last executing test programs:

1m24.315637933s ago: executing program 1 (id=2341):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000700)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40}}}, 0x80, 0x0}}], 0x2, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x488, 0x188, 0x328, 0x0, 0x188, 0x328, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0xff000000, 0xffffff00, 'macvtap0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x29, 0x1, 0x10}, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@ah={{0x30}, {[0x7fffffff, 0x101]}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0xfd}}}, {{@ip={@multicast1, @loopback, 0x0, 0x0, 'macvlan1\x00', 'macvlan0\x00', {}, {}, 0x5c, 0x3}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xd4, 0xffffff09, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e21}}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 'batadv0\x00', 'ipvlan0\x00', {0x1fe}, {}, 0x2, 0x3, 0x10}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@icmp={{0x28}, {0x3, "8fc8"}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x3d, @loopback, 0x4e20}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, '\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x5c, 0x1, 0x15}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x28d, 0x0, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@float={0x10, 0x0, 0x0, 0x10, 0xc}, @fwd={0xe}]}, {0x0, [0x0, 0x61, 0x0]}}, &(0x7f0000000040)=""/46, 0x35, 0x2e, 0x1, 0x7f, 0x10000, @value}, 0x28)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0a}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1m9.512315902s ago: executing program 3 (id=2607):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0002000000753904030405a024f0dd00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0)
r2 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x1)

1m9.168467872s ago: executing program 1 (id=2341):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000700)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40}}}, 0x80, 0x0}}], 0x2, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x488, 0x188, 0x328, 0x0, 0x188, 0x328, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0xff000000, 0xffffff00, 'macvtap0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x29, 0x1, 0x10}, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@ah={{0x30}, {[0x7fffffff, 0x101]}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0xfd}}}, {{@ip={@multicast1, @loopback, 0x0, 0x0, 'macvlan1\x00', 'macvlan0\x00', {}, {}, 0x5c, 0x3}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xd4, 0xffffff09, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e21}}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 'batadv0\x00', 'ipvlan0\x00', {0x1fe}, {}, 0x2, 0x3, 0x10}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@icmp={{0x28}, {0x3, "8fc8"}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x3d, @loopback, 0x4e20}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, '\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x5c, 0x1, 0x15}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x28d, 0x0, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@float={0x10, 0x0, 0x0, 0x10, 0xc}, @fwd={0xe}]}, {0x0, [0x0, 0x61, 0x0]}}, &(0x7f0000000040)=""/46, 0x35, 0x2e, 0x1, 0x7f, 0x10000, @value}, 0x28)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0a}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

55.832222506s ago: executing program 3 (id=2607):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0002000000753904030405a024f0dd00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0)
r2 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x1)

54.074553446s ago: executing program 1 (id=2341):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000700)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40}}}, 0x80, 0x0}}], 0x2, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x488, 0x188, 0x328, 0x0, 0x188, 0x328, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0xff000000, 0xffffff00, 'macvtap0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x29, 0x1, 0x10}, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@ah={{0x30}, {[0x7fffffff, 0x101]}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0xfd}}}, {{@ip={@multicast1, @loopback, 0x0, 0x0, 'macvlan1\x00', 'macvlan0\x00', {}, {}, 0x5c, 0x3}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xd4, 0xffffff09, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e21}}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 'batadv0\x00', 'ipvlan0\x00', {0x1fe}, {}, 0x2, 0x3, 0x10}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@icmp={{0x28}, {0x3, "8fc8"}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x3d, @loopback, 0x4e20}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, '\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x5c, 0x1, 0x15}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x28d, 0x0, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@float={0x10, 0x0, 0x0, 0x10, 0xc}, @fwd={0xe}]}, {0x0, [0x0, 0x61, 0x0]}}, &(0x7f0000000040)=""/46, 0x35, 0x2e, 0x1, 0x7f, 0x10000, @value}, 0x28)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0a}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

41.968087744s ago: executing program 3 (id=2607):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0002000000753904030405a024f0dd00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0)
r2 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x1)

40.76875153s ago: executing program 1 (id=2341):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000700)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40}}}, 0x80, 0x0}}], 0x2, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x488, 0x188, 0x328, 0x0, 0x188, 0x328, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0xff000000, 0xffffff00, 'macvtap0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x29, 0x1, 0x10}, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@ah={{0x30}, {[0x7fffffff, 0x101]}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0xfd}}}, {{@ip={@multicast1, @loopback, 0x0, 0x0, 'macvlan1\x00', 'macvlan0\x00', {}, {}, 0x5c, 0x3}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xd4, 0xffffff09, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e21}}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 'batadv0\x00', 'ipvlan0\x00', {0x1fe}, {}, 0x2, 0x3, 0x10}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@icmp={{0x28}, {0x3, "8fc8"}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x3d, @loopback, 0x4e20}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, '\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x5c, 0x1, 0x15}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x28d, 0x0, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@float={0x10, 0x0, 0x0, 0x10, 0xc}, @fwd={0xe}]}, {0x0, [0x0, 0x61, 0x0]}}, &(0x7f0000000040)=""/46, 0x35, 0x2e, 0x1, 0x7f, 0x10000, @value}, 0x28)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0a}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

28.201512141s ago: executing program 3 (id=2607):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0002000000753904030405a024f0dd00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0)
r2 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x1)

27.419496893s ago: executing program 1 (id=2341):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000700)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40}}}, 0x80, 0x0}}], 0x2, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x488, 0x188, 0x328, 0x0, 0x188, 0x328, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0xff000000, 0xffffff00, 'macvtap0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x29, 0x1, 0x10}, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@ah={{0x30}, {[0x7fffffff, 0x101]}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0xfd}}}, {{@ip={@multicast1, @loopback, 0x0, 0x0, 'macvlan1\x00', 'macvlan0\x00', {}, {}, 0x5c, 0x3}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xd4, 0xffffff09, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e21}}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 'batadv0\x00', 'ipvlan0\x00', {0x1fe}, {}, 0x2, 0x3, 0x10}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@icmp={{0x28}, {0x3, "8fc8"}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x3d, @loopback, 0x4e20}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, '\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x5c, 0x1, 0x15}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x28d, 0x0, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@float={0x10, 0x0, 0x0, 0x10, 0xc}, @fwd={0xe}]}, {0x0, [0x0, 0x61, 0x0]}}, &(0x7f0000000040)=""/46, 0x35, 0x2e, 0x1, 0x7f, 0x10000, @value}, 0x28)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0a}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

14.182628163s ago: executing program 3 (id=2607):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0002000000753904030405a024f0dd00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0)
r2 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x1)

12.566153805s ago: executing program 1 (id=2341):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000700)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40}}}, 0x80, 0x0}}], 0x2, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x488, 0x188, 0x328, 0x0, 0x188, 0x328, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0xff000000, 0xffffff00, 'macvtap0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x29, 0x1, 0x10}, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@ah={{0x30}, {[0x7fffffff, 0x101]}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0xfd}}}, {{@ip={@multicast1, @loopback, 0x0, 0x0, 'macvlan1\x00', 'macvlan0\x00', {}, {}, 0x5c, 0x3}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xd4, 0xffffff09, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e21}}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 'batadv0\x00', 'ipvlan0\x00', {0x1fe}, {}, 0x2, 0x3, 0x10}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@icmp={{0x28}, {0x3, "8fc8"}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x3d, @loopback, 0x4e20}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, '\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x5c, 0x1, 0x15}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x28d, 0x0, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@float={0x10, 0x0, 0x0, 0x10, 0xc}, @fwd={0xe}]}, {0x0, [0x0, 0x61, 0x0]}}, &(0x7f0000000040)=""/46, 0x35, 0x2e, 0x1, 0x7f, 0x10000, @value}, 0x28)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0a}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

2.315359644s ago: executing program 0 (id=3365):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', <r1=>0x0})
socketpair(0xa, 0x80000, 0x1, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "87fb89", 0x8, 0x0, 0x0, @local, @private2, {[], "c10a074faa17e05f"}}}}}, 0x0)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x7, 0x1, 0xc, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x6, 0x7ab0715dca68fedf, 0x0, {}, {}, {}, 0x4, @canfd={{}, 0xff, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x54, r4, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x11}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000044}, 0x4)
syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x40, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0xa101}, @mptcp=@ack={0x1e, 0xc, 0x7, 0x4, "0b6df4f5c06e887c"}, @exp_fastopen={0xfe, 0x7, 0xf989, "519f7e"}, @md5sig={0x13, 0x12, "7224407c80fe8a3616b4bf3400006cc8"}]}}}}}}}}, 0x0)
r6 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3, 0x1, 0x55b8}, {0xb, 0x2, 0x6, 0x6, 0x6, 0x0, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010004b0400000000fcdbdf257a000000", @ANYRES32=r1, @ANYBLOB="00420100000000000a000100b0"], 0x2c}, 0x1, 0x0, 0x0, 0x40002}, 0x4000)

2.148695527s ago: executing program 2 (id=3366):
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r1=>r0})
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005080), 0xffffffffffffffff) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x2c, r4, 0x603, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_ACTION={0x5}]}, 0x2c}}, 0x0) (async)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00040000", @ANYRES16=r2, @ANYBLOB="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"], 0x400}, 0x1, 0x0, 0x0, 0x4010}, 0x4010) (async)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r0, 0x0)

1.905268401s ago: executing program 4 (id=3368):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000004000000140005000303000000000000005dc00000000001080002000500000014000600ff01000000f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x100)
write(r0, &(0x7f0000000080)="24000000580025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24)

1.820479447s ago: executing program 0 (id=3369):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newqdisc={0xcc, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x84, 0x2, [@TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3}}, @TCA_HTB_DIRECT_QLEN={0x8}]}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8}]}}]}, 0xcc}}, 0x0)
sendto$inet6(r0, 0x0, 0xffffffffffffffd3, 0x2600c040, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @private0}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9)
shutdown(r0, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee1768812003c000203000aff3f000057fc5ad90200bb6a880000d6c9db0000db150002020001800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3a5f7", 0xb8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0x3f, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan1\x00'})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="2000000012d82cfe1bffff8a8d01cc47837a3208a64768c9512be7adb5b4de38d2a0b6d929c569a21d5150b35769f0c11b3f1385a673c85d5797750c0f448bd6f77f669976c36eb1e93f94ac9d603d0a9fba92c6ca7d423d60443c074f6d82139a48b9b9085aadd03fe4dda2e8aeeefb82614e3221100da3e282bb17afa1", @ANYRES16=r6, @ANYBLOB="01002dbd7000fdffffff370000000c009900ffff00003c000000"], 0x20}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x1, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r10 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'wg2\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7fffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x44040)

1.713465788s ago: executing program 4 (id=3370):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x20000400)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6000002, 0x80010, r0, 0xf7821000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x3}, 0xe)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x81}, @NBD_ATTR_BACKEND_IDENTIFIER={0x16, 0xa, 'cts-cbc-aes-aesni\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040084}, 0x40010)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=@newae={0x164, 0x1e, 0x8, 0x70bd29, 0x25dfdbfd, {{@in6=@empty, 0x4d5, 0xa, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x44}, 0xeaaf, 0x3502}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x10001}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e23, 0x4e23, @in6=@local}}, @replay_thresh={0x8, 0xb, 0x7}, @algo_crypt={0xf5, 0x2, {{'cts-cbc-aes-aesni\x00'}, 0x568, "e46b9c661039800184d3566df434aa59785fb0637f0b256dcb2805f90ec5655c0ac0536acc1a374513bfb6f78b0a9e19ad4c448418d171040a22d5cf598caedb4bdee3f0c8cbe15f673a66c824170789d339af8b15ece2f434815f607b591cbeb8ce5b0a05c2770932a49a1638a3b24970b35d6930affde35e50e3ed70e958da3f3f41bbcd45f3371e5321daf396306d6268c421bbf3b6ec2e354da824aeb0506e180d42d79c7ce64ed401b035"}}]}, 0x164}, 0x1, 0x0, 0x0, 0x2}, 0x800)
close(r2)
socket$xdp(0x2c, 0x3, 0x0)

1.502564708s ago: executing program 0 (id=3371):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) (async, rerun: 64)
setsockopt$inet6_int(r1, 0x29, 0x31, 0x0, 0x0) (async, rerun: 64)
recvmmsg$unix(r0, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/94, 0x5e}], 0x1}}], 0x1, 0x0, 0x0) (async)
r2 = socket(0x1e, 0x4, 0x0)
close(r1) (async)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async)
r3 = syz_genetlink_get_family_id$smc(&(0x7f00000005c0), 0xffffffffffffffff) (async)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000600)=""/83, 0x1328000, 0x1000}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r6 = socket(0x26, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff02000000000000000000000000000100000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1ffffffffffffff030000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000003000000000000000000000000000000000000000000000000000000b1a00100"], 0xf8}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) (async, rerun: 64)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x24, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x6c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a3100000000090001adba810073797a30000000001400038008000240000000000800014000000000140000001100010000000000000000000000000a2ec6234c5de7afba127588e3aa7ae0975f79682fe4ce8f3d7196fcfc33df561c31b1321614e03075908cbac4305b4e00"/168], 0x68}}, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c000000170a010200000000000040000200fffd09000100"], 0x2c}}, 0x0) (async)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', <r9=>0x0})
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000380)={&(0x7f0000000240)=""/119, 0x1104000, 0x34c6163ac96ca652, 0xffffffff, 0x3}, 0x20)
bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x12, r9}, 0x10)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRES16=r3, @ANYBLOB="01000000000000000000020000001400020070696d367265673000000000000000000900010073"], 0x40}}, 0x0)

1.424448956s ago: executing program 4 (id=3372):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010100feffffffa80000000008000300", @ANYRES32=0x0, @ANYBLOB="05003400a100000004"], 0x28}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000880)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x10, 0xffff, 0x0, 0x7, 0x1})
syz_emit_ethernet(0x32, &(0x7f0000001c80)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}, "95b8bcc0"}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
r4 = socket$inet(0x2, 0x1, 0x7)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000900)={0x0, 'vlan0\x00', {0x3}, 0x3a7c})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="0e0033"], 0x3c}}, 0x0)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000008c0)={0x4, &(0x7f0000000840)=[{0x2, 0x3, 0x9, 0x4}, {0xfffb, 0xfb, 0x6, 0x7}, {0x1, 0x3, 0x2b, 0x5dd}, {0x8, 0x5, 0x1, 0x80000001}]}, 0x10)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x61c9be7d32df0588}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r5, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xc}, @NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xdf}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfffc}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000804}, 0x8001)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r8, @ANYBLOB="10007d8005"], 0x2c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0xb, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000080)=0x4)
sendmsg$nl_crypto(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=@getstat={0xe0, 0x15, 0x2, 0x70bd27, 0x25dfdbfd, {{'drbg_pr_sha256\x00'}, '\x00', '\x00', 0x0, 0x400}}, 0xe0}, 0x1, 0x0, 0x0, 0x840}, 0x28000010)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x10, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
syz_emit_ethernet(0x9e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x68, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@srh={0x0, 0x4, 0x4, 0x2, 0x1, 0x0, 0x0, [@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x88, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}]}}}}}}}, 0x0)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r6)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000480)={0x20, r7, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1200000, 0x2c}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004095)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r10, 0x405, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x4000000)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0)

1.182255092s ago: executing program 2 (id=3373):
r0 = socket$packet(0x11, 0x0, 0x300)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10)
r2 = accept(r0, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x38, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x20050800)
setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000000440)=0x80000000, 0x4)

1.097589076s ago: executing program 0 (id=3374):
r0 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@generic, &(0x7f0000000040)=0x80, 0x800)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r2, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000045}, 0x14)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r3, &(0x7f00000007c0)="0ff764", &(0x7f00000002c0)=@tcp6, 0x1}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r3}, &(0x7f00000003c0), &(0x7f0000000400)='%-5lx  \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

924.718595ms ago: executing program 2 (id=3375):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10, 0x1000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f00000001c0)={0x1f, 0xfffb}, 0x6)
write(r3, &(0x7f0000000040)="05000000010097", 0x7)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x8000)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0xe, 0x4, 0x520, 0xffffffff, 0x1a8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x450, 0x450, 0x450, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ipv6={@empty, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff, 0xff000000, 0xff], [0xffffffff, 0xffffffff, 0xff, 0xff000000], 'team0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0xd2, 0x4c, 0x6, 0x1}, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x9}}, @common=@srh1={{0x90}, {0x3a, 0x4f, 0x9, 0x1, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @remote, [0x0, 0xff000000], [0xff000000, 0xffffff00, 0xffffffff, 0xff], [0xffffffff, 0xff, 0xffffffff], 0x100, 0x200}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'wlan0\x00', {0x4}}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x2c, 0x2, 0x8, 0x5d, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @dev={0xfe, 0x80, '\x00', 0x3a}, [0x0, 0xff, 0xff, 0xff000000], [0x0, 0xffffffff, 0xff], [0xff000000, 0xff000000, 0x0, 0xffffff00], 0x40, 0x100c}}]}, @REJECT={0x28}}, {{@ipv6={@loopback, @remote, [0x0, 0x0, 0xff], [0xff, 0xff, 0xffffff00], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x1d, 0x9, 0x3, 0x1}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0xd5f1, 0x1, 0x1, [0x496a, 0x5, 0x1, 0x7ff, 0xb, 0x7, 0x7, 0x4, 0x8, 0x1, 0x0, 0x4, 0x6, 0x0, 0x6, 0x3de4], 0x4}}, @common=@frag={{0x30}, {[0x4, 0x866], 0x1, 0x4, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10, 0x1000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) (async)
connect$unix(0xffffffffffffffff, &(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
bind$bt_hci(r3, &(0x7f00000001c0)={0x1f, 0xfffb}, 0x6) (async)
write(r3, &(0x7f0000000040)="05000000010097", 0x7) (async)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) (async)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0xe, 0x4, 0x520, 0xffffffff, 0x1a8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x450, 0x450, 0x450, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ipv6={@empty, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff, 0xff000000, 0xff], [0xffffffff, 0xffffffff, 0xff, 0xff000000], 'team0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0xd2, 0x4c, 0x6, 0x1}, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x9}}, @common=@srh1={{0x90}, {0x3a, 0x4f, 0x9, 0x1, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @remote, [0x0, 0xff000000], [0xff000000, 0xffffff00, 0xffffffff, 0xff], [0xffffffff, 0xff, 0xffffffff], 0x100, 0x200}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'wlan0\x00', {0x4}}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x2c, 0x2, 0x8, 0x5d, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @dev={0xfe, 0x80, '\x00', 0x3a}, [0x0, 0xff, 0xff, 0xff000000], [0x0, 0xffffffff, 0xff], [0xff000000, 0xff000000, 0x0, 0xffffff00], 0x40, 0x100c}}]}, @REJECT={0x28}}, {{@ipv6={@loopback, @remote, [0x0, 0x0, 0xff], [0xff, 0xff, 0xffffff00], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x1d, 0x9, 0x3, 0x1}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0xd5f1, 0x1, 0x1, [0x496a, 0x5, 0x1, 0x7ff, 0xb, 0x7, 0x7, 0x4, 0x8, 0x1, 0x0, 0x4, 0x6, 0x0, 0x6, 0x3de4], 0x4}}, @common=@frag={{0x30}, {[0x4, 0x866], 0x1, 0x4, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) (async)

921.793539ms ago: executing program 0 (id=3376):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0xff}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x4c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000080)=ANY=[@ANYBLOB="144c020000000100000000000000000c0d000988cf4570dda5e6b7fd703690043ce0ff64517f62048c52f8545a9a57a02d10a8c951f6"], 0x14}}, 0x28000000)
r3 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
r4 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10)

845.688637ms ago: executing program 4 (id=3377):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x9f, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000004240)=0x40000006, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r3=>0x0})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={<r5=>r4, 0xc, 0x2, 0x718})
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xa6dc, '\x00', 0x0, r6, 0x3, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)

698.967409ms ago: executing program 2 (id=3378):
r0 = socket(0x2a, 0x2, 0x0)
ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={@null, 0x1, 'virt_wifi0\x00'})
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5)
syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, {[@eol, @exp_smc={0xfe, 0x6}, @fastopen={0x22, 0x2}]}}}}}}}, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000000), 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x80000000}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15864}]}}]}, 0x44}}, 0x4000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000fe"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x4)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

648.802695ms ago: executing program 0 (id=3379):
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3d, 0x0, "2e52f463273974700fa6345b251d8975a34ce626db167dbf6e168d9e7f0000000000000043ff6a8a6123980b1d34d6932fac4bcaeba676b4b24488db18f9f12d733e613a3a1ff56300110b87c85d9831"}, 0xd8)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f0000000240), 0x2)
socket(0x40000000015, 0x5, 0x0)
r1 = socket$inet(0x2, 0x2, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0x0)
clock_gettime(0x7, &(0x7f00000000c0))
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0x8, 0x0, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000000800044000000006050003002000000008000240000000010900010073797a30000000000900020073797a32"], 0x8c}}, 0x0)
recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2)
sendmsg$inet(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='#', 0x1}], 0x1}, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0xffe8}], 0x1, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7}}], 0x18}, 0x0)

526.930962ms ago: executing program 4 (id=3380):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x12)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r4=>0x0}) (async)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000002cc0)=ANY=[@ANYBLOB='D!\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x2144}, 0x1, 0x0, 0x0, 0x4004850}, 0x8000) (async)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="81000000d4906eed76d0ff8a090029dc370d57f738535497a6cc4f7efb3a4d51ef18fb9f2793870202679360eea5a8e81e45bc6f86b324bf517ef3e67e5bea38b2e8fa436b195262bdc76d0ada684a1e02231ebad36865dff3700b1849db37f197c50777c6bae9e045910bc278010a8cd9ed4f30295c7aa813", @ANYRES16=0x0, @ANYBLOB="000200000000000000000200000008000b010800000005003e00ff000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, r6, 0x388533d2e1ce51d9, 0x70bd2d, 0x167f26dd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20010000}, 0x8000)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0)

487.535963ms ago: executing program 2 (id=3381):
r0 = socket$inet(0x2, 0x800, 0x6)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
r1 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10)

280.587463ms ago: executing program 4 (id=3382):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
listen(r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_sctp(0x2, 0x400000000001, 0x84)
sendto$inet(r2, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10)
listen(r2, 0xda8c)
accept4(r2, &(0x7f0000000340)=@nfc, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket(0x22, 0x5, 0x8)
connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = socket$netlink(0x10, 0x3, 0x15)
writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
recvmmsg(r7, &(0x7f0000007600)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2000, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x22, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100017f7fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000003240012800b0001006772657401000000bd87a2ff209dc4000200000008000700ac1e000108000a00", @ANYRES32=r10, @ANYBLOB], 0x4c}}, 0x0)
setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000080)=0xf3e, 0x4)
readv(r4, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/228, 0xe4}], 0x1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x200, 0x0, @udp='udp:syz1\x00'}}}}, 0x34}}, 0x0)
r12 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x278, 0x168, 0x9, 0x0, 0xb, 0x378, 0x250, 0x250, 0x378, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c, 0x0, 0x0, 0x1}, 0x6000000, 0x230, 0x278, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x4, 0x7ff, 0x0, 0x0, 0x0, 0x6, 0x1000}}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8)

118.246544ms ago: executing program 2 (id=3383):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10dfe000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000004000200110000", 0x5b}, {&(0x7f0000000680)='\'', 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r0])

0s ago: executing program 3 (id=2607):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0002000000753904030405a024f0dd00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0)
r2 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x1)

kernel console output (not intermixed with test programs):

th.
[  331.014823][T15859] team0: Port device team_slave_0 added
[  331.069757][ T6405] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  331.107369][T15941] 8021q: adding VLAN 0 to HW filter on device bond3
[  331.134687][T15949] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2879'.
[  331.145993][T15944] gretap3: entered promiscuous mode
[  331.154249][T15944] bond3: (slave gretap3): making interface the new active one
[  331.164447][T15944] bond3: (slave gretap3): Enslaving as an active interface with an up link
[  331.179317][T15859] team0: Port device team_slave_1 added
[  331.334290][T15859] batman_adv: batadv0: Adding interface: batadv_slave_0
[  331.341292][T15859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  331.402776][   T55] Bluetooth: hci0: command tx timeout
[  331.417746][T15859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  331.518365][T15951] lo speed is unknown, defaulting to 1000
[  331.523702][T15859] batman_adv: batadv0: Adding interface: batadv_slave_1
[  331.534637][T15963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2883'.
[  331.582412][T15859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  331.656162][T15859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  331.676231][T15959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  331.711445][T15884] chnl_net:caif_netlink_parms(): no params data found
[  331.920917][T15859] hsr_slave_0: entered promiscuous mode
[  331.931320][T15859] hsr_slave_1: entered promiscuous mode
[  331.952871][T15859] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  331.960484][T15859] Cannot create hsr debugfs directory
[  332.143155][T15981] openvswitch: netlink: Missing valid actions attribute.
[  332.170245][T15981] openvswitch: netlink: Actions may not be safe on all matching packets
[  332.189807][T15884] bridge0: port 1(bridge_slave_0) entered blocking state
[  332.197533][T15978] netlink: 'syz.4.2887': attribute type 10 has an invalid length.
[  332.205570][   T55] Bluetooth: hci2: command tx timeout
[  332.222387][T15884] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.229695][T15884] bridge_slave_0: entered allmulticast mode
[  332.238001][T15983] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  332.250174][T15884] bridge_slave_0: entered promiscuous mode
[  332.261429][T15884] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.268861][T15884] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.276455][T15884] bridge_slave_1: entered allmulticast mode
[  332.283485][T13817] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  332.294452][T15884] bridge_slave_1: entered promiscuous mode
[  332.325765][T15978] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  332.334750][T15983] netlink: 'syz.0.2889': attribute type 1 has an invalid length.
[  332.425549][T15884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  332.481805][T15988] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2890'.
[  332.516989][T15884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  332.663502][T13817] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.794593][T15884] team0: Port device team_slave_0 added
[  332.863696][T13817] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.905751][T15884] team0: Port device team_slave_1 added
[  333.055301][T13817] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.217159][T15884] batman_adv: batadv0: Adding interface: batadv_slave_0
[  333.232424][T15884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  333.282252][T15884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  333.367893][T13817] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.404315][ T6402] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  333.542465][   T55] Bluetooth: hci0: command tx timeout
[  333.590613][T15884] batman_adv: batadv0: Adding interface: batadv_slave_1
[  333.598039][T15884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  333.624929][T15884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  333.731106][T16018] netlink: 'syz.4.2897': attribute type 12 has an invalid length.
[  333.744360][T16013] 8021q: adding VLAN 0 to HW filter on device batadv0
[  333.755694][T15884] hsr_slave_0: entered promiscuous mode
[  333.762004][T15884] hsr_slave_1: entered promiscuous mode
[  333.769193][T15884] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  333.779323][T15884] Cannot create hsr debugfs directory
[  333.893830][T13817] bridge_slave_1: left allmulticast mode
[  333.899537][T13817] bridge_slave_1: left promiscuous mode
[  333.916289][T13817] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.927468][T13817] bridge_slave_0: left allmulticast mode
[  333.933925][T13817] bridge_slave_0: left promiscuous mode
[  333.939813][T13817] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.284721][   T55] Bluetooth: hci2: command tx timeout
[  334.399656][T13817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  334.411978][T13817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  334.423681][T13817] bond0 (unregistering): Released all slaves
[  334.582855][ T6402] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  334.761523][T16042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2902'.
[  334.851489][T16035] veth1_to_hsr: entered promiscuous mode
[  334.883421][T16044] netlink: 'syz.2.2904': attribute type 13 has an invalid length.
[  334.931652][T16042] veth1_to_hsr (unregistering): left promiscuous mode
[  334.957991][T16042] hsr_slave_1 (unregistering): left promiscuous mode
[  335.035101][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2904'.
[  335.046330][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2904'.
[  335.060700][T16045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2904'.
[  335.143316][T16052] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2906'.
[  335.279401][T15859] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  335.501152][T15859] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  335.532094][T15859] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  335.576827][   T55] Bluetooth: hci0: command tx timeout
[  335.580768][T16067] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2912'.
[  335.602743][T16067] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2912'.
[  335.623978][T15859] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  335.718024][T13817] hsr_slave_0: left promiscuous mode
[  335.727067][T13817] hsr_slave_1: left promiscuous mode
[  335.752760][T13816] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  335.761574][T13817] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  335.769331][T13817] batman_adv: batadv0: Removing interface: batadv_slave_0
[  335.792344][T13817] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  335.799819][T13817] batman_adv: batadv0: Removing interface: batadv_slave_1
[  335.846558][T13817] veth1_macvtap: left promiscuous mode
[  335.852158][T13817] veth0_macvtap: left promiscuous mode
[  335.857874][T13817] veth1_vlan: left promiscuous mode
[  335.863745][T13817] veth0_vlan: left promiscuous mode
[  335.921611][T16083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2916'.
[  335.931043][T16083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2916'.
[  336.153895][T16087] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0
[  336.365159][   T55] Bluetooth: hci2: command tx timeout
[  336.665819][T13817] team0 (unregistering): Port device team_slave_1 removed
[  336.719707][T13817] team0 (unregistering): Port device team_slave_0 removed
[  336.867243][ T6402] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  337.235737][T16072] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614)
[  337.246742][T16072] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  337.257407][T16075] netlink: 'syz.0.2914': attribute type 4 has an invalid length.
[  337.272733][T16077] netlink: 'syz.0.2914': attribute type 4 has an invalid length.
[  337.316173][T16088] lo speed is unknown, defaulting to 1000
[  337.870758][T15884] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  337.895820][T15884] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  337.920886][T15859] 8021q: adding VLAN 0 to HW filter on device bond0
[  337.944370][T15884] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  337.973383][T15884] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  337.992760][ T6402] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  338.031630][T15859] 8021q: adding VLAN 0 to HW filter on device team0
[  338.098212][T13816] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.105547][T13816] bridge0: port 1(bridge_slave_0) entered forwarding state
[  338.131868][T16121] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2925'.
[  338.177445][T13816] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.184638][T13816] bridge0: port 2(bridge_slave_1) entered forwarding state
[  338.333527][T15884] 8021q: adding VLAN 0 to HW filter on device bond0
[  338.371366][T16123] dccp_invalid_packet: P.Data Offset(0) too small
[  338.411655][T15884] 8021q: adding VLAN 0 to HW filter on device team0
[  338.548674][ T6402] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.555907][ T6402] bridge0: port 1(bridge_slave_0) entered forwarding state
[  338.571044][ T6402] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.578256][ T6402] bridge0: port 2(bridge_slave_1) entered forwarding state
[  338.679626][T15884] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  338.690673][T15884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  338.836641][T15859] 8021q: adding VLAN 0 to HW filter on device batadv0
[  338.936175][T15859] veth0_vlan: entered promiscuous mode
[  338.978305][T15859] veth1_vlan: entered promiscuous mode
[  339.055080][T15884] 8021q: adding VLAN 0 to HW filter on device batadv0
[  339.091961][T15884] veth0_vlan: entered promiscuous mode
[  339.103248][T15884] veth1_vlan: entered promiscuous mode
[  339.143207][T13812] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  339.176047][T15859] veth0_macvtap: entered promiscuous mode
[  339.205028][T15859] veth1_macvtap: entered promiscuous mode
[  339.220844][T15859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  339.231696][T15859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.244359][T15859] batman_adv: batadv0: Interface activated: batadv_slave_0
[  339.270116][T15859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  339.283894][T15859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.303404][T15859] batman_adv: batadv0: Interface activated: batadv_slave_1
[  339.331729][T15884] veth0_macvtap: entered promiscuous mode
[  339.385336][T15859] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  339.422515][T15859] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  339.431278][T15859] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  339.460844][T15859] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  339.487884][T16154] netlink: 'syz.2.2934': attribute type 1 has an invalid length.
[  339.497219][T15884] veth1_macvtap: entered promiscuous mode
[  339.526427][T16154] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  339.533554][T15884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  339.556483][T15884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.567550][T15884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  339.583998][T15884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.595156][T15884] batman_adv: batadv0: Interface activated: batadv_slave_0
[  339.613421][T15884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  339.624557][T15884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.634565][T15884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  339.645607][T15884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.657803][T15884] batman_adv: batadv0: Interface activated: batadv_slave_1
[  339.682967][T15884] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  339.691729][T15884] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  339.716070][T15884] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  339.725487][T15884] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  339.791785][T16160] bond0: (slave bond_slave_0): Releasing backup interface
[  339.814000][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.824756][T16160] bond0: (slave bond_slave_1): Releasing backup interface
[  339.881397][T16160] team_slave_0: left promiscuous mode
[  339.940417][T16160] team0: Port device team_slave_0 removed
[  339.950751][T16160] team_slave_1: left promiscuous mode
[  339.964492][T16160] team0: Port device team_slave_1 removed
[  339.997916][T16160] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  340.016984][T16160] batman_adv: batadv0: Removing interface: batadv_slave_0
[  340.040993][T16160] batman_adv: batadv0: Removing interface: batadv_slave_1
[  340.081249][T16160] bond0: (slave bond2): Releasing backup interface
[  340.239274][T16165] IPv6: sit2: Disabled Multicast RS
[  340.254281][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  340.294031][T16182] __nla_validate_parse: 1 callbacks suppressed
[  340.294051][T16182] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2942'.
[  340.345605][T13816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.353891][T13816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.363474][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  340.484149][ T6402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.492076][ T6402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.502583][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.514079][T16188] siw: device registration error -23
[  340.520177][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.576287][T16186] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  340.578081][ T6402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.591543][ T6402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.649210][T16186] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  340.825232][T16194] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20003
[  340.972513][T16201] x_tables: duplicate underflow at hook 3
[  341.208705][T16215] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2953'.
[  341.412729][ T1147] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  341.847257][ T1147] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.174467][ T1147] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.266964][ T1147] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.391885][ T1147] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.449251][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  342.465814][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  342.478209][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  342.489030][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  342.498368][ T5829] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  342.506010][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  342.538290][ T1147] bridge_slave_1: left allmulticast mode
[  342.544256][ T1147] bridge_slave_1: left promiscuous mode
[  342.549930][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.558488][T13815] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  342.570537][ T1147] bridge_slave_0: left allmulticast mode
[  342.576337][ T1147] bridge_slave_0: left promiscuous mode
[  342.582090][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.832971][T16239] netlink: 'syz.2.2961': attribute type 10 has an invalid length.
[  343.045698][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  343.055961][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  343.075138][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  343.093901][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  343.102347][   T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  343.110209][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  343.188876][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  343.199938][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  343.210682][ T1147] bond0 (unregistering): Released all slaves
[  343.459110][T16235] lo speed is unknown, defaulting to 1000
[  343.475628][T16261] openvswitch: netlink: IP tunnel dst address not specified
[  343.694055][T13815] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  343.717746][T16253] lo speed is unknown, defaulting to 1000
[  343.993497][T16276] lo speed is unknown, defaulting to 1000
[  344.603040][ T5829] Bluetooth: hci0: command tx timeout
[  344.688595][T16235] chnl_net:caif_netlink_parms(): no params data found
[  344.813878][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  344.841935][ T1147] hsr_slave_0: left promiscuous mode
[  344.864197][ T1147] hsr_slave_1: left promiscuous mode
[  344.870422][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  344.886714][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0
[  344.903204][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  344.911009][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1
[  344.968709][ T1147] veth1_macvtap: left promiscuous mode
[  344.990667][ T1147] veth0_macvtap: left promiscuous mode
[  344.997421][ T1147] veth1_vlan: left promiscuous mode
[  345.003987][ T1147] veth0_vlan: left promiscuous mode
[  345.163750][ T5829] Bluetooth: hci2: command tx timeout
[  345.576184][ T1147] team0 (unregistering): Port device team_slave_1 removed
[  345.626068][ T1147] team0 (unregistering): Port device team_slave_0 removed
[  345.943681][T13815] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  346.262808][T16314] block nbd0: must specify backend
[  346.284848][T16235] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.292027][T16235] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.315719][T16235] bridge_slave_0: entered allmulticast mode
[  346.333552][T16235] bridge_slave_0: entered promiscuous mode
[  346.383088][T16317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2978'.
[  346.393460][T16235] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.411439][T16235] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.423875][T16235] bridge_slave_1: entered allmulticast mode
[  346.434272][T16235] bridge_slave_1: entered promiscuous mode
[  346.468011][T16322] x_tables: unsorted entry at hook 2
[  346.638291][T16235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  346.694022][ T5829] Bluetooth: hci0: command tx timeout
[  346.794296][T16235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  346.887146][T16253] chnl_net:caif_netlink_parms(): no params data found
[  346.925222][T16235] team0: Port device team_slave_0 added
[  346.948377][T16235] team0: Port device team_slave_1 added
[  347.035446][T16340] bridge6: entered promiscuous mode
[  347.040732][T16340] bridge6: entered allmulticast mode
[  347.074255][T16235] batman_adv: batadv0: Adding interface: batadv_slave_0
[  347.081242][T16235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  347.109326][T13817] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  347.118339][T16235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  347.154441][T16344] bridge7: entered promiscuous mode
[  347.159711][T16344] bridge7: entered allmulticast mode
[  347.191841][T16235] batman_adv: batadv0: Adding interface: batadv_slave_1
[  347.213005][T16235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  347.252458][ T5829] Bluetooth: hci2: command tx timeout
[  347.263743][T16350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2987'.
[  347.271389][T16235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  347.472581][T16235] hsr_slave_0: entered promiscuous mode
[  347.512711][T16235] hsr_slave_1: entered promiscuous mode
[  347.522042][T16235] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  347.542753][T16235] Cannot create hsr debugfs directory
[  347.612974][ T1147] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.679805][T16253] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.687450][T16253] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.698533][T16253] bridge_slave_0: entered allmulticast mode
[  347.717132][T16253] bridge_slave_0: entered promiscuous mode
[  347.741908][T16253] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.759683][T16253] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.772789][T16253] bridge_slave_1: entered allmulticast mode
[  347.792450][T16253] bridge_slave_1: entered promiscuous mode
[  347.854153][ T1147] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.009384][ T1147] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.026448][T16382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2994'.
[  348.068427][T16253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  348.118694][T16382] bond0: (slave wlan1): Releasing backup interface
[  348.142967][T16253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  348.232627][ T6405] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  348.254051][ T1147] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.311784][T16253] team0: Port device team_slave_0 added
[  348.357607][T16253] team0: Port device team_slave_1 added
[  348.442905][T16253] batman_adv: batadv0: Adding interface: batadv_slave_0
[  348.449900][T16253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  348.477840][T16253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  348.534623][T16391] netlink: 'syz.2.2998': attribute type 4 has an invalid length.
[  348.545714][T16253] batman_adv: batadv0: Adding interface: batadv_slave_1
[  348.562562][T16253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  348.606120][T16394] netlink: 'syz.2.2998': attribute type 4 has an invalid length.
[  348.621561][T16253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  348.658018][T16394] infiniband syz0: set active
[  348.690377][  T974] lo speed is unknown, defaulting to 1000
[  348.755338][T16253] hsr_slave_0: entered promiscuous mode
[  348.762742][ T5829] Bluetooth: hci0: command tx timeout
[  348.773914][T16253] hsr_slave_1: entered promiscuous mode
[  348.781596][T16253] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  348.789286][T16253] Cannot create hsr debugfs directory
[  348.798000][ T1147] bridge_slave_1: left allmulticast mode
[  348.803984][  T974] lo speed is unknown, defaulting to 1000
[  348.810164][ T1147] bridge_slave_1: left promiscuous mode
[  348.816200][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.830187][ T1147] bridge_slave_0: left allmulticast mode
[  348.836805][ T1147] bridge_slave_0: left promiscuous mode
[  348.842989][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.867504][T16396] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  349.328412][   T55] Bluetooth: hci2: command tx timeout
[  349.357610][ T6405] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  349.395993][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  349.411151][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  349.421907][ T1147] bond0 (unregistering): Released all slaves
[  349.602753][T16412] netlink: 'syz.2.3005': attribute type 1 has an invalid length.
[  349.610651][T16412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3005'.
[  349.704343][T16415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3004'.
[  349.725045][T16413] veth0_vlan: left promiscuous mode
[  349.737350][T16413] veth0_vlan: entered promiscuous mode
[  349.876394][T16417] netlink: 'syz.2.3006': attribute type 20 has an invalid length.
[  349.993233][T16235] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  350.010272][T16235] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  350.107728][T16235] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  350.124425][T16235] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  350.462527][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  350.470466][ T1147] hsr_slave_0: left promiscuous mode
[  350.497329][ T1147] hsr_slave_1: left promiscuous mode
[  350.507630][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  350.524802][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0
[  350.545913][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  350.559117][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1
[  350.596448][ T1147] veth1_macvtap: left promiscuous mode
[  350.602107][ T1147] veth0_macvtap: left promiscuous mode
[  350.609278][ T1147] veth1_vlan: left promiscuous mode
[  350.615291][ T1147] veth0_vlan: left promiscuous mode
[  350.666641][T16439] netlink: 'syz.0.3012': attribute type 2 has an invalid length.
[  350.755456][T16442] netlink: 23 bytes leftover after parsing attributes in process `syz.2.3013'.
[  350.765841][T16442] netlink: 23 bytes leftover after parsing attributes in process `syz.2.3013'.
[  350.842818][   T55] Bluetooth: hci0: command tx timeout
[  350.906369][T16445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3014'.
[  351.251827][ T1147] team0 (unregistering): Port device team_slave_1 removed
[  351.298953][ T1147] team0 (unregistering): Port device team_slave_0 removed
[  351.408479][   T55] Bluetooth: hci2: command tx timeout
[  351.568030][T13817] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  351.814570][T16444] infiniband syz0: set active
[  351.819411][T16444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  351.868194][T15808] lo speed is unknown, defaulting to 1000
[  351.973065][T16235] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.044010][T16451] syz.0.3015[16451] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  352.044754][T16451] syz.0.3015[16451] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  352.077318][T16235] 8021q: adding VLAN 0 to HW filter on device team0
[  352.209267][ T6405] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.216516][ T6405] bridge0: port 1(bridge_slave_0) entered forwarding state
[  352.286704][T16468] netlink: 'syz.0.3018': attribute type 10 has an invalid length.
[  352.299563][ T6405] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.306796][ T6405] bridge0: port 2(bridge_slave_1) entered forwarding state
[  352.310895][T16468] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3018'.
[  352.419553][T16472] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3019'.
[  352.689953][T16253] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  352.733693][T13798] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  352.795194][T16253] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  352.850652][T16253] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  352.882862][T16253] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  353.019053][T16253] 8021q: adding VLAN 0 to HW filter on device bond0
[  353.036562][T16253] 8021q: adding VLAN 0 to HW filter on device team0
[  353.047622][T13815] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.054773][T13815] bridge0: port 1(bridge_slave_0) entered forwarding state
[  353.111291][T13815] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.118478][T13815] bridge0: port 2(bridge_slave_1) entered forwarding state
[  353.138161][T16502] IPVS: set_ctl: invalid protocol: 11612 172.20.20.187:21
[  353.234628][T16235] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.242379][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  353.401027][T16235] veth0_vlan: entered promiscuous mode
[  353.434620][T16235] veth1_vlan: entered promiscuous mode
[  353.545675][T16235] veth0_macvtap: entered promiscuous mode
[  353.580201][T16235] veth1_macvtap: entered promiscuous mode
[  353.663185][T16235] batman_adv: batadv0: Interface activated: batadv_slave_0
[  353.688286][T16533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3032'.
[  353.709476][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  353.765194][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.818867][T16235] batman_adv: batadv0: Interface activated: batadv_slave_1
[  353.856667][T16235] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  353.862945][T13813] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  353.873358][T16235] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  353.891484][T16235] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  353.900484][T16235] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  353.952125][T16253] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.994233][T16546] netlink: 'syz.2.3036': attribute type 4 has an invalid length.
[  354.027353][T16547] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3033'.
[  354.175099][T16555] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[  354.219260][T16253] veth0_vlan: entered promiscuous mode
[  354.249613][T13798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.269093][T13798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.284962][T16253] veth1_vlan: entered promiscuous mode
[  354.299238][T16554] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3038'.
[  354.323935][T16554] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3038'.
[  354.373369][T13798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.381718][T16560] netlink: zone id is out of range
[  354.395613][T16253] veth0_macvtap: entered promiscuous mode
[  354.396654][T13798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.423197][T16253] veth1_macvtap: entered promiscuous mode
[  354.429101][T16560] netlink: set zone limit has 8 unknown bytes
[  354.484871][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  354.542734][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.567162][T16253] batman_adv: batadv0: Interface activated: batadv_slave_0
[  354.601432][T16565] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  354.620246][T16565] CPU: 1 UID: 0 PID: 16565 Comm: syz.4.3040 Not tainted 6.13.0-rc6-syzkaller-00127-g8c7a6efc017e #0
[  354.631066][T16565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  354.641166][T16565] Call Trace:
[  354.644476][T16565]  <TASK>
[  354.647431][T16565]  dump_stack_lvl+0x241/0x360
[  354.652143][T16565]  ? __pfx_dump_stack_lvl+0x10/0x10
[  354.657392][T16565]  ? __pfx__printk+0x10/0x10
[  354.662014][T16565]  ? __kmalloc_cache_noprof+0x243/0x390
[  354.667587][T16565]  ? sysfs_warn_dup+0x51/0xa0
[  354.672284][T16565]  sysfs_warn_dup+0x8e/0xa0
[  354.676809][T16565]  sysfs_do_create_link_sd+0xbe/0x110
[  354.682218][T16565]  device_add_class_symlinks+0x1c5/0x250
[  354.687876][T16565]  device_add+0x553/0xbf0
[  354.692238][T16565]  wiphy_register+0x1a58/0x27b0
[  354.697155][T16565]  ? __pfx_wiphy_register+0x10/0x10
[  354.702382][T16565]  ? minstrel_ht_alloc+0x72b/0x860
[  354.707542][T16565]  ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620
[  354.713637][T16565]  ieee80211_register_hw+0x30fb/0x3e10
[  354.719141][T16565]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  354.725546][T16565]  ? ieee80211_register_hw+0x15a1/0x3e10
[  354.731226][T16565]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  354.737072][T16565]  ? __asan_memset+0x23/0x50
[  354.741674][T16565]  ? __hrtimer_init+0x170/0x250
[  354.746548][T16565]  mac80211_hwsim_new_radio+0x2a9f/0x4a90
[  354.752327][T16565]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  354.758425][T16565]  ? kstrndup+0x5c/0xb0
[  354.762609][T16565]  ? __asan_memcpy+0x40/0x70
[  354.767244][T16565]  hwsim_new_radio_nl+0xece/0x2290
[  354.772408][T16565]  ? __pfx___nla_validate_parse+0x10/0x10
[  354.778172][T16565]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  354.783792][T16565]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  354.790157][T16565]  genl_rcv_msg+0xb14/0xec0
[  354.794684][T16565]  ? __pfx_genl_rcv_msg+0x10/0x10
[  354.799741][T16565]  ? __pfx_lock_acquire+0x10/0x10
[  354.804792][T16565]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  354.810374][T16565]  ? __pfx___might_resched+0x10/0x10
[  354.815702][T16565]  netlink_rcv_skb+0x1e3/0x430
[  354.820477][T16565]  ? __pfx_genl_rcv_msg+0x10/0x10
[  354.825537][T16565]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  354.830930][T16565]  genl_rcv+0x28/0x40
[  354.834957][T16565]  netlink_unicast+0x7f6/0x990
[  354.839761][T16565]  ? __pfx_netlink_unicast+0x10/0x10
[  354.845073][T16565]  ? __virt_addr_valid+0x45f/0x530
[  354.850239][T16565]  ? __phys_addr_symbol+0x2f/0x70
[  354.855300][T16565]  ? __check_object_size+0x47a/0x730
[  354.860645][T16565]  netlink_sendmsg+0x8e4/0xcb0
[  354.865433][T16565]  ? __pfx_netlink_sendmsg+0x10/0x10
[  354.870732][T16565]  ? aa_sock_msg_perm+0x91/0x160
[  354.875698][T16565]  ? __pfx_netlink_sendmsg+0x10/0x10
[  354.881014][T16565]  __sock_sendmsg+0x221/0x270
[  354.885728][T16565]  ____sys_sendmsg+0x52a/0x7e0
[  354.890544][T16565]  ? __pfx_____sys_sendmsg+0x10/0x10
[  354.895877][T16565]  ? __fget_files+0x2a/0x410
[  354.900513][T16565]  ? __fget_files+0x2a/0x410
[  354.905161][T16565]  __sys_sendmsg+0x269/0x350
[  354.909791][T16565]  ? __pfx_futex_wake+0x10/0x10
[  354.914693][T16565]  ? __pfx___sys_sendmsg+0x10/0x10
[  354.919902][T16565]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  354.926273][T16565]  ? do_syscall_64+0x100/0x230
[  354.931087][T16565]  ? do_syscall_64+0xb6/0x230
[  354.935841][T16565]  do_syscall_64+0xf3/0x230
[  354.940396][T16565]  ? clear_bhb_loop+0x35/0x90
[  354.945107][T16565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.951032][T16565] RIP: 0033:0x7f3f13585d29
[  354.955460][T16565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  354.975100][T16565] RSP: 002b:00007f3f14475038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  354.983562][T16565] RAX: ffffffffffffffda RBX: 00007f3f13776080 RCX: 00007f3f13585d29
[  354.991568][T16565] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007
[  354.999570][T16565] RBP: 00007f3f13601b08 R08: 0000000000000000 R09: 0000000000000000
[  355.007551][T16565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  355.015532][T16565] R13: 0000000000000000 R14: 00007f3f13776080 R15: 00007ffecfc18bd8
[  355.023546][T16565]  </TASK>
[  355.033099][ T1147] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  355.046855][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  355.071473][T16578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3042'.
[  355.081118][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.099356][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  355.110054][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.124502][T16253] batman_adv: batadv0: Interface activated: batadv_slave_1
[  355.227444][T16253] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.272689][T16253] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.280172][T16584] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3046'.
[  355.281424][T16253] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.321546][T16253] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  355.561180][T13798] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.760353][T13798] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.866606][T13816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.899580][T13816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.927889][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.936619][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  356.035988][T13798] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.128123][T13798] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.163540][ T1147] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  356.225499][T13798] bridge_slave_1: left allmulticast mode
[  356.231201][T13798] bridge_slave_1: left promiscuous mode
[  356.237407][T13798] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.248351][T13798] bridge_slave_0: left allmulticast mode
[  356.254675][T13798] bridge_slave_0: left promiscuous mode
[  356.260358][T13798] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.403394][T16607] delete_channel: no stack
[  356.734991][T16624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3054'.
[  356.823716][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  356.846025][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  356.872832][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  356.904291][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  356.934348][ T5829] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  356.943643][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  357.215300][T13798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  357.235541][T13798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  357.255498][T13798] bond0 (unregistering): Released all slaves
[  357.262633][ T6405] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  357.300581][T16621] vlan0: entered promiscuous mode
[  357.390392][T16628] syzkaller1: entered promiscuous mode
[  357.432365][T16628] syzkaller1: entered allmulticast mode
[  357.444556][T16637] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3057'.
[  357.459690][T16623] lo speed is unknown, defaulting to 1000
[  357.636058][T16622] lo speed is unknown, defaulting to 1000
[  358.139615][T13798] hsr_slave_0: left promiscuous mode
[  358.148432][T13798] hsr_slave_1: left promiscuous mode
[  358.173755][T13798] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  358.181225][T13798] batman_adv: batadv0: Removing interface: batadv_slave_0
[  358.199880][T13798] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  358.207839][T13798] batman_adv: batadv0: Removing interface: batadv_slave_1
[  358.290364][T13798] veth1_macvtap: left promiscuous mode
[  358.302699][T13798] veth0_macvtap: left promiscuous mode
[  358.318630][T13798] veth1_vlan: left promiscuous mode
[  358.328941][T13798] veth0_vlan: left promiscuous mode
[  358.382405][T13815] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  358.763666][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  358.774335][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  358.791203][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  358.821752][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  358.830611][ T5829] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  358.850651][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  359.012401][   T55] Bluetooth: hci0: command tx timeout
[  359.140182][T13798] team0 (unregistering): Port device team_slave_1 removed
[  359.196621][T13798] team0 (unregistering): Port device team_slave_0 removed
[  359.513228][T13815] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  359.699301][T16647] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  359.743322][T16651] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  359.750878][T16651] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  359.946735][T16663] netlink: 344 bytes leftover after parsing attributes in process `syz.4.3062'.
[  360.126061][T16656] lo speed is unknown, defaulting to 1000
[  360.247163][T16670] netlink: 'syz.0.3064': attribute type 12 has an invalid length.
[  360.272819][T16670] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255)
[  360.356417][T16622] chnl_net:caif_netlink_parms(): no params data found
[  360.576883][T16622] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.602342][T16622] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.609665][T16622] bridge_slave_0: entered allmulticast mode
[  360.636676][T16622] bridge_slave_0: entered promiscuous mode
[  360.657939][T16622] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.674182][T13817] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  360.680511][T16622] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.712503][T16622] bridge_slave_1: entered allmulticast mode
[  360.724303][T16622] bridge_slave_1: entered promiscuous mode
[  360.759272][T16656] chnl_net:caif_netlink_parms(): no params data found
[  360.815802][   T59] tipc: Node number set to 2130706433
[  360.923854][   T55] Bluetooth: hci2: command tx timeout
[  360.941939][T16701] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3071'.
[  360.998747][T13798] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.048419][T16622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  361.090132][   T55] Bluetooth: hci0: command tx timeout
[  361.108860][T16622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  361.229954][T13798] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.321347][T16622] team0: Port device team_slave_0 added
[  361.349518][T16697] lo speed is unknown, defaulting to 1000
[  361.434745][T13798] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.455191][T16622] team0: Port device team_slave_1 added
[  361.629365][T13798] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.715975][T16656] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.735223][T16656] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.750464][T16656] bridge_slave_0: entered allmulticast mode
[  361.759468][T16656] bridge_slave_0: entered promiscuous mode
[  361.768147][T16622] batman_adv: batadv0: Adding interface: batadv_slave_0
[  361.776616][T16622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.803347][T13813] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  361.811969][T16622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  361.852718][T16656] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.873957][T16656] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.901673][T16656] bridge_slave_1: entered allmulticast mode
[  361.910601][T16656] bridge_slave_1: entered promiscuous mode
[  361.991697][T16622] batman_adv: batadv0: Adding interface: batadv_slave_1
[  362.023561][T16622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  362.082698][T16622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  362.215096][T16656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  362.229333][T16656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  362.459308][T16656] team0: Port device team_slave_0 added
[  362.466846][T16751] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20001
[  362.526939][T13798] bridge_slave_1: left allmulticast mode
[  362.533127][T13798] bridge_slave_1: left promiscuous mode
[  362.539621][T13798] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.569801][T13798] bridge_slave_0: left allmulticast mode
[  362.577165][T13798] bridge_slave_0: left promiscuous mode
[  362.588401][T13798] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.908979][T13817] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  363.002744][   T55] Bluetooth: hci2: command tx timeout
[  363.078846][T13798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  363.096936][T13798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  363.110453][T13798] bond0 (unregistering): Released all slaves
[  363.124256][T16656] team0: Port device team_slave_1 added
[  363.162901][   T55] Bluetooth: hci0: command tx timeout
[  363.302992][T16622] hsr_slave_0: entered promiscuous mode
[  363.309350][T16622] hsr_slave_1: entered promiscuous mode
[  363.322366][T16622] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  363.329955][T16622] Cannot create hsr debugfs directory
[  363.404361][T16757] tipc: Enabling of bearer <dth:sy> rejected, media not registered
[  363.433271][T16656] batman_adv: batadv0: Adding interface: batadv_slave_0
[  363.440261][T16656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  363.512459][T16656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  363.606604][T16656] batman_adv: batadv0: Adding interface: batadv_slave_1
[  363.619860][T16656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  363.657044][T16656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  363.699184][T16755] lo speed is unknown, defaulting to 1000
[  363.840855][T16656] hsr_slave_0: entered promiscuous mode
[  363.869646][T16656] hsr_slave_1: entered promiscuous mode
[  363.881493][T16656] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  363.889907][T16656] Cannot create hsr debugfs directory
[  364.014167][ T1147] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  364.613004][T16780] openvswitch: netlink: Message has 2 unknown bytes.
[  364.622427][T16780] openvswitch: netlink: Actions may not be safe on all matching packets
[  364.686551][T16622] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  364.695169][T16783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3096'.
[  364.751010][T16784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3096'.
[  364.790108][T13798] hsr_slave_0: left promiscuous mode
[  364.808175][T13798] hsr_slave_1: left promiscuous mode
[  364.839111][T13798] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  364.865213][T13798] batman_adv: batadv0: Removing interface: batadv_slave_0
[  364.917415][T13798] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  364.925662][T13798] batman_adv: batadv0: Removing interface: batadv_slave_1
[  364.971911][T13798] veth1_macvtap: left promiscuous mode
[  364.984371][T13798] veth0_macvtap: left promiscuous mode
[  364.990327][T13798] veth1_vlan: left promiscuous mode
[  364.998064][T13798] veth0_vlan: left promiscuous mode
[  365.083634][   T55] Bluetooth: hci2: command tx timeout
[  365.133856][T13812] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  365.242619][   T55] Bluetooth: hci0: command tx timeout
[  365.577547][T13798] team0 (unregistering): Port device team_slave_1 removed
[  365.627659][T13798] team0 (unregistering): Port device team_slave_0 removed
[  366.089086][T16622] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  366.129564][T16622] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  366.161015][T16622] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  366.250512][ T1147] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  366.511164][T16622] 8021q: adding VLAN 0 to HW filter on device bond0
[  366.617489][T16622] 8021q: adding VLAN 0 to HW filter on device team0
[  366.668578][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.675780][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  366.818862][T16656] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  366.864164][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.871413][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state
[  366.921659][T16813] nf_ct_set_timeout: 12 callbacks suppressed
[  366.921822][T16813] No such timeout policy "syz0"
[  366.943840][T16656] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  366.972409][T16656] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  367.026026][T16656] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  367.162964][   T55] Bluetooth: hci2: command tx timeout
[  367.342449][T16656] 8021q: adding VLAN 0 to HW filter on device bond0
[  367.362796][T13798] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  367.408842][T16656] 8021q: adding VLAN 0 to HW filter on device team0
[  367.447470][T13815] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.454637][T13815] bridge0: port 1(bridge_slave_0) entered forwarding state
[  367.535215][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.542396][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  367.606944][T16841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3111'.
[  367.612442][T16622] 8021q: adding VLAN 0 to HW filter on device batadv0
[  367.628758][T16841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3111'.
[  367.754611][T16622] veth0_vlan: entered promiscuous mode
[  367.788072][T16622] veth1_vlan: entered promiscuous mode
[  367.881148][T16622] veth0_macvtap: entered promiscuous mode
[  367.899635][T16860] syz.2.3115[16860] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  367.899740][T16860] syz.2.3115[16860] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  367.911661][T16860] syz.2.3115[16860] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  367.916443][T16622] veth1_macvtap: entered promiscuous mode
[  368.004133][T16622] batman_adv: batadv0: Interface activated: batadv_slave_0
[  368.039186][T16622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  368.072630][T16622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  368.094774][T16622] batman_adv: batadv0: Interface activated: batadv_slave_1
[  368.105995][T16870] x_tables: duplicate underflow at hook 2
[  368.120666][T16622] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  368.133524][T16622] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  368.143281][T16622] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  368.152596][T16622] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  368.164726][T16867] netlink: 'syz.0.3117': attribute type 29 has an invalid length.
[  368.169201][T16872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3116'.
[  368.323517][T16656] 8021q: adding VLAN 0 to HW filter on device batadv0
[  368.416390][T13817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  368.442903][T13817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  368.492798][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  368.505620][T16656] veth0_vlan: entered promiscuous mode
[  368.575867][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  368.576258][T16656] veth1_vlan: entered promiscuous mode
[  368.604753][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  368.696662][T16656] veth0_macvtap: entered promiscuous mode
[  368.718350][T16888] netlink: 'syz.2.3122': attribute type 21 has an invalid length.
[  368.743975][T16888] netlink: 'syz.2.3122': attribute type 20 has an invalid length.
[  368.751850][T16888] IPv6: NLM_F_CREATE should be specified when creating new route
[  368.807313][T16656] veth1_macvtap: entered promiscuous mode
[  368.868186][T16895] netlink: 'syz.4.3123': attribute type 1 has an invalid length.
[  368.879468][T16895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3123'.
[  368.914433][T16656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  368.943524][T16656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  368.984076][T16656] batman_adv: batadv0: Interface activated: batadv_slave_0
[  369.008031][T16897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3125'.
[  369.024694][T16656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  369.035815][T16656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.046456][T16903] syz.0.3126[16903] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  369.047211][T16903] syz.0.3126[16903] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  369.071127][T16656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  369.107231][T16656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.119929][T16656] batman_adv: batadv0: Interface activated: batadv_slave_1
[  369.130999][T16656] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  369.140041][T16656] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  369.149120][T16656] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  369.158728][T16656] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  369.236329][T16909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3128'.
[  369.282912][T16908] netlink: 'syz.4.3128': attribute type 1 has an invalid length.
[  369.409528][T13817] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.445644][T16908] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  369.512904][T13812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.534159][T13812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.624449][T13812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.639021][T13812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.665128][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  369.784200][T13817] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.891282][T13817] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.078444][T13817] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.235827][T13817] bridge_slave_1: left allmulticast mode
[  370.241899][T13817] bridge_slave_1: left promiscuous mode
[  370.248668][T13817] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.258106][T13817] bridge_slave_0: left allmulticast mode
[  370.264150][T13817] bridge_slave_0: left promiscuous mode
[  370.269875][T13817] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.783697][ T1147] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  370.944553][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  370.966498][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  370.974970][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  370.984054][T16945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3131'.
[  371.003981][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  371.014278][ T5829] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  371.021616][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  371.110899][T13817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  371.122892][T13817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  371.140238][T13817] bond0 (unregistering): Released all slaves
[  371.158531][T16927] bond0: option updelay: invalid value (18446744073709551615)
[  371.167253][T16927] bond0: option updelay: allowed values 0 - 2147483647
[  371.361762][T16943] lo speed is unknown, defaulting to 1000
[  371.787796][T13817] hsr_slave_0: left promiscuous mode
[  371.805324][T13817] hsr_slave_1: left promiscuous mode
[  371.856116][T13817] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  371.873400][T13817] batman_adv: batadv0: Removing interface: batadv_slave_0
[  371.901875][T13817] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  371.923519][T13817] batman_adv: batadv0: Removing interface: batadv_slave_1
[  371.933254][T13815] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  372.013620][T13817] veth1_macvtap: left promiscuous mode
[  372.032687][T13817] veth0_macvtap: left promiscuous mode
[  372.038346][T13817] veth1_vlan: left promiscuous mode
[  372.052373][T13817] veth0_vlan: left promiscuous mode
[  372.261471][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  372.280825][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  372.308157][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  372.318029][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  372.333572][ T5829] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  372.341482][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  372.688702][T13817] team0 (unregistering): Port device team_slave_1 removed
[  372.736642][T13817] team0 (unregistering): Port device team_slave_0 removed
[  373.062639][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  373.094629][   T55] Bluetooth: hci0: command tx timeout
[  373.363658][T16960] lo speed is unknown, defaulting to 1000
[  373.506522][T16964] tipc: New replicast peer: 255.255.255.255
[  373.515666][T16964] tipc: Enabled bearer <udp:syz2>, priority 10
[  373.590644][T16975] netlink: 'syz.4.3139': attribute type 1 has an invalid length.
[  373.714304][T16943] chnl_net:caif_netlink_parms(): no params data found
[  373.923283][T16988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3142'.
[  373.937802][T16988] Bluetooth: MGMT ver 1.23
[  374.042000][T16995] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3142'.
[  374.067158][T16943] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.085555][T16943] bridge0: port 1(bridge_slave_0) entered disabled state
[  374.102727][T16943] bridge_slave_0: entered allmulticast mode
[  374.113675][T16943] bridge_slave_0: entered promiscuous mode
[  374.128958][T16943] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.149205][T16943] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.161207][T16943] bridge_slave_1: entered allmulticast mode
[  374.173886][T16943] bridge_slave_1: entered promiscuous mode
[  374.183272][ T6405] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  374.301559][T16943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  374.359083][T16960] chnl_net:caif_netlink_parms(): no params data found
[  374.367264][   T55] Bluetooth: hci2: command tx timeout
[  374.381768][T16943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  374.394641][T17004] netlink: 186568 bytes leftover after parsing attributes in process `syz.0.3146'.
[  374.427615][T17004] netlink: zone id is out of range
[  374.448488][T13817] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.448866][T17004] netlink: zone id is out of range
[  374.509391][T17004] netlink: zone id is out of range
[  374.530779][T17004] netlink: zone id is out of range
[  374.549679][T17004] netlink: zone id is out of range
[  374.562013][T17004] netlink: zone id is out of range
[  374.569945][T17004] netlink: get zone limit has 8 unknown bytes
[  374.625361][T13817] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.671669][T16943] team0: Port device team_slave_0 added
[  374.700084][T16943] team0: Port device team_slave_1 added
[  374.799537][T17027] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  374.825081][T13817] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.863326][T16943] batman_adv: batadv0: Adding interface: batadv_slave_0
[  374.870425][T16943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  374.900411][T16943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  374.957648][T16960] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.975038][T16960] bridge0: port 1(bridge_slave_0) entered disabled state
[  374.991504][T16960] bridge_slave_0: entered allmulticast mode
[  375.008458][T16960] bridge_slave_0: entered promiscuous mode
[  375.017744][T16943] batman_adv: batadv0: Adding interface: batadv_slave_1
[  375.026103][T16943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  375.053620][T16943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  375.163035][   T55] Bluetooth: hci0: command tx timeout
[  375.174125][T13817] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.211364][T16960] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.222721][T16960] bridge0: port 2(bridge_slave_1) entered disabled state
[  375.230063][T16960] bridge_slave_1: entered allmulticast mode
[  375.257939][T16960] bridge_slave_1: entered promiscuous mode
[  375.294335][T13812] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  375.377149][T16960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  375.398856][T16960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  375.494593][T16943] hsr_slave_0: entered promiscuous mode
[  375.512044][T16943] hsr_slave_1: entered promiscuous mode
[  375.521426][T16943] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  375.540847][T16943] Cannot create hsr debugfs directory
[  375.650535][T16960] team0: Port device team_slave_0 added
[  375.670279][T16960] team0: Port device team_slave_1 added
[  375.695456][T13817] bridge_slave_1: left allmulticast mode
[  375.701167][T13817] bridge_slave_1: left promiscuous mode
[  375.717462][T13817] bridge0: port 2(bridge_slave_1) entered disabled state
[  375.736835][T13817] bridge_slave_0: left allmulticast mode
[  375.752472][T13817] bridge_slave_0: left promiscuous mode
[  375.761866][T13817] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.039817][T17071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3165'.
[  376.377442][T13817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  376.389486][T13817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  376.400475][T13817] bond0 (unregistering): Released all slaves
[  376.412439][T13812] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  376.457573][ T5829] Bluetooth: hci2: command tx timeout
[  376.507884][T17071] 8021q: adding VLAN 0 to HW filter on device batadv0
[  376.649154][T17078] xt_CT: You must specify a L4 protocol and not use inversions on it
[  376.709962][T16960] batman_adv: batadv0: Adding interface: batadv_slave_0
[  376.732956][T16960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  376.760879][T16960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  376.776206][T16960] batman_adv: batadv0: Adding interface: batadv_slave_1
[  376.783504][T16960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  376.810850][T16960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  376.976784][T17086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3169'.
[  377.252866][ T5829] Bluetooth: hci0: command tx timeout
[  377.275304][T16960] hsr_slave_0: entered promiscuous mode
[  377.307690][T16960] hsr_slave_1: entered promiscuous mode
[  377.318638][T16960] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  377.328714][T16960] Cannot create hsr debugfs directory
[  377.473588][T13817] hsr_slave_0: left promiscuous mode
[  377.491566][T13817] hsr_slave_1: left promiscuous mode
[  377.500457][T13817] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  377.508803][T13817] batman_adv: batadv0: Removing interface: batadv_slave_0
[  377.523822][T13817] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  377.531872][T13817] batman_adv: batadv0: Removing interface: batadv_slave_1
[  377.561710][ T6405] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  377.580775][T17113] netlink: 'syz.2.3177': attribute type 32 has an invalid length.
[  377.591308][T13817] veth1_macvtap: left promiscuous mode
[  377.622751][T13817] veth0_macvtap: left promiscuous mode
[  377.628359][T13817] veth1_vlan: left promiscuous mode
[  377.637903][T13817] veth0_vlan: left promiscuous mode
[  377.689746][T17116] netlink: 'syz.4.3178': attribute type 9 has an invalid length.
[  377.698238][T17116] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3178'.
[  378.162844][T13817] team0 (unregistering): Port device team_slave_1 removed
[  378.211583][T13817] team0 (unregistering): Port device team_slave_0 removed
[  378.529195][ T5829] Bluetooth: hci2: command 0x040f tx timeout
[  378.724726][T13815] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  379.270670][T17135] netlink: 'syz.2.3185': attribute type 1 has an invalid length.
[  379.287909][T17135] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3185'.
[  379.312980][T17138] netlink: 'syz.0.3186': attribute type 4 has an invalid length.
[  379.321684][T17135] xt_TCPMSS: Only works on TCP SYN packets
[  379.328215][   T55] Bluetooth: hci0: command tx timeout
[  379.611467][T16943] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  379.646225][T16943] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  379.702579][T16943] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  379.743787][T16943] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  379.807302][T16960] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  379.830055][T16960] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  379.840670][T16960] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  379.848311][T13817] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  379.919086][T17161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3192'.
[  379.948904][T17163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3194'.
[  379.980843][T16960] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  380.240894][T16943] 8021q: adding VLAN 0 to HW filter on device bond0
[  380.418763][T16943] 8021q: adding VLAN 0 to HW filter on device team0
[  380.427548][T17182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3200'.
[  380.437546][T17182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3200'.
[  380.447304][T17182] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3200'.
[  380.491577][T13812] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.498813][T13812] bridge0: port 1(bridge_slave_0) entered forwarding state
[  380.555627][T13798] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.562834][T13798] bridge0: port 2(bridge_slave_1) entered forwarding state
[  380.588081][T17189] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3202'.
[  380.602600][   T55] Bluetooth: hci2: command 0x040f tx timeout
[  380.708245][T16960] 8021q: adding VLAN 0 to HW filter on device bond0
[  380.790574][T16960] 8021q: adding VLAN 0 to HW filter on device team0
[  380.819451][T13812] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.826721][T13812] bridge0: port 1(bridge_slave_0) entered forwarding state
[  380.892885][T13812] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.900087][T13812] bridge0: port 2(bridge_slave_1) entered forwarding state
[  380.904014][T17200] netlink: 'syz.2.3205': attribute type 2 has an invalid length.
[  380.983674][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  381.117309][T16943] 8021q: adding VLAN 0 to HW filter on device batadv0
[  381.169532][T17207] IPVS: Error connecting to the multicast addr
[  381.247380][T16943] veth0_vlan: entered promiscuous mode
[  381.274760][T16943] veth1_vlan: entered promiscuous mode
[  381.334133][T16960] 8021q: adding VLAN 0 to HW filter on device batadv0
[  381.342733][T17212] veth0: entered promiscuous mode
[  381.363045][T16943] veth0_macvtap: entered promiscuous mode
[  381.378841][T16943] veth1_macvtap: entered promiscuous mode
[  381.443424][T16943] batman_adv: batadv0: Interface activated: batadv_slave_0
[  381.484086][T16943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  381.496341][T17217] __nla_validate_parse: 1 callbacks suppressed
[  381.496359][T17217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3207'.
[  381.510064][T16943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  381.541466][T16943] batman_adv: batadv0: Interface activated: batadv_slave_1
[  381.543138][T17220] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  381.572653][T17221] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  381.604777][T16943] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  381.618847][T16943] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  381.627775][T16943] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  381.637424][T16943] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  381.652990][T16960] veth0_vlan: entered promiscuous mode
[  381.664006][T17211] veth0: left promiscuous mode
[  381.743747][T16960] veth1_vlan: entered promiscuous mode
[  381.859905][T13816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  381.882938][T13816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  381.924890][T16960] veth0_macvtap: entered promiscuous mode
[  381.980435][T16960] veth1_macvtap: entered promiscuous mode
[  382.021920][T13813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.031128][T17235] hsr0: entered allmulticast mode
[  382.039188][T13813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.050583][T17235] hsr_slave_1: entered allmulticast mode
[  382.119776][T16960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  382.142698][T13812] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  382.174675][T16960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.222056][T16960] batman_adv: batadv0: Interface activated: batadv_slave_0
[  382.253052][T16960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  382.268472][T16960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.279024][T16960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  382.299373][T16960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.343757][T16960] batman_adv: batadv0: Interface activated: batadv_slave_1
[  382.375196][T16960] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  382.404637][T16960] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  382.429497][T16960] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  382.462358][T16960] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  382.683081][   T55] Bluetooth: hci2: command 0x040f tx timeout
[  382.731885][T13813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.777401][T13813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.850191][T13813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.859100][T13813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.969661][T17260] xt_l2tp: invalid flags combination: 4
[  383.292864][T13815] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  383.551217][T13816] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.664766][T13816] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.171878][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  384.183141][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  384.203079][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  384.215241][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  384.223121][ T5829] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  384.238258][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  384.274248][T13816] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.307315][T17262] lo speed is unknown, defaulting to 1000
[  384.422644][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  384.506480][T13816] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.784699][T13816] bridge_slave_1: left allmulticast mode
[  384.790422][T13816] bridge_slave_1: left promiscuous mode
[  384.797723][T13816] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.807077][T13816] bridge_slave_0: left allmulticast mode
[  384.814978][T13816] bridge_slave_0: left promiscuous mode
[  384.820785][T13816] bridge0: port 1(bridge_slave_0) entered disabled state
[  384.889123][T17269] netlink: 'syz.4.3221': attribute type 1 has an invalid length.
[  384.903018][T17268] netlink: 'syz.4.3221': attribute type 1 has an invalid length.
[  384.911758][T17269] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3221'.
[  384.912447][T17268] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3221'.
[  385.422471][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  385.445224][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  385.453364][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  385.474784][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  385.483811][ T5829] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  385.492492][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  385.522353][T13798] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  385.579111][T17225] Set syz1 is full, maxelem 65536 reached
[  385.789569][T13816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  385.807536][T13816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  385.819763][T13816] bond0 (unregistering): Released all slaves
[  385.978842][T17262] chnl_net:caif_netlink_parms(): no params data found
[  386.135596][T17280] lo speed is unknown, defaulting to 1000
[  386.144016][T17292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3226'.
[  386.263340][T17296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3227'.
[  386.285463][   T55] Bluetooth: hci0: command tx timeout
[  386.346611][T17306] netlink: 42 bytes leftover after parsing attributes in process `syz.4.3228'.
[  386.455138][T17296] 8021q: adding VLAN 0 to HW filter on device bond7
[  386.555900][T17262] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.570253][T17262] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.589061][T17262] bridge_slave_0: entered allmulticast mode
[  386.605608][T17262] bridge_slave_0: entered promiscuous mode
[  386.636137][T17262] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.652911][T13815] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  386.683112][T17262] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.690475][T17262] bridge_slave_1: entered allmulticast mode
[  386.728288][T17262] bridge_slave_1: entered promiscuous mode
[  386.756366][T17319] x_tables: duplicate underflow at hook 3
[  386.796586][T17262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  386.823426][T17262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  387.383070][T17333] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  387.436247][T17262] team0: Port device team_slave_0 added
[  387.461059][T17262] team0: Port device team_slave_1 added
[  387.562669][   T55] Bluetooth: hci2: command tx timeout
[  387.577561][T13816] hsr_slave_0: left promiscuous mode
[  387.601170][T13816] hsr_slave_1: left promiscuous mode
[  387.614098][T13816] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  387.621665][T13816] batman_adv: batadv0: Removing interface: batadv_slave_0
[  387.630552][T13816] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  387.638241][T13816] batman_adv: batadv0: Removing interface: batadv_slave_1
[  387.680870][T13816] veth1_macvtap: left promiscuous mode
[  387.686812][T13816] veth0_macvtap: left promiscuous mode
[  387.695930][T13816] veth1_vlan: left promiscuous mode
[  387.701234][T13816] veth0_vlan: left promiscuous mode
[  387.754178][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  388.337778][T13816] team0 (unregistering): Port device team_slave_1 removed
[  388.363470][   T55] Bluetooth: hci0: command tx timeout
[  388.419390][T13816] team0 (unregistering): Port device team_slave_0 removed
[  388.862993][T13815] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  388.930913][T17352] netlink: 'syz.4.3240': attribute type 2 has an invalid length.
[  388.952310][T17359] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3241'.
[  388.996698][T17262] batman_adv: batadv0: Adding interface: batadv_slave_0
[  389.012590][T17262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  389.052850][T17262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  389.065861][T17262] batman_adv: batadv0: Adding interface: batadv_slave_1
[  389.074734][T17262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  389.104967][T17262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  389.116857][T17370] No such timeout policy "syz0"
[  389.193075][T17372] netlink: 'syz.2.3243': attribute type 4 has an invalid length.
[  389.200900][T17372] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3243'.
[  389.232496][T17369] netlink: 'syz.4.3242': attribute type 4 has an invalid length.
[  389.322060][T17262] hsr_slave_0: entered promiscuous mode
[  389.418523][T17262] hsr_slave_1: entered promiscuous mode
[  389.435329][T17262] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  389.443415][T17262] Cannot create hsr debugfs directory
[  389.472435][T17380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3245'.
[  389.525503][T17380] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3245'.
[  389.639937][T17280] chnl_net:caif_netlink_parms(): no params data found
[  389.652330][   T55] Bluetooth: hci2: command tx timeout
[  389.752360][T17392] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3248'.
[  390.010942][T13816] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.013775][T13815] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  390.113537][T17280] bridge0: port 1(bridge_slave_0) entered blocking state
[  390.129020][T17280] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.137247][T17280] bridge_slave_0: entered allmulticast mode
[  390.151825][T17280] bridge_slave_0: entered promiscuous mode
[  390.170585][T17280] bridge0: port 2(bridge_slave_1) entered blocking state
[  390.186321][T17280] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.202844][T17280] bridge_slave_1: entered allmulticast mode
[  390.220724][T17280] bridge_slave_1: entered promiscuous mode
[  390.269692][T13816] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.308987][T17416] tipc: Enabled bearer <udp:s>, priority 10
[  390.428320][T13816] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.453451][   T55] Bluetooth: hci0: command tx timeout
[  390.473195][T17280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  390.490893][T17280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  390.568323][T17425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3254'.
[  390.580520][T13816] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.695035][T17280] team0: Port device team_slave_0 added
[  390.734793][T17280] team0: Port device team_slave_1 added
[  390.830937][T17431] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3257'.
[  390.841578][T17431] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3257'.
[  390.854021][T17431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  390.895070][T17280] batman_adv: batadv0: Adding interface: batadv_slave_0
[  390.903680][T17280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  390.935069][T17280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  390.957269][T17280] batman_adv: batadv0: Adding interface: batadv_slave_1
[  390.968734][T17280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  390.995342][T17280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  391.088008][T17441] Bluetooth: MGMT ver 1.23
[  391.139152][T17262] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  391.151078][T13816] bridge_slave_1: left allmulticast mode
[  391.157488][T13816] bridge_slave_1: left promiscuous mode
[  391.163979][T13816] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.174054][T13815] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  391.175916][T17444] netlink: 'syz.0.3260': attribute type 2 has an invalid length.
[  391.197797][T13816] bridge_slave_0: left allmulticast mode
[  391.204481][T13816] bridge_slave_0: left promiscuous mode
[  391.210285][T13816] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.683440][T13816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  391.697055][T13816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  391.708535][T13816] bond0 (unregistering): Released all slaves
[  391.721285][T17441] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3259'.
[  391.731472][   T55] Bluetooth: hci2: command tx timeout
[  391.742045][T17280] hsr_slave_0: entered promiscuous mode
[  391.751491][T17280] hsr_slave_1: entered promiscuous mode
[  391.781272][T17280] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  391.799281][T17280] Cannot create hsr debugfs directory
[  391.824154][T17262] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  391.936521][T17262] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  391.967698][T17262] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  391.985642][T17456] netlink: 'syz.0.3264': attribute type 12 has an invalid length.
[  392.002764][T17456] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3264'.
[  392.298786][T13817] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  392.543153][   T55] Bluetooth: hci0: command tx timeout
[  392.726110][T13816] hsr_slave_0: left promiscuous mode
[  392.746135][T13816] hsr_slave_1: left promiscuous mode
[  392.760036][T13816] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  392.776305][T13816] batman_adv: batadv0: Removing interface: batadv_slave_0
[  392.795280][T13816] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  392.812525][T13816] batman_adv: batadv0: Removing interface: batadv_slave_1
[  392.844478][T13816] veth1_macvtap: left promiscuous mode
[  392.850063][T13816] veth0_macvtap: left promiscuous mode
[  392.857051][T13816] veth1_vlan: left promiscuous mode
[  392.862671][T13816] veth0_vlan: left promiscuous mode
[  393.361429][T13816] team0 (unregistering): Port device team_slave_1 removed
[  393.404001][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  393.427383][T13816] team0 (unregistering): Port device team_slave_0 removed
[  393.812817][   T55] Bluetooth: hci2: command tx timeout
[  394.030971][T17262] 8021q: adding VLAN 0 to HW filter on device bond0
[  394.134528][T17498] __nla_validate_parse: 1 callbacks suppressed
[  394.134565][T17498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3274'.
[  394.151330][T17495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3273'.
[  394.163945][T17497] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  394.171242][T17497] IPv6: NLM_F_CREATE should be set when creating new route
[  394.178526][T17497] IPv6: NLM_F_CREATE should be set when creating new route
[  394.188574][T17495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3273'.
[  394.252892][T17262] 8021q: adding VLAN 0 to HW filter on device team0
[  394.275956][T13812] bridge0: port 1(bridge_slave_0) entered blocking state
[  394.283157][T13812] bridge0: port 1(bridge_slave_0) entered forwarding state
[  394.296077][T17497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3275'.
[  394.328294][T13812] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.335463][T13812] bridge0: port 2(bridge_slave_1) entered forwarding state
[  394.521287][T13812] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  394.737784][T17280] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  394.746052][T17507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3278'.
[  394.855249][T17280] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  394.877485][T17516] syz.4.3280 uses old SIOCAX25GETINFO
[  394.917313][T17517] netlink: 'syz.0.3279': attribute type 1 has an invalid length.
[  394.938717][T17280] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  394.964130][T17517] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3279'.
[  395.010170][T17280] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  395.105375][T17262] 8021q: adding VLAN 0 to HW filter on device batadv0
[  395.285990][T17262] veth0_vlan: entered promiscuous mode
[  395.318548][T17280] 8021q: adding VLAN 0 to HW filter on device bond0
[  395.351043][T17262] veth1_vlan: entered promiscuous mode
[  395.388673][T17280] 8021q: adding VLAN 0 to HW filter on device team0
[  395.436598][T13812] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.443839][T13812] bridge0: port 1(bridge_slave_0) entered forwarding state
[  395.489592][T13798] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.496913][T13798] bridge0: port 2(bridge_slave_1) entered forwarding state
[  395.574706][T17262] veth0_macvtap: entered promiscuous mode
[  395.595263][T17262] veth1_macvtap: entered promiscuous mode
[  395.621009][T17528] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3284'.
[  395.632527][T13815] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  395.689510][T17262] batman_adv: batadv0: Interface activated: batadv_slave_0
[  395.754685][T17262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  395.772213][T17262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  395.784749][T17262] batman_adv: batadv0: Interface activated: batadv_slave_1
[  395.839561][T17262] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  395.867286][T17262] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  395.883317][   T55] Bluetooth: hci2: command tx timeout
[  395.913473][T17534] netlink: 'syz.0.3285': attribute type 10 has an invalid length.
[  395.916973][T17262] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  395.930767][T17262] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  396.035689][T17534] macvlan0: entered promiscuous mode
[  396.041469][T17534] macvlan0: entered allmulticast mode
[  396.059090][T17534] veth1_vlan: entered allmulticast mode
[  396.076317][T17534] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  396.118310][T17280] 8021q: adding VLAN 0 to HW filter on device batadv0
[  396.267716][T17280] veth0_vlan: entered promiscuous mode
[  396.284952][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  396.303523][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  396.346717][T17280] veth1_vlan: entered promiscuous mode
[  396.374007][T17554] siw: device registration error -23
[  396.397571][T13798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  396.410243][T13798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  396.444306][T17280] veth0_macvtap: entered promiscuous mode
[  396.480885][T17280] veth1_macvtap: entered promiscuous mode
[  396.555538][T17280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  396.603119][T17280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.623818][T17280] batman_adv: batadv0: Interface activated: batadv_slave_0
[  396.658026][T17280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  396.684294][T17280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.702268][T17280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  396.725796][T17280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.750333][T17570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3295'.
[  396.753901][T17280] batman_adv: batadv0: Interface activated: batadv_slave_1
[  396.773715][T13812] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  396.825332][T17280] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  396.849974][T17280] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  396.862356][T17280] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  396.871292][T17280] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  397.099838][T17586] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING
[  397.135826][T13813] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.237336][T17588] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 !
[  397.366641][T13813] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.401510][T13798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  397.424598][T13798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  397.469322][T13813] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.515490][T13815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  397.523831][T13815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  397.645307][T13813] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.913773][T13816] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  397.922004][T13813] bridge_slave_1: left allmulticast mode
[  397.928002][T13813] bridge_slave_1: left promiscuous mode
[  397.934092][T13813] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.943794][T13813] bridge_slave_0: left allmulticast mode
[  397.949484][T13813] bridge_slave_0: left promiscuous mode
[  397.955367][T13813] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.369742][T17593] netlink: 'syz.0.3300': attribute type 1 has an invalid length.
[  398.422717][T17597] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma?
[  398.634039][T13813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  398.656092][T13813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  398.682021][T13813] bond0 (unregistering): Released all slaves
[  398.701902][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  398.716030][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  398.726813][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  398.739773][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  398.748563][ T5829] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  398.759570][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  398.848670][T17599] bond8: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  399.028770][T17604] lo speed is unknown, defaulting to 1000
[  399.043271][T13798] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  399.491237][T13813] hsr_slave_0: left promiscuous mode
[  399.497662][T13813] hsr_slave_1: left promiscuous mode
[  399.507594][T13813] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  399.515283][T13813] batman_adv: batadv0: Removing interface: batadv_slave_0
[  399.524810][T13813] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  399.532806][T13813] batman_adv: batadv0: Removing interface: batadv_slave_1
[  399.559843][T13813] veth1_macvtap: left promiscuous mode
[  399.566520][T13813] veth0_macvtap: left promiscuous mode
[  399.572201][T13813] veth1_vlan: left promiscuous mode
[  399.577582][T13813] veth0_vlan: left promiscuous mode
[  400.071677][T13813] team0 (unregistering): Port device team_slave_1 removed
[  400.153452][T13817] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  400.252350][T17618] netlink: 'syz.2.3305': attribute type 49 has an invalid length.
[  400.265600][T13813] team0 (unregistering): Port device team_slave_0 removed
[  400.397126][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  400.414267][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  400.442888][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  400.457893][T17623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3307'.
[  400.462925][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  400.484175][ T5829] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  400.491658][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  400.858601][   T55] Bluetooth: hci0: command tx timeout
[  400.992849][T17623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3307'.
[  401.091382][T17604] chnl_net:caif_netlink_parms(): no params data found
[  401.118711][T17620] lo speed is unknown, defaulting to 1000
[  401.212597][T17628] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3308'.
[  401.253492][T17628] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  401.298704][T17628] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  401.313209][T13816] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  401.428387][T17604] bridge0: port 1(bridge_slave_0) entered blocking state
[  401.436407][T17604] bridge0: port 1(bridge_slave_0) entered disabled state
[  401.444359][T17604] bridge_slave_0: entered allmulticast mode
[  401.451789][T17604] bridge_slave_0: entered promiscuous mode
[  401.482691][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.490891][T17604] bridge0: port 2(bridge_slave_1) entered blocking state
[  401.509478][T17604] bridge0: port 2(bridge_slave_1) entered disabled state
[  401.519108][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.540903][T17604] bridge_slave_1: entered allmulticast mode
[  401.555748][T17604] bridge_slave_1: entered promiscuous mode
[  401.710269][T17604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  401.755012][T17604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  401.854508][T17647] netlink: 'syz.4.3313': attribute type 20 has an invalid length.
[  401.904996][T13813] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.939577][T17604] team0: Port device team_slave_0 added
[  401.948486][T17604] team0: Port device team_slave_1 added
[  402.200974][T13813] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.254550][T17604] batman_adv: batadv0: Adding interface: batadv_slave_0
[  402.274530][T17604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  402.318272][T17604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  402.422568][T13798] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  402.445723][T13813] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.479459][T17673] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3319'.
[  402.511247][T17604] batman_adv: batadv0: Adding interface: batadv_slave_1
[  402.523919][T17604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  402.575344][T17604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  402.603591][   T55] Bluetooth: hci2: command tx timeout
[  402.619215][   T29] audit: type=1107 audit(1736526869.312:3): pid=17677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  402.668989][T17680] netlink: 'syz.2.3321': attribute type 1 has an invalid length.
[  402.704443][T13813] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.923114][   T55] Bluetooth: hci0: command tx timeout
[  402.971493][T17604] hsr_slave_0: entered promiscuous mode
[  403.001729][T17604] hsr_slave_1: entered promiscuous mode
[  403.009560][T17604] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  403.023714][T17604] Cannot create hsr debugfs directory
[  403.076797][T17699] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3327'.
[  403.083612][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3326'.
[  403.108246][T17700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3326'.
[  403.118298][T17699] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  403.127454][T17700] netlink: 'syz.4.3326': attribute type 7 has an invalid length.
[  403.385842][T17620] chnl_net:caif_netlink_parms(): no params data found
[  403.406507][T13813] bridge_slave_1: left allmulticast mode
[  403.412665][T13813] bridge_slave_1: left promiscuous mode
[  403.418710][T13813] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.471571][T13813] bridge_slave_0: left allmulticast mode
[  403.478249][T13813] bridge_slave_0: left promiscuous mode
[  403.486680][T13813] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.538534][T17718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3331'.
[  403.555466][T13798] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  403.583001][T17718] syz.0.3331: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  403.607928][T17718] CPU: 0 UID: 0 PID: 17718 Comm: syz.0.3331 Not tainted 6.13.0-rc6-syzkaller-00127-g8c7a6efc017e #0
[  403.618757][T17718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  403.628877][T17718] Call Trace:
[  403.632209][T17718]  <TASK>
[  403.635173][T17718]  dump_stack_lvl+0x241/0x360
[  403.639901][T17718]  ? __pfx_dump_stack_lvl+0x10/0x10
[  403.645155][T17718]  ? __pfx__printk+0x10/0x10
[  403.649794][T17718]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  403.656263][T17718]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  403.662852][T17718]  warn_alloc+0x278/0x410
[  403.667223][T17718]  ? __vmalloc_node_range_noprof+0x106/0x1380
[  403.673323][T17718]  ? __pfx_warn_alloc+0x10/0x10
[  403.678223][T17718]  ? kasan_save_track+0x3f/0x80
[  403.683111][T17718]  ? __kasan_kmalloc+0x98/0xb0
[  403.687913][T17718]  ? xsk_setsockopt+0x4ea/0x950
[  403.692798][T17718]  ? do_sock_setsockopt+0x3af/0x720
[  403.698047][T17718]  ? __x64_sys_setsockopt+0x1ee/0x280
[  403.703457][T17718]  ? do_syscall_64+0xf3/0x230
[  403.708172][T17718]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.714305][T17718]  __vmalloc_node_range_noprof+0x126/0x1380
[  403.720256][T17718]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  403.726613][T17718]  ? __kasan_kmalloc+0x98/0xb0
[  403.731433][T17718]  vmalloc_user_noprof+0x74/0x80
[  403.736394][T17718]  ? xskq_create+0xb6/0x170
[  403.740913][T17718]  xskq_create+0xb6/0x170
[  403.745267][T17718]  xsk_init_queue+0xa1/0x100
[  403.749875][T17718]  xsk_setsockopt+0x4ea/0x950
[  403.754569][T17718]  ? __pfx_xsk_setsockopt+0x10/0x10
[  403.759780][T17718]  ? __pfx_aa_sk_perm+0x10/0x10
[  403.764668][T17718]  ? aa_sock_opt_perm+0x79/0x120
[  403.769619][T17718]  ? __pfx_xsk_setsockopt+0x10/0x10
[  403.774827][T17718]  do_sock_setsockopt+0x3af/0x720
[  403.779900][T17718]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  403.785469][T17718]  ? __fget_files+0x395/0x410
[  403.790159][T17718]  ? __fget_files+0x2a/0x410
[  403.794763][T17718]  __x64_sys_setsockopt+0x1ee/0x280
[  403.799972][T17718]  do_syscall_64+0xf3/0x230
[  403.804491][T17718]  ? clear_bhb_loop+0x35/0x90
[  403.809175][T17718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.815103][T17718] RIP: 0033:0x7f1548985d29
[  403.819534][T17718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  403.839244][T17718] RSP: 002b:00007f1549856038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  403.847683][T17718] RAX: ffffffffffffffda RBX: 00007f1548b75fa0 RCX: 00007f1548985d29
[  403.855661][T17718] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  403.863660][T17718] RBP: 00007f1548a01b08 R08: 0000000000000004 R09: 0000000000000000
[  403.871640][T17718] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000
[  403.879620][T17718] R13: 0000000000000000 R14: 00007f1548b75fa0 R15: 00007ffdf9be77d8
[  403.887703][T17718]  </TASK>
[  403.920591][T17718] Mem-Info:
[  403.935670][T17718] active_anon:3810 inactive_anon:0 isolated_anon:0
[  403.935670][T17718]  active_file:1563 inactive_file:38414 isolated_file:0
[  403.935670][T17718]  unevictable:768 dirty:38 writeback:0
[  403.935670][T17718]  slab_reclaimable:11815 slab_unreclaimable:122587
[  403.935670][T17718]  mapped:28471 shmem:1441 pagetables:648
[  403.935670][T17718]  sec_pagetables:0 bounce:0
[  403.935670][T17718]  kernel_misc_reclaimable:0
[  403.935670][T17718]  free:1316505 free_pcp:759 free_cma:0
[  403.985415][T17718] Node 0 active_anon:15240kB inactive_anon:0kB active_file:6252kB inactive_file:153576kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113884kB dirty:152kB writeback:0kB shmem:4228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12584kB pagetables:2592kB sec_pagetables:0kB all_unreclaimable? no
[  404.018326][T17718] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  404.075140][T17718] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  404.112253][T17718] lowmem_reserve[]: 0 2465 2466 0 0
[  404.122765][T17718] Node 0 DMA32 free:1347820kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:15300kB inactive_anon:0kB active_file:6252kB inactive_file:152736kB unevictable:1536kB writepending:152kB present:3129332kB managed:2552780kB mlocked:0kB bounce:0kB free_pcp:2276kB local_pcp:948kB free_cma:0kB
[  404.166511][T17718] lowmem_reserve[]: 0 0 0 0 0
[  404.171368][T17718] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:840kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  404.220328][T17718] lowmem_reserve[]: 0 0 0 0 0
[  404.242765][T17718] Node 1 Normal free:3902976kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:0kB free_cma:0kB
[  404.286633][T17718] lowmem_reserve[]: 0 0 0 0 0
[  404.304436][T17718] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  404.317410][T17718] Node 0 DMA32: 423*4kB (UE) 143*8kB (UME) 128*16kB (UME) 153*32kB (UME) 83*64kB (UME) 60*128kB (UME) 14*256kB (UME) 17*512kB (UM) 2*1024kB (UE) 9*2048kB (UM) 316*4096kB (UM) = 1349876kB
[  404.337026][T17718] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  404.349489][T17718] Node 1 Normal: 85*4kB (UE) 46*8kB (UME) 41*16kB (UME) 199*32kB (UME) 98*64kB (UME) 25*128kB (UM) 15*256kB (UME) 10*512kB (UME) 4*1024kB (UM) 3*2048kB (UE) 944*4096kB (M) = 3903028kB
[  404.369126][T17718] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  404.379442][T17718] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  404.389004][T17718] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  404.399565][T17718] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  404.409159][T17718] 41418 total pagecache pages
[  404.413987][T17718] 0 pages in swap cache
[  404.418161][T17718] Free swap  = 124996kB
[  404.422864][T17718] Total swap = 124996kB
[  404.427045][T17718] 2097051 pages RAM
[  404.430883][T17718] 0 pages HighMem/MovableOnly
[  404.436501][T17718] 427006 pages reserved
[  404.441833][T17718] 0 pages cma reserved
[  404.689037][   T55] Bluetooth: hci2: command tx timeout
[  404.768593][T13813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  404.811682][T13813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  404.825671][T13813] bond0 (unregistering): Released all slaves
[  404.885352][T17744] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3338'.
[  404.923539][T17744] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3338'.
[  404.934902][T13816] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  405.002797][   T55] Bluetooth: hci0: command tx timeout
[  405.239905][T17620] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.247436][T17620] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.258465][T17620] bridge_slave_0: entered allmulticast mode
[  405.274286][T17620] bridge_slave_0: entered promiscuous mode
[  405.413566][T17620] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.431059][T17620] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.453972][T17620] bridge_slave_1: entered allmulticast mode
[  405.471406][T17620] bridge_slave_1: entered promiscuous mode
[  405.605468][T17620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  405.674531][T17620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  405.675813][T17782] netlink: 'syz.4.3347': attribute type 10 has an invalid length.
[  405.693720][T17782] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3347'.
[  405.708116][T17782] netlink: 'syz.4.3347': attribute type 1 has an invalid length.
[  405.731737][T17782] netlink: 'syz.4.3347': attribute type 2 has an invalid length.
[  405.739956][T17782] netlink: 'syz.4.3347': attribute type 1 has an invalid length.
[  405.827285][T17620] team0: Port device team_slave_0 added
[  405.858576][T17620] team0: Port device team_slave_1 added
[  406.054039][T13815] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  406.181746][T17620] batman_adv: batadv0: Adding interface: batadv_slave_0
[  406.211326][T17620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.247623][T17795] sctp: [Deprecated]: syz.4.3351 (pid 17795) Use of struct sctp_assoc_value in delayed_ack socket option.
[  406.247623][T17795] Use struct sctp_sack_info instead
[  406.267665][T17620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  406.306980][T13813] hsr_slave_0: left promiscuous mode
[  406.349779][T13813] hsr_slave_1: left promiscuous mode
[  406.368304][T13813] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  406.377108][T13813] batman_adv: batadv0: Removing interface: batadv_slave_0
[  406.385642][T13813] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  406.393561][T13813] batman_adv: batadv0: Removing interface: batadv_slave_1
[  406.434296][T13813] veth1_macvtap: left promiscuous mode
[  406.450208][T13813] veth0_macvtap: left promiscuous mode
[  406.456184][T13813] veth1_vlan: left promiscuous mode
[  406.461556][T13813] veth0_vlan: left promiscuous mode
[  406.762708][   T55] Bluetooth: hci2: command tx timeout
[  406.973901][T13813] team0 (unregistering): Port device team_slave_1 removed
[  407.022124][T13813] team0 (unregistering): Port device team_slave_0 removed
[  407.086829][   T55] Bluetooth: hci0: command tx timeout
[  407.172881][T13817] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  407.551376][T17620] batman_adv: batadv0: Adding interface: batadv_slave_1
[  407.565621][T17620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  407.607187][T17620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  407.632377][T17604] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  407.777134][T17805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3354'.
[  407.787328][T17604] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  407.846236][T17620] hsr_slave_0: entered promiscuous mode
[  407.867632][T17620] hsr_slave_1: entered promiscuous mode
[  407.868511][T17811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3355'.
[  407.892741][T17620] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  407.900369][T17620] Cannot create hsr debugfs directory
[  407.915658][T17604] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  407.943356][T17604] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  408.114736][T17814] : entered promiscuous mode
[  408.250076][T17816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3358'.
[  408.284310][T13816] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  408.298595][T17818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3359'.
[  408.344018][T17818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3359'.
[  408.367824][    T8] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  408.450632][T17604] 8021q: adding VLAN 0 to HW filter on device bond0
[  408.593998][T17604] 8021q: adding VLAN 0 to HW filter on device team0
[  408.660410][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  408.667642][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  408.689694][T17826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3361'.
[  408.732030][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.739290][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  408.842489][   T55] Bluetooth: hci2: command tx timeout
[  408.925798][T17832] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3364'.
[  408.984434][T17620] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  409.026059][T17620] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  409.066315][T17620] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  409.105851][T17620] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  409.205176][T17841] batadv_slave_0: entered allmulticast mode
[  409.224624][T17846] netlink: 23 bytes leftover after parsing attributes in process `syz.4.3367'.
[  409.250632][T17846] netlink: 23 bytes leftover after parsing attributes in process `syz.4.3367'.
[  409.316141][T17604] 8021q: adding VLAN 0 to HW filter on device batadv0
[  409.323034][ T5881] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  409.462868][T13817] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  409.583076][T17620] 8021q: adding VLAN 0 to HW filter on device bond0
[  409.592731][T17604] veth0_vlan: entered promiscuous mode
[  409.628262][T17620] 8021q: adding VLAN 0 to HW filter on device team0
[  409.649355][T17604] veth1_vlan: entered promiscuous mode
[  409.698313][T13812] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.705503][T13812] bridge0: port 1(bridge_slave_0) entered forwarding state
[  409.750342][T13812] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.757780][T13812] bridge0: port 2(bridge_slave_1) entered forwarding state
[  409.796726][T17604] veth0_macvtap: entered promiscuous mode
[  409.826131][T17604] veth1_macvtap: entered promiscuous mode
[  409.860131][T17604] batman_adv: batadv0: Interface activated: batadv_slave_0
[  409.895780][T17604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  409.929070][T17604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.950754][T17604] batman_adv: batadv0: Interface activated: batadv_slave_1
[  410.004666][T17604] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  410.028794][T17604] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  410.061030][T17604] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  410.082073][T17604] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  410.379846][T17876] x_tables: duplicate underflow at hook 2
[  410.413535][T13812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.421420][T13812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  410.503835][T13798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.513785][T13798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  410.587709][T13817] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  410.708130][T17620] 8021q: adding VLAN 0 to HW filter on device batadv0
[  410.921792][T17620] veth0_vlan: entered promiscuous mode
[  410.946201][T17620] veth1_vlan: entered promiscuous mode
[  410.970194][T17620] veth0_macvtap: entered promiscuous mode
[  410.979704][T17620] veth1_macvtap: entered promiscuous mode
[  410.999028][T17620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  411.010413][T17620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.022656][T17620] batman_adv: batadv0: Interface activated: batadv_slave_0
[  411.035647][T17906] netlink: 'syz.4.3382': attribute type 1 has an invalid length.
[  411.087440][T17907] __nla_validate_parse: 1 callbacks suppressed
[  411.087475][T17907] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3382'.
[  411.096259][T17620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  411.114082][T17620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.124347][T17620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  411.135295][T17620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.147114][T17620] batman_adv: batadv0: Interface activated: batadv_slave_1
[  411.157361][T17620] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  411.166849][T17620] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  411.175867][T17620] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  411.184866][T17620] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  411.264966][T17906] 8021q: adding VLAN 0 to HW filter on device bond4
[  411.293430][T17906] Cannot find set identified by id 0 to match
[  411.397625][T13812] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.446653][T17912] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  411.588876][T13812] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.643607][ T5829] Bluetooth: hci4: command 0x0405 tx timeout
[  411.686144][T13812] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.744547][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.752949][T13816] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  411.762667][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.835131][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.846131][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.873942][T13812] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.948120][T17915] ------------[ cut here ]------------
[  411.954238][T17915] refcount_t: underflow; use-after-free.
[  411.960330][T17915] WARNING: CPU: 0 PID: 17915 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0
[  411.970060][T17915] Modules linked in:
[  411.974018][T17915] CPU: 0 UID: 0 PID: 17915 Comm: kbnepd bnep0 Not tainted 6.13.0-rc6-syzkaller-00127-g8c7a6efc017e #0
[  411.985195][T17915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  411.995336][T17915] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0
[  412.001713][T17915] Code: a0 6b 5f 8c e8 37 c1 9d fc 90 0f 0b 90 90 eb 99 e8 5b 1d dd fc c6 05 9e 54 41 0b 01 90 48 c7 c7 00 6c 5f 8c e8 17 c1 9d fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 38 1d dd fc c6 05 78 54 41 0b 01 90
[  412.022101][T17915] RSP: 0018:ffffc9000483f7c0 EFLAGS: 00010246
[  412.028547][T17915] RAX: 7c989af2bae94f00 RBX: ffff8880340da878 RCX: ffff88802dd05a00
[  412.036592][T17915] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  412.045405][T17915] RBP: 0000000000000003 R08: ffffffff81602a82 R09: fffffbfff1cfa210
[  412.053503][T17915] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff8880340da860
[  412.061478][T17915] R13: 1ffff1100681b50c R14: ffff8880340da860 R15: ffffffff8603ae80
[  412.069501][T17915] FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  412.078679][T17915] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  412.085333][T17915] CR2: 00007ffe1d6c9ff8 CR3: 0000000029962000 CR4: 00000000003526f0
[  412.093342][T17915] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  412.101310][T17915] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  412.109543][T17915] Call Trace:
[  412.112871][T17915]  <TASK>
[  412.115802][T17915]  ? __warn+0x165/0x4d0
[  412.120314][T17915]  ? refcount_warn_saturate+0x15a/0x1d0
[  412.126414][T17915]  ? report_bug+0x2b3/0x500
[  412.130927][T17915]  ? refcount_warn_saturate+0x15a/0x1d0
[  412.136785][T17915]  ? handle_bug+0x60/0x90
[  412.141112][T17915]  ? exc_invalid_op+0x1a/0x50
[  412.145810][T17915]  ? asm_exc_invalid_op+0x1a/0x20
[  412.150856][T17915]  ? __pfx_klist_children_put+0x10/0x10
[  412.156501][T17915]  ? __warn_printk+0x292/0x360
[  412.161299][T17915]  ? refcount_warn_saturate+0x15a/0x1d0
[  412.167085][T17915]  klist_dec_and_del+0x3ec/0x3f0
[  412.172033][T17915]  ? __pfx_klist_children_put+0x10/0x10
[  412.177620][T17915]  klist_del+0xa7/0x110
[  412.181782][T17915]  device_del+0x2c9/0x9b0
[  412.186162][T17915]  ? __pfx_device_del+0x10/0x10
[  412.191014][T17915]  ? netdev_unregister_kobject+0x178/0x250
[  412.197127][T17915]  unregister_netdevice_many_notify+0x1859/0x1da0
[  412.203702][T17915]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  412.210472][T17915]  ? rcu_is_watching+0x15/0xb0
[  412.215501][T17915]  ? trace_contention_end+0x3c/0x120
[  412.221225][T17915]  ? __mutex_lock+0x37f/0xee0
[  412.226569][T17915]  ? __pfx_lock_acquire+0x10/0x10
[  412.231623][T17915]  ? unregister_netdev+0x12/0x30
[  412.236700][T17915]  unregister_netdevice_queue+0x303/0x370
[  412.242521][T17915]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  412.248807][T17915]  ? down_write+0x18c/0x220
[  412.253606][T17915]  ? __pfx_down_write+0x10/0x10
[  412.258474][T17915]  unregister_netdev+0x1c/0x30
[  412.263339][T17915]  bnep_session+0x2e3c/0x3030
[  412.268080][T17915]  ? __pfx_bnep_session+0x10/0x10
[  412.273214][T17915]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  412.279137][T17915]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  412.285991][T17915]  ? __pfx_woken_wake_function+0x10/0x10
[  412.291675][T17915]  ? __kthread_parkme+0x169/0x1d0
[  412.296826][T17915]  ? __pfx_bnep_session+0x10/0x10
[  412.301883][T17915]  kthread+0x2f0/0x390
[  412.306044][T17915]  ? __pfx_bnep_session+0x10/0x10
[  412.311084][T17915]  ? __pfx_kthread+0x10/0x10
[  412.315973][T17915]  ret_from_fork+0x4b/0x80
[  412.320405][T17915]  ? __pfx_kthread+0x10/0x10
[  412.325452][T17915]  ret_from_fork_asm+0x1a/0x30
[  412.330250][T17915]  </TASK>
[  412.333665][T17915] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  412.340945][T17915] CPU: 0 UID: 0 PID: 17915 Comm: kbnepd bnep0 Not tainted 6.13.0-rc6-syzkaller-00127-g8c7a6efc017e #0
[  412.351874][T17915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  412.361928][T17915] Call Trace:
[  412.365204][T17915]  <TASK>
[  412.368134][T17915]  dump_stack_lvl+0x241/0x360
[  412.372834][T17915]  ? __pfx_dump_stack_lvl+0x10/0x10
[  412.378035][T17915]  ? __pfx__printk+0x10/0x10
[  412.382626][T17915]  ? _printk+0xd5/0x120
[  412.386781][T17915]  ? __init_begin+0x41000/0x41000
[  412.391808][T17915]  ? vscnprintf+0x5d/0x90
[  412.396137][T17915]  panic+0x349/0x880
[  412.400034][T17915]  ? __warn+0x174/0x4d0
[  412.404200][T17915]  ? __pfx_panic+0x10/0x10
[  412.408630][T17915]  ? ret_from_fork_asm+0x1a/0x30
[  412.413564][T17915]  __warn+0x344/0x4d0
[  412.417543][T17915]  ? refcount_warn_saturate+0x15a/0x1d0
[  412.423095][T17915]  report_bug+0x2b3/0x500
[  412.427428][T17915]  ? refcount_warn_saturate+0x15a/0x1d0
[  412.432978][T17915]  handle_bug+0x60/0x90
[  412.437138][T17915]  exc_invalid_op+0x1a/0x50
[  412.441643][T17915]  asm_exc_invalid_op+0x1a/0x20
[  412.446494][T17915] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0
[  412.452662][T17915] Code: a0 6b 5f 8c e8 37 c1 9d fc 90 0f 0b 90 90 eb 99 e8 5b 1d dd fc c6 05 9e 54 41 0b 01 90 48 c7 c7 00 6c 5f 8c e8 17 c1 9d fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 38 1d dd fc c6 05 78 54 41 0b 01 90
[  412.472289][T17915] RSP: 0018:ffffc9000483f7c0 EFLAGS: 00010246
[  412.478367][T17915] RAX: 7c989af2bae94f00 RBX: ffff8880340da878 RCX: ffff88802dd05a00
[  412.486370][T17915] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  412.494350][T17915] RBP: 0000000000000003 R08: ffffffff81602a82 R09: fffffbfff1cfa210
[  412.502327][T17915] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff8880340da860
[  412.510314][T17915] R13: 1ffff1100681b50c R14: ffff8880340da860 R15: ffffffff8603ae80
[  412.518338][T17915]  ? __pfx_klist_children_put+0x10/0x10
[  412.523903][T17915]  ? __warn_printk+0x292/0x360
[  412.528697][T17915]  klist_dec_and_del+0x3ec/0x3f0
[  412.533644][T17915]  ? __pfx_klist_children_put+0x10/0x10
[  412.539227][T17915]  klist_del+0xa7/0x110
[  412.543389][T17915]  device_del+0x2c9/0x9b0
[  412.547738][T17915]  ? __pfx_device_del+0x10/0x10
[  412.552610][T17915]  ? netdev_unregister_kobject+0x178/0x250
[  412.558459][T17915]  unregister_netdevice_many_notify+0x1859/0x1da0
[  412.564916][T17915]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  412.571686][T17915]  ? rcu_is_watching+0x15/0xb0
[  412.576478][T17915]  ? trace_contention_end+0x3c/0x120
[  412.581770][T17915]  ? __mutex_lock+0x37f/0xee0
[  412.586498][T17915]  ? __pfx_lock_acquire+0x10/0x10
[  412.591547][T17915]  ? unregister_netdev+0x12/0x30
[  412.596511][T17915]  unregister_netdevice_queue+0x303/0x370
[  412.602243][T17915]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  412.608486][T17915]  ? down_write+0x18c/0x220
[  412.612980][T17915]  ? __pfx_down_write+0x10/0x10
[  412.617854][T17915]  unregister_netdev+0x1c/0x30
[  412.622620][T17915]  bnep_session+0x2e3c/0x3030
[  412.627325][T17915]  ? __pfx_bnep_session+0x10/0x10
[  412.632352][T17915]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  412.638262][T17915]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  412.644597][T17915]  ? __pfx_woken_wake_function+0x10/0x10
[  412.650250][T17915]  ? __kthread_parkme+0x169/0x1d0
[  412.655274][T17915]  ? __pfx_bnep_session+0x10/0x10
[  412.660302][T17915]  kthread+0x2f0/0x390
[  412.664373][T17915]  ? __pfx_bnep_session+0x10/0x10
[  412.669400][T17915]  ? __pfx_kthread+0x10/0x10
[  412.673992][T17915]  ret_from_fork+0x4b/0x80
[  412.678418][T17915]  ? __pfx_kthread+0x10/0x10
[  412.683020][T17915]  ret_from_fork_asm+0x1a/0x30
[  412.687802][T17915]  </TASK>
[  413.847699][T17915] Shutting down cpus with NMI
[  413.852921][T17915] Kernel Offset: disabled
[  413.857574][T17915] Rebooting in 86400 seconds..