory
[  162.848075][T10433] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.898477][T10476] netlink: 'syz.1.1285': attribute type 10 has an invalid length.
[  162.931221][T10433] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.969195][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1286'.
[  163.022867][T10433] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.042100][T10485] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1287'.
[  163.110314][T10490] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1288'.
[  163.110564][T10433] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.258420][T10433] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  163.310452][T10495] bridge0: port 3(batadv0) entered disabled state
[  163.312680][T10495] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.315341][T10495] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.567074][T10495] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.576750][T10495] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.621716][T10495] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  163.666866][ T5205] Bluetooth: hci3: command tx timeout
[  163.700368][T10495] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  163.711603][T10495] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  163.723317][T10495] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  163.734546][T10495] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  163.755203][T10495] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  163.775977][T10495] bond1: left promiscuous mode
[  163.778050][T10495] ip6gretap1: left promiscuous mode
[  163.780354][T10495] bond1: left allmulticast mode
[  163.782368][T10495] ip6gretap1: left allmulticast mode
[  163.798919][T10495] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.802692][T10495] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.806316][T10495] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.809790][T10495] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.842964][T10495] veth3: left promiscuous mode
[  163.849744][T10495] tipc: Resetting bearer <eth:syzkaller0>
[  163.852941][T10495] syzkaller0: left promiscuous mode
[  163.855337][T10495] syzkaller0: left allmulticast mode
[  163.862050][T10495] bond4: left promiscuous mode
[  163.864229][T10495] bond4: left allmulticast mode
[  163.869654][T10495] bond5: left promiscuous mode
[  163.873746][T10495] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 42495 - 0
[  163.877014][T10495] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 42495 - 0
[  163.880106][T10495] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 42495 - 0
[  163.882906][T10495] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 42495 - 0
[  163.885950][T10495] geneve2: left promiscuous mode
[  163.887672][T10495] geneve2: left allmulticast mode
[  163.913663][T10433] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  163.927554][T10433] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  163.940769][T10433] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  164.044914][T10433] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.059517][T10433] 8021q: adding VLAN 0 to HW filter on device team0
[  164.070595][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.072914][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.085939][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.088250][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.091961][T10510] __nla_validate_parse: 103 callbacks suppressed
[  164.091973][T10510] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1291'.
[  164.131077][T10433] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  164.135078][T10433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  164.233783][T10433] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.300197][T10433] veth0_vlan: entered promiscuous mode
[  164.312391][T10433] veth1_vlan: entered promiscuous mode
[  164.356075][T10433] veth0_macvtap: entered promiscuous mode
[  164.365027][T10433] veth1_macvtap: entered promiscuous mode
[  164.403187][T10433] batman_adv: batadv0: Interface activated: batadv_slave_0
[  164.426343][T10433] batman_adv: batadv0: Interface activated: batadv_slave_1
[  164.437546][T10433] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.441144][T10433] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.452131][T10433] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.458575][T10433] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.548459][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.551051][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.575766][T10517] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1292'.
[  164.608148][T10460] Set syz1 is full, maxelem 65536 reached
[  164.622332][ T4278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.633173][ T4278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.635593][T10520] netlink: 'syz.0.1293': attribute type 1 has an invalid length.
[  164.641130][   T33] audit: type=1800 audit(1751864186.453:3): pid=10516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1292" name="memory.events" dev="tmpfs" ino=2600 res=0 errno=0
[  164.767136][T10526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1296'.
[  165.620496][T10530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1297'.
[  165.627544][T10530] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1297'.
[  165.631378][T10530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1297'.
[  165.643997][T10535] netlink: 'syz.1.1298': attribute type 25 has an invalid length.
[  165.652592][T10535] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1298'.
[  165.782079][T10542] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  165.791593][T10542] syzkaller0: entered promiscuous mode
[  165.794003][T10542] syzkaller0: entered allmulticast mode
[  165.802110][T10544] Illegal XDP return value 4294967283 on prog  (id 674) dev N/A, expect packet loss!
[  165.823590][T10542] tipc: Resetting bearer <eth:syzkaller0>
[  166.160837][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'.
[  166.260359][T10579] netlink: 'syz.1.1312': attribute type 32 has an invalid length.
[  166.368144][T10587] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1313'.
[  166.452496][T10594] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  167.942546][   T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  167.949936][   T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  167.954054][   T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  167.960384][   T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  167.963924][   T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  167.992336][T10618] netlink: 'syz.1.1321': attribute type 32 has an invalid length.
[  168.007236][T10612] lo speed is unknown, defaulting to 1000
[  168.381554][T10612] chnl_net:caif_netlink_parms(): no params data found
[  168.389066][T10640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  168.456170][T10650] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  168.462457][T10612] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.469032][T10612] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.471466][T10612] bridge_slave_0: entered allmulticast mode
[  168.476479][T10612] bridge_slave_0: entered promiscuous mode
[  168.479916][T10612] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.482371][T10612] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.485683][T10612] bridge_slave_1: entered allmulticast mode
[  168.489306][T10612] bridge_slave_1: entered promiscuous mode
[  168.509673][T10612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.520092][T10612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.560261][T10612] team0: Port device team_slave_0 added
[  168.565394][T10612] team0: Port device team_slave_1 added
[  168.588430][T10612] batman_adv: batadv0: Adding interface: batadv_slave_0
[  168.590703][T10612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.604334][T10612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  168.609251][T10612] batman_adv: batadv0: Adding interface: batadv_slave_1
[  168.611572][T10612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.626128][T10612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  168.667109][T10612] hsr_slave_0: entered promiscuous mode
[  168.669593][T10612] hsr_slave_1: entered promiscuous mode
[  168.672297][T10612] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  168.679421][T10612] Cannot create hsr debugfs directory
[  168.810125][T10612] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.894630][T10612] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.954252][T10612] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.997437][T10675] netlink: 'syz.1.1328': attribute type 15 has an invalid length.
[  169.026052][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'.
[  169.045664][T10612] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.084228][T10681] tipc: Enabling of bearer <5dp:s> rejected, media not registered
[  169.151608][T10612] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  169.158938][T10612] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  169.171560][T10612] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  169.189177][T10612] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  169.290167][T10612] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.313938][T10612] 8021q: adding VLAN 0 to HW filter on device team0
[  169.331034][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.334003][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.355503][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.358015][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.412900][T10709] netlink: 'syz.1.1332': attribute type 32 has an invalid length.
[  169.512286][T10612] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.545171][T10612] veth0_vlan: entered promiscuous mode
[  169.561711][T10612] veth1_vlan: entered promiscuous mode
[  169.606558][T10612] veth0_macvtap: entered promiscuous mode
[  169.619671][T10612] veth1_macvtap: entered promiscuous mode
[  169.643888][T10612] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.651440][T10612] batman_adv: batadv0: Interface activated: batadv_slave_1
[  169.670268][T10612] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.678661][T10612] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.681785][T10612] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.688488][T10612] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.773072][ T4278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.780539][ T4278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.820461][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.824346][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.022367][T10748] netlink: zone id is out of range
[  170.036923][T10748] netlink: zone id is out of range
[  170.038858][T10748] netlink: zone id is out of range
[  170.040719][T10748] netlink: zone id is out of range
[  170.042552][T10748] netlink: zone id is out of range
[  170.044597][T10748] netlink: zone id is out of range
[  170.046359][T10748] netlink: zone id is out of range
[  170.048383][T10748] netlink: zone id is out of range
[  170.051220][T10748] netlink: zone id is out of range
[  170.053560][T10748] netlink: zone id is out of range
[  170.063125][T10755] __nla_validate_parse: 1 callbacks suppressed
[  170.063134][T10755] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1337'.
[  170.147064][T10759] netlink: 'syz.1.1339': attribute type 32 has an invalid length.
[  170.200196][T10765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1341'.
[  170.378147][T10776] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1342'.
[  170.450521][T10783] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1344'.
[  170.461604][T10786] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1344'.
[  170.535776][T10794] netlink: 'syz.0.1346': attribute type 11 has an invalid length.
[  170.539328][T10794] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1346'.
[  170.581204][T10794] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1346'.
[  170.592114][T10794] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1346'.
[  170.592474][T10796] netlink: 'syz.1.1348': attribute type 1 has an invalid length.
[  170.599985][T10796] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1348'.
[  170.603796][T10796] netlink: 'syz.1.1348': attribute type 1 has an invalid length.
[  170.607367][T10796] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1348'.
[  170.701175][T10800] bond0: (slave bridge0): Releasing backup interface
[  170.725090][T10800] batadv0: left allmulticast mode
[  170.727146][T10800] batadv0: left promiscuous mode
[  170.729384][T10800] bridge0: port 3(batadv0) entered disabled state
[  170.737458][T10800] bridge_slave_0: left allmulticast mode
[  170.745779][T10800] bridge_slave_0: left promiscuous mode
[  170.748512][T10800] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.760120][T10800] bridge_slave_1: left allmulticast mode
[  170.762614][T10800] bridge_slave_1: left promiscuous mode
[  170.774722][T10800] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.781106][T10800] bond0: (slave bond_slave_0): Releasing backup interface
[  170.797918][T10800] bond0: (slave bond_slave_1): Releasing backup interface
[  170.802313][T10800] batman_adv: batadv0: Removing interface: batadv_slave_0
[  170.806750][T10800] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.812195][T10800] bond1: (slave ip6gretap1): Releasing active interface
[  170.823358][T10800] bond2: (slave gretap1): Releasing active interface
[  170.832314][T10800] bond6: (slave gretap2): Releasing active interface
[  170.841888][T10800] gretap2: left allmulticast mode
[  170.857458][T10800] bond8: (slave veth5): Releasing active interface
[  171.119503][T10834] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  171.177098][T10834] netlink: 'syz.0.1356': attribute type 21 has an invalid length.
[  171.193378][T10834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.207980][T10834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.212763][T10834] bond0 (unregistering): Released all slaves
[  173.117641][T10850] netlink: 'syz.1.1361': attribute type 7 has an invalid length.
[  173.120336][T10850] netlink: 'syz.1.1361': attribute type 8 has an invalid length.
[  173.145045][T10852] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  173.211700][T10854] lo speed is unknown, defaulting to 1000
[  173.350552][ T5205] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  173.359747][ T5205] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  173.363561][ T5205] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  173.368571][ T5205] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  173.372452][ T5205] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  173.400721][T10865] netlink: 'syz.1.1365': attribute type 7 has an invalid length.
[  173.404858][T10865] netlink: 'syz.1.1365': attribute type 8 has an invalid length.
[  173.429087][T10865] erspan0: entered promiscuous mode
[  173.436615][T10865] batadv_slave_1: entered promiscuous mode
[  173.445796][T10865] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network
[  173.450282][T10865] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  173.535342][T10861] lo speed is unknown, defaulting to 1000
[  174.027252][T10876] netlink: 'syz.1.1367': attribute type 21 has an invalid length.
[  174.029827][T10876] IPv6: NLM_F_CREATE should be specified when creating new route
[  174.129692][T10861] chnl_net:caif_netlink_parms(): no params data found
[  174.233766][T10861] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.236800][T10861] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.239553][T10861] bridge_slave_0: entered allmulticast mode
[  174.242940][T10861] bridge_slave_0: entered promiscuous mode
[  174.246567][T10861] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.248954][T10861] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.251580][T10861] bridge_slave_1: entered allmulticast mode
[  174.254336][T10861] bridge_slave_1: entered promiscuous mode
[  174.301916][T10861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.307621][T10861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.342315][T10861] team0: Port device team_slave_0 added
[  174.347167][T10861] team0: Port device team_slave_1 added
[  174.389566][T10861] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.395074][T10861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.404277][T10861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  174.409966][T10861] batman_adv: batadv0: Adding interface: batadv_slave_1
[  174.412685][T10861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.425322][T10861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  174.485854][T10861] hsr_slave_0: entered promiscuous mode
[  174.489653][T10861] hsr_slave_1: entered promiscuous mode
[  174.492038][T10861] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  174.497120][T10861] Cannot create hsr debugfs directory
[  174.568206][T10911] sctp: [Deprecated]: syz.0.1373 (pid 10911) Use of struct sctp_assoc_value in delayed_ack socket option.
[  174.568206][T10911] Use struct sctp_sack_info instead
[  174.627792][T10861] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.643352][T10913] macvlan0: entered allmulticast mode
[  174.649272][T10913] netlink: 'syz.0.1374': attribute type 1 has an invalid length.
[  174.718921][T10861] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.798173][T10861] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.905758][T10861] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.936990][T10928] lo speed is unknown, defaulting to 1000
[  175.062287][T10861] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  175.070359][T10861] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  175.077959][T10935] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  175.080773][T10861] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  175.088797][T10861] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  175.119899][T10935] __nla_validate_parse: 9 callbacks suppressed
[  175.119917][T10935] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1381'.
[  175.128104][T10935] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  175.133752][T10935] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  175.223234][T10861] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.234467][T10861] 8021q: adding VLAN 0 to HW filter on device team0
[  175.239683][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.241956][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.259775][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.262295][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.267123][T10945] validate_nla: 2 callbacks suppressed
[  175.267133][T10945] netlink: 'syz.1.1383': attribute type 21 has an invalid length.
[  175.272444][T10945] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1383'.
[  175.369046][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1384'.
[  175.386587][T10861] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.425754][ T5205] Bluetooth: hci3: command tx timeout
[  175.427099][T10861] veth0_vlan: entered promiscuous mode
[  175.442081][T10861] veth1_vlan: entered promiscuous mode
[  175.472634][T10861] veth0_macvtap: entered promiscuous mode
[  175.478402][T10861] veth1_macvtap: entered promiscuous mode
[  175.496148][T10861] batman_adv: batadv0: Interface activated: batadv_slave_0
[  175.508070][T10861] batman_adv: batadv0: Interface activated: batadv_slave_1
[  175.517062][T10861] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.519842][T10861] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.525978][T10861] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.528795][T10861] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.588416][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.590983][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.620124][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.622740][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.666989][T10960] netlink: 'syz.1.1386': attribute type 1 has an invalid length.
[  175.698941][T10960] bond10: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  175.778675][T10963] bridge0: port 1(macvlan2) entered blocking state
[  175.781879][T10963] bridge0: port 1(macvlan2) entered disabled state
[  175.786207][T10963] macvlan2: entered allmulticast mode
[  175.788619][T10963] bridge0: entered allmulticast mode
[  175.793196][T10963] macvlan2: left allmulticast mode
[  175.795903][T10963] bridge0: left allmulticast mode
[  175.995658][T10975] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1390'.
[  176.948137][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1392'.
[  177.138917][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1395'.
[  177.233006][T11000] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1397'.
[  177.330408][T11002] netlink: 'syz.1.1398': attribute type 32 has an invalid length.
[  177.509454][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1399'.
[  177.513067][T11011] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1399'.
[  177.517994][T11011] netlink: 336 bytes leftover after parsing attributes in process `syz.1.1399'.
[  179.458164][T11026] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  179.461729][T11026] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  179.465027][T11026] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  179.468584][T11026] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  179.471388][T11026] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  179.502271][T11022] lo speed is unknown, defaulting to 1000
[  179.503332][T11028] netlink: 'syz.1.1405': attribute type 32 has an invalid length.
[  179.946479][T11022] chnl_net:caif_netlink_parms(): no params data found
[  180.040709][T11022] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.043250][T11022] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.046029][T11022] bridge_slave_0: entered allmulticast mode
[  180.048930][T11022] bridge_slave_0: entered promiscuous mode
[  180.053327][T11022] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.056047][T11022] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.059026][T11022] bridge_slave_1: entered allmulticast mode
[  180.062742][T11022] bridge_slave_1: entered promiscuous mode
[  180.101215][T11022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  180.108992][T11022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  180.152409][T11022] team0: Port device team_slave_0 added
[  180.159511][T11022] team0: Port device team_slave_1 added
[  180.192309][T11022] batman_adv: batadv0: Adding interface: batadv_slave_0
[  180.194905][T11022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.205479][T11022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  180.211865][T11022] batman_adv: batadv0: Adding interface: batadv_slave_1
[  180.217257][T11022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.227426][T11022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  180.267184][T11022] hsr_slave_0: entered promiscuous mode
[  180.270518][T11022] hsr_slave_1: entered promiscuous mode
[  180.273390][T11022] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  180.276872][T11022] Cannot create hsr debugfs directory
[  180.411750][T11022] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.471422][T11026] Bluetooth: hci1: command 0x0406 tx timeout
[  180.473864][T11026] Bluetooth: hci0: command 0x0401 tx timeout
[  180.485195][T11022] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.532659][T11022] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.590593][T11022] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.693832][T11022] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  180.708380][T11022] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  180.713737][T11022] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  180.718617][T11022] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  180.742075][T11022] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.745019][T11022] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.747828][T11022] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.750491][T11022] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.787029][T11022] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.798846][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.802043][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.817257][T11022] 8021q: adding VLAN 0 to HW filter on device team0
[  180.825432][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.827994][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.847558][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.850116][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.002061][T11022] 8021q: adding VLAN 0 to HW filter on device batadv0
[  181.012114][T11076] netlink: 'syz.1.1414': attribute type 3 has an invalid length.
[  181.026497][T11022] veth0_vlan: entered promiscuous mode
[  181.045895][T11022] veth1_vlan: entered promiscuous mode
[  181.063736][T11022] veth0_macvtap: entered promiscuous mode
[  181.070066][T11022] veth1_macvtap: entered promiscuous mode
[  181.083282][T11022] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.090612][T11022] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.096305][T11022] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.099290][T11022] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.102171][T11022] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.106084][T11022] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.163610][ T4278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.166760][ T4278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.208000][ T4278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.211996][ T4278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.325006][T11085] __nla_validate_parse: 4 callbacks suppressed
[  181.325018][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1417'.
[  181.504664][ T5205] Bluetooth: hci3: command tx timeout
[  183.192716][T11102] net_ratelimit: 5 callbacks suppressed
[  183.192728][T11102] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.272145][T11106] macvlan1: entered promiscuous mode
[  183.289423][T11106] ipvlan0: entered promiscuous mode
[  183.293385][T11106] ipvlan0: left promiscuous mode
[  183.295901][T11106] macvlan1: left promiscuous mode
[  183.363749][T11110] sctp: [Deprecated]: syz.1.1425 (pid 11110) Use of int in maxseg socket option.
[  183.363749][T11110] Use struct sctp_assoc_value instead
[  183.446329][T11114] netlink: 'syz.1.1427': attribute type 32 has an invalid length.
[  183.711397][T11126] tipc: Enabled bearer <udp:syz2>, priority 10
[  183.743321][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1430'.
[  184.028403][T11139] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1433'.
[  184.031397][T11139] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1433'.
[  184.034331][T11139] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1433'.
[  185.073163][T11159] ip6t_srh: unknown srh invflags 4449
[  185.158049][T11165] netlink: 'syz.1.1439': attribute type 21 has an invalid length.
[  185.496032][T11183] netlink: 'syz.1.1445': attribute type 32 has an invalid length.
[  185.703932][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1447'.
[  185.777621][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1448'.
[  186.006438][T11213] netlink: 'syz.1.1452': attribute type 32 has an invalid length.
[  186.207722][T11222] syzkaller0: left promiscuous mode
[  186.209667][T11222] syzkaller0: left allmulticast mode
[  186.435528][T11232] netlink: 'syz.1.1456': attribute type 15 has an invalid length.
[  186.554304][T11234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1457'.
[  186.694651][T11236] block nbd0: server does not support multiple connections per device.
[  186.698733][T11236] block nbd0: shutting down sockets
[  186.750663][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1459'.
[  186.754150][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1459'.
[  186.764324][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1459'.
[  186.774204][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1459'.
[  186.787289][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1459'.
[  186.833931][T11241] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  186.837084][T11241] syzkaller0: entered promiscuous mode
[  186.839029][T11241] syzkaller0: entered allmulticast mode
[  186.948422][T11250] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1462'.
[  186.952449][T11251] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1462'.
[  187.028179][T11256] netlink: 'syz.1.1464': attribute type 32 has an invalid length.
[  187.391710][T11267] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1466'.
[  187.419535][T11267] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1466'.
[  187.480239][T11267] netlink: 'syz.1.1466': attribute type 20 has an invalid length.
[  188.401722][T11279] netlink: 'syz.1.1468': attribute type 9 has an invalid length.
[  188.676868][T11290] netlink: 'syz.1.1473': attribute type 10 has an invalid length.
[  189.240090][T11315] IPVS: length: 80 != 8
[  190.386898][   T32] wlan0: Trigger new scan to find an IBSS to join
[  190.404525][T11325] xt_CT: No such helper "pptp"
[  190.489394][   T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  190.493322][   T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  190.500344][   T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  190.504114][   T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  190.507783][   T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  190.530613][T11327] lo speed is unknown, defaulting to 1000
[  190.793678][T11327] chnl_net:caif_netlink_parms(): no params data found
[  190.806171][T11348] sock: sock_set_timeout: `syz.1.1492' (pid 11348) tries to set negative timeout
[  190.854897][T11354] xt_SECMARK: invalid mode: 0
[  190.908374][T11327] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.914072][T11327] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.925076][T11327] bridge_slave_0: entered allmulticast mode
[  190.929190][T11327] bridge_slave_0: entered promiscuous mode
[  190.937365][T11327] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.940462][T11327] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.943584][T11327] bridge_slave_1: entered allmulticast mode
[  190.961557][T11327] bridge_slave_1: entered promiscuous mode
[  190.978071][T11361] xt_TCPMSS: Only works on TCP SYN packets
[  191.029507][T11327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  191.037235][T11327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  191.087924][T11327] team0: Port device team_slave_0 added
[  191.093654][T11327] team0: Port device team_slave_1 added
[  191.132766][T11327] batman_adv: batadv0: Adding interface: batadv_slave_0
[  191.135431][T11327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.145112][T11327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  191.149556][T11327] batman_adv: batadv0: Adding interface: batadv_slave_1
[  191.154432][T11327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.163154][T11327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  191.226697][T11327] hsr_slave_0: entered promiscuous mode
[  191.230172][T11327] hsr_slave_1: entered promiscuous mode
[  191.233234][T11327] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  191.237163][T11327] Cannot create hsr debugfs directory
[  191.722521][T11327] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  191.728784][T11327] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  191.732907][T11327] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  191.739029][T11327] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  191.767195][T11327] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.769461][T11327] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.771820][T11327] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.774038][T11327] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.808469][T11327] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.819131][ T3575] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.822330][ T3575] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.836357][T11327] 8021q: adding VLAN 0 to HW filter on device team0
[  191.841782][ T3575] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.844126][ T3575] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.852007][ T3575] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.854341][ T3575] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.897625][T11398] lo speed is unknown, defaulting to 1000
[  192.057114][T11327] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.310484][T11327] veth0_vlan: entered promiscuous mode
[  192.318595][T11327] veth1_vlan: entered promiscuous mode
[  192.343884][T11327] veth0_macvtap: entered promiscuous mode
[  192.351207][T11327] veth1_macvtap: entered promiscuous mode
[  192.373594][T11327] batman_adv: batadv0: Interface activated: batadv_slave_0
[  192.395732][T11327] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.414553][T11327] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.417375][T11327] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.420161][T11327] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.422874][T11327] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.476651][ T3575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.485487][ T3575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.506964][ T3575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.509389][ T3575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.544709][   T53] Bluetooth: hci4: command tx timeout
[  192.676461][T11416] __nla_validate_parse: 6 callbacks suppressed
[  192.676471][T11416] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1505'.
[  192.677689][T11418] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1506'.
[  192.759774][T11427] netlink: 'syz.1.1509': attribute type 32 has an invalid length.
[  192.786866][T11424] netlink: 'syz.4.1508': attribute type 10 has an invalid length.
[  192.790784][T11424] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  192.931575][T11444] ip6t_srh: unknown srh match flags  5294
[  193.073522][T11453] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  193.145056][T11459] netlink: 'syz.1.1518': attribute type 32 has an invalid length.
[  193.344861][ T8631] wlan0: Trigger new scan to find an IBSS to join
[  193.454249][T11475] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1521'.
[  193.530175][T11479] gretap0: entered promiscuous mode
[  193.532094][T11479] gretap0: entered allmulticast mode
[  193.540509][T11479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1523'.
[  193.543882][T11479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1523'.
[  193.682489][T11482] netlink: 'syz.1.1524': attribute type 1 has an invalid length.
[  193.895132][T11493] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1526'.
[  194.451908][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1533'.
[  194.458563][T11510] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1533'.
[  194.463910][T11510] netlink: 336 bytes leftover after parsing attributes in process `syz.1.1533'.
[  194.468537][T11510] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1533'.
[  194.624596][   T53] Bluetooth: hci4: command 0x041b tx timeout
[  194.669445][T11518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  195.012371][T11525] netlink: 'syz.4.1538': attribute type 32 has an invalid length.
[  196.309283][   T27] wlan0: Trigger new scan to find an IBSS to join
[  196.383147][T11584] netlink: 'syz.1.1553': attribute type 2 has an invalid length.
[  196.390209][T11584] netlink: 'syz.1.1553': attribute type 83 has an invalid length.
[  196.684342][T11606] netlink: 'syz.1.1559': attribute type 1 has an invalid length.
[  196.704855][ T5205] Bluetooth: hci4: command 0x041b tx timeout
[  196.718649][T11606] 8021q: adding VLAN 0 to HW filter on device bond11
[  196.737857][T11606] veth7: entered promiscuous mode
[  196.743357][T11606] bond11: (slave veth7): Enslaving as a backup interface with a down link
[  197.085920][T11634] RDS: rds_bind could not find a transport for fe88::5, load rds_tcp or rds_rdma?
[  197.229017][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.547670][T11666] lo speed is unknown, defaulting to 1000
[  197.694985][   T33] audit: type=1800 audit(1751864219.513:4): pid=11673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1581" name="memory.events" dev="tmpfs" ino=3686 res=0 errno=0
[  197.793445][T11671] lo speed is unknown, defaulting to 1000
[  197.820467][T11678] netlink: 'syz.1.1583': attribute type 29 has an invalid length.
[  198.085840][T11689] netlink: 'syz.1.1587': attribute type 1 has an invalid length.
[  198.123002][T11689] bond12: entered promiscuous mode
[  198.131519][T11689] 8021q: adding VLAN 0 to HW filter on device bond12
[  198.163468][T11691] 8021q: adding VLAN 0 to HW filter on device bond12
[  198.167213][T11691] bond12: (slave vcan1): The slave device specified does not support setting the MAC address
[  198.170768][T11691] bond12: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  198.177241][T11691] bond12: (slave vcan1): making interface the new active one
[  198.179978][T11691] vcan1: entered promiscuous mode
[  198.182989][T11691] bond12: (slave vcan1): Enslaving as an active interface with an up link
[  198.323903][T11695] __nla_validate_parse: 12 callbacks suppressed
[  198.323918][T11695] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1589'.
[  198.431524][T11711] batman_adv: batadv0: Adding interface: dummy0
[  198.434104][T11711] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.448948][T11711] batman_adv: batadv0: Interface activated: dummy0
[  198.451750][T11712] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1593'.
[  198.456492][T11711] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1593'.
[  198.461882][T11712] openvswitch: netlink: Flow key attr not present in new flow.
[  198.469739][T11711] openvswitch: netlink: Flow key attr not present in new flow.
[  198.784981][   T53] Bluetooth: hci4: command 0x041b tx timeout
[  198.842320][T11736] syzkaller1: entered promiscuous mode
[  198.846456][T11736] syzkaller1: entered allmulticast mode
[  199.330673][T11756] netlink: 'syz.1.1607': attribute type 32 has an invalid length.
[  199.540025][T11777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1610'.
[  199.584673][T11786] netdevsim0: entered promiscuous mode
[  199.587061][T11787] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1613'.
[  199.590514][T11788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1613'.
[  199.679893][T11796] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1617'.
[  199.711692][T11802] netlink: 'syz.1.1619': attribute type 10 has an invalid length.
[  199.715537][T11803] netlink: 'syz.1.1619': attribute type 10 has an invalid length.
[  199.767742][T11806] veth0: entered promiscuous mode
[  199.770215][T11805] veth0: left promiscuous mode
[  199.881049][T11819] netlink: 'syz.4.1624': attribute type 1 has an invalid length.
[  199.903785][T11819] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  199.911058][T10052] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  199.911527][T11819] 8021q: adding VLAN 0 to HW filter on device bond1
[  199.971116][T11823] pimreg3: entered allmulticast mode
[  200.031684][T11826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1626'.
[  200.035445][T10052] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  200.043773][T11826] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.047495][T11826] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.134511][T11828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1627'.
[  200.864915][ T5205] Bluetooth: hci4: command 0x041b tx timeout
[  201.469787][T11848] xt_l2tp: missing protocol rule (udp|l2tpip)
[  201.500773][T11850] netlink: 'syz.4.1633': attribute type 32 has an invalid length.
[  201.661424][T11859] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.749372][T11863] pim6reg1: entered promiscuous mode
[  201.751234][T11863] pim6reg1: entered allmulticast mode
[  201.891113][T11872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1638'.
[  201.900303][T11872] netlink: 'syz.4.1638': attribute type 1 has an invalid length.
[  202.261411][    C1] Unknown status report in ack skb
[  202.304033][T11894] batadv_slave_1: entered promiscuous mode
[  202.860068][T11899] SET target dimension over the limit!
[  202.949652][ T5205] Bluetooth: hci4: command 0x041b tx timeout
[  203.135891][T11893] batadv_slave_1: left promiscuous mode
[  203.184148][T11907] netlink: 'syz.4.1650': attribute type 7 has an invalid length.
[  203.190007][T11907] netlink: 'syz.4.1650': attribute type 8 has an invalid length.
[  203.192519][T11907] netlink: 'syz.4.1650': attribute type 4 has an invalid length.
[  203.272928][T11914] netlink: 'syz.4.1652': attribute type 1 has an invalid length.
[  203.390713][T11920] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  203.452554][T11924] __nla_validate_parse: 8 callbacks suppressed
[  203.452569][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1657'.
[  203.549130][T11930] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1659'.
[  203.576705][T11930] lo speed is unknown, defaulting to 1000
[  204.105981][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1665'.
[  204.114325][T11953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1665'.
[  204.258147][T11960] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  204.261956][T11960] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  204.411341][T11973] netlink: 'syz.1.1673': attribute type 21 has an invalid length.
[  204.452912][T11975] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.500080][T11977] netlink: 'syz.1.1675': attribute type 5 has an invalid length.
[  204.535395][T11979] x_tables: duplicate underflow at hook 1
[  205.325153][   T24] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  205.328155][   T24] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  205.331229][   T24] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  205.334337][   T24] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  205.345339][   T24] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  205.354673][   T24] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  205.357092][   T24] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x3
[  205.364879][   T24] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  205.562892][T12007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1683'.
[  206.056182][T12035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1688'.
[  206.060050][T12035] batman_adv: batadv0: Interface deactivated: dummy0
[  206.078083][T12035] batman_adv: batadv0: Removing interface: dummy0
[  206.171873][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1689'.
[  206.182336][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1689'.
[  206.617997][T12062] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2
[  206.652931][T12064] netlink: 'syz.4.1696': attribute type 1 has an invalid length.
[  206.818464][T12072] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1699'.
[  206.822096][T12072] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1699'.
[  206.848847][T12072] batadv0: entered promiscuous mode
[  206.852328][T12072] batadv0: left promiscuous mode
[  207.220903][T12081] lo speed is unknown, defaulting to 1000
[  207.476348][T12086] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[  207.599157][T12101] xt_NFQUEUE: number of total queues is 0
[  207.771192][T12120] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  207.774292][T12120] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  207.777137][T12120] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  207.779775][T12120] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  207.799407][T12118] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  207.803877][T12118] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  207.844507][T12124] netlink: 'syz.1.1713': attribute type 32 has an invalid length.
[  207.921543][T12134] tipc: Started in network mode
[  207.923317][T12134] tipc: Node identity e2fe24506ae7, cluster identity 4711
[  207.926324][T12134] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.936008][T12133] tipc: Disabling bearer <eth:syzkaller0>
[  209.056472][T12170] netlink: 'syz.1.1726': attribute type 32 has an invalid length.
[  209.160500][T12177] mac80211_hwsim hwsim49 wlan1: entered allmulticast mode
[  209.176682][T12177] bridge_slave_0: left allmulticast mode
[  209.179096][T12177] bridge_slave_0: left promiscuous mode
[  209.181520][T12177] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.186181][T12177] bridge_slave_1: left allmulticast mode
[  209.189255][T12177] bridge_slave_1: left promiscuous mode
[  209.191291][T12177] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.201486][T12177] bond0: (slave bond_slave_0): Releasing backup interface
[  209.209723][T12177] bond0: (slave bond_slave_1): Releasing backup interface
[  209.223516][T12181] netlink: 'syz.4.1727': attribute type 10 has an invalid length.
[  209.231605][T12177] team0: Port device team_slave_0 removed
[  209.250404][T12177] team0: Port device team_slave_1 removed
[  209.252717][T12177] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.256327][T12177] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.260055][T12177] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.262455][T12177] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.270972][T12177] bond1: (slave ip6gretap1): Removing an active aggregator
[  209.274092][T12177] bond1: (slave ip6gretap1): Releasing backup interface
[  209.288867][T12181] mac80211_hwsim hwsim49 wlan1: left allmulticast mode
[  209.293693][T12181] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.311075][T12181] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  209.369158][T12187] __nla_validate_parse: 9 callbacks suppressed
[  209.369172][T12187] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1729'.
[  209.421905][T12191] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1732'.
[  209.474107][T12193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1731'.
[  209.478429][T12193] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1731'.
[  209.512405][T12204] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1735'.
[  209.573563][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1737'.
[  209.599423][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1737'.
[  209.636995][T12219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1740'.
[  209.641167][T12219] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1740'.
[  209.645754][T12219] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1740'.
[  209.707548][T12227] netlink: 'syz.4.1742': attribute type 2 has an invalid length.
[  209.710070][T12227] netlink: 'syz.4.1742': attribute type 1 has an invalid length.
[  209.781794][T12228] lo speed is unknown, defaulting to 1000
[  211.116877][T12271] netlink: 'syz.4.1755': attribute type 11 has an invalid length.
[  211.169013][T12274] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  211.172242][T12274] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  211.673908][T12292] netlink: 'syz.4.1763': attribute type 15 has an invalid length.
[  211.715762][T12294] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  212.241961][T12323] netlink: 'syz.1.1775': attribute type 7 has an invalid length.
[  212.797664][T12350] netlink: 'syz.4.1785': attribute type 11 has an invalid length.
[  213.676136][T12378] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  214.131087][T12396] sctp: [Deprecated]: syz.1.1801 (pid 12396) Use of int in maxseg socket option.
[  214.131087][T12396] Use struct sctp_assoc_value instead
[  214.227799][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  214.494932][T12411] x9: renamed from bridge_slave_0
[  214.498294][T12411] vlan0: entered promiscuous mode
[  214.718780][T12422] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  214.830741][T12431] __nla_validate_parse: 17 callbacks suppressed
[  214.830757][T12431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1813'.
[  214.840413][T12431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1813'.
[  214.844142][T12431] netlink: 'syz.4.1813': attribute type 14 has an invalid length.
[  215.056523][T12442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1817'.
[  215.211989][T12449] 8021q: VLANs not supported on bond0
[  215.215417][T12449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1819'.
[  215.959211][T12458] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1822'.
[  216.110047][T12464] netlink: 'syz.1.1825': attribute type 7 has an invalid length.
[  216.421900][T12496] netlink: 'syz.1.1833': attribute type 42 has an invalid length.
[  216.497029][T12501] pim6reg: entered allmulticast mode
[  216.583785][T12508] sctp: [Deprecated]: syz.4.1837 (pid 12508) Use of int in max_burst socket option.
[  216.583785][T12508] Use struct sctp_assoc_value instead
[  216.684337][T12512] 8021q: VLANs not supported on tunl0
[  216.716718][T12514] Bluetooth: hci1: Opcode 0x080f failed: -4
[  216.720310][T12514] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1840'.
[  216.723361][T12514] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1840'.
[  216.773494][T12516] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  216.803300][T12518] Cannot find del_set index 4 as target
[  216.852583][T12518] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1842'.
[  216.861534][T12518] netem: unknown loss type 13
[  216.863372][T12518] netem: change failed
[  216.883494][T12518] x_tables: duplicate underflow at hook 1
[  216.970850][T12525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1844'.
[  217.062182][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1844'.
[  217.448959][T12542] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  217.637008][T12554] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  217.707908][T12556] netlink: 'syz.1.1856': attribute type 21 has an invalid length.
[  217.719052][T12556] netlink: 'syz.1.1856': attribute type 5 has an invalid length.
[  218.794890][ T5205] Bluetooth: hci1: command 0x0406 tx timeout
[  220.099051][T12623] pim6reg0: tun_chr_ioctl cmd 1074025694
[  220.196555][T12625] syzkaller1: entered promiscuous mode
[  220.198453][T12625] syzkaller1: entered allmulticast mode
[  220.418895][T12636] openvswitch: netlink: Unknown key attributes 2
[  220.422071][T12636] __nla_validate_parse: 3 callbacks suppressed
[  220.422080][T12636] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1877'.
[  220.888970][T12656] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1884'.
[  221.014988][T12660] lo speed is unknown, defaulting to 1000
[  222.743618][T12675] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  222.749050][T12675] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  222.749058][T12674] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1889'.
[  222.818894][ T5205] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  222.822991][ T5205] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  222.828040][ T5205] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  222.834799][ T5205] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  222.838733][ T5205] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  222.865348][T12679] lo speed is unknown, defaulting to 1000
[  223.099580][T12679] chnl_net:caif_netlink_parms(): no params data found
[  223.225628][T12679] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.228661][T12679] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.231897][T12679] bridge_slave_0: entered allmulticast mode
[  223.236443][T12679] bridge_slave_0: entered promiscuous mode
[  223.241052][T12679] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.243779][T12679] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.246404][T12679] bridge_slave_1: entered allmulticast mode
[  223.251962][T12679] bridge_slave_1: entered promiscuous mode
[  223.290779][T12679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  223.306373][T12679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.372089][T12679] team0: Port device team_slave_0 added
[  223.377606][T12679] team0: Port device team_slave_1 added
[  223.432118][T12679] batman_adv: batadv0: Adding interface: batadv_slave_0
[  223.444660][T12679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.454974][T12679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  223.460997][T12679] batman_adv: batadv0: Adding interface: batadv_slave_1
[  223.463898][T12679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.475368][T12679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  223.525270][T12679] hsr_slave_0: entered promiscuous mode
[  223.533305][T12679] hsr_slave_1: entered promiscuous mode
[  223.537156][T12679] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  223.540324][T12679] Cannot create hsr debugfs directory
[  223.758561][T12679] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.829536][T12679] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.976204][T12679] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.076050][T12679] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.230064][T12679] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  224.253500][T12679] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  224.258057][T12720] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  224.265293][T12679] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  224.270972][T12679] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  224.381385][T12679] 8021q: adding VLAN 0 to HW filter on device bond0
[  224.415098][T12679] 8021q: adding VLAN 0 to HW filter on device team0
[  224.434183][ T8631] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.437429][ T8631] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.460551][ T8631] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.463528][ T8631] bridge0: port 2(bridge_slave_1) entered forwarding state
[  224.732677][T12679] 8021q: adding VLAN 0 to HW filter on device batadv0
[  224.808976][T12747] netlink: 'syz.1.1902': attribute type 32 has an invalid length.
[  224.817154][T12679] veth0_vlan: entered promiscuous mode
[  224.835869][T12679] veth1_vlan: entered promiscuous mode
[  224.864960][ T5205] Bluetooth: hci3: command tx timeout
[  224.906894][T12679] veth0_macvtap: entered promiscuous mode
[  224.921396][T12679] veth1_macvtap: entered promiscuous mode
[  224.967751][T12679] batman_adv: batadv0: Interface activated: batadv_slave_0
[  224.988672][T12679] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.001238][T12679] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.014472][T12679] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.020291][T12679] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.028849][T12679] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.093019][T12758] @: renamed from vlan0 (while UP)
[  225.140838][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.143396][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.178695][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.181307][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.193311][T12766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1906'.
[  225.198391][T12766] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  225.201417][T12766] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.242629][T12770] netlink: 'syz.1.1908': attribute type 10 has an invalid length.
[  225.321629][T12775] netlink: 'syz.4.1910': attribute type 3 has an invalid length.
[  225.400651][T12781] netlink: 'syz.4.1911': attribute type 32 has an invalid length.
[  225.549964][T12791] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20000
[  225.820973][T12801] lo speed is unknown, defaulting to 1000
[  226.212754][T12812] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1920'.
[  226.259059][T12815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1921'.
[  226.344264][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1923'.
[  226.349213][T12820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1923'.
[  226.354092][T12820] netlink: 'syz.4.1923': attribute type 1 has an invalid length.
[  226.358667][T12820] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1923'.
[  226.362998][T12824] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1925'.
[  226.363000][T12825] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1925'.
[  226.399839][T12820] nbd: socks must be embedded in a SOCK_ITEM attr
[  226.404320][T12820] block nbd0: shutting down sockets
[  226.487355][T12830] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1926'.
[  226.492205][T12830] netlink: 'syz.4.1926': attribute type 2 has an invalid length.
[  226.496650][T12830] netlink: 'syz.4.1926': attribute type 5 has an invalid length.
[  226.718384][T12849] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1933'.
[  226.722425][T12850] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  226.725950][T12849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1933'.
[  226.732508][T12849] netlink: 'syz.1.1933': attribute type 1 has an invalid length.
[  226.760893][T12849] bond14: entered promiscuous mode
[  226.762524][T12849] bond14: entered allmulticast mode
[  228.808576][T12879] syzkaller0: entered promiscuous mode
[  228.810574][T12879] syzkaller0: entered allmulticast mode
[  229.000891][ T9478] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  229.024240][ T9478] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  229.028684][ T9478] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  229.033208][ T9478] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  229.036988][ T9478] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  230.375105][T12891] lo speed is unknown, defaulting to 1000
[  230.523077][T12908] xt_hashlimit: invalid rate
[  230.693600][T12891] chnl_net:caif_netlink_parms(): no params data found
[  230.740220][T12928] netlink: 'syz.1.1951': attribute type 5 has an invalid length.
[  230.867053][T12891] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.870321][T12891] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.873506][T12891] bridge_slave_0: entered allmulticast mode
[  230.881054][T12891] bridge_slave_0: entered promiscuous mode
[  230.886489][T12891] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.892939][T12891] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.897285][T12891] bridge_slave_1: entered allmulticast mode
[  230.900344][T12891] bridge_slave_1: entered promiscuous mode
[  230.937869][T12891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  230.943846][T12891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  230.977196][T12935] netlink: 'syz.4.1952': attribute type 32 has an invalid length.
[  231.012442][T12891] team0: Port device team_slave_0 added
[  231.042892][T12891] team0: Port device team_slave_1 added
[  231.095680][T12891] batman_adv: batadv0: Adding interface: batadv_slave_0
[  231.099011][T12891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.108209][ T9478] Bluetooth: hci3: command tx timeout
[  231.143425][T12891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  231.148545][T12891] batman_adv: batadv0: Adding interface: batadv_slave_1
[  231.153222][T12945] netlink: 'syz.1.1954': attribute type 1 has an invalid length.
[  231.153586][T12891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.167948][T12891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  231.206759][T12945] 8021q: adding VLAN 0 to HW filter on device bond15
[  231.301906][T12891] hsr_slave_0: entered promiscuous mode
[  231.319710][T12891] hsr_slave_1: entered promiscuous mode
[  231.321983][T12891] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  231.330915][T12891] Cannot create hsr debugfs directory
[  231.357550][T12951] pim6reg1: entered promiscuous mode
[  231.359367][T12951] pim6reg1: entered allmulticast mode
[  231.574046][T12961] __nla_validate_parse: 5 callbacks suppressed
[  231.574057][T12961] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1960'.
[  231.583266][T12955] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1955'.
[  231.589676][T12891] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.631486][T12955] 8021q: adding VLAN 0 to HW filter on device bond3
[  231.642109][T12955] team0: Port device bond3 added
[  231.691123][T12891] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.699233][T12961] netlink: 676 bytes leftover after parsing attributes in process `syz.1.1960'.
[  231.702157][T12961] netlink: 676 bytes leftover after parsing attributes in process `syz.1.1960'.
[  231.739528][T12969] netlink: 'syz.1.1961': attribute type 32 has an invalid length.
[  231.772682][T12891] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.836675][T12978] netlink: zone id is out of range
[  231.838490][T12978] netlink: zone id is out of range
[  231.840272][T12978] netlink: zone id is out of range
[  231.842064][T12978] netlink: zone id is out of range
[  231.843769][T12978] netlink: zone id is out of range
[  231.845592][T12978] netlink: zone id is out of range
[  231.847375][T12978] netlink: zone id is out of range
[  231.849154][T12978] netlink: zone id is out of range
[  231.850875][T12978] netlink: zone id is out of range
[  231.852608][T12978] netlink: zone id is out of range
[  231.856062][T12979] netlink: 58 bytes leftover after parsing attributes in process `syz.4.1963'.
[  231.861473][T12891] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.964612][T12891] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  231.970092][T12891] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  231.974936][T12891] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  231.980059][T12891] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  232.077064][T12891] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.093231][T12891] 8021q: adding VLAN 0 to HW filter on device team0
[  232.103625][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.106344][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.115742][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.118057][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.125319][T13007] sit0: entered promiscuous mode
[  232.128216][T13007] netlink: 'syz.1.1969': attribute type 1 has an invalid length.
[  232.136152][T13007] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1969'.
[  232.191000][T13014] netlink: 'syz.1.1971': attribute type 32 has an invalid length.
[  232.340227][T13027] vlan0: entered promiscuous mode
[  232.342475][T13027] vlan0: entered allmulticast mode
[  232.344269][T13027] bridge0: entered allmulticast mode
[  232.363078][T12891] 8021q: adding VLAN 0 to HW filter on device batadv0
[  232.391740][T12891] veth0_vlan: entered promiscuous mode
[  232.406081][T12891] veth1_vlan: entered promiscuous mode
[  232.411931][T13030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1973'.
[  232.427977][T13030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1973'.
[  232.445908][T12891] veth0_macvtap: entered promiscuous mode
[  232.450943][T12891] veth1_macvtap: entered promiscuous mode
[  232.467421][T12891] batman_adv: batadv0: Interface activated: batadv_slave_0
[  232.474037][T12891] batman_adv: batadv0: Interface activated: batadv_slave_1
[  232.480004][T12891] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.482855][T12891] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.488403][T12891] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.492203][T12891] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.512900][T13034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1974'.
[  232.586992][T13036] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1975'.
[  232.588180][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.593373][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.626463][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.629104][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.031573][T13068] xt_TCPMSS: Only works on TCP SYN packets
[  233.187970][T13078] netlink: 'syz.1.1988': attribute type 14 has an invalid length.
[  233.191575][T13078] netlink: 'syz.1.1988': attribute type 13 has an invalid length.
[  233.692205][T13106] netlink: 'syz.1.1998': attribute type 1 has an invalid length.
[  233.969607][T13118] netlink: 'syz.4.2002': attribute type 5 has an invalid length.
[  234.099769][T13136] tipc: Failed to remove unknown binding: 66,3,3/0:107771052/107771053
[  236.361723][ T9478] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  236.365364][ T9478] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  236.370406][ T9478] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  236.382307][ T9478] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  236.387320][ T9478] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  236.448146][T13174] lo speed is unknown, defaulting to 1000
[  236.469768][T13180] validate_nla: 1 callbacks suppressed
[  236.469783][T13180] netlink: 'syz.1.2017': attribute type 32 has an invalid length.
[  236.787903][T13186] __nla_validate_parse: 78 callbacks suppressed
[  236.787918][T13186] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2019'.
[  236.794843][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2019'.
[  236.870787][T13198] lo speed is unknown, defaulting to 1000
[  236.995461][T13174] chnl_net:caif_netlink_parms(): no params data found
[  237.213547][T13174] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.215982][T13174] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.218307][T13174] bridge_slave_0: entered allmulticast mode
[  237.221040][T13174] bridge_slave_0: entered promiscuous mode
[  237.230146][T13174] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.232600][T13174] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.235172][T13174] bridge_slave_1: entered allmulticast mode
[  237.238086][T13174] bridge_slave_1: entered promiscuous mode
[  237.240688][T13210] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  237.269048][T13210] syzkaller0: entered promiscuous mode
[  237.271336][T13210] syzkaller0: entered allmulticast mode
[  237.279435][T13174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  237.286566][T13174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  237.321336][T13174] team0: Port device team_slave_0 added
[  237.326835][T13210] tipc: Resetting bearer <eth:syzkaller0>
[  237.331672][T13174] team0: Port device team_slave_1 added
[  237.357595][T13209] tipc: Resetting bearer <eth:syzkaller0>
[  237.376012][T13209] tipc: Disabling bearer <eth:syzkaller0>
[  237.390641][T13174] batman_adv: batadv0: Adding interface: batadv_slave_0
[  237.393372][T13174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  237.402108][T13174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  237.407193][T13174] batman_adv: batadv0: Adding interface: batadv_slave_1
[  237.409606][T13174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  237.418190][T13174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  237.480379][T13174] hsr_slave_0: entered promiscuous mode
[  237.484212][T13174] hsr_slave_1: entered promiscuous mode
[  237.488240][T13174] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  237.491398][T13174] Cannot create hsr debugfs directory
[  237.710516][T13174] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.790875][T13174] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.859597][T13174] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.876327][T13224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2028'.
[  237.948365][T13174] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.113775][T13174] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  238.121409][T13174] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  238.127429][T13174] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  238.131722][T13174] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  238.190957][T13237] pimreg: entered allmulticast mode
[  238.197372][T13237] pimreg: left allmulticast mode
[  238.270994][T13174] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.293137][T13239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2031'.
[  238.300080][T13174] 8021q: adding VLAN 0 to HW filter on device team0
[  238.315872][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.318105][ T4278] bridge0: port 1(bridge_slave_0) entered forwarding state
[  238.330400][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.332739][ T4278] bridge0: port 2(bridge_slave_1) entered forwarding state
[  238.464862][ T5205] Bluetooth: hci3: command tx timeout
[  238.496277][T13174] 8021q: adding VLAN 0 to HW filter on device batadv0
[  238.631981][T13174] veth0_vlan: entered promiscuous mode
[  238.651669][T13174] veth1_vlan: entered promiscuous mode
[  238.661013][T13259] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2035'.
[  238.717419][T13174] veth0_macvtap: entered promiscuous mode
[  238.723052][T13174] veth1_macvtap: entered promiscuous mode
[  238.749205][T13263] netlink: 'syz.4.2036': attribute type 1 has an invalid length.
[  238.751749][T13263] netlink: 'syz.4.2036': attribute type 2 has an invalid length.
[  238.767262][T13263] netlink: 'syz.4.2036': attribute type 1 has an invalid length.
[  238.769018][T13174] batman_adv: batadv0: Interface activated: batadv_slave_0
[  238.774508][T13263] netlink: 'syz.4.2036': attribute type 2 has an invalid length.
[  238.795969][T13174] batman_adv: batadv0: Interface activated: batadv_slave_1
[  238.814227][T13174] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.818486][T13174] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.821886][T13174] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.830797][T13174] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.851471][T13264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2037'.
[  238.940836][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.943595][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.978502][T13280] lo speed is unknown, defaulting to 1000
[  238.997418][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.000049][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.145245][T13286] block nbd0: server does not support multiple connections per device.
[  239.149000][T13286] block nbd0: shutting down sockets
[  239.268361][T13298] syzkaller1: entered promiscuous mode
[  239.270132][T13298] syzkaller1: entered allmulticast mode
[  239.281845][T13298] netlink: 'syz.1.2044': attribute type 1 has an invalid length.
[  239.319945][T13298] 8021q: adding VLAN 0 to HW filter on device bond16
[  239.339623][T13298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2044'.
[  239.342611][T13298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2044'.
[  239.364269][T13298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2044'.
[  239.368309][T13298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2044'.
[  239.380564][T13298] macvlan0: entered promiscuous mode
[  239.382748][T13298] macvlan0: entered allmulticast mode
[  239.386713][T13298] bond16: entered promiscuous mode
[  239.389408][T13298] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  239.395460][T13298] bond16: left promiscuous mode
[  239.458943][T13309] lo speed is unknown, defaulting to 1000
[  239.806693][T13320] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  239.839858][T13320] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  239.861071][T13322] net_ratelimit: 169 callbacks suppressed
[  239.861088][T13322] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  239.869330][T13323] syzkaller0: entered promiscuous mode
[  239.872092][T13323] syzkaller0: entered allmulticast mode
[  240.007001][T13329] netlink: 'syz.1.2053': attribute type 32 has an invalid length.
[  240.103484][T13333] syz.4.2054: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  240.111945][T13333] CPU: 1 UID: 0 PID: 13333 Comm: syz.4.2054 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  240.111961][T13333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  240.111966][T13333] Call Trace:
[  240.111970][T13333]  <TASK>
[  240.111974][T13333]  dump_stack_lvl+0x189/0x250
[  240.111991][T13333]  ? __pfx_dump_stack_lvl+0x10/0x10
[  240.112003][T13333]  ? __pfx__printk+0x10/0x10
[  240.112013][T13333]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  240.112023][T13333]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  240.112032][T13333]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  240.112041][T13333]  warn_alloc+0x214/0x310
[  240.112050][T13333]  ? stack_depot_save_flags+0x40/0x900
[  240.112061][T13333]  ? __pfx_warn_alloc+0x10/0x10
[  240.112070][T13333]  ? kasan_save_track+0x4f/0x80
[  240.112080][T13333]  ? xskq_create+0x56/0x170
[  240.112090][T13333]  ? xsk_init_queue+0xb0/0x110
[  240.112098][T13333]  ? xsk_setsockopt+0x43f/0x710
[  240.112107][T13333]  ? do_sock_setsockopt+0x25a/0x3e0
[  240.112115][T13333]  ? __x64_sys_setsockopt+0x18b/0x220
[  240.112122][T13333]  ? do_syscall_64+0xfa/0x3b0
[  240.112128][T13333]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.112138][T13333]  __vmalloc_node_range_noprof+0x125/0x12f0
[  240.112159][T13333]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  240.112169][T13333]  ? xskq_create+0x56/0x170
[  240.112181][T13333]  ? __kasan_kmalloc+0x93/0xb0
[  240.112190][T13333]  vmalloc_user_noprof+0xad/0xf0
[  240.112199][T13333]  ? xskq_create+0xbf/0x170
[  240.112210][T13333]  xskq_create+0xbf/0x170
[  240.112222][T13333]  xsk_init_queue+0xb0/0x110
[  240.112232][T13333]  xsk_setsockopt+0x43f/0x710
[  240.112242][T13333]  ? __pfx_xsk_setsockopt+0x10/0x10
[  240.112251][T13333]  ? __lock_acquire+0xab9/0xd20
[  240.112265][T13333]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  240.112274][T13333]  ? __pfx_xsk_setsockopt+0x10/0x10
[  240.112284][T13333]  do_sock_setsockopt+0x25a/0x3e0
[  240.112293][T13333]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  240.112303][T13333]  ? __fget_files+0x2a/0x420
[  240.112315][T13333]  __x64_sys_setsockopt+0x18b/0x220
[  240.112325][T13333]  do_syscall_64+0xfa/0x3b0
[  240.112331][T13333]  ? lockdep_hardirqs_on+0x9c/0x150
[  240.112341][T13333]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.112348][T13333]  ? exc_page_fault+0x9f/0xf0
[  240.112358][T13333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.112365][T13333] RIP: 0033:0x7f689718e929
[  240.112376][T13333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  240.112387][T13333] RSP: 002b:00007f6898069038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  240.112397][T13333] RAX: ffffffffffffffda RBX: 00007f68973b5fa0 RCX: 00007f689718e929
[  240.112403][T13333] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d
[  240.112407][T13333] RBP: 00007f6897210b39 R08: 0000000000000004 R09: 0000000000000000
[  240.112412][T13333] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  240.112417][T13333] R13: 0000000000000000 R14: 00007f68973b5fa0 R15: 00007ffc7b28fb28
[  240.112429][T13333]  </TASK>
[  240.112432][T13333] Mem-Info:
[  240.218579][T13341] delete_channel: no stack
[  240.230072][T13333] active_anon:14746 inactive_anon:14 isolated_anon:0
[  240.230072][T13333]  active_file:1092 inactive_file:36452 isolated_file:0
[  240.230072][T13333]  unevictable:1768 dirty:48 writeback:0
[  240.230072][T13333]  slab_reclaimable:11396 slab_unreclaimable:137932
[  240.230072][T13333]  mapped:31130 shmem:5312 pagetables:1075
[  240.230072][T13333]  sec_pagetables:0 bounce:0
[  240.230072][T13333]  kernel_misc_reclaimable:0
[  240.230072][T13333]  free:186235 free_pcp:12760 free_cma:0
[  240.230154][T13333] Node 0 active_anon:19120kB inactive_anon:56kB active_file:3192kB inactive_file:141228kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:78480kB dirty:160kB writeback:0kB shmem:5140kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9836kB pagetables:2468kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  240.230190][T13333] Node 1 active_anon:39864kB inactive_anon:0kB active_file:1176kB inactive_file:4580kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46040kB dirty:32kB writeback:0kB shmem:16108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9788kB pagetables:1832kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  240.230223][T13333] Node 0 DMA free:4572kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:588kB local_pcp:308kB free_cma:0kB
[  240.230260][T13333] lowmem_reserve[]: 0 815 815 815 815
[  240.230288][T13333] Node 0 DMA32 free:45488kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:4096KB free_highatomic:1884KB active_anon:19108kB inactive_anon:56kB active_file:3192kB inactive_file:141220kB unevictable:3536kB writepending:160kB present:1556484kB managed:834740kB mlocked:0kB bounce:0kB free_pcp:8044kB local_pcp:6620kB free_cma:0kB
[  240.230323][T13333] lowmem_reserve[]: 0 0 0 0 0
[  240.230348][T13333] Node 1 DMA32 free:458492kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  240.230380][T13333] lowmem_reserve[]: 0 0 854 854 854
[  240.230406][T13333] Node 1 Normal free:236388kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39864kB inactive_anon:0kB active_file:1176kB inactive_file:4580kB unevictable:3536kB writepending:32kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:42292kB local_pcp:21092kB free_cma:0kB
[  240.230441][T13333] lowmem_reserve[]: 0 0 0 0 0
[  240.230466][T13333] Node 0 DMA: 7*4kB (UM) 6*8kB (UME) 9*16kB (UME) 22*32kB (UME) 15*64kB (UME) 9*128kB (UME) 2*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 4572kB
[  240.230590][T13333] Node 0 DMA32: 14*4kB (UMEH) 79*8kB (MEH) 144*16kB (MEH) 132*32kB (UMEH) 79*64kB (MEH) 35*128kB (MEH) 12*256kB (UMEH) 14*512kB (ME) 8*1024kB (UME) 5*2048kB (M) 0*4096kB = 45424kB
[  240.367046][T13333] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  240.375462][T13333] Node 1 Normal: 1*4kB (M) 4*8kB (UME) 2*16kB (UE) 2*32kB (ME) 3*64kB (UME) 36*128kB (UME) 24*256kB (UME) 20*512kB (UM) 10*1024kB (UME) 8*2048kB (UM) 46*4096kB (UM) = 236356kB
[  240.382659][T13333] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  240.386862][T13333] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  240.390600][T13333] 42856 total pagecache pages
[  240.392500][T13333] 0 pages in swap cache
[  240.394199][T13333] Free swap  = 124996kB
[  240.396613][T13333] Total swap = 124996kB
[  240.398407][T13333] 786301 pages RAM
[  240.400063][T13333] 0 pages HighMem/MovableOnly
[  240.402080][T13333] 240368 pages reserved
[  240.403876][T13333] 0 pages cma reserved
[  240.519413][T13347] openvswitch: netlink: IP tunnel dst address not specified
[  240.694185][T13361] netlink: 'syz.1.2062': attribute type 32 has an invalid length.
[  242.770254][T13376] netlink: 'syz.4.2064': attribute type 1 has an invalid length.
[  242.773503][T13376] __nla_validate_parse: 4 callbacks suppressed
[  242.773515][T13376] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2064'.
[  242.797490][T13378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2065'.
[  242.959767][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2067'.
[  243.115913][T13396] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  243.121716][T13396] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  243.145615][T13396] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  243.174046][ T9478] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  243.179295][ T9478] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  243.183973][ T9478] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  243.195782][ T9478] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  243.199675][ T9478] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  243.218316][T13405] netlink: 'syz.1.2072': attribute type 32 has an invalid length.
[  243.271279][T13401] lo speed is unknown, defaulting to 1000
[  243.522159][T13401] chnl_net:caif_netlink_parms(): no params data found
[  243.657258][T13401] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.664060][T13401] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.675582][T13401] bridge_slave_0: entered allmulticast mode
[  243.686769][T13401] bridge_slave_0: entered promiscuous mode
[  243.691548][T13401] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.695022][T13401] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.698101][T13401] bridge_slave_1: entered allmulticast mode
[  243.709404][T13401] bridge_slave_1: entered promiscuous mode
[  243.741735][T13401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  243.756291][T13401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  243.833319][T13401] team0: Port device team_slave_0 added
[  243.835871][T13422] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  243.849694][T13421] netlink: 'syz.1.2074': attribute type 1 has an invalid length.
[  243.852686][T13421] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2074'.
[  243.859568][T13401] team0: Port device team_slave_1 added
[  243.929274][T13427] SET target dimension over the limit!
[  243.935456][T13401] batman_adv: batadv0: Adding interface: batadv_slave_0
[  243.938411][T13401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.945704][T13428] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2075'.
[  243.952385][T13401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  243.955940][T13425] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2075'.
[  243.959146][T13428] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2075'.
[  243.963626][T13401] batman_adv: batadv0: Adding interface: batadv_slave_1
[  243.966093][T13401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.974885][T13401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  244.034295][T13431] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2077'.
[  244.090872][T13438] netlink: 'syz.1.2079': attribute type 32 has an invalid length.
[  244.102964][T13431] syzkaller0: entered promiscuous mode
[  244.120087][T13431] syzkaller0: entered allmulticast mode
[  244.139788][T13401] hsr_slave_0: entered promiscuous mode
[  244.144212][T13401] hsr_slave_1: entered promiscuous mode
[  244.151479][T13401] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  244.154011][T13401] Cannot create hsr debugfs directory
[  244.601312][T13466] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  245.276438][ T9478] Bluetooth: hci3: command tx timeout
[  245.642662][T13466] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2084'.
[  245.743865][T13473] netlink: 'syz.1.2086': attribute type 32 has an invalid length.
[  245.806579][T13401] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.894103][T13401] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.999117][T13401] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.068067][T13496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2090'.
[  246.091112][T13401] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.269102][T13505] wireguard0: entered promiscuous mode
[  246.270964][T13505] wireguard0: entered allmulticast mode
[  246.361581][T13401] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  246.371392][T13401] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  246.381057][T13401] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  246.401852][T13511] netlink: 'syz.4.2094': attribute type 32 has an invalid length.
[  246.409492][T13401] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  246.584065][T13401] 8021q: adding VLAN 0 to HW filter on device bond0
[  246.590829][T13526] lo speed is unknown, defaulting to 1000
[  246.608719][T13401] 8021q: adding VLAN 0 to HW filter on device team0
[  246.622932][ T8632] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.625446][ T8632] bridge0: port 1(bridge_slave_0) entered forwarding state
[  246.647389][ T8632] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.650010][ T8632] bridge0: port 2(bridge_slave_1) entered forwarding state
[  246.930565][T13538] syzkaller1: tun_chr_ioctl cmd 1074025677
[  246.933084][T13538] syzkaller1: linktype set to 270
[  246.944124][T13401] 8021q: adding VLAN 0 to HW filter on device batadv0
[  246.981152][T13401] veth0_vlan: entered promiscuous mode
[  247.012048][T13401] veth1_vlan: entered promiscuous mode
[  247.046479][T13401] veth0_macvtap: entered promiscuous mode
[  247.052202][T13401] veth1_macvtap: entered promiscuous mode
[  247.061877][T13401] batman_adv: batadv0: Interface activated: batadv_slave_0
[  247.087116][T13546] netlink: 'syz.4.2102': attribute type 32 has an invalid length.
[  247.092326][T13401] batman_adv: batadv0: Interface activated: batadv_slave_1
[  247.098960][T13401] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  247.101779][T13401] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  247.113722][T13401] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  247.117008][T13401] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  247.355639][ T9478] Bluetooth: hci3: command tx timeout
[  247.453629][T13558] pim6reg: left allmulticast mode
[  247.529710][T13565] ipt_REJECT: TCP_RESET invalid for non-tcp
[  247.570464][ T4278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.573072][ T4278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.627576][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.638685][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.672415][T13579] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  247.681797][T13579] gretap3: entered promiscuous mode
[  247.683506][T13579] gretap3: entered allmulticast mode
[  247.773727][T13588] netlink: 'syz.1.2111': attribute type 1 has an invalid length.
[  247.776393][T13588] __nla_validate_parse: 4 callbacks suppressed
[  247.776401][T13588] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2111'.
[  247.781465][T13588] netlink: 'syz.1.2111': attribute type 1 has an invalid length.
[  247.784148][T13587] netlink: 'syz.1.2111': attribute type 1 has an invalid length.
[  247.788065][T13587] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2111'.
[  247.791698][T13587] netlink: 'syz.1.2111': attribute type 1 has an invalid length.
[  247.851519][T13596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2112'.
[  247.963631][T13604] netlink: 'syz.4.2115': attribute type 39 has an invalid length.
[  248.213525][T13607] netlink: 'syz.4.2116': attribute type 32 has an invalid length.
[  248.502931][T13631] openvswitch: netlink: Flow key attribute not present in set flow.
[  248.505887][T13634] netlink: 'syz.4.2123': attribute type 32 has an invalid length.
[  248.509924][T13633] openvswitch: netlink: Flow key attribute not present in set flow.
[  250.795011][T13646] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2125'.
[  250.831970][T13646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2125'.
[  250.968469][T13650] netlink: 'syz.1.2127': attribute type 5 has an invalid length.
[  251.031581][ T5205] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  251.037132][ T5205] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  251.041836][ T5205] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  251.054281][ T5205] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  251.065655][ T5205] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  251.104273][T13651] lo speed is unknown, defaulting to 1000
[  251.167714][T13654] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  251.499345][T13651] chnl_net:caif_netlink_parms(): no params data found
[  251.612006][T13651] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.620256][T13651] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.622832][T13651] bridge_slave_0: entered allmulticast mode
[  251.631434][T13651] bridge_slave_0: entered promiscuous mode
[  251.641251][T13651] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.643659][T13651] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.649045][T13651] bridge_slave_1: entered allmulticast mode
[  251.657997][T13651] bridge_slave_1: entered promiscuous mode
[  251.727100][T13651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  251.736397][T13651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  251.779408][T13651] team0: Port device team_slave_0 added
[  251.803483][ T9478] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  251.815267][ T9478] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  251.822889][T13651] team0: Port device team_slave_1 added
[  251.825001][ T9478] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  251.828990][ T9478] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  251.831931][ T9478] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  251.858248][T13665] netlink: 'syz.1.2130': attribute type 32 has an invalid length.
[  251.886994][T13651] batman_adv: batadv0: Adding interface: batadv_slave_0
[  251.889311][T13651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.911530][T13651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  251.937770][T13662] lo speed is unknown, defaulting to 1000
[  251.950197][T13651] batman_adv: batadv0: Adding interface: batadv_slave_1
[  251.954762][T13651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.973655][T13651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  252.053666][T13651] hsr_slave_0: entered promiscuous mode
[  252.058469][T13651] hsr_slave_1: entered promiscuous mode
[  252.065492][T13651] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  252.070356][T13651] Cannot create hsr debugfs directory
[  252.136385][T13674] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2131'.
[  252.320596][T13651] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.334121][T13681] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2134'.
[  252.342143][T13681] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  252.438912][T13651] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.537033][T13651] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.551088][T13662] chnl_net:caif_netlink_parms(): no params data found
[  252.556197][T13689] netlink: 'syz.1.2137': attribute type 29 has an invalid length.
[  252.648339][T13651] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.648425][T13692] netlink: 'syz.1.2138': attribute type 32 has an invalid length.
[  252.700400][T13662] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.703631][T13662] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.721143][T13662] bridge_slave_0: entered allmulticast mode
[  252.725947][T13662] bridge_slave_0: entered promiscuous mode
[  252.734179][T13662] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.737943][T13662] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.741270][T13662] bridge_slave_1: entered allmulticast mode
[  252.747489][T13662] bridge_slave_1: entered promiscuous mode
[  252.851635][T13662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  252.901585][T13662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  252.988095][T13662] team0: Port device team_slave_0 added
[  253.005689][T13662] team0: Port device team_slave_1 added
[  253.032670][T13651] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  253.067389][T13651] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  253.074785][T13708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2140'.
[  253.079117][T13651] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  253.084062][T13662] batman_adv: batadv0: Adding interface: batadv_slave_0
[  253.092060][T13662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.103201][T13662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  253.107401][ T9478] Bluetooth: hci3: command tx timeout
[  253.112167][T13662] batman_adv: batadv0: Adding interface: batadv_slave_1
[  253.115298][T13662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.131411][T13662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  253.144733][T13651] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  253.209167][T13662] hsr_slave_0: entered promiscuous mode
[  253.213366][T13662] hsr_slave_1: entered promiscuous mode
[  253.216630][T13662] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  253.219177][T13662] Cannot create hsr debugfs directory
[  253.384306][T13722] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2142'.
[  253.388135][T13722] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2142'.
[  253.398054][T13722] netlink: 'syz.1.2142': attribute type 1 has an invalid length.
[  253.451130][T13722] bond17: (slave gretap4): making interface the new active one
[  253.454604][T13722] bond17: (slave gretap4): Enslaving as an active interface with an up link
[  253.631737][T13651] 8021q: adding VLAN 0 to HW filter on device bond0
[  253.726337][T13662] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.767707][T13651] 8021q: adding VLAN 0 to HW filter on device team0
[  253.787626][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.790764][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  253.848639][T13662] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.861895][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[  253.865150][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[  253.902338][T13651] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  253.908625][   T34] INFO: task kworker/u8:1:13 blocked for more than 143 seconds.
[  253.909114][ T9478] Bluetooth: hci4: command tx timeout
[  253.911863][   T34]       Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0
[  253.911876][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  253.911883][   T34] task:kworker/u8:1    state:D
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  253.924170][T13651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  253.964684][   T34]  stack:23480 pid:13    tgid:13    ppid:2      task_flags:0x4208060 flags:0x00004000
[  253.968765][   T34] Workqueue: netns cleanup_net
[  253.970777][   T34] Call Trace:
[  253.972173][   T34]  <TASK>
[  253.973445][   T34]  __schedule+0x16f5/0x4d00
[  254.005163][   T34]  ? __lock_acquire+0xab9/0xd20
[  254.007275][   T34]  ? schedule+0x165/0x360
[  254.009114][   T34]  ? __pfx___schedule+0x10/0x10
[  254.011165][   T34]  ? schedule+0x91/0x360
[  254.013028][   T34]  schedule+0x165/0x360
[  254.035172][   T34]  schedule_preempt_disabled+0x13/0x30
[  254.037565][   T34]  __mutex_lock+0x724/0xe80
[  254.039558][   T34]  ? __mutex_lock+0x51b/0xe80
[  254.041567][   T34]  ? rdma_dev_change_netns+0x39/0x300
[  254.084842][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  254.087121][   T34]  ? kasan_quarantine_put+0xdd/0x220
[  254.089279][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.091364][   T34]  ? kobject_put+0x270/0x480
[  254.093304][   T34]  ? kfree+0x18e/0x440
[  254.104514][   T34]  rdma_dev_change_netns+0x39/0x300
[  254.106695][   T34]  rdma_dev_exit_net+0x203/0x340
[  254.108730][   T34]  ? __pfx___might_resched+0x10/0x10
[  254.110954][   T34]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  254.113196][   T34]  ? net_generic+0x1e/0x240
[  254.151752][   T34]  ? mutex_is_locked+0x17/0x50
[  254.153835][   T34]  ? rtnl_is_locked+0x15/0x20
[  254.155865][   T34]  ops_undo_list+0x49a/0x990
[  254.157796][   T34]  ? __pfx_ops_undo_list+0x10/0x10
[  254.159982][   T34]  cleanup_net+0x4c5/0x800
[  254.161838][   T34]  ? __pfx_cleanup_net+0x10/0x10
[  254.163883][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  254.185114][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  254.187634][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  254.190074][   T34]  process_scheduled_works+0xae1/0x17b0
[  254.192395][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  254.199294][   T34]  worker_thread+0x8a0/0xda0
[  254.201256][   T34]  kthread+0x711/0x8a0
[  254.202986][   T34]  ? __pfx_worker_thread+0x10/0x10
[  254.206184][   T34]  ? __pfx_kthread+0x10/0x10
[  254.208164][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  254.210379][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.212568][   T34]  ? __pfx_kthread+0x10/0x10
[  254.215056][   T34]  ret_from_fork+0x3fc/0x770
[  254.216949][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  254.218829][   T34]  ? __switch_to_asm+0x39/0x70
[  254.220869][   T34]  ? __switch_to_asm+0x33/0x70
[  254.222832][   T34]  ? __pfx_kthread+0x10/0x10
[  254.225716][   T34]  ret_from_fork_asm+0x1a/0x30
[  254.227755][   T34]  </TASK>
[  254.238290][   T34] INFO: task syz.2.691:8276 blocked for more than 143 seconds.
[  254.241149][   T34]       Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0
[  254.244230][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  254.266012][   T34] task:syz.2.691       state:D stack:22808 pid:8276  tgid:8274  ppid:5821   task_flags:0x400140 flags:0x00004006
[  254.270883][   T34] Call Trace:
[  254.272291][   T34]  <TASK>
[  254.273494][   T34]  __schedule+0x16f5/0x4d00
[  254.275424][   T34]  ? schedule+0x165/0x360
[  254.277184][   T34]  ? __lock_acquire+0xab9/0xd20
[  254.278902][   T34]  ? __pfx___schedule+0x10/0x10
[  254.280614][   T34]  ? schedule+0x91/0x360
[  254.282242][   T34]  schedule+0x165/0x360
[  254.283919][   T34]  schedule_timeout+0x9a/0x270
[  254.286170][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  254.288319][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  254.290404][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.292323][   T34]  ? wait_for_completion+0x267/0x5d0
[  254.294605][   T34]  wait_for_completion+0x2bf/0x5d0
[  254.296260][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  254.298165][   T34]  ? remove_client_context+0x19c/0x1e0
[  254.299941][   T34]  disable_device+0x1c6/0x320
[  254.301840][   T34]  ? __pfx_disable_device+0x10/0x10
[  254.303623][   T34]  __ib_unregister_device+0x2cb/0x3f0
[  254.305605][   T34]  ? __pfx_ib_device_get_by_index+0x10/0x10
[  254.307501][   T34]  ib_unregister_device_and_put+0xb8/0xf0
[  254.309402][   T34]  nldev_dellink+0x2d1/0x320
[  254.310888][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  254.312598][   T34]  ? rcu_is_watching+0x15/0xb0
[  254.314997][   T34]  ? apparmor_capable+0x137/0x1b0
[  254.317500][   T34]  ? bpf_lsm_capable+0x9/0x20
[  254.319258][   T34]  ? security_capable+0x7e/0x2e0
[  254.321180][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  254.323236][   T34]  rdma_nl_rcv+0x6ae/0x980
[  254.325969][   T34]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  254.328002][   T34]  ? __lock_acquire+0xab9/0xd20
[  254.329698][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  254.331346][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  254.333386][   T34]  netlink_unicast+0x75b/0x8d0
[  254.335434][   T34]  netlink_sendmsg+0x805/0xb30
[  254.337475][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  254.339587][   T34]  ? aa_sock_msg_perm+0x94/0x160
[  254.341650][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  254.343781][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  254.346020][   T34]  __sock_sendmsg+0x21c/0x270
[  254.347581][   T34]  ____sys_sendmsg+0x505/0x830
[  254.349354][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  254.354021][   T34]  ? import_iovec+0x74/0xa0
[  254.355687][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  254.357362][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  254.359101][   T34]  ? __fget_files+0x2a/0x420
[  254.360797][   T34]  ? __fget_files+0x3a0/0x420
[  254.362769][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  254.365176][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  254.367008][   T34]  ? rcu_is_watching+0x15/0xb0
[  254.368555][   T34]  ? do_syscall_64+0xbe/0x3b0
[  254.370163][   T34]  do_syscall_64+0xfa/0x3b0
[  254.371696][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.373387][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.375584][   T34]  ? exc_page_fault+0x9f/0xf0
[  254.377492][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.379826][   T34] RIP: 0033:0x7f295db8e929
[  254.381589][   T34] RSP: 002b:00007f295ea15038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  254.386418][   T34] RAX: ffffffffffffffda RBX: 00007f295ddb6080 RCX: 00007f295db8e929
[  254.389168][   T34] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009
[  254.392094][   T34] RBP: 00007f295dc10b39 R08: 0000000000000000 R09: 0000000000000000
[  254.399381][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  254.401999][   T34] R13: 0000000000000000 R14: 00007f295ddb6080 R15: 00007ffc39cdb408
[  254.404973][   T34]  </TASK>
[  254.408673][T13662] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.414247][   T34] 
[  254.414247][   T34] Showing all locks held in the system:
[  254.430821][   T34] 2 locks held by kworker/u8:0/12:
[  254.432592][   T34] 4 locks held by kworker/u8:1/13:
[  254.434313][   T34]  #0: ffff88801b2f6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  254.439103][   T34]  #1: ffffc90000107bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  254.442525][   T34]  #2: ffffffff8f5034d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  254.446273][   T34]  #3: ffff88802b7286d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  254.449898][   T34] 1 lock held by khungtaskd/34:
[  254.451464][   T34]  #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  254.458551][   T34] 2 locks held by getty/5642:
[  254.460150][   T34]  #0: ffff88810dbc10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  254.463443][   T34]  #1: ffffc900025c62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  254.468460][   T34] 3 locks held by kworker/1:3/5862:
[  254.470184][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  254.473830][   T34]  #1: ffffc9000479fbc0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  254.478707][   T34]  #2: ffff8881298d7240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x26b/0x3180
[  254.482456][   T34] 2 locks held by syz.2.691/8276:
[  254.485297][   T34]  #0: ffffffff99e41b18 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980
[  254.488679][   T34]  #1: ffff88802b7286d0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  254.492497][   T34] 2 locks held by syz.0.1378/10928:
[  254.494257][   T34]  #0: ffffffff8f5034d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  254.497536][   T34]  #1: ffff88802b7286d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  254.501239][   T34] 1 lock held by syz-executor/13651:
[  254.503000][   T34]  #0: ffffffff8e144978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  254.506842][   T34] 7 locks held by syz-executor/13662:
[  254.508612][   T34]  #0: ffff88802a1ba428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  254.511539][   T34]  #1: ffff8881059f4c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  254.514765][   T34]  #2: ffff888021f8e1e8 (kn->active#48){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  254.518070][   T34]  #3: ffffffff8edaac88 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  254.521284][   T34]  #4: ffff88810a4000e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0
[  254.524746][   T34]  #5: ffff88810a403250 (&devlink->lock_key#19){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160
[  254.528078][   T34]  #6: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  254.531419][   T34] 
[  254.537213][   T34] =============================================
[  254.537213][   T34] 
[  254.539972][   T34] NMI backtrace for cpu 0
[  254.539982][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  254.539992][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  254.539997][   T34] Call Trace:
[  254.540001][   T34]  <TASK>
[  254.540004][   T34]  dump_stack_lvl+0x189/0x250
[  254.540020][   T34]  ? __wake_up_klogd+0xd9/0x110
[  254.540031][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  254.540041][   T34]  ? __pfx__printk+0x10/0x10
[  254.540056][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  254.540068][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  254.540076][   T34]  ? _printk+0xcf/0x120
[  254.540084][   T34]  ? __pfx__printk+0x10/0x10
[  254.540092][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  254.540104][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  254.540114][   T34]  watchdog+0xfee/0x1030
[  254.540125][   T34]  ? watchdog+0x1de/0x1030
[  254.540137][   T34]  kthread+0x711/0x8a0
[  254.540146][   T34]  ? __pfx_watchdog+0x10/0x10
[  254.540155][   T34]  ? __pfx_kthread+0x10/0x10
[  254.540163][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  254.540173][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.540183][   T34]  ? __pfx_kthread+0x10/0x10
[  254.540191][   T34]  ret_from_fork+0x3fc/0x770
[  254.540203][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  254.540214][   T34]  ? __switch_to_asm+0x39/0x70
[  254.540221][   T34]  ? __switch_to_asm+0x33/0x70
[  254.540228][   T34]  ? __pfx_kthread+0x10/0x10
[  254.540241][   T34]  ret_from_fork_asm+0x1a/0x30
[  254.540260][   T34]  </TASK>
[  254.540264][   T34] Sending NMI from CPU 0 to CPUs 1:
[  254.600752][    C1] NMI backtrace for cpu 1
[  254.600765][    C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  254.600775][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  254.600780][    C1] Workqueue: bat_events batadv_tt_purge
[  254.600797][    C1] RIP: 0010:check_preemption_disabled+0x59/0x120
[  254.600830][    C1] Code: 8b 0d 1b 2e 36 07 48 3b 4c 24 08 0f 85 cc 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d e9 81 c0 02 00 cc 48 c7 04 24 00 00 00 00 9c <8f> 04 24 f7 04 24 00 02 00 00 74 c8 65 4c 8b 3c 25 08 00 9d 92 41
[  254.600836][    C1] RSP: 0018:ffffc900000f7840 EFLAGS: 00000046
[  254.600843][    C1] RAX: 0000000000000001 RBX: ffff88801c2ed640 RCX: 0000000080000000
[  254.600848][    C1] RDX: 0000000000000006 RSI: ffffffff8db6f052 RDI: ffffffff8be28d40
[  254.600852][    C1] RBP: ffffc900000f7958 R08: ffffffff8fa10df7 R09: 1ffffffff1f421be
[  254.600856][    C1] R10: dffffc0000000000 R11: fffffbfff1f421bf R12: ffff88801c2ee180
[  254.600861][    C1] R13: dffffc0000000000 R14: ffff88801c2ee180 R15: 0000000000000002
[  254.600866][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[  254.600871][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  254.600876][    C1] CR2: 00007fd7770e56c0 CR3: 000000000df38000 CR4: 00000000000006f0
[  254.600901][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  254.600907][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  254.600911][    C1] Call Trace:
[  254.600914][    C1]  <TASK>
[  254.600919][    C1]  lockdep_hardirqs_on_prepare+0x1b4/0x2a0
[  254.600932][    C1]  ? batadv_tt_local_purge+0x2a7/0x340
[  254.600940][    C1]  trace_hardirqs_on+0x28/0x40
[  254.600948][    C1]  __local_bh_enable_ip+0x12d/0x1c0
[  254.600959][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  254.600968][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  254.600975][    C1]  ? batadv_tt_local_purge+0x2a7/0x340
[  254.600984][    C1]  batadv_tt_local_purge+0x2a7/0x340
[  254.600994][    C1]  batadv_tt_purge+0x35/0x9e0
[  254.601003][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  254.601011][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  254.601021][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  254.601030][    C1]  process_scheduled_works+0xae1/0x17b0
[  254.601043][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  254.601055][    C1]  worker_thread+0x8a0/0xda0
[  254.601067][    C1]  kthread+0x711/0x8a0
[  254.601076][    C1]  ? __pfx_worker_thread+0x10/0x10
[  254.601089][    C1]  ? __pfx_kthread+0x10/0x10
[  254.601099][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  254.601109][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.601128][    C1]  ? __pfx_kthread+0x10/0x10
[  254.601138][    C1]  ret_from_fork+0x3fc/0x770
[  254.601152][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  254.601163][    C1]  ? __switch_to_asm+0x39/0x70
[  254.601171][    C1]  ? __switch_to_asm+0x33/0x70
[  254.601177][    C1]  ? __pfx_kthread+0x10/0x10
[  254.601184][    C1]  ret_from_fork_asm+0x1a/0x30
[  254.601193][    C1]  </TASK>
[  254.706721][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  254.709394][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  254.713767][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  254.717135][   T34] Call Trace:
[  254.718237][   T34]  <TASK>
[  254.719205][   T34]  dump_stack_lvl+0x99/0x250
[  254.720712][   T34]  ? __asan_memcpy+0x40/0x70
[  254.722264][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  254.723995][   T34]  ? __pfx__printk+0x10/0x10
[  254.725545][   T34]  panic+0x2db/0x790
[  254.726892][   T34]  ? __pfx_panic+0x10/0x10
[  254.728381][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  254.730309][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  254.732008][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  254.734026][   T34]  watchdog+0x102d/0x1030
[  254.735443][   T34]  ? watchdog+0x1de/0x1030
[  254.736948][   T34]  kthread+0x711/0x8a0
[  254.738306][   T34]  ? __pfx_watchdog+0x10/0x10
[  254.739867][   T34]  ? __pfx_kthread+0x10/0x10
[  254.741400][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  254.743117][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.744849][   T34]  ? __pfx_kthread+0x10/0x10
[  254.746384][   T34]  ret_from_fork+0x3fc/0x770
[  254.747938][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  254.749572][   T34]  ? __switch_to_asm+0x39/0x70
[  254.751102][   T34]  ? __switch_to_asm+0x33/0x70
[  254.752685][   T34]  ? __pfx_kthread+0x10/0x10
[  254.754234][   T34]  ret_from_fork_asm+0x1a/0x30
[  254.755994][   T34]  </TASK>
[  254.757772][   T34] Kernel Offset: disabled
[  254.759207][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:57:55  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=00000000000003fd RCX=0000000000000008 RDX=0000000000000008
RSI=00000000000003fd RDI=ffff888109eb8000 RBP=ffffffff93503760 RSP=ffffc900048ef620
R8 =ffffc900048ef5e8 R9 =0000000000000020 R10=dffffc0000000000 R11=ffffffff819e9310
R12=ffffffff935036c8 R13=ffffffff96438b48 R14=ffff888109eb8b90 R15=0000000000000189
RIP=ffffffff819e770f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5b22fffffc CR3=00000000464f2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0800010000080806 0a010bb01fffffff
XMM02=ffdf081080030c80 0417800422080000 XMM03=735f766461746162 01ffffffffffffff
XMM04=0000080606013ae6 0000315f6576616c XMM05=0110800404a6c208 0001000000080606
XMM06=013ae60000315f65 76616c735f766461 XMM07=74616201ffffffff ffffffffdf081080
XMM08=030c800417800422 0800000800010000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f610
R8 =ffff888107f30237 R9 =1ffff11020fe6046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48d4 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd7770e56c0 CR3=000000011e152000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000100000001 0000003100000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000ff000000 000000ff00000000 XMM05=0000000000000000 00007efd42611b1f
XMM06=0000000000000000 00007efd42611b19 XMM07=0000000000000000 00007efd42611b2d
XMM08=0000000000000000 00007efd42611bb3 XMM09=0000000000000000 00007efd42611c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
