last executing test programs:

1m0.453685969s ago: executing program 2 (id=869):
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') (async)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00')
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$inet6(0xa, 0x3, 0x8b)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r3, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000a00)="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", 0x115}], 0x1}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000840)="4dd5bb8215b36e6f1f123a85931b9615c01b2c", 0x13}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f80)="a290", 0x2}], 0x1}}], 0x3, 0x8010) (async)
sendmmsg$inet(r3, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000a00)="3912c1d03d9f66103940872256d8995b00c720af0cfa51b2b3b1448411fe107e64af467c85a200ebafdbee2c35b8ad1677fe7bb27ca22acbe83c449484972354b3baa1809633e690474a9154f95bd6874f20a0b290c590d44a9f5cd01414544ad719b82a550f2a7215e33e2dfdc1ce61a75637323b8828c5e5ef1f77b3d93114d46ceddb9d976eea7e20bb95e24e1e8b9974397bb8d73856a38618eac0ab333267fc833503b4df7838f5e522192252f4fd72ae45d21b55414a82ec84ff620a1ee2fe4691573a8afc79adaac5f0618cb457b14013f9e048cdec329a9e3343140213a41330b43e3290ef836c8839b303f0639a7561361247db2646977014051dcf3dc1246225f9aae3ca02943571bb39ecfdfa5b9ebc", 0x115}], 0x1}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000840)="4dd5bb8215b36e6f1f123a85931b9615c01b2c", 0x13}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f80)="a290", 0x2}], 0x1}}], 0x3, 0x8010)
shutdown(r3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000840)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x81, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0xfffffffffffffffc, 0x0, 0x5}, 0x4, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2d}, 0x0, 0x6c}, 0xa, @in6=@local, 0x3502, 0x1, 0x8, 0x0, 0x9075, 0x0, 0x9}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c)
ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
socket(0x10, 0x2, 0x0) (async)
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x7d, 0xfe, 0xfffffff8, 0x0, @mcast1, @loopback={0x29, 0x460c6}, 0x700, 0x8, 0xfffffffd}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400fb19010101010000000000000000020000002400018014000180080001007efff30108000200000000000c000280050001000100000008000000000000000d000000"], 0x44}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400fb19010101010000000000000000020000002400018014000180080001007efff30108000200000000000c000280050001000100000008000000000000000d000000"], 0x44}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r6, @ANYBLOB="21012cbd7000000000001400000008000300", @ANYRES32=r8, @ANYRES64=r6, @ANYRESDEC=r5, @ANYRESHEX=r5], 0x2c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000026f67a426aa0a98512fb6595ce107f07c72886850bab64b7e7d602bb6be7e19aae91912801d3bb19c011ae31", @ANYRES16=r6, @ANYBLOB="020025bd7000fcdbdf258100000008000300", @ANYRES32=r9, @ANYBLOB="0c009900030000001300000006006600040000000400670004006700040067000600660010000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) (async)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000026f67a426aa0a98512fb6595ce107f07c72886850bab64b7e7d602bb6be7e19aae91912801d3bb19c011ae31", @ANYRES16=r6, @ANYBLOB="020025bd7000fcdbdf258100000008000300", @ANYRES32=r9, @ANYBLOB="0c009900030000001300000006006600040000000400670004006700040067000600660010000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4008800)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010001fff220000000100000000000000eaac835ba49159b1b0471b40415175139482df34ab", @ANYRES32=0x0, @ANYBLOB="8000000000000000240012800b000100677265746170000014000280060010004e21000006000f0005000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x2) (async)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010001fff220000000100000000000000eaac835ba49159b1b0471b40415175139482df34ab", @ANYRES32=0x0, @ANYBLOB="8000000000000000240012800b000100677265746170000014000280060010004e21000006000f0005000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r11, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

54.455167459s ago: executing program 2 (id=869):
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') (async)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00')
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$inet6(0xa, 0x3, 0x8b)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r3, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000a00)="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", 0x115}], 0x1}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000840)="4dd5bb8215b36e6f1f123a85931b9615c01b2c", 0x13}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f80)="a290", 0x2}], 0x1}}], 0x3, 0x8010) (async)
sendmmsg$inet(r3, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000a00)="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", 0x115}], 0x1}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000840)="4dd5bb8215b36e6f1f123a85931b9615c01b2c", 0x13}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f80)="a290", 0x2}], 0x1}}], 0x3, 0x8010)
shutdown(r3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000840)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x81, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0xfffffffffffffffc, 0x0, 0x5}, 0x4, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2d}, 0x0, 0x6c}, 0xa, @in6=@local, 0x3502, 0x1, 0x8, 0x0, 0x9075, 0x0, 0x9}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c)
ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
socket(0x10, 0x2, 0x0) (async)
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x7d, 0xfe, 0xfffffff8, 0x0, @mcast1, @loopback={0x29, 0x460c6}, 0x700, 0x8, 0xfffffffd}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400fb19010101010000000000000000020000002400018014000180080001007efff30108000200000000000c000280050001000100000008000000000000000d000000"], 0x44}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400fb19010101010000000000000000020000002400018014000180080001007efff30108000200000000000c000280050001000100000008000000000000000d000000"], 0x44}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r6, @ANYBLOB="21012cbd7000000000001400000008000300", @ANYRES32=r8, @ANYRES64=r6, @ANYRESDEC=r5, @ANYRESHEX=r5], 0x2c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000026f67a426aa0a98512fb6595ce107f07c72886850bab64b7e7d602bb6be7e19aae91912801d3bb19c011ae31", @ANYRES16=r6, @ANYBLOB="020025bd7000fcdbdf258100000008000300", @ANYRES32=r9, @ANYBLOB="0c009900030000001300000006006600040000000400670004006700040067000600660010000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) (async)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000026f67a426aa0a98512fb6595ce107f07c72886850bab64b7e7d602bb6be7e19aae91912801d3bb19c011ae31", @ANYRES16=r6, @ANYBLOB="020025bd7000fcdbdf258100000008000300", @ANYRES32=r9, @ANYBLOB="0c009900030000001300000006006600040000000400670004006700040067000600660010000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4008800)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010001fff220000000100000000000000eaac835ba49159b1b0471b40415175139482df34ab", @ANYRES32=0x0, @ANYBLOB="8000000000000000240012800b000100677265746170000014000280060010004e21000006000f0005000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x2) (async)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010001fff220000000100000000000000eaac835ba49159b1b0471b40415175139482df34ab", @ANYRES32=0x0, @ANYBLOB="8000000000000000240012800b000100677265746170000014000280060010004e21000006000f0005000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r11, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

48.234868478s ago: executing program 2 (id=869):
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') (async)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00')
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$inet6(0xa, 0x3, 0x8b)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r3, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000a00)="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", 0x115}], 0x1}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000840)="4dd5bb8215b36e6f1f123a85931b9615c01b2c", 0x13}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f80)="a290", 0x2}], 0x1}}], 0x3, 0x8010) (async)
sendmmsg$inet(r3, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000a00)="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", 0x115}], 0x1}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000840)="4dd5bb8215b36e6f1f123a85931b9615c01b2c", 0x13}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f80)="a290", 0x2}], 0x1}}], 0x3, 0x8010)
shutdown(r3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000840)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x81, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0xfffffffffffffffc, 0x0, 0x5}, 0x4, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2d}, 0x0, 0x6c}, 0xa, @in6=@local, 0x3502, 0x1, 0x8, 0x0, 0x9075, 0x0, 0x9}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c)
ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
socket(0x10, 0x2, 0x0) (async)
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x7d, 0xfe, 0xfffffff8, 0x0, @mcast1, @loopback={0x29, 0x460c6}, 0x700, 0x8, 0xfffffffd}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400fb19010101010000000000000000020000002400018014000180080001007efff30108000200000000000c000280050001000100000008000000000000000d000000"], 0x44}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400fb19010101010000000000000000020000002400018014000180080001007efff30108000200000000000c000280050001000100000008000000000000000d000000"], 0x44}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r6, @ANYBLOB="21012cbd7000000000001400000008000300", @ANYRES32=r8, @ANYRES64=r6, @ANYRESDEC=r5, @ANYRESHEX=r5], 0x2c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000026f67a426aa0a98512fb6595ce107f07c72886850bab64b7e7d602bb6be7e19aae91912801d3bb19c011ae31", @ANYRES16=r6, @ANYBLOB="020025bd7000fcdbdf258100000008000300", @ANYRES32=r9, @ANYBLOB="0c009900030000001300000006006600040000000400670004006700040067000600660010000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) (async)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000026f67a426aa0a98512fb6595ce107f07c72886850bab64b7e7d602bb6be7e19aae91912801d3bb19c011ae31", @ANYRES16=r6, @ANYBLOB="020025bd7000fcdbdf258100000008000300", @ANYRES32=r9, @ANYBLOB="0c009900030000001300000006006600040000000400670004006700040067000600660010000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4008800)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010001fff220000000100000000000000eaac835ba49159b1b0471b40415175139482df34ab", @ANYRES32=0x0, @ANYBLOB="8000000000000000240012800b000100677265746170000014000280060010004e21000006000f0005000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x2) (async)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010001fff220000000100000000000000eaac835ba49159b1b0471b40415175139482df34ab", @ANYRES32=0x0, @ANYBLOB="8000000000000000240012800b000100677265746170000014000280060010004e21000006000f0005000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r11, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

42.464457423s ago: executing program 2 (id=869):
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') (async)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00')
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$inet6(0xa, 0x3, 0x8b)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r3, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000a00)="3912c1d03d9f66103940872256d8995b00c720af0cfa51b2b3b1448411fe107e64af467c85a200ebafdbee2c35b8ad1677fe7bb27ca22acbe83c449484972354b3baa1809633e690474a9154f95bd6874f20a0b290c590d44a9f5cd01414544ad719b82a550f2a7215e33e2dfdc1ce61a75637323b8828c5e5ef1f77b3d93114d46ceddb9d976eea7e20bb95e24e1e8b9974397bb8d73856a38618eac0ab333267fc833503b4df7838f5e522192252f4fd72ae45d21b55414a82ec84ff620a1ee2fe4691573a8afc79adaac5f0618cb457b14013f9e048cdec329a9e3343140213a41330b43e3290ef836c8839b303f0639a7561361247db2646977014051dcf3dc1246225f9aae3ca02943571bb39ecfdfa5b9ebc", 0x115}], 0x1}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000840)="4dd5bb8215b36e6f1f123a85931b9615c01b2c", 0x13}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f80)="a290", 0x2}], 0x1}}], 0x3, 0x8010) (async)
sendmmsg$inet(r3, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000a00)="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", 0x115}], 0x1}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000840)="4dd5bb8215b36e6f1f123a85931b9615c01b2c", 0x13}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f80)="a290", 0x2}], 0x1}}], 0x3, 0x8010)
shutdown(r3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000840)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x81, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0xfffffffffffffffc, 0x0, 0x5}, 0x4, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2d}, 0x0, 0x6c}, 0xa, @in6=@local, 0x3502, 0x1, 0x8, 0x0, 0x9075, 0x0, 0x9}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c)
ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
socket(0x10, 0x2, 0x0) (async)
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x7d, 0xfe, 0xfffffff8, 0x0, @mcast1, @loopback={0x29, 0x460c6}, 0x700, 0x8, 0xfffffffd}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400fb19010101010000000000000000020000002400018014000180080001007efff30108000200000000000c000280050001000100000008000000000000000d000000"], 0x44}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400fb19010101010000000000000000020000002400018014000180080001007efff30108000200000000000c000280050001000100000008000000000000000d000000"], 0x44}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r6, @ANYBLOB="21012cbd7000000000001400000008000300", @ANYRES32=r8, @ANYRES64=r6, @ANYRESDEC=r5, @ANYRESHEX=r5], 0x2c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000026f67a426aa0a98512fb6595ce107f07c72886850bab64b7e7d602bb6be7e19aae91912801d3bb19c011ae31", @ANYRES16=r6, @ANYBLOB="020025bd7000fcdbdf258100000008000300", @ANYRES32=r9, @ANYBLOB="0c009900030000001300000006006600040000000400670004006700040067000600660010000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) (async)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000026f67a426aa0a98512fb6595ce107f07c72886850bab64b7e7d602bb6be7e19aae91912801d3bb19c011ae31", @ANYRES16=r6, @ANYBLOB="020025bd7000fcdbdf258100000008000300", @ANYRES32=r9, @ANYBLOB="0c009900030000001300000006006600040000000400670004006700040067000600660010000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4008800)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010001fff220000000100000000000000eaac835ba49159b1b0471b40415175139482df34ab", @ANYRES32=0x0, @ANYBLOB="8000000000000000240012800b000100677265746170000014000280060010004e21000006000f0005000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x2) (async)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010001fff220000000100000000000000eaac835ba49159b1b0471b40415175139482df34ab", @ANYRES32=0x0, @ANYBLOB="8000000000000000240012800b000100677265746170000014000280060010004e21000006000f0005000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r11, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

36.595957615s ago: executing program 0 (id=624):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="0c00990081000000000000002000140003000f0007000080060006000004ff010800"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc)
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$inet(r3, &(0x7f0000003540)=[{{0x0, 0x17, &(0x7f00000006c0)=[{&(0x7f00000003c0)="b792b6c728fb554a7601af023db5ef276136b78a996790fa4c613b7a5be64d5ff8c6724a4644113eca7528f78f49287997177731aa705fe1994d4c206c850bbd0482928fb1da5bbeca90a52504187d5522d0530ef99a6b258fd36536940f1ff40df9eb2e42be1545105e4bf5373fff66e0155a2c67", 0x75}, {&(0x7f0000001a80)="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", 0x22c}], 0x2}}], 0x1, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44}, [@IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000040)='ip_vti0\x00')
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a0010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfc}}, 0x2, 0x0, 0xfffffffc}}, 0x2e)
syz_emit_ethernet(0x46, &(0x7f0000000ac0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x73, 0x1, '\x00', [@ra, @ra]}]}}}}}, 0x0)
writev(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000280)="8577c28b54", 0x5}], 0x2)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))

35.569977351s ago: executing program 2 (id=869):
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') (async)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00')
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$inet6(0xa, 0x3, 0x8b)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r3, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000a00)="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", 0x115}], 0x1}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000840)="4dd5bb8215b36e6f1f123a85931b9615c01b2c", 0x13}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f80)="a290", 0x2}], 0x1}}], 0x3, 0x8010) (async)
sendmmsg$inet(r3, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000a00)="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", 0x115}], 0x1}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000840)="4dd5bb8215b36e6f1f123a85931b9615c01b2c", 0x13}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f80)="a290", 0x2}], 0x1}}], 0x3, 0x8010)
shutdown(r3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000840)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x81, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0xfffffffffffffffc, 0x0, 0x5}, 0x4, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2d}, 0x0, 0x6c}, 0xa, @in6=@local, 0x3502, 0x1, 0x8, 0x0, 0x9075, 0x0, 0x9}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c)
ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
socket(0x10, 0x2, 0x0) (async)
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x7d, 0xfe, 0xfffffff8, 0x0, @mcast1, @loopback={0x29, 0x460c6}, 0x700, 0x8, 0xfffffffd}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400fb19010101010000000000000000020000002400018014000180080001007efff30108000200000000000c000280050001000100000008000000000000000d000000"], 0x44}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400fb19010101010000000000000000020000002400018014000180080001007efff30108000200000000000c000280050001000100000008000000000000000d000000"], 0x44}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r6, @ANYBLOB="21012cbd7000000000001400000008000300", @ANYRES32=r8, @ANYRES64=r6, @ANYRESDEC=r5, @ANYRESHEX=r5], 0x2c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000026f67a426aa0a98512fb6595ce107f07c72886850bab64b7e7d602bb6be7e19aae91912801d3bb19c011ae31", @ANYRES16=r6, @ANYBLOB="020025bd7000fcdbdf258100000008000300", @ANYRES32=r9, @ANYBLOB="0c009900030000001300000006006600040000000400670004006700040067000600660010000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) (async)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000026f67a426aa0a98512fb6595ce107f07c72886850bab64b7e7d602bb6be7e19aae91912801d3bb19c011ae31", @ANYRES16=r6, @ANYBLOB="020025bd7000fcdbdf258100000008000300", @ANYRES32=r9, @ANYBLOB="0c009900030000001300000006006600040000000400670004006700040067000600660010000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4008800)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010001fff220000000100000000000000eaac835ba49159b1b0471b40415175139482df34ab", @ANYRES32=0x0, @ANYBLOB="8000000000000000240012800b000100677265746170000014000280060010004e21000006000f0005000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x2) (async)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010001fff220000000100000000000000eaac835ba49159b1b0471b40415175139482df34ab", @ANYRES32=0x0, @ANYBLOB="8000000000000000240012800b000100677265746170000014000280060010004e21000006000f0005000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r11, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

30.002395879s ago: executing program 0 (id=624):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="0c00990081000000000000002000140003000f0007000080060006000004ff010800"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc)
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$inet(r3, &(0x7f0000003540)=[{{0x0, 0x17, &(0x7f00000006c0)=[{&(0x7f00000003c0)="b792b6c728fb554a7601af023db5ef276136b78a996790fa4c613b7a5be64d5ff8c6724a4644113eca7528f78f49287997177731aa705fe1994d4c206c850bbd0482928fb1da5bbeca90a52504187d5522d0530ef99a6b258fd36536940f1ff40df9eb2e42be1545105e4bf5373fff66e0155a2c67", 0x75}, {&(0x7f0000001a80)="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", 0x22c}], 0x2}}], 0x1, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44}, [@IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000040)='ip_vti0\x00')
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a0010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfc}}, 0x2, 0x0, 0xfffffffc}}, 0x2e)
syz_emit_ethernet(0x46, &(0x7f0000000ac0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x73, 0x1, '\x00', [@ra, @ra]}]}}}}}, 0x0)
writev(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000280)="8577c28b54", 0x5}], 0x2)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))

28.853962864s ago: executing program 2 (id=869):
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') (async)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00')
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$inet6(0xa, 0x3, 0x8b)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r3, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000a00)="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", 0x115}], 0x1}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000840)="4dd5bb8215b36e6f1f123a85931b9615c01b2c", 0x13}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f80)="a290", 0x2}], 0x1}}], 0x3, 0x8010) (async)
sendmmsg$inet(r3, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000a00)="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", 0x115}], 0x1}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000840)="4dd5bb8215b36e6f1f123a85931b9615c01b2c", 0x13}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f80)="a290", 0x2}], 0x1}}], 0x3, 0x8010)
shutdown(r3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000840)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x81, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0xfffffffffffffffc, 0x0, 0x5}, 0x4, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2d}, 0x0, 0x6c}, 0xa, @in6=@local, 0x3502, 0x1, 0x8, 0x0, 0x9075, 0x0, 0x9}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c)
ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
socket(0x10, 0x2, 0x0) (async)
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x7d, 0xfe, 0xfffffff8, 0x0, @mcast1, @loopback={0x29, 0x460c6}, 0x700, 0x8, 0xfffffffd}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400fb19010101010000000000000000020000002400018014000180080001007efff30108000200000000000c000280050001000100000008000000000000000d000000"], 0x44}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400fb19010101010000000000000000020000002400018014000180080001007efff30108000200000000000c000280050001000100000008000000000000000d000000"], 0x44}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r6, @ANYBLOB="21012cbd7000000000001400000008000300", @ANYRES32=r8, @ANYRES64=r6, @ANYRESDEC=r5, @ANYRESHEX=r5], 0x2c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000026f67a426aa0a98512fb6595ce107f07c72886850bab64b7e7d602bb6be7e19aae91912801d3bb19c011ae31", @ANYRES16=r6, @ANYBLOB="020025bd7000fcdbdf258100000008000300", @ANYRES32=r9, @ANYBLOB="0c009900030000001300000006006600040000000400670004006700040067000600660010000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) (async)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000026f67a426aa0a98512fb6595ce107f07c72886850bab64b7e7d602bb6be7e19aae91912801d3bb19c011ae31", @ANYRES16=r6, @ANYBLOB="020025bd7000fcdbdf258100000008000300", @ANYRES32=r9, @ANYBLOB="0c009900030000001300000006006600040000000400670004006700040067000600660010000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4008800)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010001fff220000000100000000000000eaac835ba49159b1b0471b40415175139482df34ab", @ANYRES32=0x0, @ANYBLOB="8000000000000000240012800b000100677265746170000014000280060010004e21000006000f0005000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x2) (async)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010001fff220000000100000000000000eaac835ba49159b1b0471b40415175139482df34ab", @ANYRES32=0x0, @ANYBLOB="8000000000000000240012800b000100677265746170000014000280060010004e21000006000f0005000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r11, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

28.853822486s ago: executing program 32 (id=869):
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') (async)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00')
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$inet6(0xa, 0x3, 0x8b)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r3, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000a00)="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", 0x115}], 0x1}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000840)="4dd5bb8215b36e6f1f123a85931b9615c01b2c", 0x13}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f80)="a290", 0x2}], 0x1}}], 0x3, 0x8010) (async)
sendmmsg$inet(r3, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000a00)="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", 0x115}], 0x1}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000840)="4dd5bb8215b36e6f1f123a85931b9615c01b2c", 0x13}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f80)="a290", 0x2}], 0x1}}], 0x3, 0x8010)
shutdown(r3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000840)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x81, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0xfffffffffffffffc, 0x0, 0x5}, 0x4, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2d}, 0x0, 0x6c}, 0xa, @in6=@local, 0x3502, 0x1, 0x8, 0x0, 0x9075, 0x0, 0x9}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c)
ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
socket(0x10, 0x2, 0x0) (async)
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x7d, 0xfe, 0xfffffff8, 0x0, @mcast1, @loopback={0x29, 0x460c6}, 0x700, 0x8, 0xfffffffd}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400fb19010101010000000000000000020000002400018014000180080001007efff30108000200000000000c000280050001000100000008000000000000000d000000"], 0x44}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400fb19010101010000000000000000020000002400018014000180080001007efff30108000200000000000c000280050001000100000008000000000000000d000000"], 0x44}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r6, @ANYBLOB="21012cbd7000000000001400000008000300", @ANYRES32=r8, @ANYRES64=r6, @ANYRESDEC=r5, @ANYRESHEX=r5], 0x2c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000026f67a426aa0a98512fb6595ce107f07c72886850bab64b7e7d602bb6be7e19aae91912801d3bb19c011ae31", @ANYRES16=r6, @ANYBLOB="020025bd7000fcdbdf258100000008000300", @ANYRES32=r9, @ANYBLOB="0c009900030000001300000006006600040000000400670004006700040067000600660010000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) (async)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000026f67a426aa0a98512fb6595ce107f07c72886850bab64b7e7d602bb6be7e19aae91912801d3bb19c011ae31", @ANYRES16=r6, @ANYBLOB="020025bd7000fcdbdf258100000008000300", @ANYRES32=r9, @ANYBLOB="0c009900030000001300000006006600040000000400670004006700040067000600660010000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4008800)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010001fff220000000100000000000000eaac835ba49159b1b0471b40415175139482df34ab", @ANYRES32=0x0, @ANYBLOB="8000000000000000240012800b000100677265746170000014000280060010004e21000006000f0005000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x2) (async)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010001fff220000000100000000000000eaac835ba49159b1b0471b40415175139482df34ab", @ANYRES32=0x0, @ANYBLOB="8000000000000000240012800b000100677265746170000014000280060010004e21000006000f0005000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r11, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

22.875476485s ago: executing program 0 (id=624):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="0c00990081000000000000002000140003000f0007000080060006000004ff010800"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc)
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$inet(r3, &(0x7f0000003540)=[{{0x0, 0x17, &(0x7f00000006c0)=[{&(0x7f00000003c0)="b792b6c728fb554a7601af023db5ef276136b78a996790fa4c613b7a5be64d5ff8c6724a4644113eca7528f78f49287997177731aa705fe1994d4c206c850bbd0482928fb1da5bbeca90a52504187d5522d0530ef99a6b258fd36536940f1ff40df9eb2e42be1545105e4bf5373fff66e0155a2c67", 0x75}, {&(0x7f0000001a80)="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", 0x22c}], 0x2}}], 0x1, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44}, [@IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000040)='ip_vti0\x00')
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a0010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfc}}, 0x2, 0x0, 0xfffffffc}}, 0x2e)
syz_emit_ethernet(0x46, &(0x7f0000000ac0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x73, 0x1, '\x00', [@ra, @ra]}]}}}}}, 0x0)
writev(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000280)="8577c28b54", 0x5}], 0x2)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))

16.548155467s ago: executing program 0 (id=624):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="0c00990081000000000000002000140003000f0007000080060006000004ff010800"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc)
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$inet(r3, &(0x7f0000003540)=[{{0x0, 0x17, &(0x7f00000006c0)=[{&(0x7f00000003c0)="b792b6c728fb554a7601af023db5ef276136b78a996790fa4c613b7a5be64d5ff8c6724a4644113eca7528f78f49287997177731aa705fe1994d4c206c850bbd0482928fb1da5bbeca90a52504187d5522d0530ef99a6b258fd36536940f1ff40df9eb2e42be1545105e4bf5373fff66e0155a2c67", 0x75}, {&(0x7f0000001a80)="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", 0x22c}], 0x2}}], 0x1, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44}, [@IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000040)='ip_vti0\x00')
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a0010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfc}}, 0x2, 0x0, 0xfffffffc}}, 0x2e)
syz_emit_ethernet(0x46, &(0x7f0000000ac0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x73, 0x1, '\x00', [@ra, @ra]}]}}}}}, 0x0)
writev(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000280)="8577c28b54", 0x5}], 0x2)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))

10.457982683s ago: executing program 0 (id=624):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="0c00990081000000000000002000140003000f0007000080060006000004ff010800"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc)
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$inet(r3, &(0x7f0000003540)=[{{0x0, 0x17, &(0x7f00000006c0)=[{&(0x7f00000003c0)="b792b6c728fb554a7601af023db5ef276136b78a996790fa4c613b7a5be64d5ff8c6724a4644113eca7528f78f49287997177731aa705fe1994d4c206c850bbd0482928fb1da5bbeca90a52504187d5522d0530ef99a6b258fd36536940f1ff40df9eb2e42be1545105e4bf5373fff66e0155a2c67", 0x75}, {&(0x7f0000001a80)="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", 0x22c}], 0x2}}], 0x1, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44}, [@IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000040)='ip_vti0\x00')
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a0010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfc}}, 0x2, 0x0, 0xfffffffc}}, 0x2e)
syz_emit_ethernet(0x46, &(0x7f0000000ac0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x73, 0x1, '\x00', [@ra, @ra]}]}}}}}, 0x0)
writev(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000280)="8577c28b54", 0x5}], 0x2)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))

3.959820941s ago: executing program 0 (id=624):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="0c00990081000000000000002000140003000f0007000080060006000004ff010800"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc)
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$inet(r3, &(0x7f0000003540)=[{{0x0, 0x17, &(0x7f00000006c0)=[{&(0x7f00000003c0)="b792b6c728fb554a7601af023db5ef276136b78a996790fa4c613b7a5be64d5ff8c6724a4644113eca7528f78f49287997177731aa705fe1994d4c206c850bbd0482928fb1da5bbeca90a52504187d5522d0530ef99a6b258fd36536940f1ff40df9eb2e42be1545105e4bf5373fff66e0155a2c67", 0x75}, {&(0x7f0000001a80)="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", 0x22c}], 0x2}}], 0x1, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44}, [@IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000040)='ip_vti0\x00')
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a0010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfc}}, 0x2, 0x0, 0xfffffffc}}, 0x2e)
syz_emit_ethernet(0x46, &(0x7f0000000ac0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x73, 0x1, '\x00', [@ra, @ra]}]}}}}}, 0x0)
writev(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000280)="8577c28b54", 0x5}], 0x2)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))

2.107172027s ago: executing program 1 (id=1304):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f0000000400000004000000120000000000", @ANYRES32=0x0], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38}, 0x28)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000008000000080000009000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x48)

1.193513366s ago: executing program 1 (id=1307):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x3}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r4, &(0x7f00000001c0)="c84b1ecc52", &(0x7f0000000100)=@tcp6=r3}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20)
r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0xb, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xa4}, {0x6}]})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r7}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r8, &(0x7f0000000040)}, 0x20)
r9 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8)
close(r9)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r7)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000400)={'erspan0\x00', <r11=>0x0, 0x10, 0x8, 0x10000, 0x9, {{0x27, 0x4, 0x3, 0x37, 0x9c, 0x66, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast2, {[@ssrr={0x89, 0x13, 0xe5, [@multicast1, @loopback, @rand_addr=0x64010101, @rand_addr=0x64010100]}, @generic={0x7, 0x6, "3e1ca5c8"}, @ssrr={0x89, 0x17, 0x4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @rand_addr=0x64010102, @multicast1, @empty]}, @cipso={0x86, 0x55, 0xffffffffffffffff, [{0x0, 0x2}, {0x7, 0x9, "5fceb4125776cb"}, {0x6, 0xb, "e3592b001c545c1bf7"}, {0x7, 0x2}, {0x7, 0xa, "612b83b491315015"}, {0x7, 0x11, "2aca38c378e722871626274820ec62"}, {0x6, 0x12, "0f75771f2143b649c1ff77aa91bc1d18"}, {0x5, 0xa, "3d22122e6f386bca"}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000540)={'tunl0\x00', &(0x7f00000007c0)={'syztnl2\x00', <r12=>0x0, 0x7, 0x7, 0x400, 0x7, {{0x26, 0x4, 0x0, 0x1, 0x98, 0x67, 0x0, 0x4, 0x4, 0x0, @private=0xa010102, @broadcast, {[@ssrr={0x89, 0xb, 0xb0, [@broadcast, @multicast1]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0xae, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@broadcast, 0x9b}, {@loopback, 0x1}, {@empty}, {@multicast1, 0x40}, {@private=0xa010100, 0x76ed}]}, @timestamp_addr={0x44, 0x24, 0xcd, 0x1, 0x0, [{@private=0xa010100, 0x205}, {@loopback, 0x4}, {@rand_addr=0x64010101}, {@private=0xa010102, 0x8001}]}, @end, @noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x5, 0x0, 0x4, [0x7, 0x1, 0x6, 0x9cf]}]}}}}})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000940)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000880)={0xb8, r10, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x5}, @ETHTOOL_A_CHANNELS_HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x48080}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r5, r1, 0x4, r6}, 0x10)

679.294481ms ago: executing program 1 (id=1311):
r0 = socket(0x1e, 0x5, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) (async)
listen(r0, 0x0) (async)
accept4$inet6(r0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x9a, &(0x7f0000000000)=ANY=[], 0x0) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r2, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x40010)

616.246256ms ago: executing program 1 (id=1312):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000100009060400"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa888080001002c00128041000100677470002000028005000500010000001400080000000000000000000000ffff0000000008000a2100aa06e0393c6300", @ANYRES32=r1, @ANYBLOB], 0x54}}, 0x20000040)

559.933347ms ago: executing program 1 (id=1313):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000580)=[{0x30, 0x9, 0x0, 0xfffff02c}, {0x80000006, 0x0, 0x0, 0x5}]}, 0x10)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r1, &(0x7f0000001280)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="7957d404736da65f9d132319c6a5", 0xe}, {&(0x7f0000000ec0)="ada3468ff5b811c75a5cb675c4e3a6039748de9cec396af675712339f7fcdf949114e6dfe6ee2f169a4d5a06a3431657112bafeeae87a27cc09e83155013c48085e83dc6f4512daf681b57aed4ded4ae12bf", 0x52}], 0x2, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8040801)

499.827329ms ago: executing program 1 (id=1315):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'veth0\x00', &(0x7f0000000300)=@ethtool_coalesce={0xe, 0x5, 0x81, 0x7ff, 0x1, 0x7, 0x7, 0xa, 0x7f, 0x1ff, 0xffff, 0x2, 0x1, 0x7ff, 0xffffffff, 0xfffffffa, 0x6, 0x5, 0x2, 0x1, 0x800, 0xff, 0xcf}})
getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000100)=0x4)
syz_80211_inject_frame(0x0, &(0x7f0000000000)=ANY=[], 0xb5)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000640)=@newtaction={0x119c, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x1188, 0x1, [@m_ife={0xb8, 0x1b, 0x0, 0x0, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x2, 0x0, 0x2, 0x5}}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x2, 0x7d, 0x7f}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_METALST={0x3c, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x4}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}]}]}, {0x8, 0x6, "72afba1d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x10a0, 0x3, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x1, 0x3cb4f3a8, 0x1}, 0x4f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x2, 0xfffffffffffffff0, 0x8}, 0x3}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0x3, 0x1, 0x6, 0x2}, 0x1e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x2, 0x1, 0x601}, 0x17}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x119c}}, 0x0)

249.693601ms ago: executing program 3 (id=1320):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6})
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x10400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @value=r1}, 0xfffffffffffffe68)
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))

189.266848ms ago: executing program 3 (id=1321):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x3, 0x1}, 0x48)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xbc, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xa8, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x5}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3ff, 0x3ff, 0x1, 0x0, 0x7}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}}, 0x20040800)

188.384219ms ago: executing program 3 (id=1322):
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'geneve1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "9e10ca1c4bcb8d812a86f1aef52eba19719c78cfd7222b2639b90f7dc70f33eb", "9d51b95305302c62a6ebc6ceb3e740422abd24b41495e53e3b1cb422546c9a92", "5d766a42e23ee91a725598ba37e50e2670e5fd9cadaeccbd745b4a7c97d40b8f", "6a23d7463882fd0380ae3da81fc699f43ab8831af454930135ade949498e962c", "1519fc8065d640d2a08689c86d56f35fef67a66df1abfc781c3cf937784bcb5f", "d1e70cd786c3ea83209fec3b", 0x9, 0x6, 0x4, 0x2708}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180600000000000000000000000000008540000022000000850000008b00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x18, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0)
ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f0000000280)={0x81, 0x40, [0x8, 0x2e94, 0x9, 0xfa], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x1, 0xffffffff, 0x2, {0x0, 0x0, 0x0, r8, 0x18f40, 0x4200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x40}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300))
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r9, 0x894b, &(0x7f0000000340))
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x20084084)

68.281714ms ago: executing program 3 (id=1323):
socket$netlink(0x10, 0x3, 0x4) (async)
socket$netlink(0x10, 0x3, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8000, 0x7}, 0x50)
pipe(&(0x7f00000001c0))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$netlink(0x10, 0x3, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
pipe(&(0x7f0000000080)) (async)
pipe(&(0x7f0000000080))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000010000000000ecffffff00000000", @ANYRES32=r2, @ANYBLOB="0000000000000000300012800e0001006970366772657461700000001c00028006000f000000000006000e"], 0x50}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x2, 0xa, 0x2) (async)
socket$kcm(0x2, 0xa, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r5, @ANYRESOCT, @ANYBLOB="7264170c663480bb948fa9ac3835a43ad23c5b3a88a7a4"], 0x32600) (async)
write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r5, @ANYRESOCT, @ANYBLOB="7264170c663480bb948fa9ac3835a43ad23c5b3a88a7a4"], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r6 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETVERSION(r6, 0x80044944, &(0x7f0000001040)) (async)
ioctl$IMGETVERSION(r6, 0x80044944, &(0x7f0000001040))
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x5, 0x2}, {0x0, 0x3}}}, 0x24}}, 0x40)

67.866629ms ago: executing program 3 (id=1324):
r0 = socket$igmp(0x2, 0x3, 0x2)
recvfrom(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) (async)
sendmmsg$inet(r0, &(0x7f0000004380)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010100}}}], 0x20}}], 0x1, 0x40000c4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x7, 0x4, 0x8, 0xb}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0xc9e}, 0x0) (async)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xa}], 0x7, 0xd)
r6 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR(r6, 0x114, 0x2, 0x0, 0x20) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$fou(&(0x7f0000001dc0), r7) (async)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009502000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='contention_end\x00', r9, 0x0, 0x4}, 0x18) (async)
sendmsg$FOU_CMD_GET(r7, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01012cbd7000fcdbdf250300000008000b00", @ANYRES32=0x0, @ANYBLOB="050002000a0000001400070000000000000000000000000000000008060001004e20"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x48020) (async)
preadv(r4, &(0x7f0000001340)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/100, 0x64}, {&(0x7f0000001180)=""/94, 0x5e}, {&(0x7f0000001200)=""/104, 0x68}, {&(0x7f0000001280)=""/23, 0x17}, {&(0x7f00000012c0)=""/86, 0x56}], 0x6, 0xfffffffb, 0x9) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
splice(r10, 0x0, r5, 0x0, 0x10000008ebc, 0x0) (async)
splice(0xffffffffffffffff, 0x0, r11, 0x0, 0x25a5, 0x0)

0s ago: executing program 3 (id=1325):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x400448e1, &(0x7f0000000240)={0x1, 0xfffe, "be4108"})

kernel console output (not intermixed with test programs):

 batadv_slave_1 (retrying later): interface not active
[  128.722933][ T9248] hsr_slave_0: entered promiscuous mode
[  128.725391][ T9248] hsr_slave_1: entered promiscuous mode
[  128.727532][ T9248] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  128.729976][ T9248] Cannot create hsr debugfs directory
[  128.927997][ T5837] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.267665][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  129.270878][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  129.273772][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  129.277291][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  129.280173][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  129.308694][ T9268] lo speed is unknown, defaulting to 1000
[  129.386763][ T9281] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  129.386778][ T9279] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  129.411177][ T9268] chnl_net:caif_netlink_parms(): no params data found
[  129.476050][ T9268] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.478469][ T9268] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.480822][ T9268] bridge_slave_0: entered allmulticast mode
[  129.485755][ T9268] bridge_slave_0: entered promiscuous mode
[  129.488991][ T9268] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.491469][ T9268] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.494965][ T9268] bridge_slave_1: entered allmulticast mode
[  129.497973][ T9268] bridge_slave_1: entered promiscuous mode
[  129.520520][ T9268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  129.526886][ T9268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  129.529614][ T9295] netlink: 44 bytes leftover after parsing attributes in process `syz.1.944'.
[  129.549499][ T9268] team0: Port device team_slave_0 added
[  129.552994][ T9268] team0: Port device team_slave_1 added
[  129.572152][ T9268] batman_adv: batadv0: Adding interface: batadv_slave_0
[  129.575688][ T9268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.583494][ T9268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  129.589331][ T9299] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.591918][ T9268] batman_adv: batadv0: Adding interface: batadv_slave_1
[  129.595416][ T9268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.603453][ T9268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  129.608576][ T9299] syzkaller0: entered promiscuous mode
[  129.611285][ T9299] syzkaller0: entered allmulticast mode
[  129.641351][ T9299] tipc: Resetting bearer <eth:syzkaller0>
[  129.647730][ T9268] hsr_slave_0: entered promiscuous mode
[  129.650678][ T9268] hsr_slave_1: entered promiscuous mode
[  129.652911][ T9268] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  129.655680][ T9268] Cannot create hsr debugfs directory
[  129.657820][ T9298] tipc: Resetting bearer <eth:syzkaller0>
[  129.668630][ T9298] tipc: Disabling bearer <eth:syzkaller0>
[  129.961540][ T5837] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.016777][ T5837] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.113265][ T5837] bridge_slave_1: left allmulticast mode
[  130.116575][ T5837] bridge_slave_1: left promiscuous mode
[  130.118433][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.121926][ T5837] bridge_slave_0: left allmulticast mode
[  130.125838][ T5837] bridge_slave_0: left promiscuous mode
[  130.127749][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.323204][ T5837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  130.329291][ T5837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  130.332839][ T5837] bond0 (unregistering): Released all slaves
[  130.453830][ T5829] Bluetooth: hci1: command tx timeout
[  130.618322][ T5837] hsr_slave_0: left promiscuous mode
[  130.620691][ T5837] hsr_slave_1: left promiscuous mode
[  130.622820][ T5837] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.625591][ T5837] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.628353][ T5837] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.631272][ T5837] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.647008][ T5837] veth1_macvtap: left promiscuous mode
[  130.648879][ T5837] veth0_macvtap: left promiscuous mode
[  130.650748][ T5837] veth1_vlan: left promiscuous mode
[  130.652520][ T5837] veth0_vlan: left promiscuous mode
[  130.888006][ T5837] team0 (unregistering): Port device team_slave_1 removed
[  130.908853][ T5837] team0 (unregistering): Port device team_slave_0 removed
[  131.201279][ T9268] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.224395][ T9248] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  131.239597][ T9248] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  131.251221][ T9248] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  131.266788][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.953'.
[  131.270946][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.953'.
[  131.282707][ T9268] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.290266][ T9248] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  131.335260][ T5829] Bluetooth: hci2: command tx timeout
[  131.349658][ T9268] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.357094][ T9333] syzkaller0: entered promiscuous mode
[  131.358898][ T9333] syzkaller0: entered allmulticast mode
[  131.393415][ T9248] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.404431][ T9268] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.416307][ T9248] 8021q: adding VLAN 0 to HW filter on device team0
[  131.421505][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.423845][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.439532][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.441823][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.458482][ T9248] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  131.461781][ T9248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  131.557867][ T9343] netlink: 3 bytes leftover after parsing attributes in process `syz.1.956'.
[  131.568011][ T9343] batadv0: entered promiscuous mode
[  131.569743][ T9343] batadv0: entered allmulticast mode
[  131.576166][ T9268] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  131.581191][ T9268] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  131.586529][ T9268] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  131.597893][ T9268] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  131.611379][ T9248] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.656222][ T5837] bridge_slave_1: left allmulticast mode
[  131.658052][ T5837] bridge_slave_1: left promiscuous mode
[  131.659927][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.664788][ T5837] bridge_slave_0: left allmulticast mode
[  131.666573][ T5837] bridge_slave_0: left promiscuous mode
[  131.668376][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.866460][ T5837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  131.870603][ T5837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.874620][ T5837] bond0 (unregistering): Released all slaves
[  131.884723][ T9356] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  131.893329][ T9248] veth0_vlan: entered promiscuous mode
[  131.903492][ T9248] veth1_vlan: entered promiscuous mode
[  131.933757][ T9248] veth0_macvtap: entered promiscuous mode
[  131.941033][ T9248] veth1_macvtap: entered promiscuous mode
[  131.958324][ T9268] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.994979][ T9268] 8021q: adding VLAN 0 to HW filter on device team0
[  131.999668][ T9248] batman_adv: batadv0: Interface activated: batadv_slave_0
[  132.008349][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.010681][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  132.018816][ T9248] batman_adv: batadv0: Interface activated: batadv_slave_1
[  132.022458][ T9248] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.027874][ T9248] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.030767][ T9248] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.033863][ T9248] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.047904][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.050325][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.075745][ T9362] xt_CT: No such helper "syz0"
[  132.129533][ T5837] hsr_slave_0: left promiscuous mode
[  132.135021][ T5837] hsr_slave_1: left promiscuous mode
[  132.137060][ T5837] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.139511][ T5837] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.142342][ T5837] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.145295][ T5837] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.156458][ T5837] veth1_macvtap: left promiscuous mode
[  132.158287][ T5837] veth0_macvtap: left promiscuous mode
[  132.160082][ T5837] veth1_vlan: left promiscuous mode
[  132.161815][ T5837] veth0_vlan: left promiscuous mode
[  132.164598][ T9362] IPv6: NLM_F_REPLACE set, but no existing node found!
[  132.295296][ T1358] ieee802154 phy0 wpan0: encryption failed: -22
[  132.297417][ T1358] ieee802154 phy1 wpan1: encryption failed: -22
[  132.428396][ T5837] team0 (unregistering): Port device team_slave_1 removed
[  132.449036][ T5837] team0 (unregistering): Port device team_slave_0 removed
[  132.543841][ T5829] Bluetooth: hci1: command tx timeout
[  132.659895][ T9373] netlink: 'syz.1.959': attribute type 12 has an invalid length.
[  132.667742][ T8822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.670348][ T8822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.674084][ T9268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  132.737814][ T8826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.748672][ T8826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.797894][ T9268] 8021q: adding VLAN 0 to HW filter on device batadv0
[  132.821365][ T9385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.961'.
[  132.841150][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.961'.
[  132.871886][ T9268] veth0_vlan: entered promiscuous mode
[  132.874879][ T9385] netlink: 'syz.1.961': attribute type 3 has an invalid length.
[  132.877767][ T9385] netlink: 666 bytes leftover after parsing attributes in process `syz.1.961'.
[  132.883085][ T9268] veth1_vlan: entered promiscuous mode
[  132.906173][ T9268] veth0_macvtap: entered promiscuous mode
[  132.911414][ T9268] veth1_macvtap: entered promiscuous mode
[  132.922882][ T9268] batman_adv: batadv0: Interface activated: batadv_slave_0
[  132.932603][ T9268] batman_adv: batadv0: Interface activated: batadv_slave_1
[  132.938206][ T9387] af_packet: tpacket_rcv: packet too big, clamped from 9920 to 3952. macoff=96
[  132.942438][ T9387] netlink: del zone limit has 4 unknown bytes
[  132.945429][ T9268] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.948326][ T9268] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.951163][ T9268] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.956891][ T9268] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.019051][ T8822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.021674][ T8822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.040847][ T8826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.043455][ T8826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.061083][ T9389] IPVS: Scheduler module ip_vs_sip not found
[  133.136087][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.965'.
[  133.139191][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.965'.
[  133.142129][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.965'.
[  133.145618][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.965'.
[  133.148576][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.965'.
[  133.152037][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.965'.
[  133.155398][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.965'.
[  133.243150][ T9403] batadv_slave_1: entered allmulticast mode
[  133.270984][ T9403] batadv_slave_1: left allmulticast mode
[  133.611250][ T9424] batadv_slave_1: entered allmulticast mode
[  133.618878][ T9424] pimreg: entered allmulticast mode
[  133.622302][ T9423] batadv_slave_1: left allmulticast mode
[  133.625696][ T9423] pimreg: left allmulticast mode
[  133.885459][ T9436] netlink: 'syz.1.980': attribute type 1 has an invalid length.
[  133.977833][ T5837] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.031210][ T9440] lo speed is unknown, defaulting to 1000
[  134.074604][ T9441] lo speed is unknown, defaulting to 1000
[  134.275194][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  134.279083][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  134.282084][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  134.285407][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  134.291467][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  134.319296][ T9449] lo speed is unknown, defaulting to 1000
[  134.393905][ T9449] chnl_net:caif_netlink_parms(): no params data found
[  134.435488][ T9449] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.437906][ T9449] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.440214][ T9449] bridge_slave_0: entered allmulticast mode
[  134.443017][ T9449] bridge_slave_0: entered promiscuous mode
[  134.447266][ T9449] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.449637][ T9449] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.452090][ T9449] bridge_slave_1: entered allmulticast mode
[  134.455570][ T9449] bridge_slave_1: entered promiscuous mode
[  134.476504][ T9449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  134.480976][ T9449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.501974][ T9449] team0: Port device team_slave_0 added
[  134.506790][ T9449] team0: Port device team_slave_1 added
[  134.521895][ T9449] batman_adv: batadv0: Adding interface: batadv_slave_0
[  134.524799][ T9449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.532918][ T9449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  134.540061][ T9449] batman_adv: batadv0: Adding interface: batadv_slave_1
[  134.542340][ T9449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.551474][ T9449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  134.585475][ T9449] hsr_slave_0: entered promiscuous mode
[  134.592207][ T9449] hsr_slave_1: entered promiscuous mode
[  134.635429][ T5837] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.747028][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  134.750408][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  134.754856][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  134.758691][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  134.761658][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  134.789681][ T9467] lo speed is unknown, defaulting to 1000
[  134.875561][ T9467] chnl_net:caif_netlink_parms(): no params data found
[  134.883152][ T9480] netlink: 'syz.1.988': attribute type 12 has an invalid length.
[  134.926857][ T9467] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.929264][ T9467] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.931532][ T9467] bridge_slave_0: entered allmulticast mode
[  134.934755][ T9467] bridge_slave_0: entered promiscuous mode
[  134.937905][ T9467] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.940177][ T9467] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.942429][ T9467] bridge_slave_1: entered allmulticast mode
[  134.946927][ T9467] bridge_slave_1: entered promiscuous mode
[  134.963994][ T8931] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  134.972104][ T9467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  134.977314][ T9467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.997851][ T9467] team0: Port device team_slave_0 added
[  135.001884][ T9467] team0: Port device team_slave_1 added
[  135.018708][ T9467] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.020949][ T9467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.029139][ T9467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  135.034382][ T9467] batman_adv: batadv0: Adding interface: batadv_slave_1
[  135.036703][ T9467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.045043][ T9467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.071042][ T9467] hsr_slave_0: entered promiscuous mode
[  135.073332][ T9467] hsr_slave_1: entered promiscuous mode
[  135.076181][ T9467] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  135.078569][ T9467] Cannot create hsr debugfs directory
[  135.657366][ T5837] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.818625][ T5837] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.907614][ T5837] bridge_slave_1: left allmulticast mode
[  135.909664][ T5837] bridge_slave_1: left promiscuous mode
[  135.912985][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.918714][ T5837] bridge_slave_0: left allmulticast mode
[  135.920629][ T5837] bridge_slave_0: left promiscuous mode
[  135.922573][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.147077][ T5837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.150990][ T5837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.155033][ T5837] bond0 (unregistering): Released all slaves
[  136.359471][ T5837] hsr_slave_0: left promiscuous mode
[  136.362546][ T5837] hsr_slave_1: left promiscuous mode
[  136.368661][ T5837] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.371757][ T5837] batman_adv: batadv0: Removing interface: batadv_slave_0
[  136.382212][ T5837] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.385932][ T5829] Bluetooth: hci1: command tx timeout
[  136.389380][ T5837] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.408008][ T5837] veth1_macvtap: left promiscuous mode
[  136.409844][ T5837] veth0_macvtap: left promiscuous mode
[  136.412390][ T5837] veth1_vlan: left promiscuous mode
[  136.414246][ T5837] veth0_vlan: left promiscuous mode
[  136.657098][ T5837] team0 (unregistering): Port device team_slave_1 removed
[  136.679712][ T5837] team0 (unregistering): Port device team_slave_0 removed
[  136.775316][ T5829] Bluetooth: hci2: command tx timeout
[  136.977962][ T9467] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.050530][ T9467] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.158170][ T9467] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.227312][ T9467] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.343347][ T9467] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  137.350095][ T9467] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  137.360785][ T9467] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  137.368276][ T9467] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  137.382891][ T5837] bridge_slave_1: left allmulticast mode
[  137.385925][ T5837] bridge_slave_1: left promiscuous mode
[  137.388035][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.392064][ T5837] bridge_slave_0: left allmulticast mode
[  137.396305][ T5837] bridge_slave_0: left promiscuous mode
[  137.398298][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.694730][ T5837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  137.698846][ T5837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.702425][ T5837] bond0 (unregistering): Released all slaves
[  137.710756][ T9540] netlink: 'syz.1.1000': attribute type 1 has an invalid length.
[  137.776944][ T9449] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  137.795009][ T9449] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  137.832168][ T9449] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  137.839037][ T9449] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  137.864452][ T9554] __nla_validate_parse: 11 callbacks suppressed
[  137.864461][ T9554] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1001'.
[  137.962248][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1002'.
[  137.964806][ T9449] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.965422][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1002'.
[  137.978113][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1002'.
[  137.981206][ T9467] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.999661][ T5837] hsr_slave_0: left promiscuous mode
[  138.001831][ T5837] hsr_slave_1: left promiscuous mode
[  138.004033][ T5837] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.006655][ T5837] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.009467][ T5837] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.012090][ T5837] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.020630][ T5837] veth1_macvtap: left promiscuous mode
[  138.022433][ T5837] veth0_macvtap: left promiscuous mode
[  138.027202][ T5837] veth1_vlan: left promiscuous mode
[  138.029043][ T5837] veth0_vlan: left promiscuous mode
[  138.043187][ T9566] netlink: 'syz.1.1002': attribute type 13 has an invalid length.
[  138.047502][ T9566] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1002'.
[  138.297487][ T5837] team0 (unregistering): Port device team_slave_1 removed
[  138.321235][ T5837] team0 (unregistering): Port device team_slave_0 removed
[  138.456416][ T5829] Bluetooth: hci1: command tx timeout
[  138.556283][ T9566] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[  138.561197][ T9449] 8021q: adding VLAN 0 to HW filter on device team0
[  138.569920][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.572229][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.581608][ T9467] 8021q: adding VLAN 0 to HW filter on device team0
[  138.595456][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.597715][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.600775][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.602976][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.612969][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.615384][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.792488][ T9467] 8021q: adding VLAN 0 to HW filter on device batadv0
[  138.808680][ T9449] 8021q: adding VLAN 0 to HW filter on device batadv0
[  138.844071][ T9449] veth0_vlan: entered promiscuous mode
[  138.850126][ T9449] veth1_vlan: entered promiscuous mode
[  138.853969][ T5829] Bluetooth: hci2: command tx timeout
[  138.855824][ T9467] veth0_vlan: entered promiscuous mode
[  138.867064][ T9467] veth1_vlan: entered promiscuous mode
[  138.886829][ T9449] veth0_macvtap: entered promiscuous mode
[  138.891137][ T9449] veth1_macvtap: entered promiscuous mode
[  138.903096][ T9467] veth0_macvtap: entered promiscuous mode
[  138.908468][ T9449] batman_adv: batadv0: Interface activated: batadv_slave_0
[  138.913039][ T9467] veth1_macvtap: entered promiscuous mode
[  138.919117][ T9449] batman_adv: batadv0: Interface activated: batadv_slave_1
[  138.926977][ T9449] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.929701][ T9449] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.932423][ T9449] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.935872][ T9449] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.946148][ T9467] batman_adv: batadv0: Interface activated: batadv_slave_0
[  138.954480][ T9467] batman_adv: batadv0: Interface activated: batadv_slave_1
[  138.972368][ T9467] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.981138][ T9467] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.985790][ T9467] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.988638][ T9467] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.006321][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.009973][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.032311][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.035956][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.063259][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.074126][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.093352][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.103927][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.778008][ T9589] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1006'.
[  139.807027][ T9591] openvswitch: netlink: IP tunnel TTL not specified.
[  140.029529][ T8931] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.038716][ T9608] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  140.490683][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  140.495526][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  140.498950][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  140.502591][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  140.505563][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  140.523257][ T9611] lo speed is unknown, defaulting to 1000
[  140.545598][ T8931] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.653020][ T9611] chnl_net:caif_netlink_parms(): no params data found
[  140.707266][ T9611] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.709594][ T9611] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.711842][ T9611] bridge_slave_0: entered allmulticast mode
[  140.714647][ T9611] bridge_slave_0: entered promiscuous mode
[  140.717671][ T9611] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.719911][ T9611] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.722135][ T9611] bridge_slave_1: entered allmulticast mode
[  140.724931][ T9611] bridge_slave_1: entered promiscuous mode
[  140.741789][ T9611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.746286][ T9611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  140.766042][ T9611] team0: Port device team_slave_0 added
[  140.769156][ T9611] team0: Port device team_slave_1 added
[  140.788831][ T9611] batman_adv: batadv0: Adding interface: batadv_slave_0
[  140.790963][ T9611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.799331][ T9611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  140.803487][ T9611] batman_adv: batadv0: Adding interface: batadv_slave_1
[  140.806261][ T9611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.814251][ T9611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  140.835755][ T9611] hsr_slave_0: entered promiscuous mode
[  140.838018][ T9611] hsr_slave_1: entered promiscuous mode
[  140.840087][ T9611] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  140.842447][ T9611] Cannot create hsr debugfs directory
[  140.919973][ T9622] netlink: 'syz.1.1013': attribute type 1 has an invalid length.
[  140.922513][ T9622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1013'.
[  141.041292][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  141.047955][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  141.052498][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  141.057426][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  141.060337][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  141.086934][ T9629] lo speed is unknown, defaulting to 1000
[  141.191620][ T9629] chnl_net:caif_netlink_parms(): no params data found
[  141.258020][ T9629] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.260312][ T9629] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.262587][ T9629] bridge_slave_0: entered allmulticast mode
[  141.266110][ T9629] bridge_slave_0: entered promiscuous mode
[  141.269422][ T9629] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.271817][ T9629] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.274603][ T9629] bridge_slave_1: entered allmulticast mode
[  141.277234][ T9629] bridge_slave_1: entered promiscuous mode
[  141.295667][ T9629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  141.300785][ T9629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.320565][ T9629] team0: Port device team_slave_0 added
[  141.326504][ T9629] team0: Port device team_slave_1 added
[  141.346451][ T8931] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.361610][ T9629] batman_adv: batadv0: Adding interface: batadv_slave_0
[  141.364446][ T9629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.373651][ T9629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  141.378797][ T9629] batman_adv: batadv0: Adding interface: batadv_slave_1
[  141.381332][ T9629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.390149][ T9629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  141.420341][ T9629] hsr_slave_0: entered promiscuous mode
[  141.422909][ T9629] hsr_slave_1: entered promiscuous mode
[  141.425498][ T9629] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  141.427864][ T9629] Cannot create hsr debugfs directory
[  141.785922][ T8931] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.924382][ T8931] bridge_slave_1: left allmulticast mode
[  141.926260][ T8931] bridge_slave_1: left promiscuous mode
[  141.928129][ T8931] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.932181][ T8931] bridge_slave_0: left allmulticast mode
[  141.936419][ T8931] bridge_slave_0: left promiscuous mode
[  141.938303][ T8931] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.167072][ T8931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  142.171071][ T8931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  142.175531][ T8931] bond0 (unregistering): Released all slaves
[  142.291489][ T9649] syzkaller0: entered promiscuous mode
[  142.297745][ T9649] syzkaller0: entered allmulticast mode
[  142.406100][ T9651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1020'.
[  142.418300][ T9651] 8021q: adding VLAN 0 to HW filter on device bond6
[  142.451906][ T8931] hsr_slave_0: left promiscuous mode
[  142.457172][ T8931] hsr_slave_1: left promiscuous mode
[  142.461836][ T8931] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  142.465553][ T8931] batman_adv: batadv0: Removing interface: batadv_slave_0
[  142.468783][ T8931] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.471122][ T8931] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.479285][ T8931] veth1_macvtap: left promiscuous mode
[  142.481052][ T8931] veth0_macvtap: left promiscuous mode
[  142.482851][ T8931] veth1_vlan: left promiscuous mode
[  142.487788][ T8931] veth0_vlan: left promiscuous mode
[  142.534786][   T54] Bluetooth: hci1: command tx timeout
[  142.728580][ T8931] team0 (unregistering): Port device team_slave_1 removed
[  142.747393][ T8931] team0 (unregistering): Port device team_slave_0 removed
[  142.970442][ T9651] macvlan0: entered promiscuous mode
[  142.972682][ T9651] macvlan0: entered allmulticast mode
[  142.977924][ T9651] bond6: entered promiscuous mode
[  142.980254][ T9651] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  142.985981][ T9651] bond6: left promiscuous mode
[  143.054429][ T9629] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.060520][ T9611] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  143.069739][ T9611] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  143.074105][ T9611] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  143.078514][ T9611] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  143.096238][   T54] Bluetooth: hci2: command tx timeout
[  143.132143][ T9611] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.161888][ T9629] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.176456][ T9611] 8021q: adding VLAN 0 to HW filter on device team0
[  143.188808][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.191153][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.199898][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.202175][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.225986][ T9629] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.235054][ T9665] netlink: 'syz.1.1022': attribute type 1 has an invalid length.
[  143.237523][ T9665] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1022'.
[  143.247067][ T9665] NCSI netlink: No device for ifindex 813332851
[  143.315048][ T9629] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.371152][ T9611] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.419852][ T8931] bridge_slave_1: left allmulticast mode
[  143.421842][ T8931] bridge_slave_1: left promiscuous mode
[  143.425325][ T8931] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.429969][ T8931] bridge_slave_0: left allmulticast mode
[  143.432167][ T8931] bridge_slave_0: left promiscuous mode
[  143.435277][ T8931] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.657955][ T8931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.661793][ T8931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.665775][ T8931] bond0 (unregistering): Released all slaves
[  143.679353][ T9683] syzkaller0: entered promiscuous mode
[  143.681112][ T9683] syzkaller0: entered allmulticast mode
[  143.712543][ T9611] veth0_vlan: entered promiscuous mode
[  143.731022][ T9629] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  143.737779][ T9629] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  143.742286][ T9629] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  143.750898][ T9611] veth1_vlan: entered promiscuous mode
[  143.780366][ T9629] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  143.860389][ T9611] veth0_macvtap: entered promiscuous mode
[  143.875982][ T9611] veth1_macvtap: entered promiscuous mode
[  143.907778][ T8931] hsr_slave_0: left promiscuous mode
[  143.910069][ T8931] hsr_slave_1: left promiscuous mode
[  143.912119][ T8931] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.916275][ T8931] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.919104][ T8931] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.921490][ T8931] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.935555][ T8931] veth1_macvtap: left promiscuous mode
[  143.939417][ T8931] veth0_macvtap: left promiscuous mode
[  143.941240][ T8931] veth1_vlan: left promiscuous mode
[  143.944982][ T8931] veth0_vlan: left promiscuous mode
[  144.185753][ T8931] team0 (unregistering): Port device team_slave_1 removed
[  144.205165][ T8931] team0 (unregistering): Port device team_slave_0 removed
[  144.426332][ T9611] batman_adv: batadv0: Interface activated: batadv_slave_0
[  144.438588][ T9611] batman_adv: batadv0: Interface activated: batadv_slave_1
[  144.442707][ T9611] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.455771][ T9611] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.458434][ T9611] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.461077][ T9611] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.562967][ T9629] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.591726][ T8826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.603633][ T8826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.611732][ T8826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.615308][   T54] Bluetooth: hci1: command tx timeout
[  144.617965][ T8826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.667973][ T9629] 8021q: adding VLAN 0 to HW filter on device team0
[  144.687586][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.690761][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.726789][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.729324][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.738141][ T9709] can: request_module (can-proto-0) failed.
[  144.791748][ T9714] netlink: 'syz.1.1033': attribute type 3 has an invalid length.
[  144.797192][ T9714] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1033'.
[  144.800308][ T9713] netlink: 'syz.1.1033': attribute type 3 has an invalid length.
[  144.802729][ T9713] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1033'.
[  144.865718][ T9720] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1034'.
[  144.867263][ T9629] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.871502][ T9720] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1034'.
[  144.914311][ T9629] veth0_vlan: entered promiscuous mode
[  144.919117][ T9629] veth1_vlan: entered promiscuous mode
[  144.932893][ T9629] veth0_macvtap: entered promiscuous mode
[  144.940725][ T9629] veth1_macvtap: entered promiscuous mode
[  144.961943][ T9629] batman_adv: batadv0: Interface activated: batadv_slave_0
[  144.967040][ T9725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1036'.
[  144.969906][ T9725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1036'.
[  144.976194][ T9629] batman_adv: batadv0: Interface activated: batadv_slave_1
[  144.981310][ T9629] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.984926][ T9629] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.987653][ T9629] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.990344][ T9629] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.030844][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.034691][ T9726] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1036'.
[  145.037628][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.041727][ T9726] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1036'.
[  145.058877][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.061336][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.117976][ T9725] netlink: 'syz.1.1036': attribute type 9 has an invalid length.
[  146.035055][ T9738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1039'.
[  146.196807][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.479804][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  146.484347][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  146.487457][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  146.491105][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  146.496249][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  146.550621][ T9742] lo speed is unknown, defaulting to 1000
[  146.721661][ T9742] chnl_net:caif_netlink_parms(): no params data found
[  146.840170][ T9742] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.842559][ T9742] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.846671][ T9742] bridge_slave_0: entered allmulticast mode
[  146.849359][ T9742] bridge_slave_0: entered promiscuous mode
[  146.853216][ T9742] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.856272][ T9742] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.859113][ T9742] bridge_slave_1: entered allmulticast mode
[  146.861959][ T9742] bridge_slave_1: entered promiscuous mode
[  146.895597][ T9742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  146.901659][ T9742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  147.424337][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.444283][ T9742] team0: Port device team_slave_0 added
[  147.448062][ T9742] team0: Port device team_slave_1 added
[  147.466259][ T9742] batman_adv: batadv0: Adding interface: batadv_slave_0
[  147.468507][ T9742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.479169][ T9742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  147.483803][ T9742] batman_adv: batadv0: Adding interface: batadv_slave_1
[  147.485942][ T9742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.497768][ T9742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  147.514958][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  147.518475][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  147.521246][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  147.526024][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  147.528618][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  147.602093][ T9742] hsr_slave_0: entered promiscuous mode
[  147.605011][ T9742] hsr_slave_1: entered promiscuous mode
[  147.638238][ T9754] lo speed is unknown, defaulting to 1000
[  147.754920][ T9742] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.776069][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.791080][ T9761] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.793678][ T9761] syzkaller0: entered promiscuous mode
[  147.795430][ T9761] syzkaller0: entered allmulticast mode
[  147.799266][ T9761] tipc: Resetting bearer <eth:syzkaller0>
[  147.801917][ T9760] tipc: Resetting bearer <eth:syzkaller0>
[  147.811029][ T9760] tipc: Disabling bearer <eth:syzkaller0>
[  147.822643][ T9742] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.851549][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.898992][ T9742] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.913897][ T9754] chnl_net:caif_netlink_parms(): no params data found
[  147.980416][ T9742] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.996135][   T13] bridge_slave_1: left allmulticast mode
[  147.998305][   T13] bridge_slave_1: left promiscuous mode
[  148.000092][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.004626][   T13] bridge_slave_0: left allmulticast mode
[  148.006382][   T13] bridge_slave_0: left promiscuous mode
[  148.008179][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.254239][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  148.260298][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.264691][   T13] bond0 (unregistering): Released all slaves
[  148.309024][ T9754] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.311290][ T9754] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.313515][ T9754] bridge_slave_0: entered allmulticast mode
[  148.316752][ T9754] bridge_slave_0: entered promiscuous mode
[  148.322837][ T9754] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.325280][ T9754] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.327746][ T9754] bridge_slave_1: entered allmulticast mode
[  148.330362][ T9754] bridge_slave_1: entered promiscuous mode
[  148.395573][ T9754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  148.400713][ T9754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.449555][ T9754] team0: Port device team_slave_0 added
[  148.471748][ T9754] team0: Port device team_slave_1 added
[  148.524639][ T9754] batman_adv: batadv0: Adding interface: batadv_slave_0
[  148.526909][ T9754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.537746][ T9754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  148.541242][ T9742] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  148.543903][ T5829] Bluetooth: hci1: command tx timeout
[  148.556870][ T9754] batman_adv: batadv0: Adding interface: batadv_slave_1
[  148.559108][ T9754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.569609][ T9754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.573127][ T9742] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  148.577628][ T9794] __nla_validate_parse: 7 callbacks suppressed
[  148.577636][ T9794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1052'.
[  148.587241][   T13] hsr_slave_0: left promiscuous mode
[  148.590100][   T13] hsr_slave_1: left promiscuous mode
[  148.592157][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  148.594840][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.597518][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  148.599816][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  148.608967][   T13] veth1_macvtap: left promiscuous mode
[  148.610769][   T13] veth0_macvtap: left promiscuous mode
[  148.612605][   T13] veth1_vlan: left promiscuous mode
[  148.614807][   T13] veth0_vlan: left promiscuous mode
[  148.877105][   T13] team0 (unregistering): Port device team_slave_1 removed
[  148.900342][   T13] team0 (unregistering): Port device team_slave_0 removed
[  149.136154][ T9742] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  149.140597][ T9742] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  149.184898][ T9754] hsr_slave_0: entered promiscuous mode
[  149.187125][ T9754] hsr_slave_1: entered promiscuous mode
[  149.189221][ T9754] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  149.191736][ T9754] Cannot create hsr debugfs directory
[  149.247455][ T9808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1054'.
[  149.359552][ T9742] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.392770][ T9742] 8021q: adding VLAN 0 to HW filter on device team0
[  149.399902][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.402099][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.408377][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.410561][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.451654][ T9742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  149.477920][   T13] bridge_slave_1: left allmulticast mode
[  149.479836][   T13] bridge_slave_1: left promiscuous mode
[  149.482147][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.487648][   T13] bridge_slave_0: left allmulticast mode
[  149.489623][   T13] bridge_slave_0: left promiscuous mode
[  149.492593][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.573889][ T5829] Bluetooth: hci2: command tx timeout
[  149.739758][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  149.744569][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  149.748228][   T13] bond0 (unregistering): Released all slaves
[  149.823285][ T9742] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.917512][ T9742] veth0_vlan: entered promiscuous mode
[  149.930246][ T9742] veth1_vlan: entered promiscuous mode
[  149.986968][ T9742] veth0_macvtap: entered promiscuous mode
[  149.995877][   T13] hsr_slave_0: left promiscuous mode
[  149.997897][   T13] hsr_slave_1: left promiscuous mode
[  149.999960][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.002289][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.006222][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.008548][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.017790][   T13] veth1_macvtap: left promiscuous mode
[  150.019552][   T13] veth0_macvtap: left promiscuous mode
[  150.021410][   T13] veth1_vlan: left promiscuous mode
[  150.023095][   T13] veth0_vlan: left promiscuous mode
[  150.260479][   T13] team0 (unregistering): Port device team_slave_1 removed
[  150.286555][   T13] team0 (unregistering): Port device team_slave_0 removed
[  150.508155][ T9754] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  150.516780][ T9742] veth1_macvtap: entered promiscuous mode
[  150.521968][ T9754] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  150.529209][ T9754] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  150.556515][ T9742] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.561714][ T9754] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  150.592651][ T9742] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.604682][ T9832] netlink: zone id is out of range
[  150.606405][ T9832] netlink: zone id is out of range
[  150.608062][ T9832] netlink: set zone limit has 4 unknown bytes
[  150.608746][ T9742] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.612733][ T9742] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.615776][ T5829] Bluetooth: hci1: command tx timeout
[  150.619852][ T9742] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.622705][ T9742] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.719812][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.722519][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.729862][ T9754] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.751857][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.756052][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.757178][ T9754] 8021q: adding VLAN 0 to HW filter on device team0
[  150.769500][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.771853][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.781253][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.783872][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.812400][ T9754] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  150.820229][ T9754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  150.929808][ T9754] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.968933][ T9754] veth0_vlan: entered promiscuous mode
[  150.975660][ T9754] veth1_vlan: entered promiscuous mode
[  150.990581][ T9754] veth0_macvtap: entered promiscuous mode
[  150.997235][ T9754] veth1_macvtap: entered promiscuous mode
[  151.006826][ T9754] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.013070][ T9754] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.022023][ T9754] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.025805][ T9754] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.032372][ T9754] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.037165][ T9754] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.094589][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.097146][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.121060][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1064'.
[  151.124443][ T9857] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  151.124493][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.126994][ T9857] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.129960][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.296814][ T9867] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1066'.
[  151.408653][ T9884] sctp: [Deprecated]: syz.1.1070 (pid 9884) Use of struct sctp_assoc_value in delayed_ack socket option.
[  151.408653][ T9884] Use struct sctp_sack_info instead
[  151.436785][ T9886] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1071'.
[  151.440504][ T9886] openvswitch: netlink: Flow key attr not present in new flow.
[  151.447274][ T9886] veth1_macvtap: left promiscuous mode
[  151.637306][ T9891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1072'.
[  152.025619][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.102851][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.179719][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  153.182926][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  153.188916][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  153.192275][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  153.195418][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  153.215357][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.231916][ T9896] lo speed is unknown, defaulting to 1000
[  153.272749][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.342201][ T9896] chnl_net:caif_netlink_parms(): no params data found
[  153.385126][   T13] bridge_slave_1: left allmulticast mode
[  153.388519][   T13] bridge_slave_1: left promiscuous mode
[  153.390497][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.395526][   T13] bridge_slave_0: left allmulticast mode
[  153.397357][   T13] bridge_slave_0: left promiscuous mode
[  153.399298][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.595401][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.599611][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.603038][   T13] bond0 (unregistering): Released all slaves
[  153.646085][ T9896] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.649116][ T9896] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.652128][ T9896] bridge_slave_0: entered allmulticast mode
[  153.656501][ T9896] bridge_slave_0: entered promiscuous mode
[  153.668007][ T9896] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.670317][ T9896] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.672646][ T9896] bridge_slave_1: entered allmulticast mode
[  153.677833][ T9896] bridge_slave_1: entered promiscuous mode
[  153.711483][ T9896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.717257][ T9896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.745047][ T9896] team0: Port device team_slave_0 added
[  153.749614][ T9896] team0: Port device team_slave_1 added
[  153.752990][ T9906] sctp: [Deprecated]: syz.1.1074 (pid 9906) Use of struct sctp_assoc_value in delayed_ack socket option.
[  153.752990][ T9906] Use struct sctp_sack_info instead
[  153.842262][ T9896] batman_adv: batadv0: Adding interface: batadv_slave_0
[  153.844826][ T9896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.852821][ T9896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  153.864853][ T9896] batman_adv: batadv0: Adding interface: batadv_slave_1
[  153.867360][ T9896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.887807][ T9896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  153.919920][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  153.925417][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  153.928341][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  153.931483][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  153.935800][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  153.938994][   T13] hsr_slave_0: left promiscuous mode
[  153.946521][   T13] hsr_slave_1: left promiscuous mode
[  153.948595][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.950962][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.953826][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.956165][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.965437][   T13] veth1_macvtap: left promiscuous mode
[  153.967273][   T13] veth0_macvtap: left promiscuous mode
[  153.969151][   T13] veth1_vlan: left promiscuous mode
[  153.970894][   T13] veth0_vlan: left promiscuous mode
[  154.233163][   T13] team0 (unregistering): Port device team_slave_1 removed
[  154.253473][   T13] team0 (unregistering): Port device team_slave_0 removed
[  154.560421][ T9896] hsr_slave_0: entered promiscuous mode
[  154.562914][ T9896] hsr_slave_1: entered promiscuous mode
[  154.567345][ T9912] lo speed is unknown, defaulting to 1000
[  155.254163][   T54] Bluetooth: hci1: command tx timeout
[  155.269736][ T9933] netlink: 'syz.1.1081': attribute type 1 has an invalid length.
[  155.280939][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.288537][ T9912] chnl_net:caif_netlink_parms(): no params data found
[  155.332735][ T9938] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1082'.
[  155.337708][ T9938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1082'.
[  155.342686][ T9938] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1082'.
[  155.347662][ T9938] netlink: 'syz.1.1082': attribute type 3 has an invalid length.
[  155.351087][ T9938] netlink: 'syz.1.1082': attribute type 2 has an invalid length.
[  155.353874][ T9938] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1082'.
[  155.357012][ T9938] netlink: 'syz.1.1082': attribute type 2 has an invalid length.
[  155.385366][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.399365][ T9912] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.401987][ T9912] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.405527][ T9912] bridge_slave_0: entered allmulticast mode
[  155.408660][ T9912] bridge_slave_0: entered promiscuous mode
[  155.412109][ T9912] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.415065][ T9912] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.417740][ T9912] bridge_slave_1: entered allmulticast mode
[  155.420667][ T9912] bridge_slave_1: entered promiscuous mode
[  155.455129][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.482889][ T9912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.492067][ T9912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.543805][ T9912] team0: Port device team_slave_0 added
[  155.566079][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.576925][ T9912] team0: Port device team_slave_1 added
[  155.613448][ T9912] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.616055][ T9912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.634878][ T9912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.652977][ T9912] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.655587][ T9912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.672401][ T9912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.715510][ T9896] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  155.744935][ T9912] hsr_slave_0: entered promiscuous mode
[  155.747779][ T9912] hsr_slave_1: entered promiscuous mode
[  155.749887][ T9912] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  155.752428][ T9912] Cannot create hsr debugfs directory
[  155.754671][ T9896] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  155.759074][ T9896] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  155.779316][ T9896] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  155.812827][   T13] bridge_slave_1: left allmulticast mode
[  155.819334][   T13] bridge_slave_1: left promiscuous mode
[  155.821219][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.827705][   T13] bridge_slave_0: left allmulticast mode
[  155.829569][   T13] bridge_slave_0: left promiscuous mode
[  155.831438][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.974245][   T54] Bluetooth: hci2: command tx timeout
[  156.040224][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  156.045345][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  156.048939][   T13] bond0 (unregistering): Released all slaves
[  156.152111][ T9967] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  156.332802][   T13] hsr_slave_0: left promiscuous mode
[  156.335768][   T13] hsr_slave_1: left promiscuous mode
[  156.337857][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.343804][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.346610][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.348963][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.367389][   T13] veth1_macvtap: left promiscuous mode
[  156.369262][   T13] veth0_macvtap: left promiscuous mode
[  156.371057][   T13] veth1_vlan: left promiscuous mode
[  156.372796][   T13] veth0_vlan: left promiscuous mode
[  156.466160][ T9977] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  156.470129][ T9977] netlink: 'syz.1.1091': attribute type 83 has an invalid length.
[  156.616517][   T13] team0 (unregistering): Port device team_slave_1 removed
[  156.639149][   T13] team0 (unregistering): Port device team_slave_0 removed
[  156.867313][ T9896] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.889444][ T9896] 8021q: adding VLAN 0 to HW filter on device team0
[  156.898232][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.900553][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.906154][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.908536][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.021628][ T9896] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.050625][ T9896] veth0_vlan: entered promiscuous mode
[  157.062018][ T9896] veth1_vlan: entered promiscuous mode
[  157.079602][ T9896] veth0_macvtap: entered promiscuous mode
[  157.083328][ T9896] veth1_macvtap: entered promiscuous mode
[  157.094354][ T9896] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.100636][ T9896] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.110082][ T9896] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.112872][ T9896] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.119718][ T9896] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.122491][ T9896] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.167222][ T9912] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  157.178371][ T9912] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  157.188605][ T9912] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  157.197206][ T9912] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  157.205752][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.208386][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.233115][ T8826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.236570][ T8826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.260999][ T9912] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.275552][ T9912] 8021q: adding VLAN 0 to HW filter on device team0
[  157.300753][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.303108][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.311294][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.313621][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.385236][ T9999] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1094'.
[  157.388190][ T9999] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1094'.
[  157.391412][ T9999] netlink: 'syz.1.1094': attribute type 5 has an invalid length.
[  157.394499][ T9999] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1094'.
[  157.434544][ T9912] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.466340][ T9912] veth0_vlan: entered promiscuous mode
[  157.474851][ T9912] veth1_vlan: entered promiscuous mode
[  157.482206][T10004] netlink: 'syz.1.1095': attribute type 11 has an invalid length.
[  157.506561][ T9912] veth0_macvtap: entered promiscuous mode
[  157.511752][ T9912] veth1_macvtap: entered promiscuous mode
[  157.521158][ T9912] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.526895][ T9912] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.531545][ T9912] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.535554][ T9912] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.538435][ T9912] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.541678][ T9912] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.589129][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.591671][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.836537][T10017] netlink: 'syz.1.1098': attribute type 21 has an invalid length.
[  157.839033][T10017] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1098'.
[  157.841898][T10017] netlink: 'syz.1.1098': attribute type 5 has an invalid length.
[  157.846889][T10017] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1098'.
[  158.232856][T10024] netlink: 'syz.1.1100': attribute type 1 has an invalid length.
[  158.235437][T10024] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1100'.
[  158.603416][ T8085] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.416508][ T8085] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.922752][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  159.926761][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  159.930153][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  159.933331][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  159.936144][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  159.948210][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  159.954344][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  159.957003][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  159.959845][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  159.962498][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  160.011888][T10037] lo speed is unknown, defaulting to 1000
[  160.026766][T10036] lo speed is unknown, defaulting to 1000
[  160.266873][T10037] chnl_net:caif_netlink_parms(): no params data found
[  160.305914][T10036] chnl_net:caif_netlink_parms(): no params data found
[  160.445094][T10037] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.449740][T10037] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.459931][T10037] bridge_slave_0: entered allmulticast mode
[  160.466638][T10037] bridge_slave_0: entered promiscuous mode
[  160.502263][ T8085] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.512557][T10037] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.515773][T10037] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.527252][T10037] bridge_slave_1: entered allmulticast mode
[  160.530975][T10037] bridge_slave_1: entered promiscuous mode
[  161.019851][ T8085] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.035072][T10037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.039759][T10037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.042800][T10036] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.047814][T10036] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.050805][T10036] bridge_slave_0: entered allmulticast mode
[  161.056337][T10036] bridge_slave_0: entered promiscuous mode
[  161.077989][T10036] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.081541][T10036] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.084316][T10036] bridge_slave_1: entered allmulticast mode
[  161.087228][T10036] bridge_slave_1: entered promiscuous mode
[  161.107501][T10037] team0: Port device team_slave_0 added
[  161.111746][T10037] team0: Port device team_slave_1 added
[  161.149512][T10037] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.151873][T10037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.161052][T10037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.168004][T10036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.186031][T10037] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.188392][T10037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.198521][T10037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.205881][T10036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.258822][T10037] hsr_slave_0: entered promiscuous mode
[  161.264837][T10037] hsr_slave_1: entered promiscuous mode
[  161.267003][T10037] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  161.269513][T10037] Cannot create hsr debugfs directory
[  161.305611][T10036] team0: Port device team_slave_0 added
[  161.309480][T10057] xt_bpf: check failed: parse error
[  161.317712][ T8085] bridge_slave_1: left allmulticast mode
[  161.322227][ T8085] bridge_slave_1: left promiscuous mode
[  161.324896][ T8085] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.349088][ T8085] bridge_slave_0: left allmulticast mode
[  161.350921][ T8085] bridge_slave_0: left promiscuous mode
[  161.352747][ T8085] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.635780][ T8085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  161.640194][ T8085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  161.645985][ T8085] bond0 (unregistering): Released all slaves
[  161.655061][T10036] team0: Port device team_slave_1 added
[  161.718381][T10036] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.720681][T10036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.729093][T10036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.759788][T10036] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.761938][T10036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.770555][T10036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.843378][T10036] hsr_slave_0: entered promiscuous mode
[  161.846721][T10036] hsr_slave_1: entered promiscuous mode
[  161.848865][T10036] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  161.851310][T10036] Cannot create hsr debugfs directory
[  161.876974][ T8085] hsr_slave_0: left promiscuous mode
[  161.879117][ T8085] hsr_slave_1: left promiscuous mode
[  161.881144][ T8085] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.893735][ T8085] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.897394][ T8085] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  161.899727][ T8085] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.921370][ T8085] veth1_macvtap: left promiscuous mode
[  161.923205][ T8085] veth0_macvtap: left promiscuous mode
[  161.925747][ T8085] veth1_vlan: left promiscuous mode
[  161.927476][ T8085] veth0_vlan: left promiscuous mode
[  161.973952][   T54] Bluetooth: hci2: command tx timeout
[  161.976252][   T54] Bluetooth: hci1: command tx timeout
[  162.217876][ T8085] team0 (unregistering): Port device team_slave_1 removed
[  162.237860][ T8085] team0 (unregistering): Port device team_slave_0 removed
[  162.785951][T10037] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  162.796852][T10037] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  162.804059][T10037] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  162.818689][T10037] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  162.867063][T10036] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  162.876518][T10036] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  162.881887][T10036] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  162.886956][T10036] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  162.920612][ T8085] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.961896][T10037] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.988864][ T8085] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.007005][T10037] 8021q: adding VLAN 0 to HW filter on device team0
[  163.019147][ T8826] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.022065][ T8826] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.036238][ T8826] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.039122][ T8826] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.056953][ T8085] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.112588][ T8085] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.147444][T10036] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.157188][T10036] 8021q: adding VLAN 0 to HW filter on device team0
[  163.161964][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.164393][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.177670][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.179998][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.224656][T10126] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1124'.
[  163.287599][ T8085] bridge_slave_1: left allmulticast mode
[  163.289555][ T8085] bridge_slave_1: left promiscuous mode
[  163.291613][ T8085] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.303773][ T8085] bridge_slave_0: left allmulticast mode
[  163.305676][ T8085] bridge_slave_0: left promiscuous mode
[  163.307746][ T8085] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.528303][ T8085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.534924][ T8085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.539942][ T8085] bond0 (unregistering): Released all slaves
[  163.558656][T10037] 8021q: adding VLAN 0 to HW filter on device batadv0
[  163.589701][T10037] veth0_vlan: entered promiscuous mode
[  163.598360][T10037] veth1_vlan: entered promiscuous mode
[  163.660666][T10037] veth0_macvtap: entered promiscuous mode
[  163.670048][T10037] veth1_macvtap: entered promiscuous mode
[  163.684926][T10037] batman_adv: batadv0: Interface activated: batadv_slave_0
[  163.703151][T10037] batman_adv: batadv0: Interface activated: batadv_slave_1
[  163.716305][T10036] 8021q: adding VLAN 0 to HW filter on device batadv0
[  163.743254][T10037] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.746711][T10037] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.749511][T10037] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.752356][T10037] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.773502][T10140] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1128'.
[  163.810379][ T8085] hsr_slave_0: left promiscuous mode
[  163.813192][ T8085] hsr_slave_1: left promiscuous mode
[  163.817017][ T8085] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.819480][ T8085] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.823037][ T8085] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.829817][ T8085] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.840267][ T8085] veth1_macvtap: left promiscuous mode
[  163.842408][ T8085] veth0_macvtap: left promiscuous mode
[  163.846883][ T8085] veth1_vlan: left promiscuous mode
[  163.848672][ T8085] veth0_vlan: left promiscuous mode
[  164.063860][ T5829] Bluetooth: hci1: command tx timeout
[  164.065734][ T5829] Bluetooth: hci2: command tx timeout
[  164.116801][ T8085] team0 (unregistering): Port device team_slave_1 removed
[  164.138438][ T8085] team0 (unregistering): Port device team_slave_0 removed
[  164.412553][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1130'.
[  164.413092][T10036] veth0_vlan: entered promiscuous mode
[  164.429624][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.432102][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.456762][T10036] veth1_vlan: entered promiscuous mode
[  164.464012][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.467372][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.472764][T10036] veth0_macvtap: entered promiscuous mode
[  164.478891][T10036] veth1_macvtap: entered promiscuous mode
[  164.501329][T10036] batman_adv: batadv0: Interface activated: batadv_slave_0
[  164.511016][T10036] batman_adv: batadv0: Interface activated: batadv_slave_1
[  164.516651][T10036] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.519454][T10036] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.522439][T10036] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.528918][T10036] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.652401][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.656658][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.676434][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.678963][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.691432][T10161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1133'.
[  165.702443][T10184] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1140'.
[  165.722962][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.133773][   T54] Bluetooth: hci1: command tx timeout
[  166.977838][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.023822][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.096882][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.169677][   T13] bridge_slave_1: left allmulticast mode
[  167.172064][   T13] bridge_slave_1: left promiscuous mode
[  167.174407][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.178272][   T13] bridge_slave_0: left allmulticast mode
[  167.180061][   T13] bridge_slave_0: left promiscuous mode
[  167.181858][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.379121][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1142'.
[  167.382446][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  167.393364][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  167.399276][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  167.408593][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  167.414730][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  167.441326][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  167.445675][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  167.449250][   T13] bond0 (unregistering): Released all slaves
[  167.467142][T10198] lo speed is unknown, defaulting to 1000
[  167.592750][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1146'.
[  167.608344][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1146'.
[  167.643393][T10198] chnl_net:caif_netlink_parms(): no params data found
[  167.719369][T10224] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.747249][T10224] tipc: Disabling bearer <eth:syzkaller0>
[  167.768613][   T13] hsr_slave_0: left promiscuous mode
[  167.774187][   T13] hsr_slave_1: left promiscuous mode
[  167.794039][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.796549][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.807239][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.809820][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.824449][   T13] veth1_macvtap: left promiscuous mode
[  167.826318][   T13] veth0_macvtap: left promiscuous mode
[  167.828215][   T13] veth1_vlan: left promiscuous mode
[  167.830004][   T13] veth0_vlan: left promiscuous mode
[  168.068550][   T13] team0 (unregistering): Port device team_slave_1 removed
[  168.087687][   T13] team0 (unregistering): Port device team_slave_0 removed
[  168.213728][ T5829] Bluetooth: hci1: command tx timeout
[  168.320819][T10198] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.323212][T10198] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.333860][T10198] bridge_slave_0: entered allmulticast mode
[  168.336547][T10198] bridge_slave_0: entered promiscuous mode
[  168.346417][T10198] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.348762][T10198] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.355072][T10198] bridge_slave_1: entered allmulticast mode
[  168.357877][T10198] bridge_slave_1: entered promiscuous mode
[  168.424696][T10198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.431382][T10198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.464935][T10198] team0: Port device team_slave_0 added
[  168.469607][T10198] team0: Port device team_slave_1 added
[  168.512207][T10257] xt_hashlimit: size too large, truncated to 1048576
[  168.532866][T10198] batman_adv: batadv0: Adding interface: batadv_slave_0
[  168.535579][T10198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.559193][T10198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  168.572138][T10198] batman_adv: batadv0: Adding interface: batadv_slave_1
[  168.578727][T10198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.594610][T10198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  168.648013][T10198] hsr_slave_0: entered promiscuous mode
[  168.652174][T10198] hsr_slave_1: entered promiscuous mode
[  169.493951][ T5829] Bluetooth: hci2: command tx timeout
[  169.604138][T10198] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  169.611285][T10198] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  169.635411][T10198] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  169.645743][T10198] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  169.712953][T10299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1167'.
[  169.720725][T10198] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.732849][T10198] 8021q: adding VLAN 0 to HW filter on device team0
[  169.738262][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.740632][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.757064][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.759316][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.781974][T10198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  169.788197][T10198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  169.886348][T10198] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.925094][T10198] veth0_vlan: entered promiscuous mode
[  169.930213][T10198] veth1_vlan: entered promiscuous mode
[  169.948057][T10198] veth0_macvtap: entered promiscuous mode
[  169.951924][T10198] veth1_macvtap: entered promiscuous mode
[  169.966639][T10198] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.975251][T10198] batman_adv: batadv0: Interface activated: batadv_slave_1
[  169.981069][T10198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.985844][T10198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.989107][T10198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.991910][T10198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  170.046837][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.049456][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.075275][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.077814][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.602453][T10313] bridge: RTM_NEWNEIGH with invalid ether address
[  171.100620][T10320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1174'.
[  171.433544][T10351] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1184'.
[  171.442125][T10351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1184'.
[  171.487339][T10353] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1185'.
[  171.586461][T10355] netlink: 'syz.3.1186': attribute type 4 has an invalid length.
[  171.642726][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'.
[  171.645977][T10362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1188'.
[  171.662991][T10362] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[  172.081778][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.743222][T10372] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1191'.
[  173.750162][T10371] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1191'.
[  173.797169][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  173.800724][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  173.803514][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  173.809094][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  173.816501][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  173.849966][T10375] lo speed is unknown, defaulting to 1000
[  173.871866][T10380] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551500)
[  173.876716][T10380] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  173.962464][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.000614][T10375] chnl_net:caif_netlink_parms(): no params data found
[  174.038968][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.064338][T10375] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.066761][T10375] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.071461][T10375] bridge_slave_0: entered allmulticast mode
[  174.074414][T10375] bridge_slave_0: entered promiscuous mode
[  174.078605][T10375] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.080932][T10375] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.083307][T10375] bridge_slave_1: entered allmulticast mode
[  174.086798][T10375] bridge_slave_1: entered promiscuous mode
[  174.164723][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.181324][T10375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.190199][T10375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.212631][T10375] team0: Port device team_slave_0 added
[  174.217386][T10375] team0: Port device team_slave_1 added
[  174.243015][T10375] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.246938][T10375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.256327][T10375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  174.271509][T10375] batman_adv: batadv0: Adding interface: batadv_slave_1
[  174.274591][T10375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.282896][T10375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  174.289813][T10396] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  174.343332][T10375] hsr_slave_0: entered promiscuous mode
[  174.347468][T10375] hsr_slave_1: entered promiscuous mode
[  174.349755][T10375] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  174.352267][T10375] Cannot create hsr debugfs directory
[  174.354490][   T13] bridge_slave_1: left allmulticast mode
[  174.358436][   T13] bridge_slave_1: left promiscuous mode
[  174.360337][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.369514][   T13] bridge_slave_0: left allmulticast mode
[  174.371348][   T13] bridge_slave_0: left promiscuous mode
[  174.373224][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.657337][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  174.663015][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  174.667466][   T13] bond0 (unregistering): Released all slaves
[  174.711156][T10410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1203'.
[  174.762943][T10413] syz_tun: entered allmulticast mode
[  174.783847][T10415] syz_tun: left allmulticast mode
[  174.925972][T10419] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1206'.
[  174.959164][   T13] hsr_slave_0: left promiscuous mode
[  174.965344][   T13] hsr_slave_1: left promiscuous mode
[  174.967664][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  174.983715][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  174.988275][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.995728][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.009895][   T13] veth1_macvtap: left promiscuous mode
[  175.011803][   T13] veth0_macvtap: left promiscuous mode
[  175.015460][   T13] veth1_vlan: left promiscuous mode
[  175.017286][   T13] veth0_vlan: left promiscuous mode
[  175.081352][T10428] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1208'.
[  175.292691][   T13] team0 (unregistering): Port device team_slave_1 removed
[  175.320753][   T13] team0 (unregistering): Port device team_slave_0 removed
[  175.822857][T10375] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  175.830816][T10375] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  175.838067][T10375] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  175.845916][T10375] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  175.871896][T10441] nft_compat: unsupported protocol 0
[  175.878550][T10441] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  175.895049][ T5829] Bluetooth: hci2: command tx timeout
[  175.934177][T10441] syzkaller1: entered promiscuous mode
[  175.936013][T10441] syzkaller1: entered allmulticast mode
[  175.975678][T10375] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.987403][T10375] 8021q: adding VLAN 0 to HW filter on device team0
[  175.993956][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.996318][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.003515][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.006023][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.086164][T10460] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1219'.
[  176.094112][T10460] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1219'.
[  176.123235][T10375] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.176341][T10375] veth0_vlan: entered promiscuous mode
[  176.181654][T10375] veth1_vlan: entered promiscuous mode
[  176.202560][T10375] veth0_macvtap: entered promiscuous mode
[  176.207322][T10375] veth1_macvtap: entered promiscuous mode
[  176.213454][T10468] netlink: 'syz.3.1222': attribute type 62 has an invalid length.
[  176.217637][T10375] batman_adv: batadv0: Interface activated: batadv_slave_0
[  176.225393][T10375] batman_adv: batadv0: Interface activated: batadv_slave_1
[  176.235658][T10375] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.238473][T10375] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.241351][T10375] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.249555][T10375] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.311490][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.314289][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.340662][T10476] netlink: 'syz.1.1224': attribute type 4 has an invalid length.
[  176.356798][T10476] netlink: 'syz.1.1224': attribute type 4 has an invalid length.
[  176.363463][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.371884][  T970] lo speed is unknown, defaulting to 1000
[  176.374470][  T970] syz1: Port: 1 Link ACTIVE
[  176.375460][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.525310][T10488] lo speed is unknown, defaulting to 1000
[  176.748778][T10503] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  176.752310][T10503] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  177.607588][T10509] tipc: Started in network mode
[  177.625480][T10509] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711
[  177.628588][T10509] tipc: Enabled bearer <eth:batadv0>, priority 10
[  177.884767][T10519] lo speed is unknown, defaulting to 1000
[  177.930881][T10519] tipc: Started in network mode
[  177.932463][T10519] tipc: Node identity , cluster identity 4711
[  178.252205][T10525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1243'.
[  178.326285][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.635449][ T5869] tipc: Node number set to 8432298
[  180.036590][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.071117][T10536] netlink: 'syz.1.1247': attribute type 22 has an invalid length.
[  180.086407][T10536] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1247'.
[  180.106399][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.132843][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  180.138186][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  180.141147][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  180.149283][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  180.151804][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  180.184835][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.209955][T10539] lo speed is unknown, defaulting to 1000
[  180.227474][T10543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1248'.
[  180.302930][T10548] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.313534][T10548] syzkaller0: entered promiscuous mode
[  180.315467][T10548] syzkaller0: entered allmulticast mode
[  180.372519][   T12] bridge_slave_1: left allmulticast mode
[  180.375336][   T12] bridge_slave_1: left promiscuous mode
[  180.377345][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.381307][   T12] bridge_slave_0: left allmulticast mode
[  180.383165][   T12] bridge_slave_0: left promiscuous mode
[  180.386448][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.589261][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  180.594871][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  180.598522][   T12] bond0 (unregistering): Released all slaves
[  180.606406][T10548] tipc: Resetting bearer <eth:syzkaller0>
[  180.614189][T10546] tipc: Resetting bearer <eth:syzkaller0>
[  180.622670][T10546] tipc: Disabling bearer <eth:syzkaller0>
[  180.627813][T10539] chnl_net:caif_netlink_parms(): no params data found
[  180.679326][T10539] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.681678][T10539] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.685718][T10539] bridge_slave_0: entered allmulticast mode
[  180.688400][T10539] bridge_slave_0: entered promiscuous mode
[  180.691563][T10539] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.713770][T10539] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.723458][T10539] bridge_slave_1: entered allmulticast mode
[  180.726756][T10539] bridge_slave_1: entered promiscuous mode
[  180.759902][T10539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  180.765204][T10539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  180.800028][T10539] team0: Port device team_slave_0 added
[  180.815906][T10558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1252'.
[  180.829257][T10539] team0: Port device team_slave_1 added
[  180.831376][T10558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1252'.
[  180.862238][T10539] batman_adv: batadv0: Adding interface: batadv_slave_0
[  180.867019][T10539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.876545][T10539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  180.881920][T10560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1253'.
[  180.889281][T10539] batman_adv: batadv0: Adding interface: batadv_slave_1
[  180.891568][T10539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.908000][T10539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  180.918456][   T12] hsr_slave_0: left promiscuous mode
[  180.920610][   T12] hsr_slave_1: left promiscuous mode
[  180.923211][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.926158][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.928917][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.931230][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.940855][   T12] veth1_macvtap: left promiscuous mode
[  180.942641][   T12] veth0_macvtap: left promiscuous mode
[  180.945372][   T12] veth1_vlan: left promiscuous mode
[  180.947113][   T12] veth0_vlan: left promiscuous mode
[  181.205156][T10573] xt_hashlimit: size too large, truncated to 1048576
[  181.219213][   T12] team0 (unregistering): Port device team_slave_1 removed
[  181.219533][T10573] warn_alloc: 1 callbacks suppressed
[  181.219543][T10573] syz.1.1256: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  181.234707][T10573] CPU: 1 UID: 0 PID: 10573 Comm: syz.1.1256 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  181.234720][T10573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  181.234725][T10573] Call Trace:
[  181.234729][T10573]  <TASK>
[  181.234733][T10573]  dump_stack_lvl+0x189/0x250
[  181.234766][T10573]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  181.234782][T10573]  ? __pfx_dump_stack_lvl+0x10/0x10
[  181.234790][T10573]  ? __pfx__printk+0x10/0x10
[  181.234800][T10573]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  181.234826][T10573]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  181.234840][T10573]  warn_alloc+0x214/0x310
[  181.234853][T10573]  ? __pfx_warn_alloc+0x10/0x10
[  181.234867][T10573]  ? __get_vm_area_node+0x28f/0x300
[  181.234877][T10573]  ? htable_create+0xfc/0x7a0
[  181.234890][T10573]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  181.234912][T10573]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  181.234923][T10573]  ? rcu_is_watching+0x15/0xb0
[  181.234932][T10573]  ? htable_create+0xfc/0x7a0
[  181.234942][T10573]  ? htable_create+0xfc/0x7a0
[  181.234951][T10573]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  181.234961][T10573]  ? htable_create+0xfc/0x7a0
[  181.234969][T10573]  ? hashlimit_pernet+0x23/0x240
[  181.234982][T10573]  htable_create+0xfc/0x7a0
[  181.234995][T10573]  hashlimit_mt_check_common+0x719/0xa10
[  181.235009][T10573]  xt_check_match+0x3d1/0xab0
[  181.235020][T10573]  ? __pfx___mutex_lock+0x10/0x10
[  181.235030][T10573]  ? __pfx_xt_check_match+0x10/0x10
[  181.235041][T10573]  ? pcpu_alloc_noprof+0xfdd/0x16b0
[  181.235055][T10573]  ? xt_find_match+0x1f7/0x250
[  181.235067][T10573]  translate_table+0x1553/0x2040
[  181.235086][T10573]  ? __pfx_translate_table+0x10/0x10
[  181.235096][T10573]  ? __might_fault+0xb0/0x130
[  181.235113][T10573]  ? _copy_from_user+0x94/0xb0
[  181.235155][T10573]  do_ip6t_set_ctl+0x970/0xce0
[  181.235167][T10573]  ? rcu_is_watching+0x15/0xb0
[  181.235176][T10573]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  181.235193][T10573]  ? __pfx___mutex_lock+0x10/0x10
[  181.235200][T10573]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  181.235211][T10573]  ? __pfx_futex_wait+0x10/0x10
[  181.235221][T10573]  nf_setsockopt+0x26f/0x290
[  181.235235][T10573]  rawv6_setsockopt+0x23b/0x5b0
[  181.235246][T10573]  ? __lock_acquire+0xab9/0xd20
[  181.235256][T10573]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  181.235267][T10573]  ? aa_sock_opt_perm+0x74/0x110
[  181.235279][T10573]  ? sock_common_setsockopt+0x36/0xc0
[  181.235287][T10573]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  181.235295][T10573]  do_sock_setsockopt+0x25a/0x3e0
[  181.235306][T10573]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  181.235317][T10573]  ? __fget_files+0x2a/0x420
[  181.235330][T10573]  __x64_sys_setsockopt+0x18b/0x220
[  181.235341][T10573]  do_syscall_64+0xfa/0x3b0
[  181.235349][T10573]  ? lockdep_hardirqs_on+0x9c/0x150
[  181.235360][T10573]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.235367][T10573]  ? exc_page_fault+0x9f/0xf0
[  181.235379][T10573]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.235386][T10573] RIP: 0033:0x7fe105f8e929
[  181.235394][T10573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  181.235401][T10573] RSP: 002b:00007fe106ec0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  181.235409][T10573] RAX: ffffffffffffffda RBX: 00007fe1061b5fa0 RCX: 00007fe105f8e929
[  181.235415][T10573] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  181.235419][T10573] RBP: 00007fe106010b39 R08: 00000000000005c0 R09: 0000000000000000
[  181.235424][T10573] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000
[  181.235428][T10573] R13: 0000000000000000 R14: 00007fe1061b5fa0 R15: 00007ffecf8f8fc8
[  181.235439][T10573]  </TASK>
[  181.235927][T10573] Mem-Info:
[  181.358772][T10573] active_anon:4974 inactive_anon:0 isolated_anon:0
[  181.358772][T10573]  active_file:1102 inactive_file:38305 isolated_file:0
[  181.358772][T10573]  unevictable:1768 dirty:114 writeback:0
[  181.358772][T10573]  slab_reclaimable:9810 slab_unreclaimable:83613
[  181.358772][T10573]  mapped:18308 shmem:2444 pagetables:1101
[  181.358772][T10573]  sec_pagetables:0 bounce:0
[  181.358772][T10573]  kernel_misc_reclaimable:0
[  181.358772][T10573]  free:259528 free_pcp:16472 free_cma:0
[  181.372806][T10573] Node 0 active_anon:13596kB inactive_anon:0kB active_file:3744kB inactive_file:6556kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43824kB dirty:284kB writeback:0kB shmem:4916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7152kB pagetables:2568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  181.383373][T10573] Node 1 active_anon:6300kB inactive_anon:0kB active_file:664kB inactive_file:146664kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29408kB dirty:172kB writeback:0kB shmem:4860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5744kB pagetables:1836kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  181.385156][   T12] team0 (unregistering): Port device team_slave_0 removed
[  181.393679][T10573] Node 0 DMA free:14964kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:396kB local_pcp:4kB free_cma:0kB
[  181.393707][T10573] lowmem_reserve[]: 0 812 812 812 812
[  181.393724][T10573] Node 0 DMA32 free:271464kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13596kB inactive_anon:0kB active_file:3744kB inactive_file:6556kB unevictable:3536kB writepending:284kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:36088kB local_pcp:15260kB free_cma:0kB
[  181.393746][T10573] lowmem_reserve[]: 0 0 0 0 0
[  181.393762][T10573] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  181.427248][T10573] lowmem_reserve[]: 0 0 854 854 854
[  181.429001][T10573] Node 1 Normal free:293192kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6300kB inactive_anon:0kB active_file:664kB inactive_file:146664kB unevictable:3536kB writepending:172kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:29276kB local_pcp:10400kB free_cma:0kB
[  181.439031][T10573] lowmem_reserve[]: 0 0 0 0 0
[  181.440649][T10573] Node 0 DMA: 3*4kB (U) 3*8kB (U) 3*16kB (U) 3*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 3*512kB (U) 2*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 14964kB
[  181.445499][T10573] Node 0 DMA32: 744*4kB (UM) 300*8kB (UME) 349*16kB (UME) 619*32kB (UME) 316*64kB (UME) 175*128kB (UM) 143*256kB (UME) 79*512kB (UME) 42*1024kB (U) 12*2048kB (UM) 13*4096kB (UM) = 271280kB
[  181.451280][T10573] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  181.456591][T10573] Node 1 Normal: 0*4kB 79*8kB (UME) 195*16kB (UME) 205*32kB (UME) 126*64kB (UME) 217*128kB (UM) 123*256kB (UM) 81*512kB (UM) 62*1024kB (UM) 24*2048kB (UME) 15*4096kB (UM) = 293192kB
[  181.462216][T10573] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  181.465248][T10573] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  181.468283][T10573] 41851 total pagecache pages
[  181.469853][T10573] 0 pages in swap cache
[  181.471234][T10573] Free swap  = 124996kB
[  181.472580][T10573] Total swap = 124996kB
[  181.474201][T10573] 786301 pages RAM
[  181.475442][T10573] 0 pages HighMem/MovableOnly
[  181.476976][T10573] 241085 pages reserved
[  181.478342][T10573] 0 pages cma reserved
[  181.758230][T10539] hsr_slave_0: entered promiscuous mode
[  181.760508][T10539] hsr_slave_1: entered promiscuous mode
[  182.213811][ T5829] Bluetooth: hci2: command tx timeout
[  182.286861][T10539] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  182.296996][T10539] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  182.309098][T10539] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  182.315364][T10539] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  182.348854][T10624] netlink: 'syz.3.1270': attribute type 2 has an invalid length.
[  182.360427][T10624] : entered promiscuous mode
[  182.380715][T10539] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.406700][T10539] 8021q: adding VLAN 0 to HW filter on device team0
[  182.412525][ T8826] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.414803][ T8826] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.421609][ T8826] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.423950][ T8826] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.564383][T10539] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.605986][T10539] veth0_vlan: entered promiscuous mode
[  182.610936][T10539] veth1_vlan: entered promiscuous mode
[  182.627374][T10539] veth0_macvtap: entered promiscuous mode
[  182.631354][T10539] veth1_macvtap: entered promiscuous mode
[  182.642421][T10539] batman_adv: batadv0: Interface activated: batadv_slave_0
[  182.646162][T10649] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1273'.
[  182.652450][T10539] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.665630][T10539] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.668559][T10539] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.671395][T10539] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.675937][T10539] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.680764][T10651] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  182.685955][T10651] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  182.751879][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.758926][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.773397][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.777376][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.978665][T10659] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1277'.
[  183.213847][T10670] x_tables: duplicate underflow at hook 2
[  183.301439][T10672] tipc: Enabled bearer <ib:caif0>, priority 10
[  183.390663][T10674] ipt_REJECT: ECHOREPLY no longer supported.
[  183.429561][T10676] syzkaller0: entered promiscuous mode
[  183.431387][T10676] syzkaller0: entered allmulticast mode
[  183.473518][T10678] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1285'.
[  183.529984][T10678] netlink: 10828 bytes leftover after parsing attributes in process `syz.1.1285'.
[  183.568336][T10689] blkio.reset_stats is deprecated
[  183.676570][T10700] pim6reg: entered allmulticast mode
[  183.679107][T10700] pim6reg: left allmulticast mode
[  183.732894][T10704] can: request_module (can-proto-4) failed.
[  183.739696][T10704] netlink: zone id is out of range
[  183.743480][T10704] netlink: zone id is out of range
[  183.750259][T10704] netlink: zone id is out of range
[  183.752104][T10704] netlink: zone id is out of range
[  183.755089][T10704] netlink: zone id is out of range
[  183.757468][T10704] netlink: zone id is out of range
[  183.759687][T10704] netlink: zone id is out of range
[  183.763811][T10704] netlink: zone id is out of range
[  183.765527][T10704] netlink: zone id is out of range
[  183.767420][T10704] netlink: zone id is out of range
[  183.919684][T10713] syzkaller0: entered promiscuous mode
[  183.921577][T10713] syzkaller0: entered allmulticast mode
[  184.067187][T10724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1297'.
[  184.106309][T10729] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  184.203394][T10737] syzkaller0: entered promiscuous mode
[  184.205523][T10737] syzkaller0: entered allmulticast mode
[  184.674510][ T8085] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.417867][ T8085] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.492511][ T8085] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.564474][ T8085] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.601733][T10756] __nla_validate_parse: 1 callbacks suppressed
[  186.601744][T10756] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1306'.
[  186.686745][ T8085] bridge_slave_1: left allmulticast mode
[  186.689896][ T8085] bridge_slave_1: left promiscuous mode
[  186.691938][ T8085] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.699207][ T8085] bridge_slave_0: left allmulticast mode
[  186.701141][ T8085] bridge_slave_0: left promiscuous mode
[  186.703064][ T8085] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.720044][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  186.726221][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  186.730036][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  186.734347][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  186.737863][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  186.910873][ T8085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  186.915601][ T8085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  186.919169][ T8085] bond0 (unregistering): Released all slaves
[  186.943277][T10758] lo speed is unknown, defaulting to 1000
[  187.073252][T10758] chnl_net:caif_netlink_parms(): no params data found
[  187.157098][ T8085] hsr_slave_0: left promiscuous mode
[  187.159348][ T8085] hsr_slave_1: left promiscuous mode
[  187.162179][ T8085] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.164777][ T8085] batman_adv: batadv0: Removing interface: batadv_slave_0
[  187.168586][ T8085] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.171609][ T8085] batman_adv: batadv0: Removing interface: batadv_slave_1
[  187.184065][ T8085] veth1_macvtap: left promiscuous mode
[  187.185995][ T8085] veth0_macvtap: left promiscuous mode
[  187.187943][ T8085] veth1_vlan: left promiscuous mode
[  187.189948][ T8085] veth0_vlan: left promiscuous mode
[  187.571582][ T8085] team0 (unregistering): Port device team_slave_1 removed
[  187.600606][ T8085] team0 (unregistering): Port device team_slave_0 removed
[  187.833317][T10758] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.837817][T10758] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.840213][T10758] bridge_slave_0: entered allmulticast mode
[  187.843036][T10758] bridge_slave_0: entered promiscuous mode
[  187.849810][T10758] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.855259][T10758] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.857552][T10758] bridge_slave_1: entered allmulticast mode
[  187.866494][T10758] bridge_slave_1: entered promiscuous mode
[  187.886736][T10778] lo speed is unknown, defaulting to 1000
[  187.900187][T10758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.925696][T10758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.965584][T10788] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1312'.
[  187.985138][T10758] team0: Port device team_slave_0 added
[  187.998336][T10777] delete_channel: no stack
[  188.023092][T10758] team0: Port device team_slave_1 added
[  188.056685][T10758] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.060217][T10758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.068222][T10758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.079414][T10758] batman_adv: batadv0: Adding interface: batadv_slave_1
[  188.081799][T10758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.090750][T10758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.100732][T10797] netlink: 'syz.1.1315': attribute type 10 has an invalid length.
[  188.130957][T10796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  188.141670][T10758] hsr_slave_0: entered promiscuous mode
[  188.144135][T10758] hsr_slave_1: entered promiscuous mode
[  188.301507][T10814] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1319'.
[  188.501910][T10823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1323'.
[  188.550135][T10827] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1324'.
[  188.637457][T10758] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  188.644902][T10758] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  188.651028][T10758] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  188.658759][T10758] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  188.671597][T10833] ------------[ cut here ]------------
[  188.674517][T10833] WARNING: CPU: 0 PID: 10833 at fs/exec.c:119 path_noexec+0x1af/0x200
[  188.677805][T10833] Modules linked in:
[  188.679894][T10833] CPU: 0 UID: 0 PID: 10833 Comm: syz.1.1326 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  188.685794][T10833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  188.690155][T10833] RIP: 0010:path_noexec+0x1af/0x200
[  188.692371][T10833] Code: 02 31 ff 48 89 de e8 d0 3d 8a ff d1 eb eb 07 e8 e7 38 8a ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 08 15 3c 09 cc e8 d2 38 8a ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6
[  188.700609][T10833] RSP: 0018:ffffc90002b57bd8 EFLAGS: 00010287
[  188.703222][T10833] RAX: ffffffff8235fd9e RBX: ffff888027fa3280 RCX: 0000000000080000
[  188.707314][T10833] RDX: ffffc90003c03000 RSI: 000000000000032a RDI: 000000000000032b
[  188.710870][T10833] RBP: 0000000000080000 R08: ffff8881077c1cc0 R09: 0000000000000003
[  188.714303][T10833] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000002
[  188.717540][T10833] R13: 1ffff9200056af90 R14: 0000000000000000 R15: dffffc0000000000
[  188.720771][T10833] FS:  00007fe106ec06c0(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[  188.724638][T10833] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  188.727307][T10833] CR2: 0000200000000680 CR3: 0000000106b24000 CR4: 00000000000006f0
[  188.730511][T10833] Call Trace:
[  188.731941][T10833]  <TASK>
[  188.733195][T10833]  do_mmap+0xa43/0x10d0
[  188.735242][T10833]  ? __pfx_do_mmap+0x10/0x10
[  188.737383][T10833]  ? down_write_killable+0x178/0x230
[  188.739628][T10833]  ? end_current_label_crit_section+0x152/0x180
[  188.742264][T10833]  ? __pfx_down_write_killable+0x10/0x10
[  188.744742][T10833]  vm_mmap_pgoff+0x31b/0x4c0
[  188.746701][T10833]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  188.748907][T10833]  ? __fget_files+0x2a/0x420
[  188.750788][T10833]  ? __fget_files+0x3a0/0x420
[  188.751805][T10758] kthread_run failed with err -4
[  188.752369][T10833]  ? __fget_files+0x2a/0x420
[  188.756006][T10833]  ksys_mmap_pgoff+0x51f/0x760
[  188.757565][T10833]  do_syscall_64+0xfa/0x3b0
[  188.759025][T10833]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.760692][T10833]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.762661][T10833]  ? exc_page_fault+0x9f/0xf0
[  188.764448][T10833]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.766364][T10833] RIP: 0033:0x7fe105f8e929
[  188.767815][T10833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.774129][T10833] RSP: 002b:00007fe106ec0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  188.776798][T10833] RAX: ffffffffffffffda RBX: 00007fe1061b5fa0 RCX: 00007fe105f8e929
[  188.779285][T10833] RDX: 000000000000000c RSI: 0000000000002000 RDI: 0000200000ffc000
[  188.781786][T10833] RBP: 00007fe106010b39 R08: 0000000000000005 R09: 0000000022f0b000
[  188.783792][T10831] Bluetooth: hci1: Opcode 0x080f failed: -4
[  188.784336][T10833] R10: 0000000000001012 R11: 0000000000000246 R12: 0000000000000000
[  188.789020][T10833] R13: 0000000000000000 R14: 00007fe1061b5fa0 R15: 00007ffecf8f8fc8
[  188.791546][T10833]  </TASK>
[  188.792562][T10833] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  188.794948][T10833] CPU: 0 UID: 0 PID: 10833 Comm: syz.1.1326 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  188.798850][T10833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  188.802136][T10833] Call Trace:
[  188.803248][T10833]  <TASK>
[  188.804238][T10833]  dump_stack_lvl+0x99/0x250
[  188.805763][T10833]  ? __asan_memcpy+0x40/0x70
[  188.807246][T10833]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.808913][T10833]  ? __pfx__printk+0x10/0x10
[  188.810434][T10833]  panic+0x2db/0x790
[  188.811701][T10833]  ? __pfx_panic+0x10/0x10
[  188.813174][T10833]  __warn+0x31b/0x4b0
[  188.814455][T10833]  ? path_noexec+0x1af/0x200
[  188.815958][T10833]  ? path_noexec+0x1af/0x200
[  188.817448][T10833]  report_bug+0x2be/0x4f0
[  188.818826][T10833]  ? path_noexec+0x1af/0x200
[  188.820311][T10833]  ? path_noexec+0x1af/0x200
[  188.821793][T10833]  ? path_noexec+0x1b1/0x200
[  188.823240][T10833]  handle_bug+0x84/0x160
[  188.824581][T10833]  exc_invalid_op+0x1a/0x50
[  188.826027][T10833]  asm_exc_invalid_op+0x1a/0x20
[  188.827567][T10833] RIP: 0010:path_noexec+0x1af/0x200
[  188.829189][T10833] Code: 02 31 ff 48 89 de e8 d0 3d 8a ff d1 eb eb 07 e8 e7 38 8a ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 08 15 3c 09 cc e8 d2 38 8a ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6
[  188.835129][T10833] RSP: 0018:ffffc90002b57bd8 EFLAGS: 00010287
[  188.837008][T10833] RAX: ffffffff8235fd9e RBX: ffff888027fa3280 RCX: 0000000000080000
[  188.839472][T10833] RDX: ffffc90003c03000 RSI: 000000000000032a RDI: 000000000000032b
[  188.841894][T10833] RBP: 0000000000080000 R08: ffff8881077c1cc0 R09: 0000000000000003
[  188.844352][T10833] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000002
[  188.846803][T10833] R13: 1ffff9200056af90 R14: 0000000000000000 R15: dffffc0000000000
[  188.849270][T10833]  ? path_noexec+0x1ae/0x200
[  188.850774][T10833]  ? path_noexec+0x1ae/0x200
[  188.852244][T10833]  do_mmap+0xa43/0x10d0
[  188.853596][T10833]  ? __pfx_do_mmap+0x10/0x10
[  188.855132][T10833]  ? down_write_killable+0x178/0x230
[  188.856856][T10833]  ? end_current_label_crit_section+0x152/0x180
[  188.858897][T10833]  ? __pfx_down_write_killable+0x10/0x10
[  188.860699][T10833]  vm_mmap_pgoff+0x31b/0x4c0
[  188.862174][T10833]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  188.863785][T10833]  ? __fget_files+0x2a/0x420
[  188.865285][T10833]  ? __fget_files+0x3a0/0x420
[  188.866762][T10833]  ? __fget_files+0x2a/0x420
[  188.868248][T10833]  ksys_mmap_pgoff+0x51f/0x760
[  188.869777][T10833]  do_syscall_64+0xfa/0x3b0
[  188.871248][T10833]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.872899][T10833]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.874835][T10833]  ? exc_page_fault+0x9f/0xf0
[  188.876356][T10833]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.878217][T10833] RIP: 0033:0x7fe105f8e929
[  188.879776][T10833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.885734][T10833] RSP: 002b:00007fe106ec0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  188.888362][T10833] RAX: ffffffffffffffda RBX: 00007fe1061b5fa0 RCX: 00007fe105f8e929
[  188.890827][T10833] RDX: 000000000000000c RSI: 0000000000002000 RDI: 0000200000ffc000
[  188.893356][T10833] RBP: 00007fe106010b39 R08: 0000000000000005 R09: 0000000022f0b000
[  188.895813][T10833] R10: 0000000000001012 R11: 0000000000000246 R12: 0000000000000000
[  188.898297][T10833] R13: 0000000000000000 R14: 00007fe1061b5fa0 R15: 00007ffecf8f8fc8
[  188.900817][T10833]  </TASK>
[  188.902464][T10833] Kernel Offset: disabled
[  188.903907][T10833] Rebooting in 86400 seconds..

VM DIAGNOSIS:
06:16:59  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bfc05 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000004e7a RDI=0000000000004e7b RBP=ffffc90002b57550 RSP=ffffc90002b57378
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff854786b0
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff85478727 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe106ec06c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000680 CR3=0000000106b24000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fe106185478 00007fe106185450 XMM03=00007fe106185488 00007fe106185480
XMM04=00007fe106ced100 00007fe106185440 XMM05=00007fe106185458 00007fe1061854a0
XMM06=00007fe106185498 00007fe106185490 XMM07=00007fe106185488 00007fe106185480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fe106011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc90007b40000 RBX=1ffff110041dd25a RCX=ffff88810b618000 RDX=0000000000010000
RSI=ffff888020ee8000 RDI=0000000000000017 RBP=0000000000000080 RSP=ffffc900001e0da0
R8 =ffffffff8fa1f3f7 R9 =1ffffffff1f43e7e R10=dffffc0000000000 R11=ffffffff868f6e50
R12=dffffc0000000000 R13=ffff888020ee92d0 R14=ffff888020ee8000 R15=dffffc0000000000
RIP=ffffffff868f6e98 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007feb288e7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007feb27d856a3 00007feb27d856a3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=01000402d0c20800 01080006013afc08
XMM06=801000000324a080 1000118004010000 XMM07=0808060601689026 8090080011e00300
XMM08=100011d003001000 11c00302100011b0 XMM09=6769726f5f74696e 695f636e5f766461
XMM10=666666666666660a 342e79656b5f5f2e XMM11=6174616220622030 6534633130613966
XMM12=6666666666660a31 342e79656b5f5f2e XMM13=73766f2062203061 6663313061396666
XMM14=2e79656b5f5f2e74 656e5f74696e695f XMM15=6331306139666666 66666666660a3334
