last executing test programs:

56.871119906s ago: executing program 2:
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket(0x10, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) (async)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000002c0), 0x4)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25)

55.956237585s ago: executing program 2:
unshare(0x20000400) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) (async)
r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000180), 0x12)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async)
write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) (async, rerun: 32)
write$cgroup_freezer_state(r1, &(0x7f0000000200)='THAWED\x00', 0x7) (rerun: 32)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x100)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}}, 0x0)
r5 = socket(0x10, 0x803, 0x9)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r6, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="48020000", @ANYRESHEX=0x0, @ANYBLOB="100025bd7000fbdbdf251b00000008009a0001000000940022802c00008008000400090000000800010000000000080007000800000008000600f9ffffff08000500090000001c000080080004003b1c000008000600ff01000008000600090000003c00008008000100050000000800060004000000080004000100000008000300000000000800030001f8ffff080005000800000008000500ff0300000c00008008000100980400008801228034000080080005000500000008000200000000000800030002000000080007000800000008000100060000000800010006000000440000800800010004000000080003000100010008000700000000000800050004000000080004000400000008000500216f075d08000700ffffff7f080006000600000044000080080003000180ffff08000700010000000800010000000000080006000300000008000100090000000800050007000000080002000300000008000500000100003c00008008000100fcffffff08000200e0000000080007000000000008000600c32614b79f400000000800040008000000080003000800000008000300090000002400008008000600030000000800070007000000080006000700000008000500ffffff7f4c000080080001000600000008000200f8ffffff0800050001000100080005000000000008000600010100000800060040000000080006000200000008000400ff7f000008000600030000001c000080080003000300000008000200172d2930080003001f000000070021006161000008009a0002000000"], 0x248}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6", 0x18) (async)
r9 = accept$alg(r8, 0x0, 0x0)
recvmmsg(r9, &(0x7f00000005c0)=[{{0x0, 0xf000002, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x8002}], 0x5, 0x0, 0x200000000000600, 0x7000000}}], 0xff00, 0x0, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280080040"], 0x3c}}, 0x0) (async, rerun: 64)
sendfile(r9, r7, 0x0, 0x10000a006) (async, rerun: 64)
sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800001f5600010000e400f70000000007020000", @ANYRES16, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x2001}, 0x810) (async)
ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x2000000b)

54.969513784s ago: executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fdf00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000080019008d0d"], 0x4c}}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @loopback, 0x2}, 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@cgroup, 0xffffffffffffffff, 0xe, 0x4, 0x0, @prog_fd}, 0x20)
sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x1b, 0xd, &(0x7f0000000480)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff80000}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x1}, @cb_func={0x18, 0x7}, @ldst={0x0, 0x2, 0x6, 0x8, 0x6, 0xffffffffffffffe0, 0x4}, @ldst={0x1, 0x1, 0x6, 0xa, 0xa, 0x40, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @generic={0x6, 0xb, 0x5, 0x5, 0xfffffffb}], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x8e, &(0x7f0000000100)=""/142, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x90)
setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000003c0)='illinois\x00', 0x9)
setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000001c0)=0xcd0, 0x4)
sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)="14fafa37bf25f04bda99eefbbdd8d76b8136ee6cfdee25bdb2d1873ce347c7b623dd3140cfb2326fa1bf9f1dc2375eeba25df45aefdb3c49a4e7ffab4ed7181180bde98af644d11f", 0x48}, {&(0x7f0000000240)="16a6fca1943502d7ac24a672321690c0215b73b201e67576ef51abd7cb2bcd21ebc41893e255eea9bba2", 0x2a}, {&(0x7f0000000580)="c3e361cabaa484b0c035139c64932a377f926342f6b052b6a3b273c187a5e0c26fe049092a54eb9b6be2ac2df69e6a36fad43d88851aa162b6aa0d4734e36aad318ea99586ca9f642920068473af2e99670314", 0x53}], 0x3}, 0x0)
sendto$inet(r8, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000000300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000a40400240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32=r9, @ANYBLOB="0800040000000000"], 0x4c}, 0x9}, 0x0)

54.07915769s ago: executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
r1 = socket$inet6(0xa, 0x3, 0x38)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=',]', 0x2}], 0x1}, 0xc9c0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000340)="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", 0x583}], 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x0, 0x0, @prog_id}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="1800000000000000000000080000000085000000a800000095000000555400807e4c204b6079d6f1572bf66b98a9d379ad33b429747861af88a111189b12a82f7d"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x90)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f00)={@map=0x1, 0x36, 0x1, 0x80000000, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000e40)=[0x0, 0x0, 0x0], &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r5, r4, 0x2d, 0x36, 0x4000, @link_fd, r6}, 0x20)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000029000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
unshare(0x8040480)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T2(r9, 0x102, 0x7, 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="48000000100017fe0000000000000000dc9dcd9a", @ANYRES32=0x0, @ANYRESOCT=0x0], 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0)

53.871566285s ago: executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2219}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0)

42.20774181s ago: executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xf4240}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'veth1\x00', 0x1000})
r2 = socket(0x1, 0x803, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r5 = socket(0x840000000002, 0x3, 0xff)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000140)=0xc)
ioctl$TUNSETGROUP(r4, 0x400454ce, r6)
ioctl$TUNSETGROUP(r1, 0x400454ce, r6)
sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0xe, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x15)
socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340))
r7 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9fca01001800000015000000000002010000000000008760"], &(0x7f0000001f80)=""/237, 0x1a, 0xed, 0x1}, 0x20)
getpeername$packet(r3, &(0x7f0000000180), &(0x7f0000000240)=0x14)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002900c0002001c0000001f000000060001006b00000000000000", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0)

41.862598661s ago: executing program 0:
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, 0x0, 0x0}, 0x20)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x101, 0x3, 0x4}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
socket(0x11, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team0\x00', <r3=>0x0})
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}}, 0x0)

41.730957449s ago: executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x12, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0xc, 0x17, 0x0, 0x0, @u64}]}, 0x20}, 0x1, 0x3000000}, 0x0)

41.567488821s ago: executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3401000016008502000000000000000020010000000000000000000000000002e000000200"/60, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb"], 0x134}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x140, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0)

41.519341456s ago: executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2219}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0)

41.435477093s ago: executing program 0:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x0, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b402000000000000850000000600000095000000000000009b69602f8908181909772129cd5f9e32b760ff84b09df3b4040370df60c6fc4b39f4960f5be397c2079a3ca1b058285c54cf685476c7ab4e7e9252c08f546291cf614a396fd7f4c1d84e19ba89c813e3f2cc"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000600)=""/222}, 0x90)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x3a, &(0x7f0000000640)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0x18, 0x0, @wg=@data}}}}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x70bd26, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x20004141)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x8, 0x7ff, 0x3ff, 0x8003, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4b, 0x4b, 0x6, [@volatile={0x3}, @datasec={0x9, 0x3, 0x0, 0xf, 0x3, [{0x0, 0x0, 0x10000}, {0x0, 0x0, 0x6}, {0x3, 0x100}], "4dac35"}, @enum]}, {0x0, [0x0, 0x0, 0x30, 0x0]}}, 0x0, 0x6a}, 0x20)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x12, 0xffffffffffffffff, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x10000, @mcast1}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', <r5=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x90, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x7, 0x0, 0x66e99, 0x74c4d}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x48, 0x2, 0x0, 0x1, [@IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x8}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x5}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0xfd}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x8}, @IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @broadcast}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x1}]}}}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_vlan\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x90}}, 0x20000800)

41.05934035s ago: executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYBLOB="96ddd324e965128616cb7ebea55975a5b2e38e1edad2698ff29efb7c1c584d3498146307d633ae42d727602e218b8fecafa78778fd44ef9e645c6d83761a4a69858baa953605b3053b544d9358998c92b66f7a6a2ca4236baa157e8db0ae480314ede08647dc5cf448c4b98bcd62a3e2343132ff282da9f4b99ee23e96b67d61d64b6d0130d21f2abd2ba654e3a462a1ea1d9dd50247c69dd67d23a4f3082d2331a9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4010000160001000000000000000000fe8000"/31, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033"], 0x1a4}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000e80)=@delpolicy={0xfc, 0x14, 0x4, 0x70bd2d, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@multicast2, 0x4e22, 0x1, 0x0, 0x0, 0x2, 0x20, 0x20, 0x3c}, 0x6e6bb9, 0x1}, [@policy={0xac, 0x7, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x7, 0x0, 0x45a3, 0x0, 0xa0, 0x40, 0x2f}, {0x7f, 0x2, 0x6, 0x7, 0x0, 0x80000000, 0x3}, {0x6, 0x2, 0x0, 0x6}, 0x6, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='block_bio_remap\x00', r1}, 0x10)
pipe(&(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x8000f28, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000000))
recvmmsg(r2, &(0x7f0000000d80)=[{{&(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000580)=""/202, 0xca}], 0x2, &(0x7f00000006c0)=""/211, 0xd3}, 0x101}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/23, 0x17}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/84, 0x54}, {&(0x7f00000008c0)=""/140, 0x8c}, {&(0x7f0000000980)}, {&(0x7f00000009c0)=""/235, 0xeb}, {&(0x7f0000000ac0)=""/35, 0x23}, {&(0x7f0000000b00)=""/70, 0x46}], 0x8, &(0x7f0000000c00)=""/104, 0x68}, 0x7}, {{&(0x7f0000000c80)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)=""/41, 0x29}, 0x4}], 0x3, 0x23, &(0x7f0000000e40)={0x77359400})
write(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x7, &(0x7f00000002c0), 0x4)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0xf000)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r9=>0x0})
bind$can_raw(r8, &(0x7f0000000180)={0x1d, r9}, 0x10)
bind$can_raw(r8, &(0x7f0000000100), 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x24, &(0x7f0000000000), 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001640)={@cgroup=r0, 0xffffffffffffffff, 0x32, 0x0, 0x0, @link_id=0xffffffffffffffff}, 0x9)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_INTERFACE(r10, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x8806}, 0x2400c875)

35.963697306s ago: executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x170, 0x7, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0xcc, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x4c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x800}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x6}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf5}]}, @NFTA_RULE_POSITION={0xc}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_USERDATA={0x4}]}, 0x170}, 0x1, 0x0, 0x0, 0x4}, 0x24044054)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r1, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@loopback}}, 0xe8)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='dctcp\x00', 0x6)

35.874517694s ago: executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x3}, [@snprintf={{}, {}, {}, {0x3, 0x3, 0x6, 0x3, 0x8, 0xfff0, 0xf1}, {}, {}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe02}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r4, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}, 0x1, 0x0, 0x0, 0x2400c800}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
listen(r5, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000480)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466b340e28b05c93a072528230718"}]}}}}}}}}, 0x0)

35.411683682s ago: executing program 4:
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="e000000010000905000000000000000008004300ff0300002f67e2171ef9582248fda90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27d0000d57ef9b7bf852c8986626691b01b5f44f4ce28712c2828"], 0xe0}], 0x1}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0xc4, r3, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x2b, 0x3}, {0x9, 0x5}, {0x2}, {0x4, 0x1}, {0x6}, {0x3, 0x1}], "17eccc8d6b34e86b"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x3, 0x6}, {0x9, 0x7}, {0x1, 0x2}, {0x0, 0x1}, {0xe1}, {0x2, 0x3}, {0x8}, {0x5, 0x4}, {0x32, 0x2}, {0x8, 0x4}], "a983b0f83c2156b6"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {0x3, 0x6}, {0x27, 0x4}, {0x3, 0x6}], "f5718746c357159d"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x30}, {0x1, 0x3}, {0x5, 0x5}, {0x0, 0x2}, {0x7, 0x7}, {0x1b, 0x4}, {0x9, 0x3}, {0x81, 0x6}, {0x2, 0x7}, {0x9, 0x3}, {0x0, 0x5}, {0x5, 0x6}, {0xff, 0x5}, {0x1, 0x7}, {0x1f, 0x4}, {0x45, 0x2}, {0x5, 0x1}], "34aa4011018e2595"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x50, 0x1}, {0x7, 0x7}, {0x81, 0x6}, {0x0, 0x2}, {0x3, 0x3}, {0x7f}, {0x2, 0x5}, {0x6, 0x1}, {0x3, 0x6}, {0x5, 0x4}, {0x1, 0x2}, {0x70, 0x1}, {0x1f, 0x3}, {0x6, 0x4}, {0x7, 0x4}, {0x7f, 0x5}, {0x1, 0x5}, {0x12, 0x5}, {0x1, 0x7}, {0x3}], "ae319f27e05e3ac2"}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20044000}, 0x800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x30}}, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15) (async)
sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="e000000010000905000000000000000008004300ff0300002f67e2171ef9582248fda90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27d0000d57ef9b7bf852c8986626691b01b5f44f4ce28712c2828"], 0xe0}], 0x1}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0xc4, r3, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x2b, 0x3}, {0x9, 0x5}, {0x2}, {0x4, 0x1}, {0x6}, {0x3, 0x1}], "17eccc8d6b34e86b"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x3, 0x6}, {0x9, 0x7}, {0x1, 0x2}, {0x0, 0x1}, {0xe1}, {0x2, 0x3}, {0x8}, {0x5, 0x4}, {0x32, 0x2}, {0x8, 0x4}], "a983b0f83c2156b6"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {0x3, 0x6}, {0x27, 0x4}, {0x3, 0x6}], "f5718746c357159d"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x30}, {0x1, 0x3}, {0x5, 0x5}, {0x0, 0x2}, {0x7, 0x7}, {0x1b, 0x4}, {0x9, 0x3}, {0x81, 0x6}, {0x2, 0x7}, {0x9, 0x3}, {0x0, 0x5}, {0x5, 0x6}, {0xff, 0x5}, {0x1, 0x7}, {0x1f, 0x4}, {0x45, 0x2}, {0x5, 0x1}], "34aa4011018e2595"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x50, 0x1}, {0x7, 0x7}, {0x81, 0x6}, {0x0, 0x2}, {0x3, 0x3}, {0x7f}, {0x2, 0x5}, {0x6, 0x1}, {0x3, 0x6}, {0x5, 0x4}, {0x1, 0x2}, {0x70, 0x1}, {0x1f, 0x3}, {0x6, 0x4}, {0x7, 0x4}, {0x7f, 0x5}, {0x1, 0x5}, {0x12, 0x5}, {0x1, 0x7}, {0x3}], "ae319f27e05e3ac2"}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20044000}, 0x800) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x30}}, 0x0) (async)

35.154699862s ago: executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2b, 0x80801, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x8, &(0x7f0000000340), 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(0xffffffffffffffff, &(0x7f0000000040)='\f\x00', 0x2, 0x0, 0x0, 0x0) (async)
sendto$inet(0xffffffffffffffff, &(0x7f0000000040)='\f\x00', 0x2, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106}, 0x18) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106}, 0x18)
socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) (async)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) (async)
bind$alg(r3, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x441}], 0x1}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x441}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r4}, 0x38) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r4}, 0x38)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000a00)="b011d08afc99cf6754d4c259d71c7596afc4a766", 0x14)
accept$alg(r3, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x14) (async)
r5 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)=ANY=[@ANYBLOB="380000000314010000000000000000080900020073797a30000000000800410072786500140033006c6f"], 0x38}}, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)

31.767987552s ago: executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x31)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_TARGET={0x8, 0x8}]}}]}, 0x40}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0)
bpf$MAP_CREATE(0x15, &(0x7f00000002c0)=@bloom_filter, 0x48)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x70, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000280)={'pim6reg\x00', 0x400})
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000040)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000400000004000000000000000000000000eb6bf5d96b3d6595b7e7cd326849d7b90c61a00200d994ec77bc88775e661e56c9451f127edebe11c64a28b49eb848b6bd116c8d6a8e28b5dd8a6efb6850532863a57cc7d20f54a8f6c3d104addaef4ae9146f4c5823558351cb2de2a01b2321685733db1979d0507f9ba8bcf2"], 0x3c}}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r10, 0x0)
getsockopt$SO_TIMESTAMP(r8, 0x1, 0x1d, 0x0, &(0x7f0000000380))

31.212616351s ago: executing program 3:
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={<r1=>0x0, 0x1}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r1, 0xec7}, 0xc)
ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000100)=0x6)
r2 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8946, &(0x7f0000000140)={'wlan1\x00', 0x800})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000180)={0x0, 'vxcan1\x00', {0x3}, 0x7})
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000001c0)={0x8, {{0x2, 0x4e21, @local}}}, 0x88)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e24, 0x3, @remote, 0x6}, 0x1c)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x2048440)
r4 = socket$kcm(0x29, 0x0, 0x0)
sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x11c, 0x2, 0x2, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'sane-20000\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3f}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x70}, @CTA_EXPECT_TUPLE={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x30}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x800}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8844}, 0x44)
syz_emit_ethernet(0x56, &(0x7f00000006c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @multicast, @void, {@canfd={0xd, {{0x3, 0x1, 0x0, 0x1}, 0xd, 0x3, 0x0, 0x0, "cdc59359e50cbc9f1836d7104803ce3f14327c2a81852b8058b15765d5278fdd675ee5f091dfd83d62a5345cdaf4b073e5212e03e3c6e4fcadc255e654e89b9f"}}}}, &(0x7f0000000740)={0x1, 0x4, [0xc7e, 0xc68, 0x908, 0x79d]})
ioctl(r0, 0x1, &(0x7f0000000780)="1f6c9dbf30a742628a05d765cc6d7126")
r6 = accept(0xffffffffffffffff, &(0x7f00000007c0)=@can, &(0x7f0000000840)=0x80)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r0)
sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4820000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, r7, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "fb70ac363e8f36cd7292dc670468c3efe0d3f223648490"}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8800}, 0xb0)
ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000a00)={'vlan1\x00', {0x2, 0x0, @broadcast}})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r6)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, r8, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x76}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x20004080)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000b80)={<r9=>r0, 0x6, 0xfffffffffffff000, 0x5})
epoll_pwait(r9, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}], 0x5, 0x401, &(0x7f0000000c00)={[0x2]}, 0x8)
ioctl$sock_proto_private(r6, 0x89eb, &(0x7f0000000c40)="b5040e7187f89006d535511fbf6afeca9d9e1260116dfe121703")
sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, 0x0, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000dc0), r6)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000ec0)={&(0x7f0000000d80), 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x68, r10, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x9, @link='syz0\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c880}, 0x20000004)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000f00), &(0x7f0000000f40)=0x4)

31.16628039s ago: executing program 1:
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='percpu_alloc_percpu\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000009e8685000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000cbd520850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r3)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='kmem_cache_free\x00', r4}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080), 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

31.015305008s ago: executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791400000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xf, &(0x7f0000000180)=[{&(0x7f0000000200)="d8000000580081044e81f782db44b910b58368ea1d080009000300e8fe55a1180015000600142603600e121400210000000401a8001600a40001", 0x3a}], 0x1}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x84}}, @common=@hbh={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x160, 0x1a0, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @empty, @private2}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x8d}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000029000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00'}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES8=r1, @ANYRES64=r1], 0xbd46)

30.990590749s ago: executing program 3:
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x5c}}, 0x0)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="a6be00000a0a01020000000000000000020000000900010073797a3013000000"], 0x20}}, 0x0)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
r4 = gettid()
sendmsg$AUDIT_SET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x800, 0x70bd27, 0x25dfdbfe, {0x10, 0x0, 0x0, r4, 0xd2, 0x901, 0x175, 0x5, 0x0, 0x6, 0x7}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40041}, 0x0)

30.915696664s ago: executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x170, 0x7, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0xcc, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x4c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x800}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x6}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf5}]}, @NFTA_RULE_POSITION={0xc}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_USERDATA={0x4}]}, 0x170}, 0x1, 0x0, 0x0, 0x4}, 0x24044054)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='dctcp\x00', 0x6)

30.8733429s ago: executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r2}, 0x10)
write$cgroup_type(r0, &(0x7f0000000140), 0x9)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x20008000)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0)
sendto$inet6(r4, &(0x7f00000011c0)="a0", 0x1, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @private0}, 0x1c)
shutdown(r4, 0x1)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x75, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @private}}}, &(0x7f00000001c0)=0x84)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001e00)={'bond0\x00', <r6=>0x0})
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000500))
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001e00)={'pimreg\x00'})
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000200)={r6, 0x3, 0x6, @multicast}, 0xf)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001e00)={'bond0\x00', <r9=>0x0})
setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000040)={r9, 0x3, 0x6, @link_local}, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000100000006000000000000000000", @ANYRES32=r6], 0x20}}, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4, 0x42073, 0xffffffffffffffff, 0x800000)
socket(0x11, 0x3, 0x3a)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, <r11=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r11, &(0x7f0000000300)="923d7f3078b1347bb12821a5b98db5579fd69d486add1b10b39c3cda5de6c93f43be59f3c8c9557f2a9fee8ebb374b3fdb572908b87746ceda33ae6d1504fef6d5f689d92c163d22379efc90162a751c3a844e8bef427eff018b204148a5905a64c4aa008a48632ea0839c30c6123e50ac0ab6db2c95dba98e571105edc1b9dcc995d78e2cb8ead46a115dc973b8d45ca6629a", &(0x7f00000003c0)=""/247}, 0x20)

30.202047775s ago: executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300))
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="0d6805200048"})

30.100118087s ago: executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x10}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg0\x00'}]}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000040)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}}, 0x1c}}, 0x0)

30.092757877s ago: executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1}, 0x0)
socket$inet(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n'], 0x4c}}, 0x0)

30.020399225s ago: executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x90)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x3}, [@snprintf={{}, {}, {}, {0x3, 0x3, 0x6, 0x3, 0x8, 0xfff0, 0xf1}, {}, {}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe02}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
listen(r3, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000480)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466b340e28b05c93a072528230718"}]}}}}}}}}, 0x0)

67.329365ms ago: executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x0, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b402000000000000850000000600000095000000000000009b69602f8908181909772129cd5f9e32b760ff84b09df3b4040370df60c6fc4b39f4960f5be397c2079a3ca1b058285c54cf685476c7ab4e7e9252c08f546291cf614a396fd7f4c1d84e19ba89c813e3f2cc"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000600)=""/222}, 0x90)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x3a, &(0x7f0000000640)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0x18, 0x0, @wg=@data}}}}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x70bd26, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x20004141)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x8, 0x7ff, 0x3ff, 0x8003, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4b, 0x4b, 0x6, [@volatile={0x3}, @datasec={0x9, 0x3, 0x0, 0xf, 0x3, [{0x0, 0x0, 0x10000}, {0x0, 0x0, 0x6}, {0x3, 0x100}], "4dac35"}, @enum]}, {0x0, [0x0, 0x0, 0x30, 0x0]}}, 0x0, 0x6a}, 0x20)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x12, 0xffffffffffffffff, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x10000, @mcast1}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd6005000000102100fbfffffffff200000000000000000000fe800000000002000000ff000000000400000000000000907800dba20d00060000"], 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', <r5=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x90, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x7, 0x0, 0x66e99, 0x74c4d}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x48, 0x2, 0x0, 0x1, [@IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x8}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x5}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0xfd}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x8}, @IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @broadcast}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x1}]}}}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_vlan\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x90}}, 0x20000800)

32.233853ms ago: executing program 3:
socket$nl_route(0x10, 0x3, 0x0)
r0 = epoll_create1(0x0)
r1 = socket$caif_seqpacket(0x25, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x10000014}) (async, rerun: 64)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
socket(0x25, 0x3, 0x9) (async)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000000002000000080002000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00ca7063b1635ded88b62a01eefd99000100000000000000"], 0x30}}, 0x0) (async)
r4 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_dellink={0x44, 0x11, 0x0, 0x0, 0x0, {}, [@IFLA_MAP={0x24, 0xe, {0x0, 0xcc23}}]}, 0x44}}, 0x0) (rerun: 32)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0), 0x8) (async)
setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
socket$nl_rdma(0x10, 0x3, 0x14)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) (async)
r7 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r8}, 0x8) (async)
getsockopt$bt_hci(r6, 0x84, 0x66, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r9)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000ceb653d2cbd6319c000008002f00000000000a0001007770616e31000000060006000000000005002a"], 0x38}}, 0x0) (async)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$sock_int(r11, 0x1, 0xf, 0x0, &(0x7f00000020c0))

0s ago: executing program 1:
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='percpu_alloc_percpu\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000009e8685000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000cbd520850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r3)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='kmem_cache_free\x00', r4}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x0, 0x100000005, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

kernel console output (not intermixed with test programs):

DUID 00:04:e7:a9:54:ba:d6:ca:b0:a9:a8:44:aa:dd:15:41:58:fb
forked to background, child pid 4760
[   31.994750][ T4761] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.007544][ T4761] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.1.45' (ED25519) to the list of known hosts.
2024/06/07 13:07:29 fuzzer started
2024/06/07 13:07:29 dialing manager at 10.128.0.169:30018
syzkaller login: [   52.702744][ T5091] cgroup: Unknown subsys name 'net'
[   52.871534][ T5091] cgroup: Unknown subsys name 'rlimit'
2024/06/07 13:07:31 starting 5 executor processes
[   53.928055][ T5093] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.940819][ T5093] syz-executor (5093) used greatest stack depth: 18744 bytes left
[   54.930134][ T5111] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.942805][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.951140][ T5114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.958920][ T5114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.978552][ T4491] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.988777][ T4491] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   54.996130][ T4491] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.005975][ T4491] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.025629][ T5114] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.034175][ T5114] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.042471][ T5114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.050910][   T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   55.050926][ T5114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.051194][ T5114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.060043][ T5118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.066890][ T5114] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   55.072684][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   55.079431][ T5114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.087264][ T5118] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   55.107308][   T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   55.116174][ T5121] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   55.123451][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.132363][ T5121] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   55.142670][ T5122] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   55.238759][ T5115] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   55.246839][ T5115] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   55.254809][ T5115] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   55.267114][ T5115] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   55.275497][ T5115] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   55.283397][ T5115] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   55.667681][ T5109] chnl_net:caif_netlink_parms(): no params data found
[   55.820295][ T5112] chnl_net:caif_netlink_parms(): no params data found
[   55.855748][ T5119] chnl_net:caif_netlink_parms(): no params data found
[   55.867344][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.875638][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.882992][ T5109] bridge_slave_0: entered allmulticast mode
[   55.890087][ T5109] bridge_slave_0: entered promiscuous mode
[   55.931692][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.939650][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.947068][ T5109] bridge_slave_1: entered allmulticast mode
[   55.954393][ T5109] bridge_slave_1: entered promiscuous mode
[   56.010852][ T5116] chnl_net:caif_netlink_parms(): no params data found
[   56.049436][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.081785][ T5124] chnl_net:caif_netlink_parms(): no params data found
[   56.096932][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.168834][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.176034][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.184452][ T5112] bridge_slave_0: entered allmulticast mode
[   56.193047][ T5112] bridge_slave_0: entered promiscuous mode
[   56.233060][ T5109] team0: Port device team_slave_0 added
[   56.242950][ T5109] team0: Port device team_slave_1 added
[   56.252681][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.260586][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.267758][ T5112] bridge_slave_1: entered allmulticast mode
[   56.274747][ T5112] bridge_slave_1: entered promiscuous mode
[   56.294508][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.302594][ T5119] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.309812][ T5119] bridge_slave_0: entered allmulticast mode
[   56.316503][ T5119] bridge_slave_0: entered promiscuous mode
[   56.355389][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.362916][ T5119] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.370423][ T5119] bridge_slave_1: entered allmulticast mode
[   56.377046][ T5119] bridge_slave_1: entered promiscuous mode
[   56.406085][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.420445][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.445767][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.452769][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.479113][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.501393][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.508939][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.516057][ T5116] bridge_slave_0: entered allmulticast mode
[   56.523222][ T5116] bridge_slave_0: entered promiscuous mode
[   56.567474][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.574727][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.600874][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.615691][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.624213][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.632231][ T5116] bridge_slave_1: entered allmulticast mode
[   56.640210][ T5116] bridge_slave_1: entered promiscuous mode
[   56.656013][ T5124] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.663337][ T5124] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.670664][ T5124] bridge_slave_0: entered allmulticast mode
[   56.677340][ T5124] bridge_slave_0: entered promiscuous mode
[   56.687361][ T5119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.700232][ T5119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.740782][ T5112] team0: Port device team_slave_0 added
[   56.757525][ T5124] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.764775][ T5124] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.772900][ T5124] bridge_slave_1: entered allmulticast mode
[   56.784642][ T5124] bridge_slave_1: entered promiscuous mode
[   56.812670][ T5112] team0: Port device team_slave_1 added
[   56.830610][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.843511][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.868406][ T5119] team0: Port device team_slave_0 added
[   56.917236][ T5119] team0: Port device team_slave_1 added
[   56.936731][ T5109] hsr_slave_0: entered promiscuous mode
[   56.943450][ T5109] hsr_slave_1: entered promiscuous mode
[   56.953244][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.960431][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.986613][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.001766][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.008894][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.035037][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.058845][ T5124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.080919][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.087892][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.114696][ T5119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.128898][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.135878][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.161934][ T5119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.179211][   T53] Bluetooth: hci2: command tx timeout
[   57.185699][   T53] Bluetooth: hci0: command tx timeout
[   57.189008][ T5116] team0: Port device team_slave_0 added
[   57.191383][ T4491] Bluetooth: hci1: command tx timeout
[   57.200571][ T5116] team0: Port device team_slave_1 added
[   57.208098][ T5115] Bluetooth: hci3: command tx timeout
[   57.212061][ T5124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.316894][ T5124] team0: Port device team_slave_0 added
[   57.333405][ T5112] hsr_slave_0: entered promiscuous mode
[   57.340051][ T5115] Bluetooth: hci4: command tx timeout
[   57.346156][ T5112] hsr_slave_1: entered promiscuous mode
[   57.353096][ T5112] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.361120][ T5112] Cannot create hsr debugfs directory
[   57.367152][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.374265][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.400329][ T5116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.413736][ T5124] team0: Port device team_slave_1 added
[   57.451751][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.459790][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.486856][ T5116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.511925][ T5119] hsr_slave_0: entered promiscuous mode
[   57.518243][ T5119] hsr_slave_1: entered promiscuous mode
[   57.524278][ T5119] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.532252][ T5119] Cannot create hsr debugfs directory
[   57.573498][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.580544][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.606946][ T5124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.654285][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.661733][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.688659][ T5124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.815061][ T5116] hsr_slave_0: entered promiscuous mode
[   57.826535][ T5116] hsr_slave_1: entered promiscuous mode
[   57.833448][ T5116] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.841382][ T5116] Cannot create hsr debugfs directory
[   57.876413][ T5124] hsr_slave_0: entered promiscuous mode
[   57.882797][ T5124] hsr_slave_1: entered promiscuous mode
[   57.891973][ T5124] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.899938][ T5124] Cannot create hsr debugfs directory
[   58.072311][ T5109] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   58.116712][ T5109] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   58.144404][ T5109] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   58.187925][ T5109] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   58.282192][ T5112] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.304628][ T5112] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.327563][ T5112] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.357891][ T5112] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.385416][ T5119] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   58.421960][ T5119] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   58.470818][ T5119] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   58.486804][ T5119] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   58.511100][ T5124] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.526607][ T5124] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.544033][ T5124] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.554237][ T5124] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.668745][ T5116] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.702345][ T5116] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.712568][ T5116] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.723857][ T5116] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.803405][ T5119] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.831978][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.843656][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.886046][ T5109] 8021q: adding VLAN 0 to HW filter on device team0
[   58.895236][ T5119] 8021q: adding VLAN 0 to HW filter on device team0
[   58.925322][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.932765][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.946212][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.953313][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.990917][ T5112] 8021q: adding VLAN 0 to HW filter on device team0
[   59.019836][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.026977][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.036036][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.043191][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.053558][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.060718][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.094792][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.102230][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.181554][ T5124] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.206715][ T5119] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   59.217346][ T5119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   59.263233][ T5115] Bluetooth: hci3: command tx timeout
[   59.263249][   T53] Bluetooth: hci0: command tx timeout
[   59.269216][ T4491] Bluetooth: hci1: command tx timeout
[   59.274528][   T53] Bluetooth: hci2: command tx timeout
[   59.315344][ T5116] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.362721][ T5116] 8021q: adding VLAN 0 to HW filter on device team0
[   59.384257][ T5124] 8021q: adding VLAN 0 to HW filter on device team0
[   59.420941][   T53] Bluetooth: hci4: command tx timeout
[   59.438834][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.445975][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.479798][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.486941][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.520253][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.527407][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.586956][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.594157][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.675353][ T5124] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   59.797213][ T5119] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.879669][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.891913][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.051228][ T5119] veth0_vlan: entered promiscuous mode
[   60.076240][ T5112] veth0_vlan: entered promiscuous mode
[   60.104634][ T5119] veth1_vlan: entered promiscuous mode
[   60.128126][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.154645][ T5112] veth1_vlan: entered promiscuous mode
[   60.178782][ T5124] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.291121][ T5119] veth0_macvtap: entered promiscuous mode
[   60.313931][ T5112] veth0_macvtap: entered promiscuous mode
[   60.335515][ T5119] veth1_macvtap: entered promiscuous mode
[   60.354613][ T5116] veth0_vlan: entered promiscuous mode
[   60.373893][ T5112] veth1_macvtap: entered promiscuous mode
[   60.410964][ T5116] veth1_vlan: entered promiscuous mode
[   60.428879][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.447342][ T5124] veth0_vlan: entered promiscuous mode
[   60.463673][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.499972][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.511577][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.524075][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.541451][ T5119] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.550483][ T5119] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.559449][ T5119] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.568133][ T5119] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.593570][ T5124] veth1_vlan: entered promiscuous mode
[   60.604698][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.616148][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.627387][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.641910][ T5116] veth0_macvtap: entered promiscuous mode
[   60.666930][ T5112] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.676093][ T5112] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.685793][ T5112] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.695174][ T5112] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.715270][ T5116] veth1_macvtap: entered promiscuous mode
[   60.730917][ T5109] veth0_vlan: entered promiscuous mode
[   60.776980][ T5124] veth0_macvtap: entered promiscuous mode
[   60.796356][ T5109] veth1_vlan: entered promiscuous mode
[   60.822305][ T5124] veth1_macvtap: entered promiscuous mode
[   60.843434][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.854889][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.865734][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.877061][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.889881][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.910327][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.920942][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.932367][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.943487][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.953467][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.964029][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.975499][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.013174][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.025051][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.037443][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.049454][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.060802][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.081599][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.094717][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.105614][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.116403][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.126945][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.137501][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.149236][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.170076][ T5124] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.170821][ T2925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.180133][ T5124] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.196666][ T2925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.197175][ T5124] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.214733][ T5124] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.246718][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.270414][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.271300][ T5116] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.288251][ T5116] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.297112][ T5116] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.306005][ T5116] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.324051][ T5109] veth0_macvtap: entered promiscuous mode
[   61.338598][   T53] Bluetooth: hci1: command tx timeout
[   61.338911][ T4491] Bluetooth: hci2: command tx timeout
[   61.344007][   T53] Bluetooth: hci3: command tx timeout
[   61.349516][ T5115] Bluetooth: hci0: command tx timeout
[   61.363639][ T5109] veth1_macvtap: entered promiscuous mode
[   61.448876][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.453248][ T2427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.456709][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.477104][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.479802][ T2427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.499298][ T5115] Bluetooth: hci4: command tx timeout
[   61.507788][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.517947][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.528634][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.538706][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.550329][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.561567][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.572036][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.584406][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.626078][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.637214][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.647492][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.658142][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.669582][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.680340][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.690654][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.701183][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.714899][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.753751][ T5109] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.767301][ T5109] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.776161][ T5109] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.785174][ T5109] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.807173][ T2925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.832152][ T2925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.939885][ T2427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.964586][ T2427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.059376][ T2925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.075631][ T2925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.177963][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.211065][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.303341][ T2925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.319535][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.328409][ T2925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.335865][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.804374][ T5214] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.418485][ T5115] Bluetooth: hci0: command tx timeout
[   63.418700][ T4491] Bluetooth: hci2: command tx timeout
[   63.423946][ T5122] Bluetooth: hci3: command tx timeout
[   63.429451][   T53] Bluetooth: hci1: command tx timeout
[   63.455911][ T5238] netlink: 'syz-executor.0': attribute type 21 has an invalid length.
[   63.579645][ T4491] Bluetooth: hci4: command tx timeout
[   63.734038][ T5256] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.850716][ T5258] Bluetooth: MGMT ver 1.22
[   63.945336][ T5266] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[   64.170788][ T5272] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[   64.606409][ T5300] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[   64.645951][ T5296] net_ratelimit: 2 callbacks suppressed
[   64.645969][ T5296] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   64.832969][ T5309] vlan2: entered allmulticast mode
[   64.861074][ T5311] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[   64.903866][ T5313] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[   65.365630][ T5335] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[   65.674721][ T5354] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[   65.681289][ T5353] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[   65.802461][ T5360] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.4'.
[   65.847498][ T5359] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.4'.
[   65.980302][ T5365] netlink: 'syz-executor.4': attribute type 21 has an invalid length.
[   66.071759][ T5372] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[   66.134278][ T5367] can: request_module (can-proto-0) failed.
[   66.183702][ T5374] can: request_module (can-proto-0) failed.
[   66.206793][ T5379] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   66.213779][ T5379] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   66.574233][ T5404] Bluetooth: MGMT ver 1.22
[   66.965437][ T5425] Zero length message leads to an empty skb
[   67.795239][ T5469] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   68.015297][ T5484] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check.
[   68.622069][   T53] Bluetooth: hci0: command tx timeout
[   68.624192][ T5520] geneve1: entered promiscuous mode
[   68.655221][ T5519] geneve1: left promiscuous mode
[   69.018336][ T4491] Bluetooth: hci0: Opcode 0x0401 failed: -110
[   69.082162][ T5542] __nla_validate_parse: 8 callbacks suppressed
[   69.082182][ T5542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[   69.175540][ T5548] netlink: 'syz-executor.3': attribute type 63 has an invalid length.
[   69.225332][ T5545] netlink: 'syz-executor.4': attribute type 9 has an invalid length.
[   69.245271][ T5545] netlink: 144300 bytes leftover after parsing attributes in process `syz-executor.4'.
[   69.386479][ T5561] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[   69.534748][ T5571] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[   69.613699][ T5573] bond0: entered promiscuous mode
[   69.632066][ T5573] bond_slave_0: entered promiscuous mode
[   69.656064][ T5573] bond_slave_1: entered promiscuous mode
[   69.752071][ T5581] ipvlan1: entered allmulticast mode
[   69.757787][ T5581] veth0_vlan: entered allmulticast mode
[   70.492215][ T5618] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[   70.709719][ T4491] Bluetooth: hci0: command 0x0401 tx timeout
[   71.397159][ T5663] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   71.582813][ T5680] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.591303][ T5680] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.669207][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[   71.669519][ T5684] openvswitch: netlink: ct_state flags 0000ee00 unsupported
[   71.675738][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[   71.755573][ T5680] bridge_slave_1: left allmulticast mode
[   71.777724][ T5680] bridge_slave_1: left promiscuous mode
[   71.807876][ T5680] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.853511][ T5680] bridge_slave_0: left allmulticast mode
[   71.878336][ T5680] bridge_slave_0: left promiscuous mode
[   71.884041][ T5680] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.998961][ T5695] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[   72.564376][ T5708] x_tables: duplicate underflow at hook 1
[   72.689186][ T5713] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[   73.271970][ T5745] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.4'.
[   73.896884][ T5775] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[   73.917415][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.925285][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.952525][ T5782] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[   73.978873][ T5776] bridge_slave_1: left allmulticast mode
[   74.018907][ T5776] bridge_slave_1: left promiscuous mode
[   74.027902][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.080081][ T5776] bridge_slave_0: left allmulticast mode
[   74.103601][ T5776] bridge_slave_0: left promiscuous mode
[   74.115839][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.928110][ T5823] vcan0: tx drop: invalid da for name 0x0000000000000002
[   75.011186][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.018880][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.071632][ T5830] bridge_slave_1: left allmulticast mode
[   75.074016][ T5831] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[   75.089817][ T5830] bridge_slave_1: left promiscuous mode
[   75.100020][ T5831] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[   75.104782][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.136740][ T5830] bridge_slave_0: left allmulticast mode
[   75.142691][ T5830] bridge_slave_0: left promiscuous mode
[   75.154400][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.477498][ T5840] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[   75.976691][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.984858][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.025422][ T5864] bridge_slave_1: left allmulticast mode
[   76.040917][ T5864] bridge_slave_1: left promiscuous mode
[   76.047982][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.061026][ T5864] bridge_slave_0: left allmulticast mode
[   76.069906][ T5864] bridge_slave_0: left promiscuous mode
[   76.075988][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.341823][ T5872] SET target dimension over the limit!
[   76.415576][ T5878] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[   76.785046][   T45] cfg80211: failed to load regulatory.db
[   76.843121][ T5901] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[   77.099544][ T5914] netlink: 'syz-executor.0': attribute type 21 has an invalid length.
[   77.134365][ T5914] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'.
[   77.166796][ T5906] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[   77.525819][   T29] audit: type=1804 audit(1717765674.951:2): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir263603741/syzkaller.36TlL3/33/cgroup.controllers" dev="sda1" ino=1940 res=1 errno=0
[   77.947195][ T5957] x_tables: duplicate underflow at hook 1
[   78.033386][ T5961] 8021q: VLANs not supported on ipvlan1
[   78.244448][ T5970] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.1'.
[   78.471420][ T5984] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   78.672698][ T5998] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
[   78.713329][ T6002] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[   78.866714][ T6014] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'.
[   78.887047][ T6014] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[   78.963695][ T6018] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[   79.096227][ T6028] ip6t_rpfilter: unknown options
[   79.185990][ T6022] syzkaller0: entered promiscuous mode
[   79.218924][ T6022] syzkaller0: entered allmulticast mode
[   80.549892][ T6038] vcan0 speed is unknown, defaulting to 1000
[   80.582910][ T6038] vcan0 speed is unknown, defaulting to 1000
[   80.602786][ T6038] vcan0 speed is unknown, defaulting to 1000
[   80.772849][ T6064] ip6t_rpfilter: unknown options
[   81.231339][ T5158] vcan0 speed is unknown, defaulting to 1000
[   81.243512][ T6038] infiniband syz1: set active
[   81.249341][ T6038] infiniband syz1: added vcan0
[   81.282998][ T6038] syz1: rxe_create_cq: returned err = -12
[   81.307368][ T6038] infiniband syz1: Couldn't create ib_mad CQ
[   81.314600][ T6038] infiniband syz1: Couldn't open port 1
[   81.354306][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.362000][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.410432][ T6085] bridge_slave_1: left allmulticast mode
[   81.431236][ T6038] RDS/IB: syz1: added
[   81.440267][ T6038] smc: adding ib device syz1 with port count 1
[   81.447643][ T6085] bridge_slave_1: left promiscuous mode
[   81.458632][ T6038] smc:    ib device syz1 port 1 has pnetid 
[   81.461099][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.477715][ T6085] bridge_slave_0: left allmulticast mode
[   81.483629][ T6085] bridge_slave_0: left promiscuous mode
[   81.491630][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.567689][    T9] vcan0 speed is unknown, defaulting to 1000
[   81.590783][ T6038] vcan0 speed is unknown, defaulting to 1000
[   82.024847][ T6038] vcan0 speed is unknown, defaulting to 1000
[   82.039682][ T6108] ip6t_rpfilter: unknown options
[   82.373700][ T6122] netlink: 268 bytes leftover after parsing attributes in process `syz-executor.3'.
[   82.418923][ T6038] vcan0 speed is unknown, defaulting to 1000
[   82.774744][ T6143] ip6t_rpfilter: unknown options
[   82.785758][ T6038] vcan0 speed is unknown, defaulting to 1000
[   82.863386][ T6146] Illegal XDP return value 4294967274 on prog  (id 139) dev N/A, expect packet loss!
[   83.152954][ T6038] vcan0 speed is unknown, defaulting to 1000
[   83.939168][ T6180] syzkaller0: entered promiscuous mode
[   83.948345][ T6180] syzkaller0: entered allmulticast mode
[   83.971105][ T6183] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[   84.701066][ T6203] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   85.733571][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[   85.895373][ T6214] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[   86.014027][ T6225] batadv_slave_1: entered promiscuous mode
[   86.036181][ T6228] netlink: 'syz-executor.0': attribute type 8 has an invalid length.
[   86.090978][ T6225] batadv_slave_1: left promiscuous mode
[   86.415465][ T6243] veth1_macvtap: left promiscuous mode
[   86.646070][ T6263] ip6t_rpfilter: unknown options
[   86.649922][ T6264] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'.
[   86.667185][ T6264] netlink: 'syz-executor.4': attribute type 5 has an invalid length.
[   86.676153][ T6264] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'.
[   86.764571][ T6255] syzkaller0: entered promiscuous mode
[   86.770486][ T6255] syzkaller0: entered allmulticast mode
[   87.083621][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[   88.431357][ T6303] ip6t_rpfilter: unknown options
[   88.519377][ T6308] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[   88.577913][ T6300] veth1_macvtap: left promiscuous mode
[   88.735898][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[   88.821193][    C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[   89.766667][ T6368] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[   89.818604][ T6369] ip6gretap0: entered promiscuous mode
[   89.849012][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[   89.850263][ T6369] batadv_slave_0: entered promiscuous mode
[   89.921980][ T6369] ip6gretap0: left promiscuous mode
[   89.943025][ T6369] batadv_slave_0: left promiscuous mode
[   90.199440][ T6390] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[   90.229137][ T6390] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[   90.260409][ T6390] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[   90.721664][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[   90.804555][ T6423] ip6gretap0: entered promiscuous mode
[   90.838062][ T6423] batadv_slave_0: entered promiscuous mode
[   90.882343][ T6423] ip6gretap0: left promiscuous mode
[   90.892736][ T6423] batadv_slave_0: left promiscuous mode
[   91.112627][ T6444] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[   91.141617][ T6444] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[   91.169646][ T6449] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[   91.224950][ T6449] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[   91.294895][ T6449] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[   91.354809][ T6449] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[   91.373259][ T6449] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[   91.385204][ T6449] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[   91.576599][ T6468] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it!
[   91.585870][ T6468] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[   91.613665][ T6468] bond0: (slave vlan2): Opening slave failed
[   91.661623][ T6475] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[   91.674447][ T6475] netlink: 1372 bytes leftover after parsing attributes in process `syz-executor.0'.
[   91.684275][ T6475] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'.
[   91.693792][ T6475] netlink: 444 bytes leftover after parsing attributes in process `syz-executor.0'.
[   91.703433][ T6475] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'.
[   91.986281][ T6486] netlink: zone id is out of range
[   91.997384][ T6486] netlink: zone id is out of range
[   92.010549][ T6486] netlink: zone id is out of range
[   92.028015][ T6486] netlink: zone id is out of range
[   92.042144][ T6486] netlink: zone id is out of range
[   92.073116][ T6486] netlink: zone id is out of range
[   92.090136][ T6486] netlink: zone id is out of range
[   92.108419][ T6486] netlink: zone id is out of range
[   92.207553][ T6502] ip6gretap0: entered promiscuous mode
[   92.246676][ T6502] batadv_slave_0: entered promiscuous mode
[   93.123664][ T6545] ip6t_rpfilter: unknown options
[   93.350833][ T6528] infiniband syz2: set active
[   93.356650][ T6528] infiniband syz2: added bond_slave_0
[   93.440072][ T6528] RDS/IB: syz2: added
[   93.444506][ T6528] smc: adding ib device syz2 with port count 1
[   93.460344][ T6528] smc:    ib device syz2 port 1 has pnetid 
[   93.859380][ T6576] ip6t_rpfilter: unknown options
[   93.922819][ T6579] __nla_validate_parse: 9 callbacks suppressed
[   93.922840][ T6579] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[   94.502589][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[   94.635950][ T6608] net_ratelimit: 172 callbacks suppressed
[   94.635968][ T6608] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   94.677646][ T6610] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[   94.826423][ T6613] ip6t_rpfilter: unknown options
[   94.839940][ T6616] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[   95.236770][ T6634] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[   95.256876][ T6634] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[   95.539553][ T6646] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[   95.547671][ T6646] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.4'.
[   95.739244][ T6657] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[   96.062380][ T6675] pimreg: entered allmulticast mode
[   96.079553][ T6678] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'.
[   96.120875][ T6675] pimreg: left allmulticast mode
[   96.183456][ T6678] vcan0 speed is unknown, defaulting to 1000
[   96.374426][ T6688] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[   96.389158][   T53] Bluetooth: hci4: command 0x0405 tx timeout
[   96.496177][ T6693] netlink: 'syz-executor.1': attribute type 9 has an invalid length.
[   96.575153][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[   96.749741][ T6705] netlink: 'syz-executor.2': attribute type 12 has an invalid length.
[   96.757952][ T6705] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'.
[   96.984289][ T6699] sit0: entered promiscuous mode
[   97.104122][ T6699] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[   97.946569][ T6744] bond_slave_0: entered promiscuous mode
[   97.952586][ T6744] bond_slave_1: entered promiscuous mode
[   97.966001][ T6744] bond_slave_0: left promiscuous mode
[   97.984324][ T6744] bond_slave_1: left promiscuous mode
[   98.127660][ T6744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   98.147851][ T6744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   98.170038][ T6744] bond0 (unregistering): Released all slaves
[   98.997404][ T6775] netlink: 'syz-executor.1': attribute type 12 has an invalid length.
[   99.049228][ T6775] __nla_validate_parse: 4 callbacks suppressed
[   99.049247][ T6775] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'.
[   99.108085][ T6778] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'.
[   99.241099][ T6770] sit0: entered promiscuous mode
[   99.263172][ T6770] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[   99.319996][ T6770] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'.
[   99.386634][ T6786] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'.
[   99.506583][ T6793] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[   99.750586][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[   99.984673][ T6811] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.4'.
[  100.002203][ T6811] netlink: 3068 bytes leftover after parsing attributes in process `syz-executor.4'.
[  100.026265][ T6811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.031501][ T6818] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  100.240077][ T6823] netlink: zone id is out of range
[  100.245397][ T6823] netlink: zone id is out of range
[  100.250977][ T6823] netlink: zone id is out of range
[  100.256221][ T6823] netlink: zone id is out of range
[  100.261545][ T6823] netlink: zone id is out of range
[  100.266758][ T6823] netlink: zone id is out of range
[  100.272095][ T6823] netlink: zone id is out of range
[  100.277231][ T6823] netlink: zone id is out of range
[  100.282499][ T6823] netlink: zone id is out of range
[  100.287622][ T6823] netlink: zone id is out of range
[  100.301367][   T53] Bluetooth: hci4: command 0x0405 tx timeout
[  100.451347][ T6826] netlink: 'syz-executor.0': attribute type 12 has an invalid length.
[  100.459901][ T6826] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'.
[  100.490742][ T6826] sit0: entered promiscuous mode
[  100.509871][ T6826] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  100.538214][ T6826] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'.
[  100.705213][ T6834] netlink: 'syz-executor.3': attribute type 15 has an invalid length.
[  100.842096][ T6843] netlink: 'syz-executor.1': attribute type 8 has an invalid length.
[  101.053217][ T6862] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  101.062366][ T6862] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  101.071242][ T6862] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  101.080014][ T6862] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  101.113382][ T6862] vxlan0: entered promiscuous mode
[  101.989577][ T6886] netlink: 'syz-executor.4': attribute type 12 has an invalid length.
[  102.096615][ T6880] sit0: entered promiscuous mode
[  102.151633][ T6880] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  102.593187][ T6907] x_tables: unsorted underflow at hook 3
[  102.896078][ T6909] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  102.914216][ T6909] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  102.923484][ T6909] gretap1: entered promiscuous mode
[  102.929191][ T6909] gretap1: entered allmulticast mode
[  102.990589][ T6909] bridge2: entered promiscuous mode
[  102.995842][ T6909] bridge2: entered allmulticast mode
[  103.118434][ T6920] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  103.150403][ T6920] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  103.167201][ T6920] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  103.353409][ T6932] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  103.370799][ T6932] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  103.598863][ T6948] pim6reg1: entered promiscuous mode
[  103.625737][ T6948] pim6reg1: entered allmulticast mode
[  103.745705][ T6957] xt_TCPMSS: Only works on TCP SYN packets
[  104.264980][ T6980] ip6t_rpfilter: unknown options
[  104.454675][ T6992] ip6gretap0: entered promiscuous mode
[  104.461073][ T6990] __nla_validate_parse: 11 callbacks suppressed
[  104.461090][ T6990] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  104.479321][ T6992] batadv_slave_0: entered promiscuous mode
[  104.487217][ T6992] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  104.496642][ T6992] Cannot create hsr debugfs directory
[  104.519310][ T6992] ip6gretap0: left promiscuous mode
[  104.531625][ T6992] batadv_slave_0: left promiscuous mode
[  104.682132][ T6999] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[  104.936476][ T7003] geneve1: entered promiscuous mode
[  104.945426][ T7003] geneve1: left promiscuous mode
[  105.083172][ T7010] trusted_key: syz-executor.3 sent an empty control message without MSG_MORE.
[  105.099812][ T7011] netlink: 210568 bytes leftover after parsing attributes in process `syz-executor.4'.
[  105.305147][ T7019] ip6t_rpfilter: unknown options
[  105.381099][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  105.459932][ T7022] syz_tun: entered promiscuous mode
[  105.487679][ T7031] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'.
[  105.878240][ T7040] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  106.367773][ T7059] netlink: 210568 bytes leftover after parsing attributes in process `syz-executor.1'.
[  106.394516][ T7059] net_ratelimit: 272 callbacks suppressed
[  106.394534][ T7059] openvswitch: netlink: ufid size 2296 bytes exceeds the range (1, 16)
[  106.435384][ T7059] openvswitch: netlink: Message has 4 unknown bytes.
[  106.871438][ T7082] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.2'.
[  107.029215][ T7091] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  107.455625][ T7105] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'.
[  107.726049][   T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  107.735900][   T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  107.750206][   T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  107.761312][   T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  107.774003][   T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  107.781879][   T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  107.820133][   T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  107.831058][   T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.889726][ T7115] vcan0 speed is unknown, defaulting to 1000
[  107.953249][   T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  107.987709][   T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.113447][   T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  108.169066][   T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.200548][ T7132] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
[  108.301767][   T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  108.317253][   T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.679347][ T7148] Bluetooth: MGMT ver 1.22
[  108.978084][ T7145] team_slave_0: entered promiscuous mode
[  108.984086][ T7145] team_slave_1: entered promiscuous mode
[  109.001956][ T7145] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  109.021423][ T7145] team_slave_0: left promiscuous mode
[  109.026926][ T7145] team_slave_1: left promiscuous mode
[  109.679549][ T7189] veth1: entered promiscuous mode
[  109.689135][ T7189] vlan2: entered promiscuous mode
[  109.697022][ T7189] vlan2: entered allmulticast mode
[  109.709213][ T7189] veth1: entered allmulticast mode
[  109.726957][ T7189] veth1: left allmulticast mode
[  109.743524][ T7189] veth1: left promiscuous mode
[  109.847979][   T53] Bluetooth: hci3: command tx timeout
[  110.011488][   T35] hsr_slave_0: left promiscuous mode
[  110.023865][   T35] hsr_slave_1: left promiscuous mode
[  110.042537][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.064621][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  110.068868][ T7202] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  110.105682][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.124270][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.187080][   T35] veth1_macvtap: left promiscuous mode
[  110.203175][   T35] veth0_macvtap: left promiscuous mode
[  110.212152][   T35] veth1_vlan: left promiscuous mode
[  110.217610][   T35] veth0_vlan: left promiscuous mode
[  110.645022][   T35] team0 (unregistering): Port device team_slave_1 removed
[  110.683132][   T35] team0 (unregistering): Port device team_slave_0 removed
[  111.040415][ T7213] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  111.111915][ T7213] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  111.154019][ T7221] netlink: 'syz-executor.2': attribute type 25 has an invalid length.
[  111.199623][ T7221] __nla_validate_parse: 3 callbacks suppressed
[  111.199644][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  111.215385][ T7221] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (3469)
[  111.225230][ T7221] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  111.245566][ T7224] bond_slave_0: entered promiscuous mode
[  111.251300][ T7224] bond_slave_1: entered promiscuous mode
[  111.258839][ T7224] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  111.279736][ T7224] bond_slave_0: left promiscuous mode
[  111.285256][ T7224] bond_slave_1: left promiscuous mode
[  111.324351][ T7115] chnl_net:caif_netlink_parms(): no params data found
[  111.619361][ T7115] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.626695][ T7115] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.634398][ T7115] bridge_slave_0: entered allmulticast mode
[  111.646434][ T7115] bridge_slave_0: entered promiscuous mode
[  111.656934][ T7115] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.664353][ T7115] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.671702][ T7115] bridge_slave_1: entered allmulticast mode
[  111.680208][ T7115] bridge_slave_1: entered promiscuous mode
[  111.785586][ T7115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.810487][ T7115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.880727][ T7115] team0: Port device team_slave_0 added
[  111.897432][ T7115] team0: Port device team_slave_1 added
[  111.908547][   T53] Bluetooth: hci3: command tx timeout
[  112.025471][ T7255] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  112.046334][ T7115] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.053828][ T7115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.088219][ T7115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.107860][ T7257] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  112.121103][ T7259] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  112.136260][ T7259] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'.
[  112.158916][ T7259] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  112.187469][ T7115] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.194692][ T7115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.256942][ T7115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.417934][ T7269] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'.
[  112.437155][ T7269] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'.
[  112.457456][ T7115] hsr_slave_0: entered promiscuous mode
[  112.466921][ T7115] hsr_slave_1: entered promiscuous mode
[  112.475547][ T7115] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  112.487612][ T7115] Cannot create hsr debugfs directory
[  113.275451][ T7299] ip6t_rpfilter: unknown options
[  113.326063][ T7115] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  113.367662][ T4491] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  113.377140][ T4491] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  113.386269][ T4491] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  113.396513][ T4491] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  113.404870][ T4491] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  113.412983][ T4491] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  113.436061][ T7115] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  113.461387][ T7115] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  113.515428][ T7305] vcan0 speed is unknown, defaulting to 1000
[  113.528348][ T7115] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  113.575385][ T7307] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'.
[  113.610615][ T7307] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'.
[  113.750440][ T7115] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.785736][ T7115] 8021q: adding VLAN 0 to HW filter on device team0
[  113.809634][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.816794][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.866064][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.873236][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.980905][ T4491] Bluetooth: hci3: command tx timeout
[  114.119159][ T7302] vcan0 speed is unknown, defaulting to 1000
[  114.235459][ T7115] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.268069][ T7319] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
[  114.355678][ T7115] veth0_vlan: entered promiscuous mode
[  114.366142][ T7319] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  114.405037][ T7115] veth1_vlan: entered promiscuous mode
[  114.523022][ T7115] veth0_macvtap: entered promiscuous mode
[  114.549585][ T7115] veth1_macvtap: entered promiscuous mode
[  114.586466][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.606499][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.626146][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.647855][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.664506][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.686074][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.703677][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.719795][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.732603][ T7115] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.772768][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.798219][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.821432][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.844192][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.873500][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.894437][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.918420][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.939095][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.959999][ T7115] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.044931][ T7115] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.054575][ T7115] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.073266][ T7115] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.089759][ T7115] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.411139][ T2457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.438861][ T2457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.499968][ T4491] Bluetooth: hci4: command tx timeout
[  115.765129][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.780370][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.864237][ T7302] chnl_net:caif_netlink_parms(): no params data found
[  116.000576][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  116.000927][ T7338] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET)
[  116.058351][ T4491] Bluetooth: hci3: command tx timeout
[  116.181528][ T7302] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.189319][ T7302] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.197032][ T7302] bridge_slave_0: entered allmulticast mode
[  116.204919][ T7302] bridge_slave_0: entered promiscuous mode
[  116.248453][ T7302] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.260350][ T7302] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.273524][ T7302] bridge_slave_1: entered allmulticast mode
[  116.284068][ T7302] bridge_slave_1: entered promiscuous mode
[  116.298014][ T7348] ip6t_rpfilter: unknown options
[  116.359534][ T7302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.397746][ T7302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.460495][ T7302] team0: Port device team_slave_0 added
[  116.489681][ T7302] team0: Port device team_slave_1 added
[  116.545874][ T7350] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'.
[  116.568441][ T7350] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'.
[  116.601268][ T7302] batman_adv: batadv0: Adding interface: batadv_slave_0
[  116.633304][ T7302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.672390][ T7302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.695663][ T7302] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.714681][ T7302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.751798][ T7302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.796210][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  116.815853][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  116.977311][ T7302] hsr_slave_0: entered promiscuous mode
[  116.990592][ T7302] hsr_slave_1: entered promiscuous mode
[  117.006190][ T7302] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  117.021686][ T7302] Cannot create hsr debugfs directory
[  117.302509][ T7302] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.436490][ T7302] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.536228][ T7302] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.579454][ T4491] Bluetooth: hci4: command tx timeout
[  117.650429][ T7302] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.910966][ T7302] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  117.950136][ T7302] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  118.017957][ T7302] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  118.035611][ T7302] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  118.262696][ T7302] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.309437][ T7302] 8021q: adding VLAN 0 to HW filter on device team0
[  118.322208][ T7378] ip6t_rpfilter: unknown options
[  118.358838][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.366015][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.407378][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.414632][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.771481][ T7386] syzkaller0: entered promiscuous mode
[  118.791490][ T7386] syzkaller0: entered allmulticast mode
[  119.255742][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  119.667435][ T4491] Bluetooth: hci4: command tx timeout
[  121.157237][ T7397] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  121.169851][ T7397] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  121.193026][ T7397] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  121.217185][ T7302] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.351317][ T7302] veth0_vlan: entered promiscuous mode
[  121.411752][ T7302] veth1_vlan: entered promiscuous mode
[  121.476172][ T7302] veth0_macvtap: entered promiscuous mode
[  121.513891][ T7302] veth1_macvtap: entered promiscuous mode
[  121.608793][ T7302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.629414][ T7302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.678622][ T7302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.713564][ T7302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.734548][ T7415] ip6t_rpfilter: unknown options
[  121.738636][ T4491] Bluetooth: hci4: command tx timeout
[  121.744877][ T7302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.771686][ T7417] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[  121.785355][ T7302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.811645][ T7302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.853108][ T7302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.877062][ T7302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.898196][ T7302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.928794][ T7302] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.972720][ T7420] bond0: entered promiscuous mode
[  121.988293][ T7420] bond_slave_0: entered promiscuous mode
[  121.994237][ T7420] bond_slave_1: entered promiscuous mode
[  122.008411][ T7420] bond0: entered allmulticast mode
[  122.028244][ T7420] bond_slave_0: entered allmulticast mode
[  122.034449][ T7420] bond_slave_1: entered allmulticast mode
[  122.070608][ T7302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.101954][ T7302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.125864][ T7302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.148420][ T7302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.168296][ T7302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.194906][ T7302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.221691][ T7302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.248183][ T7302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.271043][ T7302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.301324][ T7302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.342914][ T7302] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.382879][ T7302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.412652][ T7302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.439493][ T7302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.469184][ T7302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.506879][ T7425] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
[  122.716188][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  122.748427][ T2457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.756258][ T2457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.922536][ T7283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.958845][ T7283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.316406][ T7455] ip6gretap0: entered promiscuous mode
[  123.328869][ T7455] batadv_slave_0: entered promiscuous mode
[  123.343639][ T7455] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  123.360450][ T7455] Cannot create hsr debugfs directory
[  123.372271][ T7455] ip6gretap0: left promiscuous mode
[  123.380496][ T7455] batadv_slave_0: left promiscuous mode
[  123.544330][ T7461] openvswitch: netlink: Message has 44 unknown bytes.
[  123.928067][ T7477] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  123.954177][ T7479] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'.
[  124.249904][ T7481] vlan2: entered promiscuous mode
[  124.255607][ T7481] syz_tun: entered promiscuous mode
[  124.271863][ T7481] team0: Port device vlan2 added
[  124.369672][ T7484] netlink: 'syz-executor.0': attribute type 23 has an invalid length.
[  124.496365][ T7490] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
[  124.550388][ T7493] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'.
[  124.654798][ T7490] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[  124.697507][ T7490] team0: Device veth1_macvtap failed to register rx_handler
[  124.824079][   T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.086060][    T9] IPVS: starting estimator thread 0...
[  125.208597][ T7510] IPVS: using max 24 ests per chain, 57600 per kthread
[  125.333338][   T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.430044][ T5115] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  125.441245][ T5115] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  125.449473][ T5115] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  125.466992][ T5115] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  125.480293][ T5115] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  125.499706][ T5115] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  125.642159][   T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.879021][   T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.932482][ T7520] vcan0 speed is unknown, defaulting to 1000
[  125.984895][ T5112] syz_tun: left promiscuous mode
[  126.002696][ T5115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  126.013093][ T5115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  126.023929][ T5115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  126.036111][ T5115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  126.047249][ T5115] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  126.060495][ T5115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  126.177993][ T5112] team0: Port device vlan2 removed
[  126.234584][ T7544] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  126.429729][ T7539] vcan0 speed is unknown, defaulting to 1000
[  126.470247][ T7548] netlink: 'syz-executor.3': attribute type 23 has an invalid length.
[  126.478667][   T35] bridge_slave_1: left allmulticast mode
[  126.484321][   T35] bridge_slave_1: left promiscuous mode
[  126.519220][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.683140][   T35] bridge_slave_0: left allmulticast mode
[  126.727500][   T35] bridge_slave_0: left promiscuous mode
[  126.758596][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.488082][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  127.512276][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  127.535085][   T35] bond0 (unregistering): Released all slaves
[  127.568978][ T7552] ip6gretap0: entered promiscuous mode
[  127.583244][ T5115] Bluetooth: hci4: command tx timeout
[  127.593466][ T7552] batadv_slave_0: entered promiscuous mode
[  127.600436][ T7552] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  127.608403][ T7552] Cannot create hsr debugfs directory
[  127.615856][ T7552] ip6gretap0: left promiscuous mode
[  127.655089][ T7552] batadv_slave_0: left promiscuous mode
[  127.890740][ T7559] netlink: 3902 bytes leftover after parsing attributes in process `syz-executor.3'.
[  127.962980][ T7561] ip6t_rpfilter: unknown options
[  128.138752][ T5115] Bluetooth: hci1: command tx timeout
[  128.225515][ T7566] veth0_vlan: entered allmulticast mode
[  128.431826][ T7571] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  128.489521][ T7569] veth0_vlan: left promiscuous mode
[  128.507926][ T7569] veth0_vlan: entered promiscuous mode
[  128.603331][   T35] hsr_slave_0: left promiscuous mode
[  128.624297][   T35] hsr_slave_1: left promiscuous mode
[  128.630522][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.637941][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.656930][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.678229][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  128.702524][ T7576] netlink: 'syz-executor.4': attribute type 23 has an invalid length.
[  128.735293][   T35] veth1_macvtap: left promiscuous mode
[  128.750629][   T35] veth0_macvtap: left promiscuous mode
[  128.763460][   T35] veth1_vlan: left promiscuous mode
[  128.768988][   T35] veth0_vlan: left promiscuous mode
[  128.941919][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  128.980874][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  129.345376][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  129.667685][   T35] team0 (unregistering): Port device team_slave_1 removed
[  129.677799][ T5115] Bluetooth: hci4: command tx timeout
[  129.734290][   T35] team0 (unregistering): Port device team_slave_0 removed
[  130.039040][ T7595] ip6t_rpfilter: unknown options
[  130.218309][ T5115] Bluetooth: hci1: command tx timeout
[  130.515775][ T7601] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[  130.872843][ T7520] chnl_net:caif_netlink_parms(): no params data found
[  131.004139][ T7620] lo speed is unknown, defaulting to 1000
[  131.110370][ T7620] lo speed is unknown, defaulting to 1000
[  131.204301][ T7620] lo speed is unknown, defaulting to 1000
[  131.263068][ T7539] chnl_net:caif_netlink_parms(): no params data found
[  131.474821][ T7520] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.483077][ T7520] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.491573][ T7520] bridge_slave_0: entered allmulticast mode
[  131.503600][ T7520] bridge_slave_0: entered promiscuous mode
[  131.512364][ T7520] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.519653][ T7520] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.526833][ T7520] bridge_slave_1: entered allmulticast mode
[  131.534370][ T7520] bridge_slave_1: entered promiscuous mode
[  131.685493][ T7539] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.693016][ T7539] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.702167][ T7539] bridge_slave_0: entered allmulticast mode
[  131.704277][ T7620] infiniband syz0: set active
[  131.709866][ T7539] bridge_slave_0: entered promiscuous mode
[  131.732744][ T7620] infiniband syz0: added lo
[  131.741082][ T7640] macsec0: entered allmulticast mode
[  131.746927][ T7640] veth1_macvtap: entered allmulticast mode
[  131.748971][ T5115] Bluetooth: hci4: command tx timeout
[  131.783879][ T7520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  131.802149][ T5163] lo speed is unknown, defaulting to 1000
[  131.802305][ T7539] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.816299][ T7539] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.825642][ T7539] bridge_slave_1: entered allmulticast mode
[  131.833032][ T7539] bridge_slave_1: entered promiscuous mode
[  131.887642][   T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.905425][ T7620] RDS/IB: syz0: added
[  131.920887][ T7520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  131.940111][ T7620] smc: adding ib device syz0 with port count 1
[  131.946298][ T7620] smc:    ib device syz0 port 1 has pnetid 
[  131.968581][ T7643] ip6t_rpfilter: unknown options
[  132.063228][   T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.100178][ T5159] lo speed is unknown, defaulting to 1000
[  132.106045][ T7620] lo speed is unknown, defaulting to 1000
[  132.173957][ T7520] team0: Port device team_slave_0 added
[  132.204874][ T7539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  132.241666][ T7539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  132.310447][   T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.318299][ T5115] Bluetooth: hci1: command tx timeout
[  132.328768][ T7650] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  132.336884][ T7650] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'.
[  132.372307][ T7520] team0: Port device team_slave_1 added
[  132.396320][ T7649] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  132.437632][ T7649] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'.
[  132.556223][   T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.583169][ T7539] team0: Port device team_slave_0 added
[  132.624910][ T7539] team0: Port device team_slave_1 added
[  132.668988][ T7520] batman_adv: batadv0: Adding interface: batadv_slave_0
[  132.675976][ T7520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  132.717593][ T7520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  132.735092][ T7620] lo speed is unknown, defaulting to 1000
[  132.735710][ T7520] batman_adv: batadv0: Adding interface: batadv_slave_1
[  132.749829][ T7520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  132.786313][ T7520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  132.972639][ T7539] batman_adv: batadv0: Adding interface: batadv_slave_0
[  132.988420][ T7539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.048205][ T7539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  133.079078][ T7539] batman_adv: batadv0: Adding interface: batadv_slave_1
[  133.086065][ T7539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.117231][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[  133.163290][ T7539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  133.438600][ T7671] ip6t_rpfilter: unknown options
[  133.468929][ T7666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  133.489962][ T7666] bond_slave_0: left promiscuous mode
[  133.495569][ T7666] bond_slave_0: left allmulticast mode
[  133.539169][ T7666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  133.560183][ T7666] bond_slave_1: left promiscuous mode
[  133.568514][ T7666] bond_slave_1: left allmulticast mode
[  133.590550][ T7666] bond0 (unregistering): Released all slaves
[  133.659182][ T7620] lo speed is unknown, defaulting to 1000
[  133.700799][ T7520] hsr_slave_0: entered promiscuous mode
[  133.735351][ T7520] hsr_slave_1: entered promiscuous mode
[  133.778498][ T7520] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  133.787567][ T7520] Cannot create hsr debugfs directory
[  133.834158][ T5115] Bluetooth: hci4: command tx timeout
[  134.142808][ T7620] lo speed is unknown, defaulting to 1000
[  134.156458][ T7539] hsr_slave_0: entered promiscuous mode
[  134.170423][ T7539] hsr_slave_1: entered promiscuous mode
[  134.188476][ T7539] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  134.196066][ T7539] Cannot create hsr debugfs directory
[  134.378214][ T5115] Bluetooth: hci1: command tx timeout
[  134.414148][   T35] ip6gretap0 (unregistering): left promiscuous mode
[  134.654463][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  134.669524][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  134.686569][   T35] bond0 (unregistering): Released all slaves
[  134.700681][   T35] bond1 (unregistering): Released all slaves
[  134.765246][ T7620] lo speed is unknown, defaulting to 1000
[  135.091122][ T7702] ip6t_rpfilter: unknown options
[  135.207719][ T7620] lo speed is unknown, defaulting to 1000
[  135.564703][ T7620] lo speed is unknown, defaulting to 1000
[  135.742630][ T7520] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  135.763943][ T7520] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  135.802275][ T7520] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  135.832630][ T7520] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  136.087929][ T7726] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  136.114978][ T7726] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  166.683440][ T4491] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  166.692289][ T4491] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  166.705208][ T4491] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  166.720579][ T5122] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  166.720724][ T4491] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  166.728434][ T5122] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  166.737303][ T4491] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  166.742358][ T5122] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  166.753837][ T4491] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  166.764621][ T4491] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  166.772777][ T4491] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  166.781978][ T4491] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  166.789850][ T4491] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  166.804316][   T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  166.818731][   T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  166.838736][   T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  166.846417][   T53] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  166.853948][   T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  168.778528][ T5115] Bluetooth: hci5: command tx timeout
[  168.858467][ T5115] Bluetooth: hci6: command tx timeout
[  168.939318][ T5115] Bluetooth: hci7: command tx timeout
[  170.858433][ T5115] Bluetooth: hci5: command tx timeout
[  170.944012][ T5115] Bluetooth: hci6: command tx timeout
[  171.018333][ T5115] Bluetooth: hci7: command tx timeout
[  172.938389][ T5115] Bluetooth: hci5: command tx timeout
[  173.018641][ T5115] Bluetooth: hci6: command tx timeout
[  173.098431][ T5115] Bluetooth: hci7: command tx timeout
[  175.018260][ T5115] Bluetooth: hci5: command tx timeout
[  175.098404][ T5115] Bluetooth: hci6: command tx timeout
[  175.178336][ T5115] Bluetooth: hci7: command tx timeout
[  181.268482][ T5115] Bluetooth: hci2: command 0x0406 tx timeout
[  190.342200][ T5115] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  190.351918][ T5115] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  190.359886][ T5115] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  190.367916][ T5115] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  190.381324][ T5115] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  190.398774][ T5115] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  190.664094][   T53] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  190.678434][   T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  190.686990][   T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  190.695206][   T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  190.704674][   T53] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  190.727349][   T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  192.458370][ T5115] Bluetooth: hci8: command tx timeout
[  192.778904][ T5115] Bluetooth: hci9: command tx timeout
[  194.546511][ T5115] Bluetooth: hci8: command tx timeout
[  194.548073][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[  194.858460][ T5115] Bluetooth: hci9: command tx timeout
[  196.618427][ T5115] Bluetooth: hci8: command tx timeout
[  196.938385][ T5115] Bluetooth: hci9: command tx timeout
[  198.708308][ T5115] Bluetooth: hci8: command tx timeout
[  199.018789][ T5115] Bluetooth: hci9: command tx timeout
[  231.679379][ T5122] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  231.689809][ T5122] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  231.704476][ T5122] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  231.714398][ T5122] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  231.723486][ T5122] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  231.731048][ T5122] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  231.771810][   T53] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  231.781319][   T53] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  231.790398][   T53] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  231.801708][ T4491] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  231.809597][ T4491] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  231.817010][ T4491] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  231.819363][ T5121] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  231.860469][ T5121] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  231.868740][ T5121] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  231.877500][ T5121] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  231.886194][ T5121] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  231.894319][ T5121] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  232.458648][   T53] Bluetooth: hci3: command 0x0406 tx timeout
[  233.818495][ T5115] Bluetooth: hci10: command tx timeout
[  233.898299][ T5115] Bluetooth: hci11: command tx timeout
[  233.978883][ T5115] Bluetooth: hci12: command tx timeout
[  235.901984][ T5115] Bluetooth: hci10: command tx timeout
[  235.978580][ T5115] Bluetooth: hci11: command tx timeout
[  236.058697][ T5115] Bluetooth: hci12: command tx timeout
[  237.979196][ T5115] Bluetooth: hci10: command tx timeout
[  238.061607][ T5115] Bluetooth: hci11: command tx timeout
[  238.147574][ T5115] Bluetooth: hci12: command tx timeout
[  240.059371][ T5115] Bluetooth: hci10: command tx timeout
[  240.144222][ T5115] Bluetooth: hci11: command tx timeout
[  240.218646][ T5115] Bluetooth: hci12: command tx timeout
[  247.818225][   T53] Bluetooth: hci4: command 0x0406 tx timeout
[  252.938247][   T53] Bluetooth: hci1: command 0x0406 tx timeout
[  255.515334][   T53] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  255.526120][   T53] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  255.534545][   T53] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  255.545123][   T53] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  255.557657][   T53] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  255.569819][   T53] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  255.702504][ T5115] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  255.728207][ T5115] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  255.737130][ T5115] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  255.745942][ T5115] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  255.754278][ T5115] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  255.781117][ T5115] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  255.981496][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[  257.658982][   T53] Bluetooth: hci13: command tx timeout
[  257.818370][   T53] Bluetooth: hci14: command tx timeout
[  259.738629][   T53] Bluetooth: hci13: command tx timeout
[  259.901820][   T53] Bluetooth: hci14: command tx timeout
[  261.818489][   T53] Bluetooth: hci13: command tx timeout
[  261.980656][   T53] Bluetooth: hci14: command tx timeout
[  263.898914][   T53] Bluetooth: hci13: command tx timeout
[  264.058356][   T53] Bluetooth: hci14: command tx timeout
[  293.904180][ T5122] Bluetooth: hci7: command 0x0406 tx timeout
[  293.910794][ T4491] Bluetooth: hci6: command 0x0406 tx timeout
[  293.916823][ T4491] Bluetooth: hci5: command 0x0406 tx timeout
[  296.618664][ T5115] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  296.638523][ T5115] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  296.646662][ T5115] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  296.688711][ T5115] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  296.704322][ T5115] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  296.713295][ T5115] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  296.788850][   T53] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  296.797561][   T53] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  296.806290][   T53] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  296.816847][   T53] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  296.824799][   T53] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3
[  296.833003][   T53] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  296.879557][ T5115] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  296.888274][ T5115] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  296.896278][ T5115] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  296.931791][ T5115] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  296.942948][ T5115] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3
[  296.951354][ T5115] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  298.218776][   T30] INFO: task kworker/u8:2:35 blocked for more than 143 seconds.
[  298.226451][   T30]       Not tainted 6.10.0-rc2-syzkaller-00438-g62b5bf58b928 #0
[  298.250117][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
2024/06/07 13:11:35 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  298.268100][   T30] task:kworker/u8:2    state:D stack:21752 pid:35    tgid:35    ppid:2      flags:0x00004000
[  298.308141][   T30] Workqueue: netns cleanup_net
[  298.312998][   T30] Call Trace:
[  298.316289][   T30]  <TASK>
[  298.328198][   T30]  __schedule+0x17e8/0x4a20
[  298.332785][   T30]  ? __pfx___schedule+0x10/0x10
[  298.337659][   T30]  ? __pfx_lock_release+0x10/0x10
[  298.360050][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  298.365560][   T30]  ? kthread_data+0x52/0xd0
[  298.378218][   T30]  ? schedule+0x90/0x320
[  298.382505][   T30]  ? wq_worker_sleeping+0x66/0x240
[  298.387644][   T30]  ? schedule+0x90/0x320
[  298.409082][   T30]  schedule+0x14b/0x320
[  298.413293][   T30]  schedule_preempt_disabled+0x13/0x30
[  298.428097][   T30]  __mutex_lock+0x6a4/0xd70
[  298.432640][   T30]  ? __mutex_lock+0x527/0xd70
[  298.437337][   T30]  ? cfg802154_pernet_exit+0x1b/0xe0
[  298.458185][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  298.463264][   T30]  ? __pfx___might_resched+0x10/0x10
[  298.478120][   T30]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  298.483632][   T30]  cfg802154_pernet_exit+0x1b/0xe0
[  298.508132][   T30]  cleanup_net+0x802/0xcc0
[  298.512609][   T30]  ? __pfx_cleanup_net+0x10/0x10
[  298.517584][   T30]  ? process_scheduled_works+0x945/0x1830
[  298.538155][   T30]  process_scheduled_works+0xa2c/0x1830
[  298.543783][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  298.558134][   T30]  ? assign_work+0x364/0x3d0
[  298.562769][   T30]  worker_thread+0x86d/0xd70
[  298.567391][   T30]  ? __kthread_parkme+0x169/0x1d0
[  298.588114][   T30]  ? __pfx_worker_thread+0x10/0x10
[  298.593266][   T30]  kthread+0x2f0/0x390
[  298.597362][   T30]  ? __pfx_worker_thread+0x10/0x10
[  298.618204][   T30]  ? __pfx_kthread+0x10/0x10
[  298.622844][   T30]  ret_from_fork+0x4b/0x80
[  298.627277][   T30]  ? __pfx_kthread+0x10/0x10
[  298.648122][   T30]  ret_from_fork_asm+0x1a/0x30
[  298.653112][   T30]  </TASK>
[  298.656590][   T30] INFO: task kworker/u8:7:2427 blocked for more than 143 seconds.
[  298.678124][   T30]       Not tainted 6.10.0-rc2-syzkaller-00438-g62b5bf58b928 #0
[  298.685778][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  298.718131][   T30] task:kworker/u8:7    state:D stack:21936 pid:2427  tgid:2427  ppid:2      flags:0x00004000
[  298.739761][   T30] Workqueue: ipv6_addrconf addrconf_dad_work
[  298.745790][   T30] Call Trace:
[  298.758179][   T30]  <TASK>
[  298.761524][   T30]  __schedule+0x17e8/0x4a20
[  298.766077][   T30]  ? __pfx___schedule+0x10/0x10
[  298.778128][   T30]  ? __pfx_lock_release+0x10/0x10
[  298.778820][   T53] Bluetooth: hci15: command tx timeout
[  298.783165][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[