last executing test programs:

11.925091539s ago: executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c", 0x87}, {&(0x7f0000000d40)="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", 0x184}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef3", 0xde}], 0x3}}], 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)

10.977681522s ago: executing program 2:
socket$rds(0x15, 0x5, 0x0)
r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000f00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01f3ffffff000000000013000000180001801400"], 0x2c}}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
socket$nl_rdma(0x10, 0x3, 0x14)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000080)="7aa64ad826210955f7e94c103cac8b679081cb61d9020e6818fdb4897aefec1baca9edebaa72760b559dd4e36080707477139e31f99241f41f3b2fd1917916c27f11c616691222e5c0359ab6a110051d55c3102b2af3492f8e56f4e2acd9921d1870bb3a42a920e797f23f2fdc1d1478b52b3b88572e92e03d0d2ed22f9fb55a9a55074983614f6707ac48060bf397f5fc41ad6a276bba224e1977b13ae305eed7fbfcbb92cf2ff080bac63b409703aaf53205887b", 0xb5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="ff82020007000000851cf000000000055f00000000000000"], &(0x7f0000000180)='GPL\x00', 0x66ccfc70, 0xc9, &(0x7f0000000600)=""/201, 0x40f00, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x4, 0x100, 0x2}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000004c0)=[{0x0, 0x0, 0x2, 0xc}, {0x0, 0x4, 0xe, 0x4}, {0x3, 0x2, 0xd, 0x6}, {0x3, 0x2, 0xc, 0xc}, {0x5, 0x4, 0x1, 0x5}, {0x2, 0x5, 0xe}], 0x10, 0x8}, 0x90)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
unshare(0x20000400)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
connect$unix(r4, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r5, 0x800448d5, &(0x7f0000000340)="e9466acceefd661bbabb681cfefd8c0fa9aec9e1bf4c05bf1dcdee07228bd89bf74d9abfa84a988afe5ba3cc7faa0d47e5acf81300c8fdd48fb9db4a873e8abd75f45d4db836cea95c2627c106a9cf9de990c9ea6588ae69e32e3c24685b97fafcceecfc762b94b5043707819f03057a739d7bb3bc0c830a486f586b44b8bc264e16f2c70971f55739de6855e3d4f3d74e47e638b2eacdc470f4c84aba77b5bc67ff7c3c8a0b64fef7907ec44244210345cfb94dade699338a5ba10b49de51550e6efadc25ed286a9daddcf25162bef0cf3b516a285069dbbc8cd5a50a1aa884")
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x0, 0x0, 0x0)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x0, 0x21}}], 0x48}, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000)

10.721120106s ago: executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c", 0x87}, {&(0x7f0000000d40)="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", 0x184}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef3", 0xde}], 0x3}}], 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)

9.794430799s ago: executing program 2:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x3, 0x8001, 0x3, 0x0, 0x9})

9.688752784s ago: executing program 2:
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = socket(0x0, 0x0, 0x0)
getsockopt$inet6_mreq(r1, 0x10d, 0x0, 0x0, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", 0x0}, 0x50)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000180)=0x6)
pipe(&(0x7f00000045c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f00000003c0)=[{&(0x7f00000000c0)="17e4f3ca3c05", 0x2b}, {&(0x7f0000000200)="abc46908b3df918fe61946b2a7d85cf473884b91c53b94d51db7a5918ed07847c392ee17a23d6fea6e8d3c0f5e15638daf629312107876c7f31ade70432bc5b43f642876bf7e04c45086b9b3695182eeff8243f87f8966baec1a670803eb8ca6b37342f9ea242f21e5726b6c501808457f85459c91ff1116eae79e54b5ec3544ebbb18ee617231e4bdb87424814565dfb6ebe0", 0x93}, {&(0x7f0000000580)="db56b84884ffc02c06bd0f01587a681de55a4df7714790716dddfa75831670014c811bd064f615db698adab368dafbf134b3d26a38503c3fe8a7c5ece07759b81233530ed432985e4feebb5d4ca49dcb8c490c015acacef99f7da736180800000000000000ba12b327f6b79ea0d90605040d84453eff84443a09ab5eeba1586f85c1e383f8095573726b1bf117d96c91d1349f4951ead7fd07838ce689e171c4bda933d8fc5c35ce2fcbc1c5bae12537482f023984c435e056b2e8a6613a841360d40172a17e494ae06d5af1305ffa1eb9cbcedd90b7de636015883d0d3473c4bdfd1f", 0xe0}, {&(0x7f0000000140)="d80a642bc17284b8945c0c21fcd2df4e9cf2a68e854560584ed04f62aebae0dab1e7c4", 0x2a}, {&(0x7f00000004c0)="67df3baec1ce766316819b76b14295d4f969f2095747039d8a9e01159fc171d6ab964bc50f5d66ab6bcdefa298582348a01ac90b6ecd3001c769cf58704f758dae3ecd02919b7e1eebc643c57afec3b45811ab935a8f893220c7329def2702370b371c3966c553ce13a625dfddbe8bc98f220a9ff6ac6a09165c1273ac580916e65995994307bb637dba5994702e22a333a3d48507689db92142d492c5ca788f11ff4a5c51adfcec8f7e15467d446025f37f9c", 0xb3}, {&(0x7f00000002c0)="2b4f2c23cd72e5f8c27c5125a38cc74027abf1994ab65ba7ca4e64b9ab8b357454e5abb6d754f1318dd05531dce7560e6e7d95526c4358848e67345b32b86de0ff15be80ddf3dab5b55443991f2b4d7276d4d6334a4385a70581c45a6926fc7874e38018387a2d6195df3281ba32a96811d4e9e40b1cf5b927", 0x2a}], 0x6, 0x8)
r6 = socket$inet(0x2, 0x3, 0x7f)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r6, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r4, 0x0, r6, 0x0, 0x8000, 0x0)
unshare(0x20000400)
ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
socket(0x0, 0x0, 0x0) (async)
getsockopt$inet6_mreq(r1, 0x10d, 0x0, 0x0, 0x0) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x90) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", 0x0}, 0x50) (async)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000180)=0x6) (async)
pipe(&(0x7f00000045c0)) (async)
vmsplice(r5, &(0x7f00000003c0)=[{&(0x7f00000000c0)="17e4f3ca3c05", 0x2b}, {&(0x7f0000000200)="abc46908b3df918fe61946b2a7d85cf473884b91c53b94d51db7a5918ed07847c392ee17a23d6fea6e8d3c0f5e15638daf629312107876c7f31ade70432bc5b43f642876bf7e04c45086b9b3695182eeff8243f87f8966baec1a670803eb8ca6b37342f9ea242f21e5726b6c501808457f85459c91ff1116eae79e54b5ec3544ebbb18ee617231e4bdb87424814565dfb6ebe0", 0x93}, {&(0x7f0000000580)="db56b84884ffc02c06bd0f01587a681de55a4df7714790716dddfa75831670014c811bd064f615db698adab368dafbf134b3d26a38503c3fe8a7c5ece07759b81233530ed432985e4feebb5d4ca49dcb8c490c015acacef99f7da736180800000000000000ba12b327f6b79ea0d90605040d84453eff84443a09ab5eeba1586f85c1e383f8095573726b1bf117d96c91d1349f4951ead7fd07838ce689e171c4bda933d8fc5c35ce2fcbc1c5bae12537482f023984c435e056b2e8a6613a841360d40172a17e494ae06d5af1305ffa1eb9cbcedd90b7de636015883d0d3473c4bdfd1f", 0xe0}, {&(0x7f0000000140)="d80a642bc17284b8945c0c21fcd2df4e9cf2a68e854560584ed04f62aebae0dab1e7c4", 0x2a}, {&(0x7f00000004c0)="67df3baec1ce766316819b76b14295d4f969f2095747039d8a9e01159fc171d6ab964bc50f5d66ab6bcdefa298582348a01ac90b6ecd3001c769cf58704f758dae3ecd02919b7e1eebc643c57afec3b45811ab935a8f893220c7329def2702370b371c3966c553ce13a625dfddbe8bc98f220a9ff6ac6a09165c1273ac580916e65995994307bb637dba5994702e22a333a3d48507689db92142d492c5ca788f11ff4a5c51adfcec8f7e15467d446025f37f9c", 0xb3}, {&(0x7f00000002c0)="2b4f2c23cd72e5f8c27c5125a38cc74027abf1994ab65ba7ca4e64b9ab8b357454e5abb6d754f1318dd05531dce7560e6e7d95526c4358848e67345b32b86de0ff15be80ddf3dab5b55443991f2b4d7276d4d6334a4385a70581c45a6926fc7874e38018387a2d6195df3281ba32a96811d4e9e40b1cf5b927", 0x2a}], 0x6, 0x8) (async)
socket$inet(0x2, 0x3, 0x7f) (async)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
setsockopt$inet_int(r6, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) (async)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) (async)
splice(r4, 0x0, r6, 0x0, 0x8000, 0x0) (async)
unshare(0x20000400) (async)
ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) (async)

9.378346638s ago: executing program 2:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0xb, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0)

2.736689069s ago: executing program 0:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$qrtr(0x2a, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_aout(r4, 0x0, 0x6a)
splice(r1, 0x0, r4, 0x0, 0x8ec3, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x6e}], 0x1)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYRES64, @ANYRES16=r5, @ANYRESDEC=r0, @ANYRESDEC=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x24, r9, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}}, 0x0)
sendmsg$FOU_CMD_DEL(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0)
listen(r5, 0x0)
r10 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'cbc-twofish-avx\x00'}, '\x00', '\x00', 0x2000}}, 0xe0}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="662e1e5b5fd901c814208a13a9f79f8dde976db8f7e204091c0eb250edfd97527ae2f7379013a26bc276174abb7d1f40866eb831f9af1431ee687052f6e133a8d63c53fe06b5c554", @ANYRES16=0x0, @ANYBLOB="000000000000000000004c0000000c00a60000000000000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x40}}, 0x0)
sendmsg$nl_crypto(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x44040)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x0, [{}, {@dev}, {@dev}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000006)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000340), 0x4)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000015c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x60004050}, 0x0)
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
splice(r3, 0x0, r12, 0x0, 0x7ff, 0x0)
write$binfmt_elf64(r2, 0x0, 0x0)

1.732395613s ago: executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f00000001c0)=ANY=[@ANYRESOCT], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040), 0x4)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0x5c}, 0x1, 0x3000000, 0x0, 0x40000}, 0x4040880)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={<r5=>r1, 0x45d6, 0x10000000000000, 0xd5e})
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="f27d5887080000000000000000000dba7766a52dde0296357c99dbb2b56a42f787e507eb2ebd427b0e62c4357605d76997f14097feb7c40ab6af924c198d6b3ed86a2670"], 0x14}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
recvmsg$unix(r6, &(0x7f0000000a80)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000340)=""/72, 0x48}, {&(0x7f0000000480)=""/121, 0x79}, {&(0x7f0000000580)=""/186, 0xba}, {&(0x7f0000000640)=""/228, 0xe4}, {&(0x7f0000000740)=""/219, 0xdb}, {&(0x7f0000000840)=""/77, 0x4d}, {&(0x7f0000000940)=""/210}], 0x6, &(0x7f0000000e00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xfeb2}, 0x82)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000340012800c0001006d6163766c616e00240002800800010010000000100005800a000400aaaaaaaaaabb0000080003"], 0x54}}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0xc, 0x0, 0x0, 0xfd], 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}]}}]}, 0x8c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x12, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000f1ff0200000000000000a61900077f4408ff7f000095000000000000009e043748054d853df29705c7a98f17a67a2f289d493c2c1198ab52014648d1b6"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', r12, 0x33, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffaa)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='ext4_ext_handle_unwritten_extents\x00', r0}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r13 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)

1.729407896s ago: executing program 0:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='blkio.reset_stats\x00', 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
vmsplice(r2, &(0x7f0000000680), 0x10000000000000ef, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000080)={'filter\x00', 0xea, "2a37f798e31e2b55b57512953c324a3bd95dff0db9a9df509a6815a6ec334def42e4e3590be1ce755b6b92a8abff150b477d2a146773caa636ad2dda503a9895e4d6a8894393020caeca3bfe55f45e3e0ca266bc6c543d43cf847cdf9320924c35d6199fd1e11f979377b1fce8302f17c11c559f25a8b210d8c794bfd91f65d695846a3b6ce24db0a2054dfe921444a547d03014a977e0135d59bfd9396b66b28939a277de13482bfaaf211c2139332a5c54f66159f79a01915d36d8416fbc678e673f8c28bd759f01d519dd9b36a1aa4f3cf05f9603b85fe12a6082e00089909e92c684d6fc4eba1899"}, &(0x7f00000001c0)=0x10e)
write$cgroup_int(r1, &(0x7f0000000680), 0x12)

1.615890126s ago: executing program 0:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000040), 0x1c)
listen(r0, 0x80080400)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0xbf, &(0x7f0000000000), &(0x7f0000000080)=0x4)

1.420329603s ago: executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711615000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000ff0300008500000017000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90)
ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000)

1.313860694s ago: executing program 3:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="bf16000000000000b70700000100000048700000e4ff0000bc700000000000009500faff000000008aa1210b29017b83c8e96e6405f798585fb5030b3388b0409a814343f1ae341b74efa745a12f5c0685e5261482e31e0cacc902c97e6145ef48004d26342c94f56a39359ba56724e4535d80ffbd6848d53382c26211a2b975eb4a9d08501c000c00000000000097e50f118c4a3b05489d1d1245cb774879b0871dd61703eefe87ff070000000000008cca1a363b2b28add613658171122dc01e0a77d7c44b009fdac91fc827f5797532750d4d4639f11089feb3f25b4695c6dac2cabfa04e2c16fa741b0665bb33be6f0e742213d0bf5528a601b5934b867f39f7d776ac00a434949b4455b7c6c678de4d9740d8dff6169c664b55ce550fb4e686ae169d9f7abbeb08e02799374ae0081858bdf144d8c7fb67dcec5e43a0e8099e543116b1b7d144b5613845cca4388344d82de45f0c1b7d041db040fd777791232d5db32d14bc1c3d000000000000000000000016a1049b6f094e504c28d7daa2f61b2a7c14d2343b4308b36e6b141371c958406e212b3accb45f87aef8bd5e2181fd7826b9e5cb2f6a63f113491239dca17e4fb33e670daf1cd7a99015ae9e1ca32b4e64dc38b55d525bd10971b0898be9d6e6154dfc99b20622b604b87ba03524c2fed51056d672b1b966657de5c86ab09195fba55af17663fecf1b5c5a76cf07615c7ee54c361449e275371a8c4243b9060ecdeecfb1603b061a8a62159830049061800953f7d00c43c95068c62c2ca1ad7fea9de97216dbc9c8e36a5607608e77d1d7d72b78b4f1eab8e40000000000000000adc90eb850f42f44e4b48c9cc39412c0ce6c9f4b95936ec36efc8dfbc54eb44affe1cd0f14d124df0c29c51b5628646b8155a1859358aa08f71fd2d9b2c4288a0d8870e8767173c65476e1a4f000c580f61d73f5be35ca1aa1235cf309650cdf8c6cd950c477890089be400b26dedec1199479b1b5adfaf2b6e05b7f90c9098ed4accddabd802ac5dc1b436e"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf8}, 0x48)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x480, 0x2e8, 0x5002004a, 0x6, 0x2e8, 0x3, 0x3e8, 0x3c8, 0x3c8, 0x3e8, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x0, 0x3fa}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xe3b, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x1, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0xffffff9c)
sendmmsg$inet6(r3, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @local, 0x20}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4001c00)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c074002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x80, 0x6, 0x6, 0x101, 0x0, 0x0, {0xd, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004080)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a802b8c2594f90424fc60100c034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
poll(&(0x7f00000000c0)=[{r4}, {r0}], 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000000)={<r8=>r0, 0x2, 0x7, 0x20})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000940)={'syztnl1\x00', &(0x7f0000000840)={'gretap0\x00', <r12=>0x0, 0x40, 0x10, 0x1000, 0x40, {{0x34, 0x4, 0x1, 0xd, 0xd0, 0x66, 0x0, 0x7, 0x4, 0x0, @loopback, @loopback, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x40, 0x3, [{0x1, 0x6, "8c6f96d5"}, {0x7, 0xa, "41847d52a813fdd1"}, {0x2, 0xa, "59191c7266f6bb85"}, {0x7, 0xe, "7f0b2638c9e84470d3b65312"}, {0x0, 0x12, "af31ec07968a7d6568094fb6c7d4b62e"}]}, @timestamp_prespec={0x44, 0x1c, 0xdf, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x11}, 0x81}, {@multicast2, 0x2}, {@remote, 0x2}]}, @timestamp_prespec={0x44, 0x44, 0x89, 0x3, 0x4, [{@private=0xa010102, 0x9}, {@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x19}, 0xfff}, {@private=0xa010100, 0x1ff}, {@multicast1, 0x7}, {@remote, 0x80000000}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x11, 0xffffffffffffffff, [{0x5, 0xb, "a5c528e66e9c9df98f"}]}]}}}}})
setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000000980)={0x0, 0x1, 0x7, 0x1, @vifc_lcl_ifindex=r12, @private=0xa010101}, 0x10)
getsockname$packet(r10, &(0x7f0000000000)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c)
sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r13, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000140001000000000000000000021f0000", @ANYRES32=r13, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x8, 0x5, 0x0, 0x400, 0x518, r8, 0x8c19, '\x00', r13, r8, 0x2, 0x2, 0x2}, 0x48)
connect$rxrpc(r8, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24)

1.27905721s ago: executing program 4:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0xb, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0)

1.171133396s ago: executing program 0:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$qrtr(0x2a, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_aout(r4, 0x0, 0x6a)
splice(r1, 0x0, r4, 0x0, 0x8ec3, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x6e}], 0x1)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYRES64, @ANYRES16=r5, @ANYRESDEC=r0, @ANYRESDEC=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x24, r9, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}}, 0x0)
sendmsg$FOU_CMD_DEL(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0)
listen(r5, 0x0)
r10 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'cbc-twofish-avx\x00'}, '\x00', '\x00', 0x2000}}, 0xe0}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="662e1e5b5fd901c814208a13a9f79f8dde976db8f7e204091c0eb250edfd97527ae2f7379013a26bc276174abb7d1f40866eb831f9af1431ee687052f6e133a8d63c53fe06b5c554", @ANYRES16=0x0, @ANYBLOB="000000000000000000004c0000000c00a60000000000000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x40}}, 0x0)
sendmsg$nl_crypto(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x44040)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x0, [{}, {@dev}, {@dev}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000006)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000340), 0x4)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000015c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x60004050}, 0x0)
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
splice(r3, 0x0, r12, 0x0, 0x7ff, 0x0)
write$binfmt_elf64(r2, 0x0, 0x0)

1.119030428s ago: executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x1c8, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xf4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x94, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'hsr0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x0, 0xb00, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'wg2\x00'}]}]}]}], {0x14, 0x10}}, 0x26c}}, 0x0)

1.016394644s ago: executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0xf, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x348, 0xb, 0xa8, 0xfbffffff, 0x208, 0xa8, 0x2b0, 0x2b0, 0xffffffff, 0x2b0, 0x2b0, 0x5, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'bond_slave_0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @private, @remote, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x0, 0x7}}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@multicast2, @gre_key, @gre_key}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @remote, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8)

959.758309ms ago: executing program 1:
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b(', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000006c0)=[@ip_ttl={{0xfffffffffffffe5b, 0x0, 0x2, 0x5}}], 0x18}, 0x20)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffddffffffff0806000108000604e4cc6f7600000001ac9bd1bbbbbbbbbbbb98acd6c159"], 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0x0, 0x5a, 0x0, 0x0, 0xfffffffa}, 0x20)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000005c0)={<r3=>r1, 0x966, 0x7fffffff, 0x9})
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800c000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_getanyicast={0x14, 0x3e, 0x1, 0x70bd26, 0x0, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004090}, 0x44000010)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
writev(r2, &(0x7f0000000780)=[{&(0x7f0000000d80)="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", 0x1000}, {&(0x7f0000000800)="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", 0x145}, {&(0x7f0000000700)="22e5865ff5747b0b9647b59c582a5d03310e074abdd2aa83e0cbeda3ac26c4c7c23d10141313b38171b5d03d1b4c60532c0828c6f1ee7de7239d65e79382e3061f2f", 0x42}], 0x3)
shutdown(r7, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100))
shutdown(r6, 0x0)
epoll_pwait(r5, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cgroup.kill\x00', 0x100002, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='svc_authenticate\x00', r9}, 0x29)
write$cgroup_pid(r10, &(0x7f0000000980), 0x12)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000d40)={'team0\x00'})
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4008, 0x3, 0x340, 0x1d0, 0x32, 0x148, 0x1d0, 0x148, 0x2a8, 0x240, 0x240, 0x2a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'nr0\x00'}, 0x0, 0x190, 0x1d0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@inet=@ecn={{0x28}, {0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'team_slave_1\x00', 'macvlan0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0)

859.788111ms ago: executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
listen(0xffffffffffffffff, 0x80080400)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0xbf, &(0x7f0000000000), &(0x7f0000000080)=0x4)

856.153402ms ago: executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf8}, 0x48)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x480, 0x2e8, 0x5002004a, 0x6, 0x2e8, 0x3, 0x3e8, 0x3c8, 0x3c8, 0x3e8, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x0, 0x3fa}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xe3b, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x1, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0xffffff9c)
sendmmsg$inet6(r3, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @local, 0x20}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4001c00)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c074002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x80, 0x6, 0x6, 0x101, 0x0, 0x0, {0xd, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004080)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a802b8c2594f90424fc60100c034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
poll(&(0x7f00000000c0)=[{r4}, {r0}], 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000000)={<r8=>r0, 0x2, 0x7, 0x20})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000940)={'syztnl1\x00', &(0x7f0000000840)={'gretap0\x00', <r12=>0x0, 0x40, 0x10, 0x1000, 0x40, {{0x34, 0x4, 0x1, 0xd, 0xd0, 0x66, 0x0, 0x7, 0x4, 0x0, @loopback, @loopback, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x40, 0x3, [{0x1, 0x6, "8c6f96d5"}, {0x7, 0xa, "41847d52a813fdd1"}, {0x2, 0xa, "59191c7266f6bb85"}, {0x7, 0xe, "7f0b2638c9e84470d3b65312"}, {0x0, 0x12, "af31ec07968a7d6568094fb6c7d4b62e"}]}, @timestamp_prespec={0x44, 0x1c, 0xdf, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x11}, 0x81}, {@multicast2, 0x2}, {@remote, 0x2}]}, @timestamp_prespec={0x44, 0x44, 0x89, 0x3, 0x4, [{@private=0xa010102, 0x9}, {@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x19}, 0xfff}, {@private=0xa010100, 0x1ff}, {@multicast1, 0x7}, {@remote, 0x80000000}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x11, 0xffffffffffffffff, [{0x5, 0xb, "a5c528e66e9c9df98f"}]}]}}}}})
setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000000980)={0x0, 0x1, 0x7, 0x1, @vifc_lcl_ifindex=r12, @private=0xa010101}, 0x10)
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000140001000000000000000000021f0000", @ANYRES32, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x8, 0x5, 0x0, 0x400, 0x518, r8, 0x8c19, '\x00', 0x0, r8, 0x2, 0x2, 0x2}, 0x48)
connect$rxrpc(r8, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24)

730.159197ms ago: executing program 3:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x38)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00$m', @ANYRES16=r1, @ANYBLOB="020028bd7000fedbdf25440000000c009900000040005700000008000d00090000000400cc0008006b00b1000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000814}, 0x44000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x51}}]}, &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000002280)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a6361b80cdd6ff0700000000000869045aac0000659f55df08f9b90788ff7f00000010000029c21ebbcde61d8ab5920aef6c3e007fe61241638962cf0b89ef506cfd3f1d4163d3cfca3733b30070a7cf53021a9554320000000000000014569d65e33d46f8d8ae24ba69c657afac04379cb536008c219991704f11c5a01ba62ed8f2c6a503dd1b1d076f03b0f917c766f3a7598bbc00feb3bc8e88f79df517b37b56bcbc290080000000000000e675458a43b8a8935bf9cf0be7d0aeaac41405e341cd0ba0d6fd562489dad595712a4051bb6cf826ab757193fe093b8b3353fbbb278d19000000000000007b61805ed430ef06000000000000001e93f640f159320c8b088f4d64977b2eb312d4967aff9e4c14c66c90000054ed82c7cba4c81f91d6dfed18767bf0df584b4b6c4204df411f921e3aa02a67dd324b8176020e9c024751df38c05727f82c92046bfe64babb6d7ba86526b7886a0c2481c5812812a6fa3fca3758cbd8c32b25c28be225bd1f16297baa065f5bf96330fad0aaa4388c06c0eb2ecdf829af9577fcd868cc269b740000b777d73a63246ce6f0467167626329ab91df7a13d9ec9a64e7f6b56aeab8c38f69a213c96e2d2ad7978c9d721c270f27e7025d576535198742d403ec43572d7d0baf00e882617b260627805ca44200335ea4363066944d0aa6feb9705b09ba40d4642519281151f875cbf13a582f90ad719f0eccf02a473dd508a16138904933689ea6ee02412064730700aeff2b69c2f2bf6f691c3560e068743ae8e8771280da61fd8fdc3f7a35ea352e35753c59ebc1bd27ab6603e6afb1b3f057fbb7ed3aabe702b3c6301d3f5c295d1d69d1541d0e64631c95d6c0999e27e8d1a58f6a00f19102d2bfaf53f25a45637b1c577ae50c4c56d9abc40c64a20c14ff0b1bf4d23fe07ae90f503ba9c64bf89b26e7d8d70710b04f9ece69023acadbb4582272e5b3a0429a5675e5a9554de54945d9a270180e0545b0c824ad36f7cc8be12b3874d5a19349b0ede845e9ece24d546d3af1bae069b89f6ecf2aabb17eb1840bc8e0ed1dd8b9b7eeaf32a185d80250a7f2eeb756eadafe20bbc616bc44b347abc8caf722b2c3b06884c1d1690f23b06fa4541bb2a81073b452764f04bd39008b65ee222cf697ac21b087548e9708dffaff2859e973b1e88668c8022cc6dac8548167e5798ec9c7d288a7fa7749f07513187cd8f060abbbc5e37dd1be3aab927be1b409be733b7408534e5b0951e9ecfd0a1c77e3a29be4c4093330124615056e3ce0ce6ac91b1242d3bb2e787a186dc2ec284d60e9d8a03884a22eeaa1efa497ee88c6cb565b164a260afb5157e392b1ebb1a4d4f992011ecbac4a0a6df5bdc6f7994a422bb2761edd2d8f20f5f879a88f89d48b8314f862585e4b7a9d6a6681f40e8b82cc6555dcdb951d164cc9a70e640ac8974faa2587a6e3af3b9458f7d4b4077b3002536b10ea24d73307a33090c4c270909a5322eac32cb175e68fa83457b21465c08c02dcefccc0c714c2862ddbe567755f05a1e671328d160d3752345ca1db6e74c720e42afca982ba6befd96c5575f1dd8f87ff6606301c0000000000000000000000000000000000000004d0d54b4caf78018766cdb971e8b168d4763c21181f00000003d4e1d842caf457797f93db93e4f38a9dbd79f6bf5dc40b55fdbf9b856665061b2e2924f27eb2d2b5a181ccfd9eeb11dec165b6f12433f00bb06124041ffdcdcdc91f3b3b76635a689c9249cf69bcae654bfa81e75b7c7002b883c56026d83520395b7d511f607cf2f899c7b1c75e2192f775d72247167285857588ace1115fbebfe63c16b84cf7036d41c493a63c09f2ce46c1f5995c2d7fe58c15e64bb4cb7e7f336cc22fa1ea1363bce375bd3d579be1dddb08ed5147b629e4b3f0e65783ee5e20d9270802f2a7500738bf356131ca53e9d7ba8d486fb26252d684b84fa24639089064ca7b93057c041f12d544dab4d24a4f952b4f265a69ba279929959991b7ac63786055b3c029a0e8b6e4c26497c029bb61462623a58556cd62844d4d23cc738ee5b36c71d2c010b089251d5806000b1ade92dd9f441468967c052aecd9de81b4b55d06670597991f37ddc4fa19a6369d5bf76c474633a337f676ad255869881da5cadcf49ce9188129cc978977f87b32bd49457536430ffbd3e01e67ff087644f52fcf0a3c732b0586cb87972c43d2616bf4e521dc3126bf1760243d51a197d3ecfd74bd625e9f496175cfeaaa020817d33d513f3e97854ea76e04e96a8639a297871485a8609f8ca842b3321932c4d9e224a0cec5946cec9e359fd3687415cad5fb8c678136f36d9f781fade9f2469477748f4dfa0f56c326c89bb5d07f35aaf95303b5a620fc84e1c735647895713cbcea57b2277831f8f633f0d29371e645e5544e57010a9b76457f6ad73231a9f31f6bbb1b95248aeda5a9df9dea64cc1fd1f06a980fcf3a792bb0910e45fce298ab0a0298fc33a423e860d5b308d7849381b294106af25f15fec047d5b844a99f36e342165df728e381b48c20e0900f8d265157467d3494f2b96acf060f74084760d226f50edb115c2e075f3c663a4b4169b900fa0a13cf796e0d7a9dad86953c13ed6241206d682e194c64c491de6a531e9bd45abe705f07000a82ccd41a2c1b9d5dd8bf6c28653eb84f117e476e052a9db790e0a71dac9d8b343efebdc026860000000000000000000000000000aad579302085dfdf75bea24798c680b3de341e3bd57543cd8dfd58bcebdbb883c743ed43ba7f540f2c4e0310c21e7deff9e45b8bd2cf65bb584091b8e80e34b3e59185fe32d1d73dd4f62712a39b13661516723b6b80a7e99e5aa6536982c02275fc53fa3ef14d9fccb05f9c4e69a3af0fde863af2d9a0f8a94fc571b0ab4ad714f41fa4ee0b8b44e3c41a3125be95e4b23d5f05395852761bfaebe0db979d5f3991d826cc74542b85cfd0dba66bc93cfd79178ab0b79fa3b29ff9c19e0424513c91980187c9d94b8354337a1fc782505db900c47d83bd49276cfe6e242ba8365b1ea4598a21f50f5415a70990b5bb4a1f6bd8acdf2c7da3d648754767089c9b5ceb556fafa3cc5afd2f3e9a62a90262a76ff89a2751b59a744f0d3f36ca503357daa3e29ce6f357dc1e4839277d003e93fdbb955e1a1302a76aea7e73835094fb15464e94e814c77c293121d0433e80d444c4ca17abaf32b521d8686666055da023aef9c8df3e80d2ed640ed10aa19a036dcef172dbd3b3600b69d7b90c6222e167d7c76059f2b5f3b3004e8a20d1f6612efeb629573be97aa949c6016e7e16283e84986aaa4fc8a098708ebe36f377ada63d9b464c39342e0682549862de3ec75e7b031bc49f341a21417fb6375e8701481b59d1722c836961804666801678eb25750b520bf1615a4bbf30aa74d60ee8956aaadd298b0419da43fc708a60c94a7ff2fd6a2d08005ad73c9e2d6143d2857be8fb3f12bfa6628bccb153e39172d07563d6a1dc75c347c08060304f091230bd74b49ecdd13bf480db3984622a167c8603b8c501280059a7b6123c8f8cd217f64eccc2dffe4f3a1e8c9a96a13d8126f3ea26779fbd0069d729a7764d4ddd7d9d820b0de2530969362b94b974678527f5bac7eb8d6e321b2be0b2f7534634a5ecd1248d7ad7e8e03163e92e9f1d620e28597bd881eea0981e8adfd70b670b0763ce9226f7c3e156b353e22fdea6942b577bbc539aab23cbd46bdd0ea1e67140c759f208c12dc57f3100000000e4965fcb6c0749955eac9476687e63b41c6282bbcb0c3d8b0c9493a3a5f6d879d7257b4b68dc7cac3d9d5f5bbe937c501866ee4042b250e516ec074559e1e551167138766eeecb6941e8305d9cde1800c821536f9d25bd14163890842a08135bdb7a90db630b18f099855a7d9de65c80fa71ff90e873361d0e11a7dfebe56ffb2000b711a0b7914d6351ff60593e48af60e1ffecba7cd6f8ab662eb3c8f3164139e994d6a706afb92722595d649a04f1ff64e5634e7cb9106173a9d5d8cf3e5a959e6bfdc1b6507b851c4ba43312726cfec58dedece1355a087c1b60882713a6161914f09267e2ce8aa886b3c0add5cd92e185d345c9b2933a78a4215133e8e7247fa444aee30bfb6c0fcada974254bc5feda6cee9a0803b2a0b81f440202ed5f278e4cf06565370893e7481efdfbc49b118eb17ba0104000000000000b342fdef64b143b525daae4e27e7368f913e6111bb5329b8b133d03cc34d736d22ba139b03b7fc83ac49f2dfc915a2f27e2eac8dc2a6ba72e6bdd423b3555b6e1bd4896b4c946a4500e0a42340700b93bca902e02f744ceb51534f1fb9fa87f850a6c6eed76f7376e2a7e72d3a64a82720ded8f0ce31b1de3561362e975ed32a7167d9e0ad3f2a77f7a10c1614a9ba938a98da2976cb1a0d049446e67073c9a1a38ecc881c693a524c5291f89677de9fe904c752e450eba71d2f32805501d0df5b4a41123233554bdc35b562d9f5a2a026a3b40fc7c9a8546fc8d8310a9876114ffd7dfb909656d54c31bbb655af54bbeeb0174e451ceb7b35e5bd1ac15792ff474abcde8353fe0de700b110a00305ff77c133181688a62a49cff6db4cb4a5a90d40d35e927d216435df804b8bd6033a7ce49f11491f752fefa99e9c54428b725486291490d311b13eb02d14a0ae56733141a8dc6d51e3510000000000000000000000000000002708cac64111287c9f384a63b97d04306739d0236f0f1d472c52f1823e9a0e5c787cad4abf33345026c74414d9f7f133e970"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x3a, 0xcc0, 0xcc0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d5003aff010000001400000500242909880bd320d98a61a90021e9bf", 0x0, 0x401, 0x0, 0xa8, 0x0, &(0x7f00000011c0)="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", &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd}, 0x22)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdf, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x1c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r8 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r8, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c)
connect$unix(r7, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
unshare(0x400)
r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x13, 0x5, 0x7c}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="18080000194d9c36e45bcd18200000f5e20000000000", @ANYRES32=r9, @ANYBLOB="000000000a0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x9, 0xee, &(0x7f0000000340)=""/238}, 0x90)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x3, 0x3}, {}, {}, {0x60}, {0x6}]})

585.721725ms ago: executing program 4:
socket$rds(0x15, 0x5, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={0x0, 0x2c}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="18005a000600"/24], 0x34}}, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r4, 0x20, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40800}, 0x1)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
socket$netlink(0x10, 0x3, 0x0)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020300000b00000000000000000000000300060000f8ff8002000000e00000090000ef0000000000020001000000000000000400000000000300050000000000020000007f00000100000000000000000100183d85939342589ff68e321525e19cac"], 0x58}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$sock_int(r6, 0x1, 0x21, &(0x7f0000000040), 0x4)

572.82702ms ago: executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2}}}}}}, 0x0)

475.24057ms ago: executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711615000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000ff0300008500000017000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90)
ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000)

390.075943ms ago: executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xb, 0xe2, [@empty, @empty]}, @timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x0, 0xfffffffe, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2a0, 0x150, 0x0, 0x148, 0x150, 0x148, 0x208, 0x240, 0x240, 0x208, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x84}, 0x0, 0xe8, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x0, 0x10}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @dev, 0x0, 0x0, 'veth1_to_hsr\x00', 'ip_vti0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x7, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_ID={0x8}]}, 0x1c}}, 0x8011)
sendmsg$NFT_BATCH(r4, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x74}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000007c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0xf, 0x0, 0x3f}, 0x20)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x50}}, 0x0)
listen(r0, 0xfff)
syz_emit_ethernet(0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500140600fe8000000000000000000000000000bbff0200000000000000000000000000014e234e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090781700403cbe06c20537438321ec029293f87d14ad0d7e2b89aa7f5ecb192a00d1fb48c515adb172a5d5ce8ce198d44bd4b13d920535c6a8987e2b19c9d8d800"], 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000580)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xf5ffffff}]}}}}}}}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x3fd, 0x4, 0x0, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000006e7a00000000000000000018200000", @ANYRES32=r6, @ANYBLOB="0000000000000000c3000c004000000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c000280080001001000000008000100080000000800030042"], 0x54}}, 0x0)
getsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000340), &(0x7f0000000380)=0x4)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

334.589408ms ago: executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='signal_generate\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1})

267.210386ms ago: executing program 4:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0xb, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0)

197.923357ms ago: executing program 1:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf8}, 0x48)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x480, 0x2e8, 0x5002004a, 0x6, 0x2e8, 0x3, 0x3e8, 0x3c8, 0x3c8, 0x3e8, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x0, 0x3fa}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xe3b, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x1, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0xffffff9c)
sendmmsg$inet6(r3, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @local, 0x20}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4001c00)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c074002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x80, 0x6, 0x6, 0x101, 0x0, 0x0, {0xd, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004080)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a802b8c2594f90424fc60100c034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
poll(&(0x7f00000000c0)=[{r4}, {r0}], 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000000)={<r8=>r0, 0x2, 0x7, 0x20})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000940)={'syztnl1\x00', &(0x7f0000000840)={'gretap0\x00', <r12=>0x0, 0x40, 0x10, 0x1000, 0x40, {{0x34, 0x4, 0x1, 0xd, 0xd0, 0x66, 0x0, 0x7, 0x4, 0x0, @loopback, @loopback, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x40, 0x3, [{0x1, 0x6, "8c6f96d5"}, {0x7, 0xa, "41847d52a813fdd1"}, {0x2, 0xa, "59191c7266f6bb85"}, {0x7, 0xe, "7f0b2638c9e84470d3b65312"}, {0x0, 0x12, "af31ec07968a7d6568094fb6c7d4b62e"}]}, @timestamp_prespec={0x44, 0x1c, 0xdf, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x11}, 0x81}, {@multicast2, 0x2}, {@remote, 0x2}]}, @timestamp_prespec={0x44, 0x44, 0x89, 0x3, 0x4, [{@private=0xa010102, 0x9}, {@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x19}, 0xfff}, {@private=0xa010100, 0x1ff}, {@multicast1, 0x7}, {@remote, 0x80000000}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x11, 0xffffffffffffffff, [{0x5, 0xb, "a5c528e66e9c9df98f"}]}]}}}}})
setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000000980)={0x0, 0x1, 0x7, 0x1, @vifc_lcl_ifindex=r12, @private=0xa010101}, 0x10)
getsockname$packet(r10, &(0x7f0000000000)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c)
sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r13, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000140001000000000000000000021f0000", @ANYRES32=r13, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x8, 0x5, 0x0, 0x400, 0x518, r8, 0x8c19, '\x00', r13, r8, 0x2, 0x2, 0x2}, 0x48)
connect$rxrpc(r8, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24)

136.681751ms ago: executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='signal_generate\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1})

127.2441ms ago: executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
listen(0xffffffffffffffff, 0x80080400)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0xbf, &(0x7f0000000000), &(0x7f0000000080)=0x4)

0s ago: executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f00000002c0))
shutdown(r2, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
socket$packet(0x11, 0x3, 0x300)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah\x00', 0x5)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r6 = accept4(r5, 0x0, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f00000000c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r7, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @sack_perm, @sack_perm, @timestamp, @timestamp, @mss, @timestamp], 0x8)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.156' (ED25519) to the list of known hosts.
2024/06/21 03:07:49 fuzzer started
2024/06/21 03:07:49 dialing manager at 10.128.0.169:30016
[   74.982520][ T5094] cgroup: Unknown subsys name 'net'
[   75.191426][ T5094] cgroup: Unknown subsys name 'rlimit'
2024/06/21 03:07:51 starting 5 executor processes
[   76.625212][ T5096] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   77.750789][ T5116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   77.759251][ T5116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   77.790809][ T5122] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   77.798484][ T5122] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   77.807141][ T5122] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   77.815359][ T5129] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   77.815989][ T5122] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   77.825451][ T5129] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   77.830461][ T5122] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   77.837994][ T5129] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   77.844397][ T5122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   77.851925][ T5129] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   77.869824][ T5129] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   77.871758][ T5131] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   77.877836][ T5129] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   77.886661][ T5122] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   77.892283][ T5129] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   77.901156][ T5131] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   77.907298][ T5129] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   77.912559][ T5122] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   77.926828][ T5129] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   77.927553][ T5131] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   77.941855][ T5129] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   77.942877][ T5122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   77.958009][ T5131] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   77.964765][ T5132] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   77.967170][ T5129] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   77.973299][ T5121] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   77.980107][ T5129] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   78.005715][ T5128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   78.612199][ T5117] chnl_net:caif_netlink_parms(): no params data found
[   78.721284][ T5115] chnl_net:caif_netlink_parms(): no params data found
[   78.781380][ T5126] chnl_net:caif_netlink_parms(): no params data found
[   78.874662][ T5114] chnl_net:caif_netlink_parms(): no params data found
[   78.913552][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.921299][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.929650][ T5117] bridge_slave_0: entered allmulticast mode
[   78.937498][ T5117] bridge_slave_0: entered promiscuous mode
[   78.952586][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.960287][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.968205][ T5117] bridge_slave_1: entered allmulticast mode
[   78.975500][ T5117] bridge_slave_1: entered promiscuous mode
[   79.061928][ T5120] chnl_net:caif_netlink_parms(): no params data found
[   79.090136][ T5117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.103128][ T5117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.142478][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.150105][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.158400][ T5115] bridge_slave_0: entered allmulticast mode
[   79.165496][ T5115] bridge_slave_0: entered promiscuous mode
[   79.233024][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.240602][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.247989][ T5115] bridge_slave_1: entered allmulticast mode
[   79.255026][ T5115] bridge_slave_1: entered promiscuous mode
[   79.265691][ T5117] team0: Port device team_slave_0 added
[   79.274738][ T5117] team0: Port device team_slave_1 added
[   79.372221][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.379488][ T5126] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.387351][ T5126] bridge_slave_0: entered allmulticast mode
[   79.394443][ T5126] bridge_slave_0: entered promiscuous mode
[   79.404435][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.412413][ T5126] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.419947][ T5126] bridge_slave_1: entered allmulticast mode
[   79.427273][ T5126] bridge_slave_1: entered promiscuous mode
[   79.457910][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.485047][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.492391][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.500241][ T5114] bridge_slave_0: entered allmulticast mode
[   79.507384][ T5114] bridge_slave_0: entered promiscuous mode
[   79.548923][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.559061][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.566607][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.592904][ T5117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.605473][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.613351][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.620702][ T5114] bridge_slave_1: entered allmulticast mode
[   79.627844][ T5114] bridge_slave_1: entered promiscuous mode
[   79.650678][ T5126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.685799][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.692802][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.720073][ T5117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.753809][ T5126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.776051][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.783286][ T5120] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.790662][ T5120] bridge_slave_0: entered allmulticast mode
[   79.799020][ T5120] bridge_slave_0: entered promiscuous mode
[   79.823371][ T5115] team0: Port device team_slave_0 added
[   79.833203][ T5115] team0: Port device team_slave_1 added
[   79.862558][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.870316][ T5120] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.878349][ T5120] bridge_slave_1: entered allmulticast mode
[   79.885551][ T5120] bridge_slave_1: entered promiscuous mode
[   79.935588][ T5114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.951568][ T5114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.963972][ T5126] team0: Port device team_slave_0 added
[   79.997448][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.004443][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.031554][   T53] Bluetooth: hci4: command tx timeout
[   80.033317][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.037634][ T5116] Bluetooth: hci3: command tx timeout
[   80.072997][ T5126] team0: Port device team_slave_1 added
[   80.098008][ T5120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.106259][ T5116] Bluetooth: hci0: command tx timeout
[   80.112907][ T5116] Bluetooth: hci1: command tx timeout
[   80.118954][ T5120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.119071][   T53] Bluetooth: hci2: command tx timeout
[   80.135193][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.142366][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.168795][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.210042][ T5117] hsr_slave_0: entered promiscuous mode
[   80.218066][ T5117] hsr_slave_1: entered promiscuous mode
[   80.259894][ T5120] team0: Port device team_slave_0 added
[   80.270552][ T5114] team0: Port device team_slave_0 added
[   80.280117][ T5114] team0: Port device team_slave_1 added
[   80.301477][ T5126] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.308579][ T5126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.334780][ T5126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.371218][ T5120] team0: Port device team_slave_1 added
[   80.404626][ T5126] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.412359][ T5126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.439420][ T5126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.495264][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.502560][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.529251][ T5114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.543814][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.550981][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.577190][ T5114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.694019][ T5126] hsr_slave_0: entered promiscuous mode
[   80.700687][ T5126] hsr_slave_1: entered promiscuous mode
[   80.707531][ T5126] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.715357][ T5126] Cannot create hsr debugfs directory
[   80.729309][ T5115] hsr_slave_0: entered promiscuous mode
[   80.735995][ T5115] hsr_slave_1: entered promiscuous mode
[   80.742248][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.750027][ T5115] Cannot create hsr debugfs directory
[   80.779659][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.787916][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.814516][ T5120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.876277][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.883281][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.909377][ T5120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.932399][ T5114] hsr_slave_0: entered promiscuous mode
[   80.939642][ T5114] hsr_slave_1: entered promiscuous mode
[   80.946654][ T5114] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.954326][ T5114] Cannot create hsr debugfs directory
[   81.063646][ T5120] hsr_slave_0: entered promiscuous mode
[   81.070292][ T5120] hsr_slave_1: entered promiscuous mode
[   81.077623][ T5120] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.085196][ T5120] Cannot create hsr debugfs directory
[   81.540826][ T5117] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   81.564945][ T5117] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   81.577876][ T5117] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   81.596663][ T5117] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   81.635237][ T5115] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   81.657869][ T5115] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   81.676509][ T5115] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   81.687341][ T5115] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   81.801778][ T5126] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   81.823453][ T5126] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   81.864520][ T5126] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   81.885080][ T5126] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   81.949651][ T5114] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   81.964062][ T5114] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   82.001638][ T5114] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   82.012464][ T5114] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   82.106951][ T5116] Bluetooth: hci4: command tx timeout
[   82.106960][   T53] Bluetooth: hci3: command tx timeout
[   82.151111][ T5120] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   82.170128][ T5120] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   82.186043][ T5116] Bluetooth: hci2: command tx timeout
[   82.186068][   T53] Bluetooth: hci1: command tx timeout
[   82.191470][ T5129] Bluetooth: hci0: command tx timeout
[   82.209249][ T5120] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   82.224270][ T5120] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   82.269484][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.288743][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.351174][ T5115] 8021q: adding VLAN 0 to HW filter on device team0
[   82.428964][   T25] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.436592][   T25] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.494330][ T5117] 8021q: adding VLAN 0 to HW filter on device team0
[   82.514793][   T25] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.522107][   T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.613122][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.620394][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.680401][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.687712][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.724359][ T5115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   82.772196][ T5126] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.903334][ T5117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   82.935583][ T5126] 8021q: adding VLAN 0 to HW filter on device team0
[   83.011135][ T5114] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.028561][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.035819][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.083173][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.090452][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.205483][ T5120] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.252980][ T5114] 8021q: adding VLAN 0 to HW filter on device team0
[   83.319914][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.327168][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.384048][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.391262][ T5171] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.433016][ T5120] 8021q: adding VLAN 0 to HW filter on device team0
[   83.453090][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.481516][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.521999][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.529277][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.578022][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.585192][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.650293][ T5114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   83.725020][ T5126] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.805096][ T5120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   83.917689][ T5117] veth0_vlan: entered promiscuous mode
[   83.950975][ T5115] veth0_vlan: entered promiscuous mode
[   83.965284][ T5126] veth0_vlan: entered promiscuous mode
[   84.015366][ T5117] veth1_vlan: entered promiscuous mode
[   84.040317][ T5115] veth1_vlan: entered promiscuous mode
[   84.071588][ T5126] veth1_vlan: entered promiscuous mode
[   84.142814][ T5126] veth0_macvtap: entered promiscuous mode
[   84.165453][ T5117] veth0_macvtap: entered promiscuous mode
[   84.186112][ T5116] Bluetooth: hci3: command tx timeout
[   84.196448][ T5116] Bluetooth: hci4: command tx timeout
[   84.212544][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.231438][ T5117] veth1_macvtap: entered promiscuous mode
[   84.265011][ T5120] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.272115][ T5116] Bluetooth: hci1: command tx timeout
[   84.276679][ T5116] Bluetooth: hci2: command tx timeout
[   84.278326][ T5129] Bluetooth: hci0: command tx timeout
[   84.290715][ T5126] veth1_macvtap: entered promiscuous mode
[   84.323984][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.351016][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.362478][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.375196][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.387699][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.419002][ T5115] veth0_macvtap: entered promiscuous mode
[   84.458613][ T5117] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.477389][ T5117] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.491430][ T5117] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.501778][ T5117] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.526566][ T5115] veth1_macvtap: entered promiscuous mode
[   84.534136][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.545164][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.557781][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.574291][ T5126] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.583484][ T5126] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.592883][ T5126] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.604231][ T5126] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.705358][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.717617][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.727941][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.738478][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.752842][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.811291][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.822716][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.835088][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.846678][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.858201][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.922527][ T5120] veth0_vlan: entered promiscuous mode
[   84.936758][ T5115] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.945556][ T5115] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.958282][ T5115] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.968284][ T5115] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.008109][ T3861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.031487][ T3861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.071632][ T5120] veth1_vlan: entered promiscuous mode
[   85.090771][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.112845][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.149207][ T3861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.160055][ T3861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.172483][ T5114] veth0_vlan: entered promiscuous mode
[   85.259023][ T5114] veth1_vlan: entered promiscuous mode
[   85.280423][ T5120] veth0_macvtap: entered promiscuous mode
[   85.295168][ T5120] veth1_macvtap: entered promiscuous mode
[   85.321418][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.336717][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.347247][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.359155][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.369541][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.396021][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.414514][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.434552][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.458332][ T3887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.468354][ T5203] netlink: 'syz-executor.3': attribute type 21 has an invalid length.
[   85.476045][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.483229][ T3887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.497413][ T5203] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'.
[   85.507729][ T5204] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[   85.540670][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.560175][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.573076][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.589661][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.600208][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.604639][ T5204] trusted_key: syz-executor.3 sent an empty control message without MSG_MORE.
[   85.617893][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.640470][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.671094][ T5120] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.685646][ T5120] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.700678][ T5120] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.711717][ T5120] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.856267][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.868879][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.889170][ T5114] veth0_macvtap: entered promiscuous mode
[   85.954572][ T5114] veth1_macvtap: entered promiscuous mode
[   86.018454][ T5208] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   86.081606][ T3887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.120864][ T3887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.158072][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.191626][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.215809][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.233110][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.243539][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.255041][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.265226][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.277169][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.287598][ T5129] Bluetooth: hci4: command tx timeout
[   86.287666][ T5129] Bluetooth: hci3: command tx timeout
[   86.303604][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.353229][ T5116] Bluetooth: hci0: command tx timeout
[   86.353891][ T5129] Bluetooth: hci2: command tx timeout
[   86.358739][ T5116] Bluetooth: hci1: command tx timeout
[   86.368781][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.413689][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.433400][ T5220] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[   86.452550][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.495352][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.507370][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.526785][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.536955][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.553109][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.578256][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.601749][ T3887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.620560][ T3887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.654368][ T5114] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.674461][ T5114] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.694580][ T5114] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.726173][ T5114] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.939167][ T5235] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[   86.972236][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.993508][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.085483][  T373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.122377][  T373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.184234][ T5239] netlink: 'syz-executor.3': attribute type 21 has an invalid length.
[   87.207005][ T5239] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'.
[   87.261336][ T5242] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[   87.444252][ T5246] pim6reg1: entered promiscuous mode
[   87.451014][ T5246] pim6reg1: entered allmulticast mode
[   87.843379][ T5255] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.852026][ T5255] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.910392][ T5255] bridge0: entered promiscuous mode
[   87.975133][ T5255] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'.
[   88.178739][ T5267] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[   88.209696][ T5269] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'.
[   88.296404][ T5263] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[   89.156708][ T5311] netlink: 'syz-executor.2': attribute type 21 has an invalid length.
[   89.406778][ T5318] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   90.212527][ T5351] netlink: zone id is out of range
[   90.327615][ T5356] vxcan1: entered allmulticast mode
[   90.411569][ T5356] Zero length message leads to an empty skb
[   90.702431][ T5360] __nla_validate_parse: 7 callbacks suppressed
[   90.702451][ T5360] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[   90.947972][ T5382] netlink: 'syz-executor.4': attribute type 21 has an invalid length.
[   90.984270][ T5382] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'.
[   91.018967][ T5382] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'.
[   91.039589][  T930] IPVS: starting estimator thread 0...
[   91.167523][ T5388] IPVS: using max 15 ests per chain, 36000 per kthread
[   91.287989][ T5396] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[   91.837701][ T5408] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.2'.
[   91.867119][ T5409] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[   91.876626][ T5408] netlink: zone id is out of range
[   91.957469][ T5409] vxcan1: entered allmulticast mode
[   91.979497][ T5409] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[   92.293274][  T785] cfg80211: failed to load regulatory.db
[   92.402792][ T5433] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[   92.509954][ T5433] batman_adv: batadv0: Adding interface: team0
[   92.541178][ T5433] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.566955][ T5433] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   92.579171][ T5437] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[   92.593947][ T5437] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'.
[   92.624844][ T5437] team0: entered promiscuous mode
[   92.643377][ T5450] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[   92.656819][ T5437] team_slave_0: entered promiscuous mode
[   92.678205][ T5437] team_slave_1: entered promiscuous mode
[   92.688233][ T5437] 8021q: adding VLAN 0 to HW filter on device team0
[   92.695283][ T5437] batman_adv: batadv0: Interface activated: team0
[   92.704958][ T5437] batman_adv: batadv0: Interface deactivated: team0
[   92.714660][ T5437] batman_adv: batadv0: Removing interface: team0
[   92.723193][ T5437] bridge0: port 3(team0) entered blocking state
[   92.734252][ T5437] bridge0: port 3(team0) entered disabled state
[   92.741029][ T5437] team0: entered allmulticast mode
[   92.748556][ T5437] team_slave_0: entered allmulticast mode
[   92.754437][ T5437] team_slave_1: entered allmulticast mode
[   92.765472][ T5442] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[   93.084376][ T5174] IPVS: starting estimator thread 0...
[   93.099083][ T5467] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.4'.
[   93.128902][ T5467] netlink: zone id is out of range
[   93.192613][ T5441] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   93.203646][ T5470] IPVS: using max 16 ests per chain, 38400 per kthread
[   93.282894][ T5475] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[   94.179930][ T5510] vlan2: entered promiscuous mode
[   94.199934][ T5510] batman_adv: batadv0: Adding interface: vlan2
[   94.206295][ T5510] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[   94.221291][ T5509] warning: `syz-executor.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   94.245595][ T5515] xt_TPROXY: Can be used only with -p tcp or -p udp
[   94.268737][ T5515] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[   95.188043][ T5553] xt_TPROXY: Can be used only with -p tcp or -p udp
[   95.270878][   T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.299715][ T5116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   95.326194][ T5116] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   95.334547][ T5116] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   95.351905][ T5116] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   95.361314][ T5116] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   95.374584][ T5116] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   95.416784][ T5555] bridge0: entered promiscuous mode
[   95.422089][ T5555] bridge0: entered allmulticast mode
[   95.462266][ T5562] vlan2: entered promiscuous mode
[   95.499981][ T5562] ip6gretap0: entered promiscuous mode
[   95.513460][ T5562] vlan2: entered allmulticast mode
[   95.518996][ T5562] ip6gretap0: entered allmulticast mode
[   95.537459][ T5562] ip6gretap0: left allmulticast mode
[   95.544067][ T5562] ip6gretap0: left promiscuous mode
[   95.589651][ T5567] xt_TPROXY: Can be used only with -p tcp or -p udp
[   95.624413][   T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.662708][ T5567] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[   95.693386][ T5570] vxcan1: entered allmulticast mode
[   95.733214][   T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.759894][ T5570] __nla_validate_parse: 6 callbacks suppressed
[   95.759917][ T5570] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[   95.831876][ T5572] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[   95.937782][   T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.581883][   T63] bridge_slave_1: left allmulticast mode
[   96.604538][   T63] bridge_slave_1: left promiscuous mode
[   96.631901][   T63] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.671875][   T63] bridge_slave_0: left allmulticast mode
[   96.678085][   T63] bridge_slave_0: left promiscuous mode
[   96.683909][   T63] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.715405][ T5616] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[   96.902717][ T5621] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[   96.931555][   T63] batman_adv: batadv0: Removing interface: vlan2
[   97.151810][   T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   97.164211][   T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   97.180096][   T63] bond0 (unregistering): Released all slaves
[   97.282300][ T5557] chnl_net:caif_netlink_parms(): no params data found
[   97.466357][ T5129] Bluetooth: hci1: command tx timeout
[   97.679616][ T5647] Cannot find add_set index 0 as target
[   97.800941][ T5557] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.827133][ T5557] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.834536][ T5557] bridge_slave_0: entered allmulticast mode
[   97.872795][ T5557] bridge_slave_0: entered promiscuous mode
[   97.904308][ T5654] xt_TPROXY: Can be used only with -p tcp or -p udp
[   97.947762][ T5557] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.957371][ T5557] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.964669][ T5557] bridge_slave_1: entered allmulticast mode
[   97.973371][ T5557] bridge_slave_1: entered promiscuous mode
[   97.989930][ T5654] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[   98.149496][ T5557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.168003][ T5658] vlan2: entered promiscuous mode
[   98.183487][ T5658] batman_adv: batadv0: Adding interface: vlan2
[   98.203992][ T5658] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[   98.233223][ T5557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.361675][ T5557] team0: Port device team_slave_0 added
[   98.397570][   T63] hsr_slave_0: left promiscuous mode
[   98.414689][   T63] hsr_slave_1: left promiscuous mode
[   98.424751][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.433180][   T63] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.447043][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.454488][   T63] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.477468][ T5666] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[   98.517724][   T63] veth1_macvtap: left promiscuous mode
[   98.523785][   T63] veth0_macvtap: left promiscuous mode
[   98.529807][   T63] veth1_vlan: left promiscuous mode
[   98.535586][   T63] veth0_vlan: left promiscuous mode
[   99.076156][   T63] team0 (unregistering): Port device team_slave_1 removed
[   99.124793][   T63] team0 (unregistering): Port device team_slave_0 removed
[   99.450581][   T63] vxcan1 (unregistering): left allmulticast mode
[   99.516119][ T5676] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[   99.556094][ T5129] Bluetooth: hci1: command tx timeout
[   99.622850][ T5557] team0: Port device team_slave_1 added
[   99.660420][ T5674] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
[   99.795147][ T5557] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.816481][ T5557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.878413][ T5557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.929000][ T5557] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.965547][ T5557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.011150][ T5557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.173289][ T5698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.222471][ T5698] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET)
[  100.310199][ T5696] vlan2: entered promiscuous mode
[  100.336886][ T5696] batman_adv: batadv0: Adding interface: vlan2
[  100.354724][ T5696] batman_adv: batadv0: The MTU of interface vlan2 is too small (1480) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.423674][ T5696] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[  100.492819][ T5557] hsr_slave_0: entered promiscuous mode
[  100.547839][ T5557] hsr_slave_1: entered promiscuous mode
[  100.573032][ T5557] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  100.584134][ T5557] Cannot create hsr debugfs directory
[  100.700881][   T63] IPVS: stop unused estimator thread 0...
[  100.797596][ T5723] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  100.818616][ T5722] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  100.934658][ T5728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.514452][ T5557] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  101.537907][ T5748] xt_CT: No such helper "snmp"
[  101.554433][ T5557] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  101.586233][ T5557] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  101.625021][ T5557] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  101.637407][ T5129] Bluetooth: hci1: command tx timeout
[  101.939499][ T5770] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  102.048280][ T5557] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.145362][ T5557] 8021q: adding VLAN 0 to HW filter on device team0
[  102.175649][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.183072][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.294387][ T5772] syzkaller0: entered promiscuous mode
[  102.300916][ T5772] syzkaller0: entered allmulticast mode
[  102.314661][  T785] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.321985][  T785] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.853242][ T5790] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  103.707841][ T5129] Bluetooth: hci1: command tx timeout
[  104.150300][ T5801] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  104.400470][ T5557] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.549387][ T5557] veth0_vlan: entered promiscuous mode
[  104.573190][ T5827] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  104.589573][ T5557] veth1_vlan: entered promiscuous mode
[  104.680554][ T5557] veth0_macvtap: entered promiscuous mode
[  104.710929][ T5557] veth1_macvtap: entered promiscuous mode
[  104.737645][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.763700][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.775445][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.792272][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.808969][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.825364][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.837055][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.852152][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.865650][ T5557] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.929244][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  104.951925][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.963052][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  104.974317][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.986086][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.000289][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.018040][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.032361][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.047674][ T5557] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.109159][ T5835] syzkaller0: entered promiscuous mode
[  105.114711][ T5835] syzkaller0: entered allmulticast mode
[  105.141152][ T5557] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.163827][ T5557] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.173511][ T5557] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.189480][ T5557] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.722557][ T5845] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  107.049405][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.073069][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.103792][ T5872] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[  107.201255][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.226796][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.266821][ T5877] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  107.324781][   T29] audit: type=1804 audit(1718939302.262:2): pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir611012800/syzkaller.00Hzh4/42/cgroup.controllers" dev="sda1" ino=1939 res=1 errno=0
[  107.415488][ T5883] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[  108.044469][   T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  108.055155][   T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.073226][   T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  108.082666][   T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  108.092733][   T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  108.102341][   T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  108.111079][   T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  108.261330][   T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.482824][   T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.487669][ T5914] x_tables: ip_tables: udp match: only valid for protocol 17
[  108.524330][ T5914] netlink: 'syz-executor.3': attribute type 7 has an invalid length.
[  108.543790][ T5914] netlink: 188520 bytes leftover after parsing attributes in process `syz-executor.3'.
[  108.601222][ T5919] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  108.618697][ T5919] netlink: 188520 bytes leftover after parsing attributes in process `syz-executor.3'.
[  108.641145][ T5908] syzkaller0: entered promiscuous mode
[  108.649237][ T5908] syzkaller0: entered allmulticast mode
[  110.107125][   T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.134830][ T5922] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'.
[  110.148182][ T5914] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  110.168411][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  110.195430][   T53] Bluetooth: hci0: command tx timeout
[  110.495882][ T5943] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0
[  110.593980][   T63] bridge_slave_1: left allmulticast mode
[  110.618987][   T63] bridge_slave_1: left promiscuous mode
[  110.641095][   T63] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.676629][   T63] bridge_slave_0: left allmulticast mode
[  110.685589][   T63] bridge_slave_0: left promiscuous mode
[  110.696854][   T63] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.174544][   T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  111.189294][   T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  111.203041][   T63] bond0 (unregistering): Released all slaves
[  111.260173][ T5956] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  111.354741][ T5962] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  111.364885][ T5964] x_tables: ip_tables: udp match: only valid for protocol 17
[  111.468967][ T5964] netlink: 'syz-executor.1': attribute type 7 has an invalid length.
[  111.499487][ T5964] netlink: 188520 bytes leftover after parsing attributes in process `syz-executor.1'.
[  111.572053][ T5899] chnl_net:caif_netlink_parms(): no params data found
[  111.774555][   T63] hsr_slave_0: left promiscuous mode
[  111.795382][   T63] hsr_slave_1: left promiscuous mode
[  111.807378][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.820683][   T63] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.831209][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.841640][   T63] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.903656][   T63] veth1_macvtap: left promiscuous mode
[  111.912252][   T63] veth0_macvtap: left promiscuous mode
[  111.923144][   T63] veth1_vlan: left promiscuous mode
[  111.931248][   T63] veth0_vlan: left promiscuous mode
[  112.266377][ T5129] Bluetooth: hci0: command tx timeout
[  112.529768][   T63] team0 (unregistering): Port device team_slave_1 removed
[  112.565219][   T63] team0 (unregistering): Port device team_slave_0 removed
[  112.813419][   T63] vxcan1 (unregistering): left allmulticast mode
[  113.151014][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.181493][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.214179][ T5899] bridge_slave_0: entered allmulticast mode
[  113.238919][ T5899] bridge_slave_0: entered promiscuous mode
[  113.287035][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.294257][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.332344][ T5899] bridge_slave_1: entered allmulticast mode
[  113.357278][ T5899] bridge_slave_1: entered promiscuous mode
[  113.497717][ T5899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.530269][ T5899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  113.571225][ T6027] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  113.684858][ T5899] team0: Port device team_slave_0 added
[  113.712576][ T5899] team0: Port device team_slave_1 added
[  113.812632][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_0
[  113.835467][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.872197][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  113.882888][ T5899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  113.899467][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.907727][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.935073][ T5899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  114.065487][ T5899] hsr_slave_0: entered promiscuous mode
[  114.078415][ T5899] hsr_slave_1: entered promiscuous mode
[  114.085563][ T5899] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  114.112418][ T5899] Cannot create hsr debugfs directory
[  114.323040][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  114.355893][ T5129] Bluetooth: hci0: command 0x040f tx timeout
[  114.573502][ T6064] bridge0: port 3(team0) entered blocking state
[  114.590639][ T6064] bridge0: port 3(team0) entered disabled state
[  114.597884][ T6064] team0: entered allmulticast mode
[  114.603266][ T6064] team_slave_0: entered allmulticast mode
[  114.613310][ T6064] team_slave_1: entered allmulticast mode
[  114.624113][ T6064] team0: entered promiscuous mode
[  114.630086][ T6064] team_slave_0: entered promiscuous mode
[  114.638375][ T6064] team_slave_1: entered promiscuous mode
[  114.649440][ T6064] bridge0: port 3(team0) entered blocking state
[  114.656938][ T6064] bridge0: port 3(team0) entered forwarding state
[  114.712998][ T6074] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.0'.
[  115.064991][ T5899] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  115.085081][ T5899] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  115.110526][ T5899] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  115.143102][ T5899] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  115.202206][ T6090] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  115.399846][ T5899] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.487734][ T5899] 8021q: adding VLAN 0 to HW filter on device team0
[  115.573010][ T5201] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.580395][ T5201] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.649907][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.658046][ T5171] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.793318][ T6099] syzkaller0: entered promiscuous mode
[  115.799987][ T6099] syzkaller0: entered allmulticast mode
[  116.425974][ T5129] Bluetooth: hci0: command 0x040f tx timeout
[  117.580757][ T6123] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  117.878688][ T6140] xt_hashlimit: invalid interval
[  118.012141][ T6146] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  118.103692][ T6149] pim6reg: entered allmulticast mode
[  118.137974][ T6149] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  118.309352][ T5899] 8021q: adding VLAN 0 to HW filter on device batadv0
[  118.390360][ T6165] tun0: tun_chr_ioctl cmd 1074025677
[  118.408582][ T6165] tun0: linktype set to 821
[  118.511391][   T53] Bluetooth: hci0: command 0x040f tx timeout
[  118.656317][ T6180] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  118.924890][ T5899] veth0_vlan: entered promiscuous mode
[  118.963615][ T6191] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  118.973277][ T5899] veth1_vlan: entered promiscuous mode
[  119.078307][ T6191] pim6reg: entered allmulticast mode
[  119.107695][ T5899] veth0_macvtap: entered promiscuous mode
[  119.132748][ T6191] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  119.231794][ T5899] veth1_macvtap: entered promiscuous mode
[  119.309600][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.348906][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.380238][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.407417][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.418123][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.431797][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.442963][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.461840][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.469759][ T6216] x_tables: duplicate underflow at hook 1
[  119.475879][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_0
[  119.491606][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  119.504535][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.517424][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  119.528260][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.540889][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  119.553742][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.567977][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  119.584859][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.600127][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_1
[  119.652207][ T5899] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.662207][ T5899] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.678551][ T5899] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.689335][ T5899] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.753173][ T6216] vlan3: entered promiscuous mode
[  119.759969][ T6216] vlan3: entered allmulticast mode
[  119.791092][ T6221] nbd: must specify at least one socket
[  119.984465][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  120.025454][ T6227] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  120.040159][ T6227] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  120.064120][ T3861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.096414][ T3861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.178113][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  120.306706][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.339562][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.407221][ T6244] netlink: 'syz-executor.1': attribute type 5 has an invalid length.
[  120.548490][ T6249] netlink: 'syz-executor.4': attribute type 20 has an invalid length.
[  120.597960][   T53] Bluetooth: hci0: command 0x040f tx timeout
[  120.913707][ T6269] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.3'.
[  121.200017][ T6278] vlan2: entered promiscuous mode
[  121.212883][ T6278] batman_adv: batadv0: Adding interface: vlan2
[  121.226330][ T6278] batman_adv: batadv0: The MTU of interface vlan2 is too small (1480) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.275696][ T6278] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[  121.314033][ T6287] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  121.403890][ T6292] netlink: 'syz-executor.0': attribute type 15 has an invalid length.
[  121.661839][ T6305] netlink: 792 bytes leftover after parsing attributes in process `syz-executor.2'.
[  122.163312][ T6330] Cannot find add_set index 0 as target
[  122.366446][ T6345] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'.
[  122.954617][ T6371] TCP: MD5 Hash not found for 172.20.20.187.0->172.20.20.170.20002 [RP.] L3 index 0
[  123.177382][ T6386] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  123.494536][ T6401] pim6reg: entered allmulticast mode
[  123.513381][ T6401] vxcan1: entered allmulticast mode
[  123.585135][ T6405] vlan2: entered promiscuous mode
[  123.595620][ T6405] batman_adv: batadv0: Adding interface: vlan2
[  123.602266][ T6405] batman_adv: batadv0: The MTU of interface vlan2 is too small (1480) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.633099][ T6405] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[  123.683250][ T6412] TCP: MD5 Hash not found for 172.20.20.187.0->172.20.20.170.20002 [RP.] L3 index 0
[  124.124327][ T6439] IPVS: Error connecting to the multicast addr
[  124.379504][ T6450] __nla_validate_parse: 2 callbacks suppressed
[  124.379526][ T6450] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  124.478029][ T6457] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  124.501379][ T6459] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'.
[  124.771457][ T6468] 
: renamed from bond0 (while UP)
[  124.890455][ T6474] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'.
[  125.492342][ T6493] IPVS: Error connecting to the multicast addr
[  125.692316][ T6509] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.1'.
[  125.703897][ T6496] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[  125.741943][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  126.136981][ T6539] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  126.145134][ T6539] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'.
[  126.249674][ T6537] bridge_slave_1: left allmulticast mode
[  126.255417][ T6537] bridge_slave_1: left promiscuous mode
[  126.291839][ T6537] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.313251][ T6537] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  126.554165][ T6546] IPVS: Error connecting to the multicast addr
[  126.609522][ T6557] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  126.630864][ T6555] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'.
[  126.780731][ T1050] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.014519][ T1050] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.164944][ T1050] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.331232][ T1050] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.596088][ T1050] bridge_slave_1: left allmulticast mode
[  127.615888][ T1050] bridge_slave_1: left promiscuous mode
[  127.637266][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.669775][ T1050] bridge_slave_0: left allmulticast mode
[  127.684301][ T1050] bridge_slave_0: left promiscuous mode
[  127.703735][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.788884][ T5129] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  127.820261][ T5129] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  127.839118][ T5129] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  127.861761][ T5129] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  127.870678][ T5129] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  127.880367][ T5129] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  128.271387][ T1050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  128.287819][ T1050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  128.301474][ T1050] bond0 (unregistering): Released all slaves
[  128.670035][ T6616] IPVS: Error connecting to the multicast addr
[  128.967544][ T6641] x_tables: ip_tables: udp match: only valid for protocol 17
[  128.979448][ T6641] netlink: 'syz-executor.0': attribute type 7 has an invalid length.
[  128.989712][ T6641] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  129.011959][ T1050] hsr_slave_0: left promiscuous mode
[  129.026669][ T1050] hsr_slave_1: left promiscuous mode
[  129.039221][ T1050] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.046977][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_0
[  129.059580][ T1050] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.068154][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_1
[  129.095652][ T1050] veth1_macvtap: left promiscuous mode
[  129.102432][ T1050] veth0_macvtap: left promiscuous mode
[  129.110159][ T1050] veth1_vlan: left promiscuous mode
[  129.118384][ T1050] veth0_vlan: left promiscuous mode
[  129.323780][ T1050] pim6reg (unregistering): left allmulticast mode
[  129.720617][ T1050] team0 (unregistering): Port device team_slave_1 removed
[  129.794150][ T1050] team0 (unregistering): Port device team_slave_0 removed
[  129.946767][   T53] Bluetooth: hci4: command tx timeout
[  130.154824][ T1050] vxcan1 (unregistering): left allmulticast mode
[  130.423279][ T6641] __nla_validate_parse: 3 callbacks suppressed
[  130.423304][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  130.842440][ T6591] chnl_net:caif_netlink_parms(): no params data found
[  130.890012][ T6667] Driver unsupported XDP return value 0 on prog  (id 143) dev N/A, expect packet loss!
[  131.209970][ T6591] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.218127][ T6591] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.225430][ T6591] bridge_slave_0: entered allmulticast mode
[  131.233709][ T6591] bridge_slave_0: entered promiscuous mode
[  131.245291][ T6591] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.252911][ T6591] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.260263][ T6591] bridge_slave_1: entered allmulticast mode
[  131.268011][ T6591] bridge_slave_1: entered promiscuous mode
[  131.290142][ T1050] IPVS: stop unused estimator thread 0...
[  131.421458][ T6591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  131.441591][ T6692] x_tables: ip_tables: udp match: only valid for protocol 17
[  131.453987][ T6591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  131.467510][ T6692] netlink: 'syz-executor.1': attribute type 7 has an invalid length.
[  131.489210][ T6692] netlink: 188520 bytes leftover after parsing attributes in process `syz-executor.1'.
[  131.504518][ T6692] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[  131.522375][ T6692] netlink: 188520 bytes leftover after parsing attributes in process `syz-executor.1'.
[  131.528795][ T6695] x_tables: ip_tables: udp match: only valid for protocol 17
[  131.565387][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  131.590265][ T6695] netlink: 'syz-executor.0': attribute type 7 has an invalid length.
[  131.603480][ T6695] netlink: 188520 bytes leftover after parsing attributes in process `syz-executor.0'.
[  131.620181][ T6695] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  131.638883][ T6591] team0: Port device team_slave_0 added
[  131.644942][ T6695] netlink: 188520 bytes leftover after parsing attributes in process `syz-executor.0'.
[  131.659437][ T6591] team0: Port device team_slave_1 added
[  131.726625][ T6591] batman_adv: batadv0: Adding interface: batadv_slave_0
[  131.745696][ T6591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.783752][ T6591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  131.806902][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  131.826750][ T6591] batman_adv: batadv0: Adding interface: batadv_slave_1
[  131.834985][ T6710] IPVS: length: 133 != 8
[  131.843019][ T6591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.887568][ T6591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  132.027213][   T53] Bluetooth: hci4: command tx timeout
[  132.051110][ T6591] hsr_slave_0: entered promiscuous mode
[  132.068013][ T6591] hsr_slave_1: entered promiscuous mode
[  132.078811][ T6591] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  132.095588][ T6591] Cannot create hsr debugfs directory
[  132.428762][ T6735] x_tables: ip_tables: udp match: only valid for protocol 17
[  132.462533][ T6735] netlink: 'syz-executor.1': attribute type 7 has an invalid length.
[  132.475621][ T6735] netlink: 188520 bytes leftover after parsing attributes in process `syz-executor.1'.
[  132.502587][ T6735] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[  132.517931][ T6737] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  132.520298][ T6735] netlink: 188520 bytes leftover after parsing attributes in process `syz-executor.1'.
[  132.621436][ T6737] team0: Port device wlan1 added
[  132.653139][ T6737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  132.681238][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  132.733659][ T6737] syz-executor.0 (6737) used greatest stack depth: 18648 bytes left
[  132.815657][ T6746] lo: entered allmulticast mode
[  132.874891][ T6746] lo: left allmulticast mode
[  133.120291][ T6591] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  133.167892][ T6591] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  133.205198][ T6591] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  133.232312][ T1250] ieee802154 phy0 wpan0: encryption failed: -22
[  133.233681][ T6591] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  133.243006][ T1250] ieee802154 phy1 wpan1: encryption failed: -22
[  133.463947][ T6591] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.553494][ T6591] 8021q: adding VLAN 0 to HW filter on device team0
[  133.584881][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.592172][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.627901][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.635156][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.703849][ T6775] syz_tun: entered allmulticast mode
[  133.734197][ T6773] syz_tun: left allmulticast mode
[  134.106775][   T53] Bluetooth: hci4: command tx timeout
[  134.152436][ T6591] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.315144][ T6591] veth0_vlan: entered promiscuous mode
[  134.364872][ T6591] veth1_vlan: entered promiscuous mode
[  134.461924][ T6591] veth0_macvtap: entered promiscuous mode
[  134.510041][ T6591] veth1_macvtap: entered promiscuous mode
[  134.536472][   T29] audit: type=1800 audit(1718939329.472:3): pid=6814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="memory.events" dev="sda1" ino=1955 res=0 errno=0
[  134.611795][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.645106][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.676760][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.708091][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.725068][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.757910][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.784652][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.814131][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.844970][ T6591] batman_adv: batadv0: Interface activated: batadv_slave_0
[  134.936489][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.970845][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.016550][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.040081][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.066593][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.100122][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.121723][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.188465][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.200214][ T5129] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  135.210154][ T5129] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  135.221409][ T5129] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  135.232421][ T6591] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.241723][ T5129] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  135.250708][ T5129] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  135.268479][ T5129] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  135.283098][ T6591] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.293161][ T6591] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.304666][ T6591] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.334991][ T6591] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.411791][ T6833] xt_cgroup: invalid path, errno=-2
[  135.541694][ T3887] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.697231][ T3887] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.807638][ T3861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.837067][ T3861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.898959][ T3887] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.903622][ T6853] __nla_validate_parse: 2 callbacks suppressed
[  135.903648][ T6853] netlink: 16179 bytes leftover after parsing attributes in process `syz-executor.0'.
[  136.010319][   T29] audit: type=1800 audit(1718939330.952:4): pid=6855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="memory.events" dev="sda1" ino=1949 res=0 errno=0
[  136.104336][ T3887] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.149541][ T6854] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  136.188078][   T53] Bluetooth: hci4: command tx timeout
[  136.218086][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.260119][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.390135][ T3887] team0: left allmulticast mode
[  136.395170][ T3887] team_slave_0: left allmulticast mode
[  136.407202][ T3887] team_slave_1: left allmulticast mode
[  136.412841][ T3887] team0: left promiscuous mode
[  136.418663][ T3887] team_slave_0: left promiscuous mode
[  136.424676][ T3887] team_slave_1: left promiscuous mode
[  136.433803][ T3887] bridge0: port 3(team0) entered disabled state
[  136.448290][ T3887] bridge_slave_1: left allmulticast mode
[  136.456520][ T3887] bridge_slave_1: left promiscuous mode
[  136.456587][ T6867] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  136.462324][ T3887] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.488301][ T3887] bridge_slave_0: left allmulticast mode
[  136.494024][ T3887] bridge_slave_0: left promiscuous mode
[  136.501550][ T3887] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.801484][ T3887] batman_adv: batadv0: Removing interface: vlan2
[  137.050627][ T3887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  137.063431][ T3887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.081382][ T3887] bond0 (unregistering): Released all slaves
[  137.284207][ T6883] netlink: 16179 bytes leftover after parsing attributes in process `syz-executor.0'.
[  137.388660][   T53] Bluetooth: hci5: command tx timeout
[  137.619447][   T29] audit: type=1800 audit(1718939332.552:5): pid=6892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="memory.events" dev="sda1" ino=1941 res=0 errno=0
[  137.751777][ T6829] chnl_net:caif_netlink_parms(): no params data found
[  137.834320][ T3887] hsr_slave_0: left promiscuous mode
[  137.849210][ T3887] hsr_slave_1: left promiscuous mode
[  137.869850][ T3887] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.883815][ T3887] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.900060][ T3887] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.915943][ T3887] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.956582][ T3887] veth1_macvtap: left promiscuous mode
[  137.963447][ T3887] veth0_macvtap: left promiscuous mode
[  137.970460][ T3887] veth1_vlan: left promiscuous mode
[  137.979149][ T3887] veth0_vlan: left promiscuous mode
[  138.143890][ T3887] pim6reg (unregistering): left allmulticast mode
[  138.378108][ T6914] Bluetooth: MGMT ver 1.22
[  138.383215][ T6914] Bluetooth: hci3: invalid length 0, exp 2 for type 0
[  138.532665][ T6917] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  138.639848][ T3887] team0 (unregistering): Port device team_slave_1 removed
[  138.686533][ T3887] team0 (unregistering): Port device team_slave_0 removed
[  139.449588][ T6829] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.477933][   T53] Bluetooth: hci5: command tx timeout
[  139.486788][ T6829] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.494092][ T6829] bridge_slave_0: entered allmulticast mode
[  139.513967][ T6829] bridge_slave_0: entered promiscuous mode
[  139.525528][ T6829] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.533678][ T6829] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.541824][ T6829] bridge_slave_1: entered allmulticast mode
[  139.553741][ T6829] bridge_slave_1: entered promiscuous mode
[  139.561378][ T6940] netlink: 16179 bytes leftover after parsing attributes in process `syz-executor.4'.
[  139.590193][ T6941] x_tables: ip_tables: udp match: only valid for protocol 17
[  139.616704][ T6942] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  139.631938][ T6941] netlink: 'syz-executor.1': attribute type 7 has an invalid length.
[  139.641944][ T6941] netlink: 188520 bytes leftover after parsing attributes in process `syz-executor.1'.
[  139.672164][ T6941] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[  139.677337][ T6829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  139.695669][ T6941] netlink: 188520 bytes leftover after parsing attributes in process `syz-executor.1'.
[  139.740025][ T6829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  139.814484][ T6829] team0: Port device team_slave_0 added
[  139.832504][ T6829] team0: Port device team_slave_1 added
[  139.862026][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  139.930828][ T6829] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.944077][ T6829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.976789][ T6829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.991979][ T6829] batman_adv: batadv0: Adding interface: batadv_slave_1
[  140.002049][ T6829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.036115][ T6829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  140.195494][ T6829] hsr_slave_0: entered promiscuous mode
[  140.210397][ T6829] hsr_slave_1: entered promiscuous mode
[  140.220600][ T6829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  140.229481][ T6829] Cannot create hsr debugfs directory
[  140.729425][ T6984] x_tables: ip_tables: udp match: only valid for protocol 17
[  140.756290][ T6984] netlink: 'syz-executor.0': attribute type 7 has an invalid length.
[  140.767007][ T6983] EXT4-fs warning (device sda1): ext4_block_to_path:107: block 2147483647 > max in inode 1959
[  140.777976][ T6984] netlink: 188520 bytes leftover after parsing attributes in process `syz-executor.0'.
[  140.785108][ T6984] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  141.114837][ T6829] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  141.145432][ T6829] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  141.155446][ T7002] __nla_validate_parse: 2 callbacks suppressed
[  141.155465][ T7002] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  141.181544][ T6829] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  141.208331][ T6829] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  141.390251][ T7011] Bluetooth: MGMT ver 1.22
[  141.445091][ T7012] Bluetooth: hci3: invalid length 0, exp 2 for type 0
[  141.509384][ T6829] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.547009][   T53] Bluetooth: hci5: command tx timeout
[  141.592147][ T6829] 8021q: adding VLAN 0 to HW filter on device team0
[  141.600448][ T7019] x_tables: ip_tables: udp match: only valid for protocol 17
[  141.611994][ T7019] netlink: 'syz-executor.3': attribute type 7 has an invalid length.
[  141.620597][ T7019] netlink: 188520 bytes leftover after parsing attributes in process `syz-executor.3'.
[  141.634770][ T7019] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  141.644585][ T7019] netlink: 188520 bytes leftover after parsing attributes in process `syz-executor.3'.
[  141.653562][ T5201] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.661442][ T5201] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.703132][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  141.730016][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.737345][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.795026][ T7023] x_tables: ip_tables: udp match: only valid for protocol 17
[  141.845285][ T7023] netlink: 'syz-executor.1': attribute type 7 has an invalid length.
[  141.895854][ T7023] netlink: 188520 bytes leftover after parsing attributes in process `syz-executor.1'.
[  141.900244][ T7028] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[  141.960270][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  141.969882][ T7028] netlink: 188520 bytes leftover after parsing attributes in process `syz-executor.1'.
[  142.242408][ T7043] Bluetooth: hci3: invalid length 0, exp 2 for type 0
[  142.374511][ T6829] 8021q: adding VLAN 0 to HW filter on device batadv0
[  142.429967][ T7052] x_tables: ip_tables: udp match: only valid for protocol 17
[  142.454157][ T7052] netlink: 'syz-executor.3': attribute type 7 has an invalid length.
[  142.486810][ T7052] netlink: 188520 bytes leftover after parsing attributes in process `syz-executor.3'.
[  142.511362][ T6829] veth0_vlan: entered promiscuous mode
[  142.529531][ T6829] veth1_vlan: entered promiscuous mode
[  142.573084][ T7052] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  142.614549][ T7052] netlink: 188520 bytes leftover after parsing attributes in process `syz-executor.3'.
[  142.634510][ T6829] veth0_macvtap: entered promiscuous mode
[  142.650636][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  142.697092][ T6829] veth1_macvtap: entered promiscuous mode
[  142.839743][ T7070] x_tables: ip_tables: udp match: only valid for protocol 17
[  142.866657][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.901964][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.925118][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.936218][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.946436][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.957064][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.969692][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.981914][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.994152][ T6829] batman_adv: batadv0: Interface activated: batadv_slave_0
[  143.011277][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.023784][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.038195][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.054913][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.073256][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.084841][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.102352][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.119745][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.134143][ T6829] batman_adv: batadv0: Interface activated: batadv_slave_1
[  143.199685][ T6829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.213958][ T6829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.224027][ T6829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.238294][ T6829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.256432][ T7080] syz_tun: entered allmulticast mode
[  143.283790][ T7078] syz_tun: left allmulticast mode
[  143.380895][ T7087] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  143.596968][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.605160][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.626267][   T53] Bluetooth: hci5: command tx timeout
[  143.689665][ T5899] ==================================================================
[  143.697790][ T5899] BUG: KASAN: slab-use-after-free in sco_conn_del+0xa5/0x310
[  143.705228][ T5899] Write of size 4 at addr ffff88807dabe080 by task syz-executor.4/5899
[  143.713494][ T5899] 
[  143.715847][ T5899] CPU: 0 PID: 5899 Comm: syz-executor.4 Not tainted 6.10.0-rc4-syzkaller-00145-gd5a7fc58da03 #0
[  143.726372][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  143.736544][ T5899] Call Trace:
[  143.739843][ T5899]  <TASK>
[  143.742792][ T5899]  dump_stack_lvl+0x241/0x360
[  143.747506][ T5899]  ? __pfx_dump_stack_lvl+0x10/0x10
[  143.752730][ T5899]  ? __pfx__printk+0x10/0x10
[  143.757434][ T5899]  ? _printk+0xd5/0x120
[  143.761612][ T5899]  ? __virt_addr_valid+0x183/0x520
[  143.766751][ T5899]  ? __virt_addr_valid+0x183/0x520
[  143.771894][ T5899]  print_report+0x169/0x550
[  143.776432][ T5899]  ? __virt_addr_valid+0x183/0x520
[  143.781573][ T5899]  ? __virt_addr_valid+0x183/0x520
[  143.786701][ T5899]  ? __virt_addr_valid+0x44e/0x520
[  143.791838][ T5899]  ? __phys_addr+0xba/0x170
[  143.796354][ T5899]  ? sco_conn_del+0xa5/0x310
[  143.800963][ T5899]  kasan_report+0x143/0x180
[  143.805481][ T5899]  ? sco_conn_del+0xa5/0x310
[  143.810091][ T5899]  kasan_check_range+0x282/0x290
[  143.815043][ T5899]  sco_conn_del+0xa5/0x310
[  143.819473][ T5899]  ? __pfx_sco_disconn_cfm+0x10/0x10
[  143.824769][ T5899]  hci_conn_hash_flush+0xff/0x240
[  143.829825][ T5899]  hci_dev_close_sync+0x911/0xf60
[  143.834882][ T5899]  hci_unregister_dev+0x1db/0x4e0
[  143.839928][ T5899]  vhci_release+0x83/0xd0
[  143.844288][ T5899]  ? __pfx_vhci_release+0x10/0x10
[  143.849342][ T5899]  __fput+0x406/0x8b0
[  143.853358][ T5899]  task_work_run+0x24f/0x310
[  143.857978][ T5899]  ? __pfx_task_work_run+0x10/0x10
[  143.863107][ T5899]  ? do_exit+0xa22/0x27e0
[  143.867447][ T5899]  ? kmem_cache_free+0x145/0x350
[  143.872400][ T5899]  do_exit+0xa27/0x27e0
[  143.876743][ T5899]  ? __pfx_do_exit+0x10/0x10
[  143.881340][ T5899]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  143.887327][ T5899]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  143.893662][ T5899]  ? _raw_spin_unlock_irq+0x23/0x50
[  143.898904][ T5899]  ? lockdep_hardirqs_on+0x99/0x150
[  143.904206][ T5899]  do_group_exit+0x207/0x2c0
[  143.908817][ T5899]  __x64_sys_exit_group+0x3f/0x40
[  143.913859][ T5899]  do_syscall_64+0xf3/0x230
[  143.918374][ T5899]  ? clear_bhb_loop+0x35/0x90
[  143.923063][ T5899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.929016][ T5899] RIP: 0033:0x7ff52267cf29
[  143.933520][ T5899] Code: Unable to access opcode bytes at 0x7ff52267ceff.
[  143.940532][ T5899] RSP: 002b:00007ffe911b8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  143.948954][ T5899] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007ff52267cf29
[  143.957375][ T5899] RDX: 00007ff52267ec7a RSI: 0000000000000000 RDI: 0000000000000007
[  143.965360][ T5899] RBP: 0000000000000003 R08: 0079746972756365 R09: 0000000000000007
[  143.973348][ T5899] R10: 00000000000003b8 R11: 0000000000000246 R12: 00007ff522782b40
[  143.981518][ T5899] R13: 00007ffe911b927c R14: 0000000000000000 R15: 00007ff522784d00
[  143.989504][ T5899]  </TASK>
[  143.992522][ T5899] 
[  143.994839][ T5899] Allocated by task 6890:
[  143.999265][ T5899]  kasan_save_track+0x3f/0x80
[  144.003952][ T5899]  __kasan_kmalloc+0x98/0xb0
[  144.008563][ T5899]  __kmalloc_noprof+0x1f9/0x400
[  144.013424][ T5899]  sk_prot_alloc+0xe0/0x210
[  144.017930][ T5899]  sk_alloc+0x38/0x370
[  144.022002][ T5899]  __netlink_create+0x6c/0x280
[  144.026770][ T5899]  netlink_create+0x3d5/0x590
[  144.031458][ T5899]  __sock_create+0x490/0x920
[  144.036044][ T5899]  __sys_socket+0x150/0x3c0
[  144.040629][ T5899]  __x64_sys_socket+0x7a/0x90
[  144.045300][ T5899]  do_syscall_64+0xf3/0x230
[  144.049807][ T5899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.055714][ T5899] 
[  144.058039][ T5899] Freed by task 0:
[  144.061751][ T5899]  kasan_save_track+0x3f/0x80
[  144.066436][ T5899]  kasan_save_free_info+0x40/0x50
[  144.071558][ T5899]  poison_slab_object+0xe0/0x150
[  144.076501][ T5899]  __kasan_slab_free+0x37/0x60
[  144.081269][ T5899]  kfree+0x149/0x360
[  144.085176][ T5899]  __sk_destruct+0x476/0x5f0
[  144.089774][ T5899]  rcu_core+0xafd/0x1830
[  144.094018][ T5899]  handle_softirqs+0x2c4/0x970
[  144.098810][ T5899]  __irq_exit_rcu+0xf4/0x1c0
[  144.103402][ T5899]  irq_exit_rcu+0x9/0x30
[  144.107695][ T5899]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  144.113535][ T5899]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  144.119528][ T5899] 
[  144.121848][ T5899] Last potentially related work creation:
[  144.127559][ T5899]  kasan_save_stack+0x3f/0x60
[  144.132266][ T5899]  __kasan_record_aux_stack+0xac/0xc0
[  144.137676][ T5899]  call_rcu+0x167/0xa70
[  144.141835][ T5899]  netlink_release+0x1638/0x1b10
[  144.146791][ T5899]  sock_close+0xbc/0x240
[  144.151040][ T5899]  __fput+0x406/0x8b0
[  144.155020][ T5899]  task_work_run+0x24f/0x310
[  144.159620][ T5899]  syscall_exit_to_user_mode+0x168/0x370
[  144.165288][ T5899]  do_syscall_64+0x100/0x230
[  144.169888][ T5899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.175792][ T5899] 
[  144.178113][ T5899] The buggy address belongs to the object at ffff88807dabe000
[  144.178113][ T5899]  which belongs to the cache kmalloc-2k of size 2048
[  144.192189][ T5899] The buggy address is located 128 bytes inside of
[  144.192189][ T5899]  freed 2048-byte region [ffff88807dabe000, ffff88807dabe800)
[  144.206087][ T5899] 
[  144.208438][ T5899] The buggy address belongs to the physical page:
[  144.214858][ T5899] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7dab8
[  144.223631][ T5899] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  144.232132][ T5899] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  144.239719][ T5899] page_type: 0xffffefff(slab)
[  144.244396][ T5899] raw: 00fff00000000040 ffff888015042000 dead000000000100 dead000000000122
[  144.252994][ T5899] raw: 0000000000000000 0000000000080008 00000001ffffefff 0000000000000000
[  144.261578][ T5899] head: 00fff00000000040 ffff888015042000 dead000000000100 dead000000000122
[  144.270250][ T5899] head: 0000000000000000 0000000000080008 00000001ffffefff 0000000000000000
[  144.278925][ T5899] head: 00fff00000000003 ffffea0001f6ae01 ffffffffffffffff 0000000000000000
[  144.287683][ T5899] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  144.296347][ T5899] page dumped because: kasan: bad access detected
[  144.302769][ T5899] page_owner tracks the page as allocated
[  144.308591][ T5899] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5173, tgid 5173 (kworker/1:7), ts 87176511024, free_ts 87161140852
[  144.331267][ T5899]  post_alloc_hook+0x1f3/0x230
[  144.336048][ T5899]  get_page_from_freelist+0x2e43/0x2f00
[  144.341606][ T5899]  __alloc_pages_noprof+0x256/0x6c0
[  144.346817][ T5899]  alloc_slab_page+0x5f/0x120
[  144.351497][ T5899]  allocate_slab+0x5a/0x2f0
[  144.356099][ T5899]  ___slab_alloc+0xcd1/0x14b0
[  144.360784][ T5899]  __slab_alloc+0x58/0xa0
[  144.365115][ T5899]  kmalloc_node_track_caller_noprof+0x281/0x440
[  144.371371][ T5899]  kmalloc_reserve+0x111/0x2a0
[  144.376146][ T5899]  __alloc_skb+0x1f3/0x440
[  144.380566][ T5899]  alloc_skb_with_frags+0xc3/0x770
[  144.385683][ T5899]  sock_alloc_send_pskb+0x91a/0xa60
[  144.390902][ T5899]  mld_newpack+0x1c3/0xa90
[  144.395323][ T5899]  add_grec+0x1492/0x19a0
[  144.399653][ T5899]  mld_ifc_work+0x68e/0xd90
[  144.404166][ T5899]  process_scheduled_works+0xa2c/0x1830
[  144.409742][ T5899] page last free pid 4546 tgid 4546 stack trace:
[  144.416109][ T5899]  free_unref_page+0xd22/0xea0
[  144.420907][ T5899]  __put_partials+0xeb/0x130
[  144.425509][ T5899]  put_cpu_partial+0x17c/0x250
[  144.430306][ T5899]  __slab_free+0x2ea/0x3d0
[  144.434740][ T5899]  qlist_free_all+0x9e/0x140
[  144.439367][ T5899]  kasan_quarantine_reduce+0x14f/0x170
[  144.444837][ T5899]  __kasan_slab_alloc+0x23/0x80
[  144.449705][ T5899]  kmem_cache_alloc_noprof+0x135/0x2a0
[  144.455172][ T5899]  getname_flags+0xbd/0x4f0
[  144.459684][ T5899]  do_sys_openat2+0xd2/0x1d0
[  144.464287][ T5899]  __x64_sys_openat+0x247/0x2a0
[  144.469153][ T5899]  do_syscall_64+0xf3/0x230
[  144.473693][ T5899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.479598][ T5899] 
[  144.481922][ T5899] Memory state around the buggy address:
[  144.487552][ T5899]  ffff88807dabdf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  144.495634][ T5899]  ffff88807dabe000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  144.503712][ T5899] >ffff88807dabe080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  144.511776][ T5899]                    ^
[  144.515849][ T5899]  ffff88807dabe100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  144.523947][ T5899]  ffff88807dabe180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  144.532033][ T5899] ==================================================================
[  144.545406][ T5899] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  144.552645][ T5899] CPU: 0 PID: 5899 Comm: syz-executor.4 Not tainted 6.10.0-rc4-syzkaller-00145-gd5a7fc58da03 #0
[  144.563085][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  144.573168][ T5899] Call Trace:
[  144.576469][ T5899]  <TASK>
[  144.579418][ T5899]  dump_stack_lvl+0x241/0x360
[  144.584133][ T5899]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.589383][ T5899]  ? __pfx__printk+0x10/0x10
[  144.594011][ T5899]  ? vscnprintf+0x5d/0x90
[  144.598365][ T5899]  panic+0x349/0x860
[  144.602287][ T5899]  ? check_panic_on_warn+0x21/0xb0
[  144.607430][ T5899]  ? __pfx_panic+0x10/0x10
[  144.611877][ T5899]  ? mark_lock+0x9a/0x350
[  144.616234][ T5899]  ? _raw_spin_unlock_irqrestore+0xd8/0x140
[  144.622178][ T5899]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  144.628204][ T5899]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  144.634646][ T5899]  ? print_report+0x502/0x550
[  144.639356][ T5899]  check_panic_on_warn+0x86/0xb0
[  144.644318][ T5899]  ? sco_conn_del+0xa5/0x310
[  144.648934][ T5899]  end_report+0x77/0x160
[  144.653202][ T5899]  kasan_report+0x154/0x180
[  144.657760][ T5899]  ? sco_conn_del+0xa5/0x310
[  144.662379][ T5899]  kasan_check_range+0x282/0x290
[  144.667342][ T5899]  sco_conn_del+0xa5/0x310
[  144.671791][ T5899]  ? __pfx_sco_disconn_cfm+0x10/0x10
[  144.677101][ T5899]  hci_conn_hash_flush+0xff/0x240
[  144.682176][ T5899]  hci_dev_close_sync+0x911/0xf60
[  144.687235][ T5899]  hci_unregister_dev+0x1db/0x4e0
[  144.692299][ T5899]  vhci_release+0x83/0xd0
[  144.696650][ T5899]  ? __pfx_vhci_release+0x10/0x10
[  144.701714][ T5899]  __fput+0x406/0x8b0
[  144.705726][ T5899]  task_work_run+0x24f/0x310
[  144.710354][ T5899]  ? __pfx_task_work_run+0x10/0x10
[  144.715585][ T5899]  ? do_exit+0xa22/0x27e0
[  144.719942][ T5899]  ? kmem_cache_free+0x145/0x350
[  144.724936][ T5899]  do_exit+0xa27/0x27e0
[  144.729151][ T5899]  ? __pfx_do_exit+0x10/0x10
[  144.733781][ T5899]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  144.739791][ T5899]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  144.746149][ T5899]  ? _raw_spin_unlock_irq+0x23/0x50
[  144.751400][ T5899]  ? lockdep_hardirqs_on+0x99/0x150
[  144.756645][ T5899]  do_group_exit+0x207/0x2c0
[  144.761275][ T5899]  __x64_sys_exit_group+0x3f/0x40
[  144.766343][ T5899]  do_syscall_64+0xf3/0x230
[  144.770889][ T5899]  ? clear_bhb_loop+0x35/0x90
[  144.775603][ T5899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.781531][ T5899] RIP: 0033:0x7ff52267cf29
[  144.785967][ T5899] Code: Unable to access opcode bytes at 0x7ff52267ceff.
[  144.793002][ T5899] RSP: 002b:00007ffe911b8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  144.801584][ T5899] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007ff52267cf29
[  144.809667][ T5899] RDX: 00007ff52267ec7a RSI: 0000000000000000 RDI: 0000000000000007
[  144.817745][ T5899] RBP: 0000000000000003 R08: 0079746972756365 R09: 0000000000000007
[  144.825763][ T5899] R10: 00000000000003b8 R11: 0000000000000246 R12: 00007ff522782b40
[  144.833869][ T5899] R13: 00007ffe911b927c R14: 0000000000000000 R15: 00007ff522784d00
[  144.841870][ T5899]  </TASK>
[  144.845190][ T5899] Kernel Offset: disabled
[  144.849517][ T5899] Rebooting in 86400 seconds..