last executing test programs:

1m26.43303409s ago: executing program 0 (id=449):
ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000000)=0xf)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x3, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7f}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20040084)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x75ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x40)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1)
sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000380)={0x3d8, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x130, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x453}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb64}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1378}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcef7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x110, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2d4f}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x82}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3ff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000800)=0x4, &(0x7f0000000840)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'ip6gre0\x00', <r5=>0x0, 0x4, 0xf, 0x5, 0x3da, 0x78, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7800, 0x7, 0x307}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000980)={'syztnl1\x00', <r6=>0x0, 0x7820, 0x40, 0x4, 0xfff, {{0xd, 0x4, 0x0, 0x15, 0x34, 0x68, 0x0, 0xe, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x32}, {[@rr={0x7, 0x13, 0xeb, [@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0xc, 0x57, 0x3, 0x9, [{@loopback, 0xff}]}]}}}}})
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000b40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x88, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x48041}, 0x4004884)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000b80), &(0x7f0000000c00)=0x68)
r7 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000c40)=@name, &(0x7f0000000c80)=0x10, 0x80800)
setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x80, &(0x7f0000000cc0)=0xd9d, 0x4)
sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, 0x1, 0x9, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc804)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000f00)={'ip_vti0\x00', &(0x7f0000000e40)={'ip_vti0\x00', <r9=>0x0, 0x80, 0x20, 0xffff, 0x1, {{0x1c, 0x4, 0x1, 0x3, 0x70, 0x64, 0x0, 0x80, 0x2f, 0x0, @multicast2, @rand_addr=0x64010101, {[@end, @end, @cipso={0x86, 0x57, 0x3, [{0x0, 0x6, "d340d5dd"}, {0x5, 0x7, "c69678c3e5"}, {0x0, 0xd, "4898e98cb69031d0210bba"}, {0x7, 0x11, "eb2f7a6e15057986071d1f84db09c2"}, {0x1, 0xf, "5365f4aaa578d18ef765d23bab"}, {0x0, 0x5, "1f514e"}, {0x7, 0x12, "76759d6ae4f6254586601ac63a41e571"}]}, @noop]}}}}})
sendmsg$nl_route_sched(r8, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)=@getqdisc={0x30, 0x26, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffff}, {0xe, 0xf}, {0xa, 0x5}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x95}, 0x20000000)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000001000)={0x8, 'veth0_to_team\x00', {'rose0\x00'}, 0x2})
r10 = accept4$tipc(r7, &(0x7f0000001040)=@id, &(0x7f0000001080)=0x10, 0x80800)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000010c0)={'ip6_vti0\x00'})
r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001100)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
ioctl$PPPIOCSMRU1(r11, 0x40047452, &(0x7f0000001140)=0x1)
sendmsg$rds(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000001180)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000002380)=[{&(0x7f00000011c0)=""/130, 0x82}, {&(0x7f0000001280)=""/192, 0xc0}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/21, 0x15}], 0x4, &(0x7f0000002680)=[@mask_cswp={0x58, 0x114, 0x9, {{0xfffff801, 0x55}, &(0x7f00000023c0)=0x8000000000000000, &(0x7f0000002400)=0x80000000, 0x7fffffffffffffff, 0x5, 0x10, 0x4, 0x34, 0x3}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002440)=""/169, 0xa9}, &(0x7f0000002500), 0x6a}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002540)=""/98, 0x62}, &(0x7f00000025c0), 0x24}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x3}, &(0x7f0000002600)=0xfb, &(0x7f0000002640)=0x101, 0x9, 0x8, 0x9, 0x6890483c, 0x40}}], 0x128, 0x800}, 0x20048094)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r11)
setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000002840)=0x232, 0x4)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000029c0)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002980)={&(0x7f00000028c0)={0xa0, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xfd99}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x87}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7f}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000040)
sendmsg$nl_route(r8, &(0x7f0000002bc0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b00)=@ipv6_newnexthop={0x50, 0x68, 0x1, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x10}, [@NHA_ID={0x8}, @NHA_GATEWAY={0x14, 0x6, @ip4=@loopback}, @NHA_OIF={0x8}, @NHA_GATEWAY={0x14, 0x6, @ip4=@local}]}, 0x50}, 0x1, 0x0, 0x0, 0xc001}, 0x2004c001)

1m16.070208295s ago: executing program 3 (id=1106):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_int(r2, 0x1, 0xb, 0x0, &(0x7f0000000280)) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000008b00)={0x0, 0x0, &(0x7f0000008ac0)={&(0x7f0000000200)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x42}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0xc}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20004080)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000004c0)={'lo\x00', &(0x7f0000000480)=@ethtool_eee={0x44, 0x7, 0x2f97885b, 0xfff, 0x0, 0x8, 0x2, 0x3ff, [0x81, 0x9]}})

1m14.808200654s ago: executing program 0 (id=449):
ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000000)=0xf)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x3, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7f}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20040084)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x75ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x40)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1)
sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000380)={0x3d8, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x130, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x453}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb64}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1378}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcef7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x110, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2d4f}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x82}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3ff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000800)=0x4, &(0x7f0000000840)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'ip6gre0\x00', <r5=>0x0, 0x4, 0xf, 0x5, 0x3da, 0x78, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7800, 0x7, 0x307}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000980)={'syztnl1\x00', <r6=>0x0, 0x7820, 0x40, 0x4, 0xfff, {{0xd, 0x4, 0x0, 0x15, 0x34, 0x68, 0x0, 0xe, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x32}, {[@rr={0x7, 0x13, 0xeb, [@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0xc, 0x57, 0x3, 0x9, [{@loopback, 0xff}]}]}}}}})
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000b40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x88, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x48041}, 0x4004884)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000b80), &(0x7f0000000c00)=0x68)
r7 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000c40)=@name, &(0x7f0000000c80)=0x10, 0x80800)
setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x80, &(0x7f0000000cc0)=0xd9d, 0x4)
sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, 0x1, 0x9, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc804)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000f00)={'ip_vti0\x00', &(0x7f0000000e40)={'ip_vti0\x00', <r9=>0x0, 0x80, 0x20, 0xffff, 0x1, {{0x1c, 0x4, 0x1, 0x3, 0x70, 0x64, 0x0, 0x80, 0x2f, 0x0, @multicast2, @rand_addr=0x64010101, {[@end, @end, @cipso={0x86, 0x57, 0x3, [{0x0, 0x6, "d340d5dd"}, {0x5, 0x7, "c69678c3e5"}, {0x0, 0xd, "4898e98cb69031d0210bba"}, {0x7, 0x11, "eb2f7a6e15057986071d1f84db09c2"}, {0x1, 0xf, "5365f4aaa578d18ef765d23bab"}, {0x0, 0x5, "1f514e"}, {0x7, 0x12, "76759d6ae4f6254586601ac63a41e571"}]}, @noop]}}}}})
sendmsg$nl_route_sched(r8, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)=@getqdisc={0x30, 0x26, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffff}, {0xe, 0xf}, {0xa, 0x5}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x95}, 0x20000000)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000001000)={0x8, 'veth0_to_team\x00', {'rose0\x00'}, 0x2})
r10 = accept4$tipc(r7, &(0x7f0000001040)=@id, &(0x7f0000001080)=0x10, 0x80800)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000010c0)={'ip6_vti0\x00'})
r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001100)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
ioctl$PPPIOCSMRU1(r11, 0x40047452, &(0x7f0000001140)=0x1)
sendmsg$rds(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000001180)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000002380)=[{&(0x7f00000011c0)=""/130, 0x82}, {&(0x7f0000001280)=""/192, 0xc0}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/21, 0x15}], 0x4, &(0x7f0000002680)=[@mask_cswp={0x58, 0x114, 0x9, {{0xfffff801, 0x55}, &(0x7f00000023c0)=0x8000000000000000, &(0x7f0000002400)=0x80000000, 0x7fffffffffffffff, 0x5, 0x10, 0x4, 0x34, 0x3}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002440)=""/169, 0xa9}, &(0x7f0000002500), 0x6a}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002540)=""/98, 0x62}, &(0x7f00000025c0), 0x24}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x3}, &(0x7f0000002600)=0xfb, &(0x7f0000002640)=0x101, 0x9, 0x8, 0x9, 0x6890483c, 0x40}}], 0x128, 0x800}, 0x20048094)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r11)
setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000002840)=0x232, 0x4)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000029c0)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002980)={&(0x7f00000028c0)={0xa0, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xfd99}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x87}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7f}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000040)
sendmsg$nl_route(r8, &(0x7f0000002bc0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b00)=@ipv6_newnexthop={0x50, 0x68, 0x1, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x10}, [@NHA_ID={0x8}, @NHA_GATEWAY={0x14, 0x6, @ip4=@loopback}, @NHA_OIF={0x8}, @NHA_GATEWAY={0x14, 0x6, @ip4=@local}]}, 0x50}, 0x1, 0x0, 0x0, 0xc001}, 0x2004c001)

1m5.19163519s ago: executing program 3 (id=1106):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_int(r2, 0x1, 0xb, 0x0, &(0x7f0000000280)) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000008b00)={0x0, 0x0, &(0x7f0000008ac0)={&(0x7f0000000200)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x42}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0xc}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20004080)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000004c0)={'lo\x00', &(0x7f0000000480)=@ethtool_eee={0x44, 0x7, 0x2f97885b, 0xfff, 0x0, 0x8, 0x2, 0x3ff, [0x81, 0x9]}})

56.442911304s ago: executing program 0 (id=449):
ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000000)=0xf)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x3, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7f}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20040084)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x75ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x40)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1)
sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000380)={0x3d8, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x130, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x453}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb64}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1378}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcef7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x110, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2d4f}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x82}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3ff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000800)=0x4, &(0x7f0000000840)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'ip6gre0\x00', <r5=>0x0, 0x4, 0xf, 0x5, 0x3da, 0x78, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7800, 0x7, 0x307}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000980)={'syztnl1\x00', <r6=>0x0, 0x7820, 0x40, 0x4, 0xfff, {{0xd, 0x4, 0x0, 0x15, 0x34, 0x68, 0x0, 0xe, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x32}, {[@rr={0x7, 0x13, 0xeb, [@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0xc, 0x57, 0x3, 0x9, [{@loopback, 0xff}]}]}}}}})
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000b40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x88, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x48041}, 0x4004884)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000b80), &(0x7f0000000c00)=0x68)
r7 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000c40)=@name, &(0x7f0000000c80)=0x10, 0x80800)
setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x80, &(0x7f0000000cc0)=0xd9d, 0x4)
sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, 0x1, 0x9, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc804)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000f00)={'ip_vti0\x00', &(0x7f0000000e40)={'ip_vti0\x00', <r9=>0x0, 0x80, 0x20, 0xffff, 0x1, {{0x1c, 0x4, 0x1, 0x3, 0x70, 0x64, 0x0, 0x80, 0x2f, 0x0, @multicast2, @rand_addr=0x64010101, {[@end, @end, @cipso={0x86, 0x57, 0x3, [{0x0, 0x6, "d340d5dd"}, {0x5, 0x7, "c69678c3e5"}, {0x0, 0xd, "4898e98cb69031d0210bba"}, {0x7, 0x11, "eb2f7a6e15057986071d1f84db09c2"}, {0x1, 0xf, "5365f4aaa578d18ef765d23bab"}, {0x0, 0x5, "1f514e"}, {0x7, 0x12, "76759d6ae4f6254586601ac63a41e571"}]}, @noop]}}}}})
sendmsg$nl_route_sched(r8, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)=@getqdisc={0x30, 0x26, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffff}, {0xe, 0xf}, {0xa, 0x5}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x95}, 0x20000000)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000001000)={0x8, 'veth0_to_team\x00', {'rose0\x00'}, 0x2})
r10 = accept4$tipc(r7, &(0x7f0000001040)=@id, &(0x7f0000001080)=0x10, 0x80800)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000010c0)={'ip6_vti0\x00'})
r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001100)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
ioctl$PPPIOCSMRU1(r11, 0x40047452, &(0x7f0000001140)=0x1)
sendmsg$rds(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000001180)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000002380)=[{&(0x7f00000011c0)=""/130, 0x82}, {&(0x7f0000001280)=""/192, 0xc0}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/21, 0x15}], 0x4, &(0x7f0000002680)=[@mask_cswp={0x58, 0x114, 0x9, {{0xfffff801, 0x55}, &(0x7f00000023c0)=0x8000000000000000, &(0x7f0000002400)=0x80000000, 0x7fffffffffffffff, 0x5, 0x10, 0x4, 0x34, 0x3}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002440)=""/169, 0xa9}, &(0x7f0000002500), 0x6a}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002540)=""/98, 0x62}, &(0x7f00000025c0), 0x24}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x3}, &(0x7f0000002600)=0xfb, &(0x7f0000002640)=0x101, 0x9, 0x8, 0x9, 0x6890483c, 0x40}}], 0x128, 0x800}, 0x20048094)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r11)
setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000002840)=0x232, 0x4)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000029c0)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002980)={&(0x7f00000028c0)={0xa0, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xfd99}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x87}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7f}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000040)
sendmsg$nl_route(r8, &(0x7f0000002bc0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b00)=@ipv6_newnexthop={0x50, 0x68, 0x1, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x10}, [@NHA_ID={0x8}, @NHA_GATEWAY={0x14, 0x6, @ip4=@loopback}, @NHA_OIF={0x8}, @NHA_GATEWAY={0x14, 0x6, @ip4=@local}]}, 0x50}, 0x1, 0x0, 0x0, 0xc001}, 0x2004c001)

47.179468315s ago: executing program 3 (id=1106):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_int(r2, 0x1, 0xb, 0x0, &(0x7f0000000280)) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000008b00)={0x0, 0x0, &(0x7f0000008ac0)={&(0x7f0000000200)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x42}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0xc}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20004080)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000004c0)={'lo\x00', &(0x7f0000000480)=@ethtool_eee={0x44, 0x7, 0x2f97885b, 0xfff, 0x0, 0x8, 0x2, 0x3ff, [0x81, 0x9]}})

39.697910372s ago: executing program 0 (id=449):
ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000000)=0xf)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x3, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7f}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20040084)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x75ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x40)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1)
sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000380)={0x3d8, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x130, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x453}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb64}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1378}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcef7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x110, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2d4f}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x82}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3ff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000800)=0x4, &(0x7f0000000840)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'ip6gre0\x00', <r5=>0x0, 0x4, 0xf, 0x5, 0x3da, 0x78, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7800, 0x7, 0x307}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000980)={'syztnl1\x00', <r6=>0x0, 0x7820, 0x40, 0x4, 0xfff, {{0xd, 0x4, 0x0, 0x15, 0x34, 0x68, 0x0, 0xe, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x32}, {[@rr={0x7, 0x13, 0xeb, [@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0xc, 0x57, 0x3, 0x9, [{@loopback, 0xff}]}]}}}}})
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000b40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x88, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x48041}, 0x4004884)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000b80), &(0x7f0000000c00)=0x68)
r7 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000c40)=@name, &(0x7f0000000c80)=0x10, 0x80800)
setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x80, &(0x7f0000000cc0)=0xd9d, 0x4)
sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, 0x1, 0x9, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc804)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000f00)={'ip_vti0\x00', &(0x7f0000000e40)={'ip_vti0\x00', <r9=>0x0, 0x80, 0x20, 0xffff, 0x1, {{0x1c, 0x4, 0x1, 0x3, 0x70, 0x64, 0x0, 0x80, 0x2f, 0x0, @multicast2, @rand_addr=0x64010101, {[@end, @end, @cipso={0x86, 0x57, 0x3, [{0x0, 0x6, "d340d5dd"}, {0x5, 0x7, "c69678c3e5"}, {0x0, 0xd, "4898e98cb69031d0210bba"}, {0x7, 0x11, "eb2f7a6e15057986071d1f84db09c2"}, {0x1, 0xf, "5365f4aaa578d18ef765d23bab"}, {0x0, 0x5, "1f514e"}, {0x7, 0x12, "76759d6ae4f6254586601ac63a41e571"}]}, @noop]}}}}})
sendmsg$nl_route_sched(r8, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)=@getqdisc={0x30, 0x26, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffff}, {0xe, 0xf}, {0xa, 0x5}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x95}, 0x20000000)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000001000)={0x8, 'veth0_to_team\x00', {'rose0\x00'}, 0x2})
r10 = accept4$tipc(r7, &(0x7f0000001040)=@id, &(0x7f0000001080)=0x10, 0x80800)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000010c0)={'ip6_vti0\x00'})
r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001100)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
ioctl$PPPIOCSMRU1(r11, 0x40047452, &(0x7f0000001140)=0x1)
sendmsg$rds(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000001180)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000002380)=[{&(0x7f00000011c0)=""/130, 0x82}, {&(0x7f0000001280)=""/192, 0xc0}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/21, 0x15}], 0x4, &(0x7f0000002680)=[@mask_cswp={0x58, 0x114, 0x9, {{0xfffff801, 0x55}, &(0x7f00000023c0)=0x8000000000000000, &(0x7f0000002400)=0x80000000, 0x7fffffffffffffff, 0x5, 0x10, 0x4, 0x34, 0x3}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002440)=""/169, 0xa9}, &(0x7f0000002500), 0x6a}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002540)=""/98, 0x62}, &(0x7f00000025c0), 0x24}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x3}, &(0x7f0000002600)=0xfb, &(0x7f0000002640)=0x101, 0x9, 0x8, 0x9, 0x6890483c, 0x40}}], 0x128, 0x800}, 0x20048094)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r11)
setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000002840)=0x232, 0x4)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000029c0)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002980)={&(0x7f00000028c0)={0xa0, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xfd99}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x87}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7f}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000040)
sendmsg$nl_route(r8, &(0x7f0000002bc0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b00)=@ipv6_newnexthop={0x50, 0x68, 0x1, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x10}, [@NHA_ID={0x8}, @NHA_GATEWAY={0x14, 0x6, @ip4=@loopback}, @NHA_OIF={0x8}, @NHA_GATEWAY={0x14, 0x6, @ip4=@local}]}, 0x50}, 0x1, 0x0, 0x0, 0xc001}, 0x2004c001)

31.827185865s ago: executing program 3 (id=1106):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_int(r2, 0x1, 0xb, 0x0, &(0x7f0000000280)) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000008b00)={0x0, 0x0, &(0x7f0000008ac0)={&(0x7f0000000200)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x42}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0xc}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20004080)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000004c0)={'lo\x00', &(0x7f0000000480)=@ethtool_eee={0x44, 0x7, 0x2f97885b, 0xfff, 0x0, 0x8, 0x2, 0x3ff, [0x81, 0x9]}})

24.457780655s ago: executing program 0 (id=449):
ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000000)=0xf)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x3, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7f}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20040084)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x75ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x40)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1)
sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000380)={0x3d8, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x130, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x453}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb64}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1378}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcef7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x110, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2d4f}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x82}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3ff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000800)=0x4, &(0x7f0000000840)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'ip6gre0\x00', <r5=>0x0, 0x4, 0xf, 0x5, 0x3da, 0x78, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7800, 0x7, 0x307}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000980)={'syztnl1\x00', <r6=>0x0, 0x7820, 0x40, 0x4, 0xfff, {{0xd, 0x4, 0x0, 0x15, 0x34, 0x68, 0x0, 0xe, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x32}, {[@rr={0x7, 0x13, 0xeb, [@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0xc, 0x57, 0x3, 0x9, [{@loopback, 0xff}]}]}}}}})
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000b40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x88, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x48041}, 0x4004884)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000b80), &(0x7f0000000c00)=0x68)
r7 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000c40)=@name, &(0x7f0000000c80)=0x10, 0x80800)
setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x80, &(0x7f0000000cc0)=0xd9d, 0x4)
sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, 0x1, 0x9, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc804)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000f00)={'ip_vti0\x00', &(0x7f0000000e40)={'ip_vti0\x00', <r9=>0x0, 0x80, 0x20, 0xffff, 0x1, {{0x1c, 0x4, 0x1, 0x3, 0x70, 0x64, 0x0, 0x80, 0x2f, 0x0, @multicast2, @rand_addr=0x64010101, {[@end, @end, @cipso={0x86, 0x57, 0x3, [{0x0, 0x6, "d340d5dd"}, {0x5, 0x7, "c69678c3e5"}, {0x0, 0xd, "4898e98cb69031d0210bba"}, {0x7, 0x11, "eb2f7a6e15057986071d1f84db09c2"}, {0x1, 0xf, "5365f4aaa578d18ef765d23bab"}, {0x0, 0x5, "1f514e"}, {0x7, 0x12, "76759d6ae4f6254586601ac63a41e571"}]}, @noop]}}}}})
sendmsg$nl_route_sched(r8, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)=@getqdisc={0x30, 0x26, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffff}, {0xe, 0xf}, {0xa, 0x5}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x95}, 0x20000000)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000001000)={0x8, 'veth0_to_team\x00', {'rose0\x00'}, 0x2})
r10 = accept4$tipc(r7, &(0x7f0000001040)=@id, &(0x7f0000001080)=0x10, 0x80800)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000010c0)={'ip6_vti0\x00'})
r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001100)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
ioctl$PPPIOCSMRU1(r11, 0x40047452, &(0x7f0000001140)=0x1)
sendmsg$rds(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000001180)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000002380)=[{&(0x7f00000011c0)=""/130, 0x82}, {&(0x7f0000001280)=""/192, 0xc0}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/21, 0x15}], 0x4, &(0x7f0000002680)=[@mask_cswp={0x58, 0x114, 0x9, {{0xfffff801, 0x55}, &(0x7f00000023c0)=0x8000000000000000, &(0x7f0000002400)=0x80000000, 0x7fffffffffffffff, 0x5, 0x10, 0x4, 0x34, 0x3}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002440)=""/169, 0xa9}, &(0x7f0000002500), 0x6a}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002540)=""/98, 0x62}, &(0x7f00000025c0), 0x24}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x3}, &(0x7f0000002600)=0xfb, &(0x7f0000002640)=0x101, 0x9, 0x8, 0x9, 0x6890483c, 0x40}}], 0x128, 0x800}, 0x20048094)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r11)
setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000002840)=0x232, 0x4)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000029c0)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002980)={&(0x7f00000028c0)={0xa0, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xfd99}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x87}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7f}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000040)
sendmsg$nl_route(r8, &(0x7f0000002bc0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b00)=@ipv6_newnexthop={0x50, 0x68, 0x1, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x10}, [@NHA_ID={0x8}, @NHA_GATEWAY={0x14, 0x6, @ip4=@loopback}, @NHA_OIF={0x8}, @NHA_GATEWAY={0x14, 0x6, @ip4=@local}]}, 0x50}, 0x1, 0x0, 0x0, 0xc001}, 0x2004c001)

16.021850069s ago: executing program 3 (id=1106):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_int(r2, 0x1, 0xb, 0x0, &(0x7f0000000280)) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000008b00)={0x0, 0x0, &(0x7f0000008ac0)={&(0x7f0000000200)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x42}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0xc}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20004080)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000004c0)={'lo\x00', &(0x7f0000000480)=@ethtool_eee={0x44, 0x7, 0x2f97885b, 0xfff, 0x0, 0x8, 0x2, 0x3ff, [0x81, 0x9]}})

8.773657811s ago: executing program 0 (id=449):
ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000000)=0xf)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x3, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7f}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20040084)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x75ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x40)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1)
sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000380)={0x3d8, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x130, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x453}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb64}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1378}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcef7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x110, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2d4f}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x82}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3ff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000800)=0x4, &(0x7f0000000840)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'ip6gre0\x00', <r5=>0x0, 0x4, 0xf, 0x5, 0x3da, 0x78, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7800, 0x7, 0x307}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000980)={'syztnl1\x00', <r6=>0x0, 0x7820, 0x40, 0x4, 0xfff, {{0xd, 0x4, 0x0, 0x15, 0x34, 0x68, 0x0, 0xe, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x32}, {[@rr={0x7, 0x13, 0xeb, [@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0xc, 0x57, 0x3, 0x9, [{@loopback, 0xff}]}]}}}}})
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000b40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x88, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x48041}, 0x4004884)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000b80), &(0x7f0000000c00)=0x68)
r7 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000c40)=@name, &(0x7f0000000c80)=0x10, 0x80800)
setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x80, &(0x7f0000000cc0)=0xd9d, 0x4)
sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, 0x1, 0x9, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc804)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000f00)={'ip_vti0\x00', &(0x7f0000000e40)={'ip_vti0\x00', <r9=>0x0, 0x80, 0x20, 0xffff, 0x1, {{0x1c, 0x4, 0x1, 0x3, 0x70, 0x64, 0x0, 0x80, 0x2f, 0x0, @multicast2, @rand_addr=0x64010101, {[@end, @end, @cipso={0x86, 0x57, 0x3, [{0x0, 0x6, "d340d5dd"}, {0x5, 0x7, "c69678c3e5"}, {0x0, 0xd, "4898e98cb69031d0210bba"}, {0x7, 0x11, "eb2f7a6e15057986071d1f84db09c2"}, {0x1, 0xf, "5365f4aaa578d18ef765d23bab"}, {0x0, 0x5, "1f514e"}, {0x7, 0x12, "76759d6ae4f6254586601ac63a41e571"}]}, @noop]}}}}})
sendmsg$nl_route_sched(r8, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)=@getqdisc={0x30, 0x26, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffff}, {0xe, 0xf}, {0xa, 0x5}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x95}, 0x20000000)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000001000)={0x8, 'veth0_to_team\x00', {'rose0\x00'}, 0x2})
r10 = accept4$tipc(r7, &(0x7f0000001040)=@id, &(0x7f0000001080)=0x10, 0x80800)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000010c0)={'ip6_vti0\x00'})
r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001100)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
ioctl$PPPIOCSMRU1(r11, 0x40047452, &(0x7f0000001140)=0x1)
sendmsg$rds(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000001180)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000002380)=[{&(0x7f00000011c0)=""/130, 0x82}, {&(0x7f0000001280)=""/192, 0xc0}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/21, 0x15}], 0x4, &(0x7f0000002680)=[@mask_cswp={0x58, 0x114, 0x9, {{0xfffff801, 0x55}, &(0x7f00000023c0)=0x8000000000000000, &(0x7f0000002400)=0x80000000, 0x7fffffffffffffff, 0x5, 0x10, 0x4, 0x34, 0x3}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002440)=""/169, 0xa9}, &(0x7f0000002500), 0x6a}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002540)=""/98, 0x62}, &(0x7f00000025c0), 0x24}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x3}, &(0x7f0000002600)=0xfb, &(0x7f0000002640)=0x101, 0x9, 0x8, 0x9, 0x6890483c, 0x40}}], 0x128, 0x800}, 0x20048094)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r11)
setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000002840)=0x232, 0x4)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000029c0)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002980)={&(0x7f00000028c0)={0xa0, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xfd99}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x87}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7f}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000040)
sendmsg$nl_route(r8, &(0x7f0000002bc0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b00)=@ipv6_newnexthop={0x50, 0x68, 0x1, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x10}, [@NHA_ID={0x8}, @NHA_GATEWAY={0x14, 0x6, @ip4=@loopback}, @NHA_OIF={0x8}, @NHA_GATEWAY={0x14, 0x6, @ip4=@local}]}, 0x50}, 0x1, 0x0, 0x0, 0xc001}, 0x2004c001)

3.506032892s ago: executing program 1 (id=1528):
syz_80211_inject_frame(&(0x7f0000001040), &(0x7f0000001080)=@ctrl_frame=@ba={{}, {0x7}, @device_b, @device_b, @multi={{0x0, 0x1, 0x1, 0x0, 0x1}, [{0x0, 0x4, {0x0, 0xe}, "179d9eedf33ba57c"}], {0x0, 0x5, {0x6, 0x1}, "a5a4afa10fa75e0a"}}}, 0x2a)

3.377864725s ago: executing program 3 (id=1106):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_int(r2, 0x1, 0xb, 0x0, &(0x7f0000000280)) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000008b00)={0x0, 0x0, &(0x7f0000008ac0)={&(0x7f0000000200)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x42}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0xc}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20004080)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000004c0)={'lo\x00', &(0x7f0000000480)=@ethtool_eee={0x44, 0x7, 0x2f97885b, 0xfff, 0x0, 0x8, 0x2, 0x3ff, [0x81, 0x9]}})

2.468810929s ago: executing program 1 (id=1531):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1)
sendmsg$kcm(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="5e85ddc444bbe877c9caf70073f086dcb17bd899b136d44a285188fb4b756d063b6624d4814f4d7433859181ea04628f0d623163bc2ecbd4ea0af9eab1420851a8de8adc308e1ff8d497bf6f7ba8658e3f56ac405af5c25c6d5e14b29db5f96ab1a5d3adda66f3dcf612cb36c82f249c35203f3fbc05096ad31cdf8f15a913bef95b9c286e9cbfea645d42f86e87ae2af91141b92e82b9b45dcaec3ece10368da01c00c9", 0xa4}, {&(0x7f00000007c0)="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", 0x25c}], 0x2}, 0x4010)

2.088005917s ago: executing program 1 (id=1535):
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r1=>0x0})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r1})

1.271476715s ago: executing program 1 (id=1539):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}]}}]}, 0x3c}}, 0x24000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.200680988s ago: executing program 2 (id=1541):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="a40000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000007c0012800e00010069703665727370616e0000006800028006000300060000000600020009000000050016001100000004001200080015008af50f00050008000100000014000600fc010000000000000000000000000001050016000200000014000700fc00000000000000000000000000000005000b000800000008000300"], 0xa4}}, 0x0)

1.128433062s ago: executing program 1 (id=1542):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
bind$packet(r0, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r4, 0x1, 0x0, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, r1, {0x1f, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000)

889.313944ms ago: executing program 2 (id=1545):
r0 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'vlan0\x00', {0x1}, 0x668a})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bond_slave_1\x00', {0x4}, 0x4})

728.013527ms ago: executing program 4 (id=1546):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='lp\x00', 0x3)

592.040436ms ago: executing program 2 (id=1547):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@bridge_delvlan={0x18, 0x71, 0x1, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000010)

591.829614ms ago: executing program 1 (id=1548):
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

576.610596ms ago: executing program 4 (id=1549):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_timeval(r2, 0x1, 0x42, 0x0, &(0x7f00000015c0))

388.574402ms ago: executing program 4 (id=1550):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

336.172211ms ago: executing program 2 (id=1551):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

281.962591ms ago: executing program 4 (id=1552):
syz_emit_ethernet(0x3e, &(0x7f0000000800)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x6, 0x6, '!3\'', 0x8, 0x3a, 0xff, @mcast1, @mcast2, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x1}}}}}}, 0x0)

217.673964ms ago: executing program 2 (id=1553):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000004600)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x40, @mcast1, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000001640)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x2c, 0x0, 0x2, 0x82}}}], 0x18}}], 0x1, 0x8010)

120.076081ms ago: executing program 4 (id=1554):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0, 0x0, 0x4001}, 0x400)

89.39487ms ago: executing program 2 (id=1555):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x20, 0x4000000, 0x0, {{0x5, 0x4, 0x0, 0x16, 0x14, 0x64, 0x0, 0xfe, 0x4, 0x0, @loopback, @multicast1}}}})

0s ago: executing program 4 (id=1556):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@ptr, @restrict={0x3, 0x0, 0x0, 0x4, 0x4}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)

kernel console output (not intermixed with test programs):

ytes leftover after parsing attributes in process `syz.4.926'.
[  151.171326][ T9763] netlink: 68 bytes leftover after parsing attributes in process `syz.3.927'.
[  151.191480][ T6931] hsr_slave_0: left promiscuous mode
[  151.304915][ T6931] hsr_slave_1: left promiscuous mode
[  151.330269][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.339633][ T6931] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.358993][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.384157][ T6931] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.413860][ T6931] veth1_macvtap: left promiscuous mode
[  151.423269][ T6931] veth0_macvtap: left promiscuous mode
[  151.433671][ T6931] veth1_vlan: left promiscuous mode
[  151.447201][ T6931] veth0_vlan: left promiscuous mode
[  151.880971][ T6931] team0 (unregistering): Port device team_slave_1 removed
[  151.930014][ T5837] Bluetooth: hci0: command tx timeout
[  151.942565][ T6931] team0 (unregistering): Port device team_slave_0 removed
[  152.336773][ T9766] vlan1: entered allmulticast mode
[  152.413335][ T9758] veth1_vlan (unregistering): left allmulticast mode
[  152.433973][ T9758] bond0: (slave macvlan0): Releasing backup interface
[  152.498898][ T9707] chnl_net:caif_netlink_parms(): no params data found
[  152.784411][ T9803] Cannot find del_set index 2 as target
[  152.975079][ T9805] tipc: Enabling of bearer <ud{:s> rejected, media not registered
[  153.080782][ T5880] hid-generic 0005:7FFF:0008.0004: item fetching failed at offset 0/3
[  153.099162][ T5880] hid-generic 0005:7FFF:0008.0004: probe with driver hid-generic failed with error -22
[  153.164456][ T9707] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.175772][ T9707] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.193105][ T9707] bridge_slave_0: entered allmulticast mode
[  153.226399][ T9707] bridge_slave_0: entered promiscuous mode
[  153.258916][ T9833] __nla_validate_parse: 2 callbacks suppressed
[  153.258935][ T9833] netlink: 36 bytes leftover after parsing attributes in process `syz.3.938'.
[  153.284027][ T9707] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.291986][ T9707] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.299590][ T9707] bridge_slave_1: entered allmulticast mode
[  153.307120][ T9707] bridge_slave_1: entered promiscuous mode
[  153.333832][ T9822] netlink: 2 bytes leftover after parsing attributes in process `syz.4.936'.
[  153.473275][ T9707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.502557][ T9707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.621215][ T9707] team0: Port device team_slave_0 added
[  153.662331][ T9707] team0: Port device team_slave_1 added
[  153.805718][ T9707] batman_adv: batadv0: Adding interface: batadv_slave_0
[  153.826455][ T9707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.934890][ T9707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  153.938402][ T9866] syz.3.946 uses old SIOCAX25GETINFO
[  153.984181][ T9707] batman_adv: batadv0: Adding interface: batadv_slave_1
[  153.996674][ T9707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.028777][ T5837] Bluetooth: hci0: command tx timeout
[  154.077219][ T9870] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.116785][ T9707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.348850][ T9707] hsr_slave_0: entered promiscuous mode
[  154.428577][ T9707] hsr_slave_1: entered promiscuous mode
[  154.466337][ T9707] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  154.475147][ T9707] Cannot create hsr debugfs directory
[  154.597439][ T9897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  154.812058][ T9900] bridge0: the hash_elasticity option has been deprecated and is always 16
[  154.822145][ T9905] netlink: 'syz.4.956': attribute type 1 has an invalid length.
[  155.283667][ T9926] netlink: 864 bytes leftover after parsing attributes in process `syz.2.962'.
[  155.638937][ T9940] netlink: 'syz.2.965': attribute type 21 has an invalid length.
[  155.658468][ T9940] netlink: 152 bytes leftover after parsing attributes in process `syz.2.965'.
[  155.682947][ T9939] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  155.706970][ T9939] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  155.937088][ T9707] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  156.000916][ T9707] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  156.029997][ T9707] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  156.056791][ T9707] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  156.078454][ T5837] Bluetooth: hci0: command tx timeout
[  156.109558][ T9961] tipc: Enabled bearer <udp:s>, priority 10
[  156.246948][ T9964] syzkaller1: entered promiscuous mode
[  156.260001][ T9964] syzkaller1: entered allmulticast mode
[  156.349527][ T9707] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.412443][ T9707] 8021q: adding VLAN 0 to HW filter on device team0
[  156.426223][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.433429][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.485389][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.492571][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.897262][ T9707] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.035495][ T9707] veth0_vlan: entered promiscuous mode
[  157.080255][ T9707] veth1_vlan: entered promiscuous mode
[  157.200948][ T9707] veth0_macvtap: entered promiscuous mode
[  157.262186][ T9707] veth1_macvtap: entered promiscuous mode
[  157.276326][T10017] netlink: 'syz.2.982': attribute type 39 has an invalid length.
[  157.316555][ T9707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.362513][ T9707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.376371][ T9707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.390874][ T9707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.405846][ T9707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.417667][ T9707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.428922][ T9707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.441743][ T9707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.453507][ T9707] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.531951][ T9707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.591578][ T9707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.608882][ T9707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.650341][ T9707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.690483][ T9707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.709669][ T9707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.725814][ T9707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.739894][ T9707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.776574][ T9707] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.852211][ T9707] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.861666][ T9707] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.877446][T10041] dccp_invalid_packet: P.Data Offset(0) too small
[  157.879912][ T9707] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.891353][T10041] Unsupported ieee802154 address type: 0
[  157.918384][ T9707] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.158327][ T5837] Bluetooth: hci0: command tx timeout
[  158.335498][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.364888][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.404792][T10061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.995'.
[  158.454699][T10061] bridge_slave_1: left allmulticast mode
[  158.482302][T10061] bridge_slave_1: left promiscuous mode
[  158.508673][T10061] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.562705][T10061] bridge_slave_0: left promiscuous mode
[  158.574801][T10061] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.657426][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.678629][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.320583][T10110] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  159.335167][T10112] netlink: 'syz.2.1006': attribute type 1 has an invalid length.
[  159.358643][T10112] netlink: 'syz.2.1006': attribute type 2 has an invalid length.
[  159.367445][T10112] netlink: 'syz.2.1006': attribute type 1 has an invalid length.
[  159.538875][T10126] netlink: 'syz.4.1009': attribute type 21 has an invalid length.
[  159.931595][ T6930] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.263218][ T6930] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.326994][ T6930] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.413722][ T6930] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.586285][ T6930] bridge_slave_1: left allmulticast mode
[  160.601564][ T6930] bridge_slave_1: left promiscuous mode
[  160.607350][ T6930] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.624546][ T6930] bridge_slave_0: left allmulticast mode
[  160.632549][ T6930] bridge_slave_0: left promiscuous mode
[  160.639561][ T6930] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.314072][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  161.335337][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  161.364939][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  161.384883][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  161.423350][   T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  161.440875][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  161.530613][ T6930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  161.543084][ T6930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  161.561103][ T6930] bond0 (unregistering): Released all slaves
[  161.812145][T10225] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1020'.
[  162.210476][T10251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1026'.
[  162.220147][T10251] netlink: 'syz.3.1026': attribute type 7 has an invalid length.
[  162.228334][T10251] netlink: 'syz.3.1026': attribute type 8 has an invalid length.
[  162.236761][T10251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1026'.
[  162.366049][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1027'.
[  162.378296][T10212] xfrm0 speed is unknown, defaulting to 1000
[  162.453342][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1028'.
[  162.463192][T10260] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  163.213875][T10301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1037'.
[  163.296088][T10301] syz.3.1037[10301] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  163.296190][T10301] syz.3.1037[10301] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  163.299611][T10307] netlink: 1288 bytes leftover after parsing attributes in process `syz.4.1039'.
[  163.319399][T10301] syz.3.1037[10301] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  163.333496][T10301] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[  163.355161][T10310] netlink: 'syz.2.1038': attribute type 39 has an invalid length.
[  163.369964][T10307] openvswitch: netlink: Flow key attr not present in new flow.
[  163.441049][ T6930] hsr_slave_0: left promiscuous mode
[  163.472302][ T6930] hsr_slave_1: left promiscuous mode
[  163.502924][ T6930] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.518076][ T5837] Bluetooth: hci0: command tx timeout
[  163.555929][ T6930] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.645830][ T6930] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.688276][T10321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1042'.
[  163.691932][ T6930] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.697165][T10321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1042'.
[  163.737245][T10321] netlink: 'syz.1.1042': attribute type 11 has an invalid length.
[  163.784763][ T6930] veth1_macvtap: left promiscuous mode
[  163.795533][ T6930] veth0_macvtap: left promiscuous mode
[  163.805918][ T6930] veth1_vlan: left promiscuous mode
[  163.821165][ T6930] veth0_vlan: left promiscuous mode
[  163.995143][T10339] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  164.344168][ T6930] team0 (unregistering): Port device team_slave_1 removed
[  164.391954][ T6930] team0 (unregistering): Port device team_slave_0 removed
[  164.826685][T10212] chnl_net:caif_netlink_parms(): no params data found
[  165.084949][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1046'.
[  165.114703][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'.
[  165.218620][T10212] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.226058][T10212] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.244118][T10212] bridge_slave_0: entered allmulticast mode
[  165.295615][T10212] bridge_slave_0: entered promiscuous mode
[  165.337267][T10212] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.355974][T10212] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.370467][T10212] bridge_slave_1: entered allmulticast mode
[  165.383689][T10212] bridge_slave_1: entered promiscuous mode
[  165.563342][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1053'.
[  165.563704][T10212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.576846][T10382] ebt_limit: overflow, try lower: 0/0
[  165.594722][T10381] netlink: 'syz.2.1053': attribute type 30 has an invalid length.
[  165.598244][ T5837] Bluetooth: hci0: command tx timeout
[  165.613923][T10381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1053'.
[  165.641318][T10212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.664258][T10387] netlink: 'syz.2.1053': attribute type 4 has an invalid length.
[  165.710435][T10381] xt_ecn: cannot match TCP bits for non-tcp packets
[  165.836528][T10212] team0: Port device team_slave_0 added
[  165.869963][T10212] team0: Port device team_slave_1 added
[  165.956475][T10400] xt_l2tp: v2 doesn't support IP mode
[  165.993853][T10212] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.012701][T10212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.043699][T10212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.099197][T10212] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.135291][T10212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.185065][T10212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.206251][T10376] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  166.324370][T10417] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1062'.
[  166.444519][T10212] hsr_slave_0: entered promiscuous mode
[  166.458300][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1061'.
[  166.498857][T10212] hsr_slave_1: entered promiscuous mode
[  166.566531][T10212] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  166.605229][T10212] Cannot create hsr debugfs directory
[  166.660360][T10437] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1067'.
[  167.217447][T10449] netlink: 'syz.4.1070': attribute type 10 has an invalid length.
[  167.375071][T10449] team0: Port device netdevsim0 added
[  167.625369][T10468] bond3: entered promiscuous mode
[  167.651656][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1077'.
[  167.659964][T10468] bond3: entered allmulticast mode
[  167.685749][T10468] 8021q: adding VLAN 0 to HW filter on device bond3
[  167.827663][T10212] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  167.860909][T10212] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  167.881366][T10212] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  167.984150][T10212] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  168.047627][T10492] ieee802154 phy1 wpan1: encryption failed: -22
[  168.278737][T10212] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.294443][T10212] 8021q: adding VLAN 0 to HW filter on device team0
[  168.395432][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.402648][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.428799][ T6930] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.435971][ T6930] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.604285][T10212] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  168.615051][T10212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  168.615171][T10516] netlink: 'syz.1.1090': attribute type 1 has an invalid length.
[  168.714840][T10516] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  168.805880][T10212] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.970349][T10212] veth0_vlan: entered promiscuous mode
[  169.012844][T10545] __nla_validate_parse: 3 callbacks suppressed
[  169.012864][T10545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1094'.
[  169.021951][T10212] veth1_vlan: entered promiscuous mode
[  169.113898][T10212] veth0_macvtap: entered promiscuous mode
[  169.157720][T10212] veth1_macvtap: entered promiscuous mode
[  169.209774][T10212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.247296][T10212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.271911][T10212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.284039][T10212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.295344][T10212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.308731][T10212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.326860][T10212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.353525][T10212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.382347][T10212] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.396582][T10212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.427617][T10212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.480593][T10212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.520323][T10212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.552835][T10212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.580072][T10212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.613196][T10212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.648760][T10212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.689314][T10212] batman_adv: batadv0: Interface activated: batadv_slave_1
[  169.737426][T10212] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.762143][T10212] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.788923][T10212] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.806614][T10212] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  170.139462][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.147338][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.264738][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.292620][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.352654][T10597] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1107'.
[  170.635235][T10608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1109'.
[  170.864112][T10617] netlink: 'syz.4.1111': attribute type 1 has an invalid length.
[  171.044348][T10628] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  171.054061][T10628] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  171.063221][T10628] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  171.072503][T10628] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  171.247583][T10635] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 85
[  171.274435][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  171.286377][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  171.295289][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  171.334599][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  171.349322][   T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  171.365325][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  171.486143][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.560611][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1118'.
[  171.576410][T10645] IPv6: Can't replace route, no match found
[  171.727268][T10639] xfrm0 speed is unknown, defaulting to 1000
[  171.816126][T10639] chnl_net:caif_netlink_parms(): no params data found
[  171.874249][T10639] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.881526][T10639] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.889947][T10639] bridge_slave_0: entered allmulticast mode
[  171.896692][T10639] bridge_slave_0: entered promiscuous mode
[  171.905445][T10639] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.913090][T10639] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.922876][T10639] bridge_slave_1: entered allmulticast mode
[  171.929927][T10639] bridge_slave_1: entered promiscuous mode
[  171.954283][T10639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.965945][T10639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.994372][T10639] team0: Port device team_slave_0 added
[  172.003856][T10639] team0: Port device team_slave_1 added
[  172.025732][T10639] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.032926][T10639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.059743][T10639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.076961][T10639] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.084971][T10639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.111246][T10639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.163943][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.209759][T10639] hsr_slave_0: entered promiscuous mode
[  172.216121][T10639] hsr_slave_1: entered promiscuous mode
[  172.225339][T10639] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  172.234972][T10639] Cannot create hsr debugfs directory
[  172.266581][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.427402][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.950600][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  172.960612][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  172.969612][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  172.984924][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  172.996897][   T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  173.006598][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  173.122755][T10639] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.176230][   T12] bridge_slave_1: left allmulticast mode
[  173.182204][   T12] bridge_slave_1: left promiscuous mode
[  173.188270][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.225286][   T12] bridge_slave_0: left allmulticast mode
[  173.238772][   T12] bridge_slave_0: left promiscuous mode
[  173.252405][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.437995][   T55] Bluetooth: hci0: command tx timeout
[  173.706603][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  173.717533][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.730602][   T12] bond0 (unregistering): Released all slaves
[  173.794870][T10639] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.950395][T10639] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.141011][T10639] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.211265][T10723] xt_CT: You must specify a L4 protocol and not use inversions on it
[  174.271518][T10723] netlink: 'syz.4.1133': attribute type 21 has an invalid length.
[  174.476576][T10739] sctp: [Deprecated]: syz.2.1135 (pid 10739) Use of int in max_burst socket option.
[  174.476576][T10739] Use struct sctp_assoc_value instead
[  174.534218][T10733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1135'.
[  174.640965][T10689] xfrm0 speed is unknown, defaulting to 1000
[  174.651120][T10733] bridge_slave_1: left allmulticast mode
[  174.660812][T10733] bridge_slave_1: left promiscuous mode
[  174.673614][T10733] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.687269][T10733] bridge_slave_0: left allmulticast mode
[  174.702040][T10733] bridge_slave_0: left promiscuous mode
[  174.715229][T10733] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.849827][T10747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1136'.
[  175.070530][   T12] hsr_slave_0: left promiscuous mode
[  175.080485][   T12] hsr_slave_1: left promiscuous mode
[  175.086725][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.095168][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.105987][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.118799][   T55] Bluetooth: hci4: command tx timeout
[  175.121591][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.163338][   T12] veth1_macvtap: left promiscuous mode
[  175.171326][   T12] veth0_macvtap: left promiscuous mode
[  175.176957][   T12] veth1_vlan: left promiscuous mode
[  175.189058][T10757] netlink: 'syz.2.1137': attribute type 1 has an invalid length.
[  175.192082][   T12] veth0_vlan: left promiscuous mode
[  175.524223][   T55] Bluetooth: hci0: command tx timeout
[  175.669070][   T12] team0 (unregistering): Port device team_slave_1 removed
[  175.713598][   T12] team0 (unregistering): Port device team_slave_0 removed
[  176.133296][T10752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1137'.
[  176.199541][T10639] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  176.424334][T10639] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  176.435537][T10639] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  176.511444][T10639] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  176.706594][T10689] chnl_net:caif_netlink_parms(): no params data found
[  176.900808][T10639] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.029155][T10689] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.046679][T10689] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.061015][T10689] bridge_slave_0: entered allmulticast mode
[  177.072695][T10689] bridge_slave_0: entered promiscuous mode
[  177.093120][T10639] 8021q: adding VLAN 0 to HW filter on device team0
[  177.133543][ T6925] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.140763][ T6925] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.197176][T10689] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.205318][   T55] Bluetooth: hci4: command tx timeout
[  177.211632][T10689] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.220121][T10689] bridge_slave_1: entered allmulticast mode
[  177.229248][T10689] bridge_slave_1: entered promiscuous mode
[  177.249049][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.256251][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.396614][T10689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.420364][T10689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.436866][T10812] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  177.573648][T10689] team0: Port device team_slave_0 added
[  177.598603][   T55] Bluetooth: hci0: command tx timeout
[  177.632305][T10689] team0: Port device team_slave_1 added
[  177.635015][T10822] xt_TCPMSS: Only works on TCP SYN packets
[  177.712423][T10689] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.731867][T10689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.787266][T10689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.794421][T10829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  177.823979][T10829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  177.885573][T10829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  177.911406][T10689] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.940213][T10689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.985143][T10689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  178.077705][T10838] netlink: 'syz.1.1154': attribute type 4 has an invalid length.
[  178.201281][T10689] hsr_slave_0: entered promiscuous mode
[  178.217062][T10689] hsr_slave_1: entered promiscuous mode
[  178.227209][T10689] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  178.235849][T10689] Cannot create hsr debugfs directory
[  178.261736][T10845] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  178.269696][T10845] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  178.287135][T10841] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.294940][T10845] ipt_REJECT: TCP_RESET invalid for non-tcp
[  178.323478][T10639] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.627371][T10639] veth0_vlan: entered promiscuous mode
[  178.685075][T10639] veth1_vlan: entered promiscuous mode
[  178.893522][T10639] veth0_macvtap: entered promiscuous mode
[  178.945475][T10639] veth1_macvtap: entered promiscuous mode
[  179.139887][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.178277][T10882] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1163'.
[  179.195156][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.206594][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.274415][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.288605][   T55] Bluetooth: hci4: command tx timeout
[  179.298668][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.309332][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.324650][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.335834][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.346873][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.362848][T10639] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.562621][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.596952][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.634400][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.656411][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.674740][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.686475][   T55] Bluetooth: hci0: command tx timeout
[  179.693291][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.697585][T10905] xt_ecn: cannot match TCP bits for non-tcp packets
[  179.703876][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.730431][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.755165][T10639] batman_adv: batadv0: Interface activated: batadv_slave_1
[  180.020222][T10639] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.047596][T10639] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.060286][T10639] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.076109][T10639] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.353623][ T6919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.362680][ T6919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.371194][ T6919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.379645][ T6919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.430850][T10689] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  180.443915][T10689] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  180.466674][T10689] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  180.491532][T10689] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  180.587234][T10934] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.590582][T10689] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.615487][T10689] 8021q: adding VLAN 0 to HW filter on device team0
[  180.631069][ T6930] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.638268][ T6930] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.659884][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.667025][ T5890] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.722104][T10934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1177'.
[  181.095203][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.301441][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.363923][   T55] Bluetooth: hci4: command tx timeout
[  181.522995][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.624130][T10689] 8021q: adding VLAN 0 to HW filter on device batadv0
[  181.902037][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.055116][T10987] lo: entered promiscuous mode
[  182.079014][T10987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  182.133113][T10689] veth0_vlan: entered promiscuous mode
[  182.178760][T10689] veth1_vlan: entered promiscuous mode
[  182.317164][T10689] veth0_macvtap: entered promiscuous mode
[  182.334010][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  182.345869][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  182.363981][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  182.385136][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  182.398643][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  182.408502][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  182.434832][T10689] veth1_macvtap: entered promiscuous mode
[  182.560894][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  182.571919][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.582301][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  182.593321][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.603693][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  182.615094][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.626283][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  182.637266][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.647669][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  182.659077][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.670832][T10689] batman_adv: batadv0: Interface activated: batadv_slave_0
[  182.759095][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.771167][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.822293][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.874914][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.908331][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.939581][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.961141][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.992152][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.008360][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.021403][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.036776][T10689] batman_adv: batadv0: Interface activated: batadv_slave_1
[  183.046877][   T12] bridge_slave_1: left allmulticast mode
[  183.053937][   T12] bridge_slave_1: left promiscuous mode
[  183.062242][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.075473][   T12] bridge_slave_0: left allmulticast mode
[  183.082281][   T12] bridge_slave_0: left promiscuous mode
[  183.088664][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.417084][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  183.429842][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  183.443170][   T12] bond0 (unregistering): Released all slaves
[  183.479624][T11013] syzkaller0: entered allmulticast mode
[  183.504842][T11027] geneve2: entered promiscuous mode
[  183.510941][T11027] geneve2: entered allmulticast mode
[  183.561335][T11001] xfrm0 speed is unknown, defaulting to 1000
[  183.600812][T10689] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.611841][T10689] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.621168][T10689] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.630248][T10689] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.189708][T11062] xt_CT: You must specify a L4 protocol and not use inversions on it
[  184.483632][ T5843] Bluetooth: hci0: command tx timeout
[  185.262396][T11096] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1200'.
[  186.403505][ T5841] Bluetooth: hci1: command 0x0406 tx timeout
[  186.404551][ T5143] Bluetooth: hci3: command 0x0406 tx timeout
[  186.410068][ T5843] Bluetooth: hci2: command 0x0406 tx timeout
[  186.562848][ T5832] Bluetooth: hci0: command tx timeout
[  186.979492][T11136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1204'.
[  187.024964][T11131] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1202'.
[  187.044510][T11135] netlink: 'syz.1.1203': attribute type 11 has an invalid length.
[  187.203329][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'.
[  187.430954][T11154] x_tables: duplicate underflow at hook 1
[  187.467532][T11154] x_tables: duplicate underflow at hook 1
[  187.484395][T11154] x_tables: duplicate underflow at hook 1
[  187.493884][T11154] x_tables: duplicate underflow at hook 1
[  187.570733][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.591825][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.703336][   T12] hsr_slave_0: left promiscuous mode
[  187.714958][   T12] hsr_slave_1: left promiscuous mode
[  187.724275][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.732767][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  187.742136][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.750462][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  187.813964][   T12] veth1_macvtap: left promiscuous mode
[  187.833315][   T12] veth0_macvtap: left promiscuous mode
[  187.840361][   T12] veth1_vlan: left promiscuous mode
[  187.844661][T11168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1209'.
[  187.846043][   T12] veth0_vlan: left promiscuous mode
[  188.320434][   T12] team0 (unregistering): Port device team_slave_1 removed
[  188.365029][   T12] team0 (unregistering): Port device team_slave_0 removed
[  188.642162][ T5832] Bluetooth: hci0: command tx timeout
[  188.793032][ T6931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.838311][ T6931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.868648][T11001] chnl_net:caif_netlink_parms(): no params data found
[  189.083425][T11180] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) !
[  189.092176][T11188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1212'.
[  189.456200][T11001] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.465575][T11001] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.493260][T11001] bridge_slave_0: entered allmulticast mode
[  189.510461][T11001] bridge_slave_0: entered promiscuous mode
[  189.526088][T11001] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.540284][T11001] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.547597][T11001] bridge_slave_1: entered allmulticast mode
[  189.555132][T11001] bridge_slave_1: entered promiscuous mode
[  189.643783][T11214] netlink: 'syz.4.1216': attribute type 1 has an invalid length.
[  189.668704][T11001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  189.678353][T11214] netlink: 134712 bytes leftover after parsing attributes in process `syz.4.1216'.
[  189.679053][T11213] netlink: 'syz.4.1216': attribute type 2 has an invalid length.
[  189.727499][T11001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  189.972941][T11001] team0: Port device team_slave_0 added
[  189.991486][T11001] team0: Port device team_slave_1 added
[  190.023399][T11001] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.030631][T11001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.057060][T11001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.072460][T11001] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.080248][T11001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.107450][T11001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.145556][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.194826][T11001] hsr_slave_0: entered promiscuous mode
[  190.201436][T11001] hsr_slave_1: entered promiscuous mode
[  190.207674][T11001] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  190.222124][T11001] Cannot create hsr debugfs directory
[  190.247041][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.357503][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.460388][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.685281][   T12] bridge_slave_1: left allmulticast mode
[  190.692991][   T12] bridge_slave_1: left promiscuous mode
[  190.700150][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.719641][ T5832] Bluetooth: hci0: command tx timeout
[  190.807907][   T12] bridge_slave_0: left allmulticast mode
[  190.838742][   T12] bridge_slave_0: left promiscuous mode
[  190.844543][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.324384][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  191.336010][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  191.346212][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  191.423126][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  191.431059][   T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  191.438622][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  191.471342][T11270] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1225'.
[  191.703269][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  191.714541][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  191.726561][   T12] bond0 (unregistering): Released all slaves
[  191.956507][T11280] ebt_among: dst integrity fail: 200
[  192.250116][T11286] trusted_key: syz.4.1228 sent an empty control message without MSG_MORE.
[  192.344061][T11295] pim6reg: left allmulticast mode
[  192.406003][T11265] xfrm0 speed is unknown, defaulting to 1000
[  192.428511][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1231'.
[  192.442642][T11001] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  192.460423][T11001] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  192.569731][T11001] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  192.601496][T11001] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  192.865792][   T12] hsr_slave_0: left promiscuous mode
[  192.893522][   T12] hsr_slave_1: left promiscuous mode
[  192.914170][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.938794][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.963741][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.975950][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  193.003114][   T12] veth1_macvtap: left promiscuous mode
[  193.010675][   T12] veth0_macvtap: left promiscuous mode
[  193.016249][   T12] veth1_vlan: left promiscuous mode
[  193.038553][   T12] veth0_vlan: left promiscuous mode
[  193.520078][ T5832] Bluetooth: hci4: command tx timeout
[  193.640649][   T12] team0 (unregistering): Port device team_slave_1 removed
[  193.685284][   T12] team0 (unregistering): Port device team_slave_0 removed
[  194.422045][T11001] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.476181][T11265] chnl_net:caif_netlink_parms(): no params data found
[  194.577157][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  194.637291][T11001] 8021q: adding VLAN 0 to HW filter on device team0
[  194.780971][ T6931] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.788147][ T6931] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.797672][T11265] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.818946][T11265] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.827267][T11265] bridge_slave_0: entered allmulticast mode
[  194.835514][T11265] bridge_slave_0: entered promiscuous mode
[  194.852111][T11362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1244'.
[  194.876947][T11362] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1244'.
[  194.894543][ T6919] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.901845][ T6919] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.942177][T11265] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.966540][T11265] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.989168][T11265] bridge_slave_1: entered allmulticast mode
[  195.007346][T11265] bridge_slave_1: entered promiscuous mode
[  195.140814][T11265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  195.189301][T11265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  195.363236][T11265] team0: Port device team_slave_0 added
[  195.392807][T11265] team0: Port device team_slave_1 added
[  195.471054][T11265] batman_adv: batadv0: Adding interface: batadv_slave_0
[  195.488717][T11265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.532576][T11265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  195.570711][T11265] batman_adv: batadv0: Adding interface: batadv_slave_1
[  195.598791][ T5832] Bluetooth: hci4: command tx timeout
[  195.604924][T11265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.654582][T11265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  195.655564][T11403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1251'.
[  195.689465][T11001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  195.756639][T11265] hsr_slave_0: entered promiscuous mode
[  195.783159][T11265] hsr_slave_1: entered promiscuous mode
[  195.794026][T11265] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  195.807551][T11265] Cannot create hsr debugfs directory
[  196.004183][T11416] xt_l2tp: unknown flags: 18
[  196.171711][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1252'.
[  196.317371][T11001] 8021q: adding VLAN 0 to HW filter on device batadv0
[  196.332274][T11424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1254'.
[  196.539464][T11434] tipc: Can't bind to reserved service type 2
[  196.574995][T11001] veth0_vlan: entered promiscuous mode
[  196.606618][T11436] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  196.679832][T11437] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20003
[  196.876249][T11001] veth1_vlan: entered promiscuous mode
[  196.981946][T11001] veth0_macvtap: entered promiscuous mode
[  197.010263][T11001] veth1_macvtap: entered promiscuous mode
[  197.081968][T11001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.102623][T11001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.121305][T11001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.133042][T11001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.149414][T11001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.179507][T11001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.198940][T11001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.209769][T11001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.236135][T11001] batman_adv: batadv0: Interface activated: batadv_slave_0
[  197.246975][T11472] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1264'.
[  197.360301][T11001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.421328][T11001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.456703][T11001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.478953][T11001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.502730][T11001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.533898][T11001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.555931][T11485] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1265'.
[  197.569512][T11001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.582901][T11001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.595729][T11001] batman_adv: batadv0: Interface activated: batadv_slave_1
[  197.636493][T11265] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  197.646104][T11490] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1265'.
[  197.678830][ T5832] Bluetooth: hci4: command tx timeout
[  197.760991][T11490] infiniband syz1: set active
[  197.775053][T11490] infiniband syz1: set active
[  197.783070][T11265] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  197.801908][T11265] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  197.806702][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1266'.
[  197.823677][T11001] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  197.843259][T11001] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.863501][T11001] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.882914][T11001] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  197.923849][T11265] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  198.176626][T11497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1267'.
[  198.187444][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.197284][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.285740][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.339265][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.397165][T11265] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.478857][T11520] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1271'.
[  198.494626][T11265] 8021q: adding VLAN 0 to HW filter on device team0
[  198.539216][ T6931] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.546352][ T6931] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.605092][ T6931] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.612308][ T6931] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.213796][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.389033][T11521] xfrm0 speed is unknown, defaulting to 1000
[  199.530186][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.599614][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1277'.
[  199.615178][T11265] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.670427][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.758358][ T5832] Bluetooth: hci4: command tx timeout
[  200.000243][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  200.011557][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  200.015878][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.040472][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  200.056636][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  200.075075][   T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  200.083011][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  200.648538][T11265] veth0_vlan: entered promiscuous mode
[  200.662653][   T11] bridge_slave_1: left allmulticast mode
[  200.678318][   T11] bridge_slave_1: left promiscuous mode
[  200.698593][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.744377][   T11] bridge_slave_0: left allmulticast mode
[  200.758963][   T11] bridge_slave_0: left promiscuous mode
[  200.775033][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.232535][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  201.243558][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  201.255005][   T11] bond0 (unregistering): Released all slaves
[  201.296192][T11265] veth1_vlan: entered promiscuous mode
[  201.374041][T11572] xfrm0 speed is unknown, defaulting to 1000
[  201.598838][    C0] Dead loop on virtual device ipvlan1, fix it urgently!
[  201.645343][T11612] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1286'.
[  201.792068][T11265] veth0_macvtap: entered promiscuous mode
[  201.800987][T11265] veth1_macvtap: entered promiscuous mode
[  201.818599][T11265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.829120][T11265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.839311][T11265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.849990][T11265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.859888][T11265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.871066][T11265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.881465][T11265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.892054][T11265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.901956][T11265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.912469][T11265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.923801][T11265] batman_adv: batadv0: Interface activated: batadv_slave_0
[  202.049008][T11265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  202.059933][T11265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.070399][T11265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  202.081610][T11265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.091746][T11265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  202.102434][T11265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.112470][T11265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  202.122956][T11265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.132850][T11265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  202.143337][T11265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.154300][T11265] batman_adv: batadv0: Interface activated: batadv_slave_1
[  202.177014][ T5832] Bluetooth: hci0: command tx timeout
[  202.210825][T11572] chnl_net:caif_netlink_parms(): no params data found
[  202.239357][T11636] netlink: 'syz.1.1291': attribute type 7 has an invalid length.
[  202.280607][T11632] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1290'.
[  202.450780][T11265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  202.460284][T11265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  202.474814][T11265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  202.551718][T11265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.581973][T11650] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  202.862975][T11572] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.879142][T11572] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.907216][T11572] bridge_slave_0: entered allmulticast mode
[  202.929057][T11572] bridge_slave_0: entered promiscuous mode
[  202.953289][T11572] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.969851][T11572] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.990145][T11572] bridge_slave_1: entered allmulticast mode
[  203.005311][T11572] bridge_slave_1: entered promiscuous mode
[  203.052680][   T11] hsr_slave_0: left promiscuous mode
[  203.090348][   T11] hsr_slave_1: left promiscuous mode
[  203.102421][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.118857][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.139741][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.147225][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.238979][   T11] veth1_macvtap: left promiscuous mode
[  203.244506][   T11] veth0_macvtap: left promiscuous mode
[  203.258218][   T11] veth1_vlan: left promiscuous mode
[  203.263917][   T11] veth0_vlan: left promiscuous mode
[  203.789143][   T11] team0 (unregistering): Port device team_slave_1 removed
[  203.855207][   T11] team0 (unregistering): Port device team_slave_0 removed
[  204.244193][ T5832] Bluetooth: hci0: command tx timeout
[  204.424568][T11683] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1300'.
[  204.473663][T11572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  204.546445][T11572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  204.695332][T11711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1305'.
[  204.840667][T11720] x_tables: duplicate underflow at hook 1
[  205.000019][T11572] team0: Port device team_slave_0 added
[  205.004207][T11732] x_tables: duplicate underflow at hook 1
[  205.089682][T11734] netlink: 1264 bytes leftover after parsing attributes in process `syz.1.1308'.
[  205.183006][ T6919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.199391][T11572] team0: Port device team_slave_1 added
[  205.234681][ T6919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.427245][T11572] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.458014][T11572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.516467][T11572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.546887][T11572] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.568455][T11572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.611838][T11572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.710264][T11748] bond0: (slave 
01ªÃøÂFNð¡): Releasing backup interface
[  205.727218][T11748] bond0: (slave bond_slave_1): Releasing backup interface
[  205.742673][T11748] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  205.751327][T11748] batman_adv: batadv0: Removing interface: batadv_slave_0
[  205.761437][T11748] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  205.770116][T11748] batman_adv: batadv0: Removing interface: batadv_slave_1
[  205.884307][ T2119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.900531][ T2119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.974805][T11572] hsr_slave_0: entered promiscuous mode
[  206.001943][T11572] hsr_slave_1: entered promiscuous mode
[  206.017381][T11572] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  206.036200][T11572] Cannot create hsr debugfs directory
[  206.176414][T11776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1317'.
[  206.206121][T11778] netlink: 'syz.2.1317': attribute type 1 has an invalid length.
[  206.269735][T11776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1317'.
[  206.318514][ T5832] Bluetooth: hci0: command tx timeout
[  206.378517][T11782] sock: sock_set_timeout: `syz.4.1318' (pid 11782) tries to set negative timeout
[  206.594308][T11797] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1320'.
[  206.796497][   T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.922342][   T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.143405][   T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.260654][   T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.426761][T11572] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  207.452480][T11572] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  207.463209][   T11] bridge_slave_1: left allmulticast mode
[  207.470035][   T11] bridge_slave_1: left promiscuous mode
[  207.475970][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.490736][   T11] bridge_slave_0: left allmulticast mode
[  207.496705][   T11] bridge_slave_0: left promiscuous mode
[  207.503284][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.942291][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  207.960914][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  207.977000][   T11] bond0 (unregistering): Released all slaves
[  208.000977][T11572] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  208.023385][T11572] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  208.052763][T11819] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1323'.
[  208.097473][T11823] gretap2: entered promiscuous mode
[  208.120709][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  208.128651][T11823] gretap2: entered allmulticast mode
[  208.138189][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  208.150767][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  208.180307][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  208.193594][   T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  208.201837][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  208.398410][ T5832] Bluetooth: hci0: command tx timeout
[  208.632156][T11572] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.687047][T11572] 8021q: adding VLAN 0 to HW filter on device team0
[  208.732147][ T6919] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.739377][ T6919] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.772537][ T2119] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.779751][ T2119] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.803157][T11826] xfrm0 speed is unknown, defaulting to 1000
[  209.054432][   T11] hsr_slave_0: left promiscuous mode
[  209.065461][   T11] hsr_slave_1: left promiscuous mode
[  209.077604][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.094339][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.125084][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.168369][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.268588][   T11] veth1_macvtap: left promiscuous mode
[  209.274179][   T11] veth0_macvtap: left promiscuous mode
[  209.294388][   T11] veth1_vlan: left promiscuous mode
[  209.300536][   T11] veth0_vlan: left promiscuous mode
[  210.025693][   T11] team0 (unregistering): Port device team_slave_1 removed
[  210.071774][   T11] team0 (unregistering): Port device team_slave_0 removed
[  210.243829][ T5832] Bluetooth: hci4: command tx timeout
[  210.948361][T11826] chnl_net:caif_netlink_parms(): no params data found
[  211.195304][T11572] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.322718][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1338'.
[  211.515382][T11826] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.525646][T11826] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.545568][T11826] bridge_slave_0: entered allmulticast mode
[  211.559016][T11826] bridge_slave_0: entered promiscuous mode
[  211.594004][T11826] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.628684][T11826] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.665320][T11826] bridge_slave_1: entered allmulticast mode
[  211.673623][T11826] bridge_slave_1: entered promiscuous mode
[  211.853340][T11826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  211.880745][T11826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  211.927565][T11572] veth0_vlan: entered promiscuous mode
[  211.969073][T11961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1344'.
[  212.034272][T11572] veth1_vlan: entered promiscuous mode
[  212.073549][T11826] team0: Port device team_slave_0 added
[  212.110699][T11826] team0: Port device team_slave_1 added
[  212.250343][T11826] batman_adv: batadv0: Adding interface: batadv_slave_0
[  212.258427][T11826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.311860][T11826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  212.318577][ T5832] Bluetooth: hci4: command tx timeout
[  212.383608][T11826] batman_adv: batadv0: Adding interface: batadv_slave_1
[  212.427920][T11826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.460752][T11826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  212.520195][T11572] veth0_macvtap: entered promiscuous mode
[  212.680271][T11826] hsr_slave_0: entered promiscuous mode
[  212.698699][T11826] hsr_slave_1: entered promiscuous mode
[  212.714078][T11826] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  212.732703][T11826] Cannot create hsr debugfs directory
[  212.823150][T11572] veth1_macvtap: entered promiscuous mode
[  212.911450][T11572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.928592][T11572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.957834][T11572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  213.006770][T11572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.047832][T11572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  213.068353][T11572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.101292][T11572] batman_adv: batadv0: Interface activated: batadv_slave_0
[  213.134217][T12010] TCP: tcp_parse_options: Illegal window scaling value 72 > 14 received
[  213.157094][T11572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.179368][T11572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.200526][T11572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.248346][T11572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.278574][T11572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.313942][T11572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.343177][T11572] batman_adv: batadv0: Interface activated: batadv_slave_1
[  213.385921][T11572] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.410500][T12027] netlink: 'syz.1.1360': attribute type 1 has an invalid length.
[  213.428353][T11572] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.437672][T11572] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.465092][T11572] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.870239][T12044] Cannot find add_set index 1 as target
[  213.951278][ T5890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.966461][ T5890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.036522][ T6919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.047715][ T6919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.352208][T12049] sock: sock_set_timeout: `syz.1.1366' (pid 12049) tries to set negative timeout
[  214.366898][T11826] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  214.398606][ T5832] Bluetooth: hci4: command tx timeout
[  214.425555][T12055] sock: sock_set_timeout: `syz.1.1366' (pid 12055) tries to set negative timeout
[  214.550560][ T6931] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.601567][T11826] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  214.615318][T11826] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  214.653486][T11826] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  214.830193][ T6931] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.969695][ T6931] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.025370][T11826] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.084830][ T6931] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.149387][T11826] 8021q: adding VLAN 0 to HW filter on device team0
[  215.169403][ T6919] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.176576][ T6919] bridge0: port 1(bridge_slave_0) entered forwarding state
[  215.340051][ T6919] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.347182][ T6919] bridge0: port 2(bridge_slave_1) entered forwarding state
[  215.566790][ T6931] bridge_slave_1: left allmulticast mode
[  215.588322][ T6931] bridge_slave_1: left promiscuous mode
[  215.594114][ T6931] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.669046][ T6931] bridge_slave_0: left allmulticast mode
[  215.674759][ T6931] bridge_slave_0: left promiscuous mode
[  215.691724][ T6931] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.971636][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  215.995799][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  216.013547][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  216.035881][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  216.045684][   T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  216.055413][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  216.391315][ T6931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  216.410072][ T6931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.424769][ T6931] bond0 (unregistering): Released all slaves
[  216.444702][T12105] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1373'.
[  216.478509][   T55] Bluetooth: hci4: command tx timeout
[  216.505771][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1374'.
[  216.735470][T12126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1376'.
[  217.228574][T12115] xfrm0 speed is unknown, defaulting to 1000
[  217.519415][ T6931] hsr_slave_0: left promiscuous mode
[  217.525587][ T6931] hsr_slave_1: left promiscuous mode
[  217.565904][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  217.580008][ T6931] batman_adv: batadv0: Removing interface: batadv_slave_0
[  217.596656][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  217.620404][ T6931] batman_adv: batadv0: Removing interface: batadv_slave_1
[  217.675629][ T6931] veth1_macvtap: left promiscuous mode
[  217.683573][ T6931] veth0_macvtap: left promiscuous mode
[  217.694730][ T6931] veth1_vlan: left promiscuous mode
[  217.705927][ T6931] veth0_vlan: left promiscuous mode
[  218.535544][ T6931] team0 (unregistering): Port device team_slave_1 removed
[  218.577443][ T6931] team0 (unregistering): Port device team_slave_0 removed
[  219.037256][T12189] dvmrp0: entered allmulticast mode
[  219.179045][T11826] 8021q: adding VLAN 0 to HW filter on device batadv0
[  219.234953][T11826] veth0_vlan: entered promiscuous mode
[  219.358240][T11826] veth1_vlan: entered promiscuous mode
[  219.381328][T11826] veth0_macvtap: entered promiscuous mode
[  219.390577][T11826] veth1_macvtap: entered promiscuous mode
[  219.446088][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.497795][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.507833][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.533212][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.553804][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.570788][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.582976][T11826] batman_adv: batadv0: Interface activated: batadv_slave_0
[  219.595198][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.605836][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.615747][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.626278][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.636174][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.647543][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.667601][T11826] batman_adv: batadv0: Interface activated: batadv_slave_1
[  219.695865][T11826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.705006][T11826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.714111][T11826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.723083][T11826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.773809][T12115] chnl_net:caif_netlink_parms(): no params data found
[  219.948721][T12223] netlink: 'syz.2.1397': attribute type 5 has an invalid length.
[  219.969877][T12234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1398'.
[  220.017347][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1398'.
[  220.038902][T12228] syzkaller1: entered promiscuous mode
[  220.044416][T12228] syzkaller1: entered allmulticast mode
[  220.295973][T12115] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.303273][T12115] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.338483][T12115] bridge_slave_0: entered allmulticast mode
[  220.345113][T12115] bridge_slave_0: entered promiscuous mode
[  220.373147][T12115] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.392061][T12115] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.407119][T12115] bridge_slave_1: entered allmulticast mode
[  220.423966][T12115] bridge_slave_1: entered promiscuous mode
[  220.431956][T12256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1401'.
[  220.472502][T12255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1401'.
[  220.505577][ T6928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.540840][T12115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  220.550309][ T6928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.590908][T12115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  220.621715][ T6928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.644335][ T6928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.741027][T12115] team0: Port device team_slave_0 added
[  220.805554][T12115] team0: Port device team_slave_1 added
[  221.441562][T12115] batman_adv: batadv0: Adding interface: batadv_slave_0
[  221.468361][T12115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.525932][T12115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  221.544751][T12303] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1411'.
[  221.560293][T12302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  221.569870][T12299] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1410'.
[  221.581777][T12115] batman_adv: batadv0: Adding interface: batadv_slave_1
[  221.593090][T12115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.658311][T12115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  221.752513][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.869974][T12115] hsr_slave_0: entered promiscuous mode
[  221.888673][T12115] hsr_slave_1: entered promiscuous mode
[  221.915706][T12115] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  221.925944][T12115] Cannot create hsr debugfs directory
[  221.949616][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.026841][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.140801][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.433415][   T12] bridge_slave_1: left allmulticast mode
[  222.441998][   T12] bridge_slave_1: left promiscuous mode
[  222.449780][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.460018][   T12] bridge_slave_0: left allmulticast mode
[  222.465703][   T12] bridge_slave_0: left promiscuous mode
[  222.472506][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.816644][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  222.827540][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  222.840019][   T12] bond0 (unregistering): Released all slaves
[  223.521201][T12115] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  223.624712][T12115] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  223.656273][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  223.667086][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  223.677052][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  223.687370][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  223.697636][ T5832] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  223.705595][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  223.730466][T12349] vlan2: entered allmulticast mode
[  223.736077][T12349] bond0: entered allmulticast mode
[  223.785759][T12349] bond_slave_0: entered allmulticast mode
[  223.814931][T12349] bond_slave_1: entered allmulticast mode
[  223.829441][T12349] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  223.847191][T12349] bond0: left allmulticast mode
[  223.854684][T12349] bond_slave_0: left allmulticast mode
[  223.863822][T12349] bond_slave_1: left allmulticast mode
[  223.874895][T12349] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  223.898457][T12115] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  223.937116][   T12] hsr_slave_0: left promiscuous mode
[  224.037971][   T12] hsr_slave_1: left promiscuous mode
[  224.049902][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.057374][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  224.075524][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.087680][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  224.090544][T12363] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1426'.
[  224.108571][T12364] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1426'.
[  224.135219][   T12] veth1_macvtap: left promiscuous mode
[  224.155058][   T12] veth0_macvtap: left promiscuous mode
[  224.161583][   T12] veth1_vlan: left promiscuous mode
[  224.166998][   T12] veth0_vlan: left promiscuous mode
[  224.631481][   T12] team0 (unregistering): Port device team_slave_1 removed
[  224.679838][   T12] team0 (unregistering): Port device team_slave_0 removed
[  225.210486][T12115] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  225.477329][T12115] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.505281][T12389] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.1433'.
[  225.546922][T12389] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.1433'.
[  225.580761][T12115] 8021q: adding VLAN 0 to HW filter on device team0
[  225.611517][T12397] syz.1.1435: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  225.630259][ T5890] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.637401][ T5890] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.671317][T12397] CPU: 1 UID: 0 PID: 12397 Comm: syz.1.1435 Not tainted 6.13.0-rc3-syzkaller-00156-g2b6ffcd7873b #0
[  225.682135][T12397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  225.692201][T12397] Call Trace:
[  225.695478][T12397]  <TASK>
[  225.698403][T12397]  dump_stack_lvl+0x241/0x360
[  225.703086][T12397]  ? __pfx_dump_stack_lvl+0x10/0x10
[  225.708287][T12397]  ? __pfx__printk+0x10/0x10
[  225.712877][T12397]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  225.719295][T12397]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  225.725805][T12397]  warn_alloc+0x278/0x410
[  225.730143][T12397]  ? __vmalloc_node_range_noprof+0x106/0x1380
[  225.736225][T12397]  ? __pfx_warn_alloc+0x10/0x10
[  225.741073][T12397]  ? kasan_save_track+0x3f/0x80
[  225.745922][T12397]  ? __kasan_kmalloc+0x98/0xb0
[  225.750681][T12397]  ? xsk_setsockopt+0x4ea/0x950
[  225.755525][T12397]  ? do_sock_setsockopt+0x3af/0x720
[  225.760722][T12397]  ? __x64_sys_setsockopt+0x1ee/0x280
[  225.766088][T12397]  ? do_syscall_64+0xf3/0x230
[  225.770761][T12397]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.776835][T12397]  __vmalloc_node_range_noprof+0x126/0x1380
[  225.782756][T12397]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  225.789088][T12397]  ? __kasan_kmalloc+0x98/0xb0
[  225.793940][T12397]  vmalloc_user_noprof+0x74/0x80
[  225.798872][T12397]  ? xskq_create+0xb6/0x170
[  225.803457][T12397]  xskq_create+0xb6/0x170
[  225.807782][T12397]  xsk_init_queue+0xa1/0x100
[  225.812370][T12397]  xsk_setsockopt+0x4ea/0x950
[  225.817051][T12397]  ? __pfx_xsk_setsockopt+0x10/0x10
[  225.822251][T12397]  ? __pfx_aa_sk_perm+0x10/0x10
[  225.827121][T12397]  ? aa_sock_opt_perm+0x79/0x120
[  225.832058][T12397]  ? __pfx_xsk_setsockopt+0x10/0x10
[  225.837266][T12397]  do_sock_setsockopt+0x3af/0x720
[  225.842292][T12397]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  225.847841][T12397]  ? __fget_files+0x395/0x410
[  225.852517][T12397]  ? __fget_files+0x2a/0x410
[  225.857107][T12397]  __x64_sys_setsockopt+0x1ee/0x280
[  225.862305][T12397]  do_syscall_64+0xf3/0x230
[  225.866807][T12397]  ? clear_bhb_loop+0x35/0x90
[  225.871500][T12397]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.877413][T12397] RIP: 0033:0x7fcf5c785d29
[  225.881838][T12397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  225.901447][T12397] RSP: 002b:00007fcf5d501038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  225.909861][T12397] RAX: ffffffffffffffda RBX: 00007fcf5c975fa0 RCX: 00007fcf5c785d29
[  225.917828][T12397] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  225.925797][T12397] RBP: 00007fcf5c801aa8 R08: 0000000000000004 R09: 0000000000000000
[  225.933766][T12397] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000
[  225.941734][T12397] R13: 0000000000000000 R14: 00007fcf5c975fa0 R15: 00007fff341da418
[  225.949715][T12397]  </TASK>
[  225.957952][T12397] Mem-Info:
[  225.961139][T12397] active_anon:5628 inactive_anon:0 isolated_anon:0
[  225.961139][T12397]  active_file:1307 inactive_file:38339 isolated_file:0
[  225.961139][T12397]  unevictable:768 dirty:27 writeback:8
[  225.961139][T12397]  slab_reclaimable:10577 slab_unreclaimable:107274
[  225.961139][T12397]  mapped:28585 shmem:1424 pagetables:736
[  225.961139][T12397]  sec_pagetables:0 bounce:0
[  225.961139][T12397]  kernel_misc_reclaimable:0
[  225.961139][T12397]  free:1330795 free_pcp:663 free_cma:0
[  226.007836][   T55] Bluetooth: hci4: command tx timeout
[  226.061728][T12397] Node 0 active_anon:22612kB inactive_anon:0kB active_file:5228kB inactive_file:153284kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114340kB dirty:108kB writeback:32kB shmem:4160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12640kB pagetables:2944kB sec_pagetables:0kB all_unreclaimable? no
[  226.094707][T12398] netlink: 'syz.1.1435': attribute type 3 has an invalid length.
[  226.096057][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.110802][ T5890] bridge0: port 2(bridge_slave_1) entered forwarding state
[  226.126260][T12397] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  226.128337][T12351] xfrm0 speed is unknown, defaulting to 1000
[  226.167297][T12397] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  226.299064][T12397] lowmem_reserve[]: 0 2465 2466 0 0
[  226.304378][T12397] Node 0 DMA32 free:1398532kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:22748kB inactive_anon:0kB active_file:5228kB inactive_file:152460kB unevictable:1536kB writepending:140kB present:3129332kB managed:2552784kB mlocked:0kB bounce:0kB free_pcp:2324kB local_pcp:1304kB free_cma:0kB
[  226.383863][T12397] lowmem_reserve[]: 0 0 0 0 0
[  226.399119][T12397] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  226.494748][T12401] xfrm0 speed is unknown, defaulting to 1000
[  226.508894][T12397] lowmem_reserve[]: 0 0 0 0 0
[  226.518886][T12397] Node 1 Normal free:3908600kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB
[  226.552780][T12397] lowmem_reserve[]: 0 0 0 0 0
[  226.557578][T12397] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  226.571471][T12397] Node 0 DMA32: 14*4kB (U) 15*8kB (UME) 7*16kB (UME) 138*32kB (UME) 100*64kB (UM) 38*128kB (UME) 17*256kB (UME) 10*512kB (UME) 16*1024kB (U) 4*2048kB (UM) 329*4096kB (ME) = 1397600kB
[  226.590851][T12414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1439'.
[  226.605120][T12397] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  226.622547][T12397] Node 1 Normal: 152*4kB (UME) 63*8kB (UME) 50*16kB (UME) 210*32kB (UME) 93*64kB (UME) 38*128kB (UME) 16*256kB (UME) 8*512kB (UM) 2*1024kB (UM) 4*2048kB (U) 945*4096kB (M) = 3908600kB
[  226.647009][T12397] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  226.668526][T12397] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  226.703355][T12397] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  226.719568][T12397] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  226.737483][T12351] chnl_net:caif_netlink_parms(): no params data found
[  226.775851][T12397] 41074 total pagecache pages
[  226.790489][T12397] 0 pages in swap cache
[  226.819582][T12397] Free swap  = 124996kB
[  226.824869][T12397] Total swap = 124996kB
[  226.829922][T12397] 2097051 pages RAM
[  226.833884][T12397] 0 pages HighMem/MovableOnly
[  226.840806][T12397] 427005 pages reserved
[  226.845182][T12397] 0 pages cma reserved
[  226.905041][T12115] 8021q: adding VLAN 0 to HW filter on device batadv0
[  226.946399][T12115] veth0_vlan: entered promiscuous mode
[  227.039732][T12431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1443'.
[  227.060239][T12431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1443'.
[  227.086742][T12115] veth1_vlan: entered promiscuous mode
[  227.216457][T12351] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.253119][T12351] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.277630][T12351] bridge_slave_0: entered allmulticast mode
[  227.315301][T12351] bridge_slave_0: entered promiscuous mode
[  227.337453][T12351] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.346640][T12351] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.365617][T12351] bridge_slave_1: entered allmulticast mode
[  227.373637][T12351] bridge_slave_1: entered promiscuous mode
[  227.521342][T12351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.554372][T12351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  227.588579][T12115] veth0_macvtap: entered promiscuous mode
[  227.680316][T12351] team0: Port device team_slave_0 added
[  227.690531][T12351] team0: Port device team_slave_1 added
[  227.709929][T12115] veth1_macvtap: entered promiscuous mode
[  227.796400][T12437] xfrm0 speed is unknown, defaulting to 1000
[  227.833700][T12351] batman_adv: batadv0: Adding interface: batadv_slave_0
[  227.870598][T12351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.951488][T12351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  228.005354][T12115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.029431][T12115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.042019][T12115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.056529][T12115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.075660][T12115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.088338][   T55] Bluetooth: hci4: command tx timeout
[  228.094983][T12115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.128963][T12115] batman_adv: batadv0: Interface activated: batadv_slave_0
[  228.206501][T12351] batman_adv: batadv0: Adding interface: batadv_slave_1
[  228.236057][T12351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.266211][T12351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  228.384741][T12477] infiniband syz1: set active
[  228.389968][T12477] infiniband syz1: set active
[  228.401105][T12115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.422955][T12115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.443201][T12115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.463815][T12115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.475804][T12115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.489930][T12115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.501924][T12115] batman_adv: batadv0: Interface activated: batadv_slave_1
[  228.525482][T12351] hsr_slave_0: entered promiscuous mode
[  228.532934][T12351] hsr_slave_1: entered promiscuous mode
[  228.540162][T12351] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  228.548884][T12351] Cannot create hsr debugfs directory
[  228.566994][ T6928] infiniband syz1: set active
[  228.652689][T12477] infiniband syz1: set active
[  228.664315][T12477] infiniband syz1: set active
[  228.686528][T12115] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  228.699708][    T9] Dead loop on virtual device ipvlan1, fix it urgently!
[  228.704330][T12115] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  228.716975][T12115] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.729113][T12115] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  228.770744][ T6928] infiniband syz1: set active
[  229.028644][ T5881] Dead loop on virtual device ipvlan1, fix it urgently!
[  229.065037][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.106495][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.326101][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.411480][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.453025][T12505] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1462'.
[  229.693736][T12509] bridge2: entered promiscuous mode
[  229.706171][T12509] bridge2: entered allmulticast mode
[  229.815267][T12522] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1469'.
[  229.841848][T12522] openvswitch: netlink: Flow key attr not present in new flow.
[  230.158315][   T55] Bluetooth: hci4: command tx timeout
[  230.277042][ T6928] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.334170][T12539] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1474'.
[  230.445326][T12539] xt_time: unknown flags 0x4
[  230.453858][ T6928] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.473955][T12351] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  230.491844][T12351] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  230.507088][T12351] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  230.527303][T12351] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  230.583013][ T6928] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.690211][ T6928] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.807612][T12351] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.866052][T12351] 8021q: adding VLAN 0 to HW filter on device team0
[  230.919268][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.926501][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.957079][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.964279][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.984199][ T6928] bridge_slave_1: left allmulticast mode
[  230.990346][ T6928] bridge_slave_1: left promiscuous mode
[  230.999635][ T6928] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.020301][ T6928] bridge_slave_0: left allmulticast mode
[  231.026086][ T6928] bridge_slave_0: left promiscuous mode
[  231.042679][ T6928] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.247035][T12570] Cannot find del_set index 17 as target
[  231.270298][T12570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1476'.
[  231.428788][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  231.440064][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  231.448872][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  231.458942][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  231.469060][ T5832] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  231.479320][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  231.536140][T12580] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.643632][T12578] sctp: [Deprecated]: syz.4.1476 (pid 12578) Use of int in maxseg socket option.
[  231.643632][T12578] Use struct sctp_assoc_value instead
[  232.006153][ T6928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  232.025454][ T6928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  232.045475][ T6928] bond0 (unregistering): Released all slaves
[  232.083656][T12570] bridge3: entered promiscuous mode
[  232.099690][T12570] bridge3: entered allmulticast mode
[  232.241189][ T5832] Bluetooth: hci4: command tx timeout
[  232.486986][T12351] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  232.503297][T12351] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  232.553038][T12575] xfrm0 speed is unknown, defaulting to 1000
[  232.898644][T12621] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  233.093305][T12639] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1483'.
[  233.148871][ T6928] hsr_slave_0: left promiscuous mode
[  233.163868][ T6928] hsr_slave_1: left promiscuous mode
[  233.171569][ T6928] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  233.188281][ T6928] batman_adv: batadv0: Removing interface: batadv_slave_0
[  233.222007][ T6928] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  233.234780][ T6928] batman_adv: batadv0: Removing interface: batadv_slave_1
[  233.271760][ T6928] veth1_macvtap: left promiscuous mode
[  233.277419][ T6928] veth0_macvtap: left promiscuous mode
[  233.285288][ T6928] veth1_vlan: left promiscuous mode
[  233.309298][ T6928] veth0_vlan: left promiscuous mode
[  233.518244][ T5832] Bluetooth: hci0: command tx timeout
[  233.608452][    C0] Dead loop on virtual device ipvlan1, fix it urgently!
[  233.953200][ T6928] team0 (unregistering): Port device team_slave_1 removed
[  233.996176][ T6928] team0 (unregistering): Port device team_slave_0 removed
[  234.412049][T12665] netlink: 'syz.4.1489': attribute type 21 has an invalid length.
[  234.431348][T12665] netlink: 'syz.4.1489': attribute type 20 has an invalid length.
[  234.451480][T12351] 8021q: adding VLAN 0 to HW filter on device batadv0
[  234.482055][T12575] chnl_net:caif_netlink_parms(): no params data found
[  234.627893][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1490'.
[  234.716809][T12351] veth0_vlan: entered promiscuous mode
[  234.834366][T12676] sit1: entered promiscuous mode
[  234.845617][T12676] sit1: entered allmulticast mode
[  234.879313][T12575] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.886467][T12575] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.906105][T12575] bridge_slave_0: entered allmulticast mode
[  234.943289][T12575] bridge_slave_0: entered promiscuous mode
[  235.000229][T12351] veth1_vlan: entered promiscuous mode
[  235.006915][T12575] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.016899][T12575] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.024907][T12575] bridge_slave_1: entered allmulticast mode
[  235.032617][T12575] bridge_slave_1: entered promiscuous mode
[  235.130704][T12575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  235.163134][T12575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.273081][T12575] team0: Port device team_slave_0 added
[  235.325404][T12351] veth0_macvtap: entered promiscuous mode
[  235.351422][T12575] team0: Port device team_slave_1 added
[  235.421519][T12575] batman_adv: batadv0: Adding interface: batadv_slave_0
[  235.438610][T12575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.518682][T12575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  235.544437][T12351] veth1_macvtap: entered promiscuous mode
[  235.569247][T12575] batman_adv: batadv0: Adding interface: batadv_slave_1
[  235.576239][T12575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.602958][ T5832] Bluetooth: hci0: command tx timeout
[  235.638111][T12575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  235.663775][T12351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.692085][T12351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.706744][T12351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.720123][T12351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.736122][T12351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.740522][T12711] netlink: 'syz.4.1497': attribute type 12 has an invalid length.
[  235.750771][T12351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.779510][T12351] batman_adv: batadv0: Interface activated: batadv_slave_0
[  235.835853][T12575] hsr_slave_0: entered promiscuous mode
[  235.849638][T12575] hsr_slave_1: entered promiscuous mode
[  235.865577][T12575] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  235.883970][T12575] Cannot create hsr debugfs directory
[  235.935901][T12351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.951277][T12351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.978894][T12351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.003168][T12351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.014086][T12351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.025517][T12351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.037445][T12351] batman_adv: batadv0: Interface activated: batadv_slave_1
[  236.205654][T12351] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  236.230792][T12351] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  236.242250][T12351] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  236.258606][T12351] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  236.365931][T12729] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1503'.
[  236.385101][T12729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1503'.
[  236.389285][T12731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1504'.
[  236.491355][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1504'.
[  236.502222][T12731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1504'.
[  236.765772][ T6925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.782716][ T6925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.871088][ T5890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.902633][ T5890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.063049][T12755] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  237.086951][T12755] syzkaller0: mtu less than device minimum
[  237.317180][T12766] ieee802154 phy1 wpan1: encryption failed: -90
[  237.340846][T12575] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  237.419143][T12575] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  237.462066][T12575] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  237.512517][T12575] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  237.602440][ T6919] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.679402][ T5832] Bluetooth: hci0: command tx timeout
[  237.762119][ T6919] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.860848][T12575] 8021q: adding VLAN 0 to HW filter on device bond0
[  237.901774][T12575] 8021q: adding VLAN 0 to HW filter on device team0
[  237.925605][ T2119] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.932805][ T2119] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.958591][ T2119] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.965744][ T2119] bridge0: port 2(bridge_slave_1) entered forwarding state
[  238.026470][ T6919] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.115660][ T6919] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.292512][ T6919] bridge_slave_1: left allmulticast mode
[  238.299003][ T6919] bridge_slave_1: left promiscuous mode
[  238.305005][ T6919] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.326183][ T6919] bridge_slave_0: left allmulticast mode
[  238.333701][ T6919] bridge_slave_0: left promiscuous mode
[  238.340609][ T6919] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.693380][ T6919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  238.704904][ T6919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  238.715499][ T6919] bond0 (unregistering): Released all slaves
[  238.785263][T12575] 8021q: adding VLAN 0 to HW filter on device batadv0
[  238.932855][T12575] veth0_vlan: entered promiscuous mode
[  239.009897][T12575] veth1_vlan: entered promiscuous mode
[  239.246963][T12823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1512'.
[  239.330508][T12575] veth0_macvtap: entered promiscuous mode
[  239.331009][T12826] xt_l2tp: missing protocol rule (udp|l2tpip)
[  239.417581][T12575] veth1_macvtap: entered promiscuous mode
[  239.530775][T12575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.544694][T12575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.554684][T12575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.565258][T12575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.575200][T12575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.585840][T12575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.595767][T12575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.606278][T12575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.617372][T12575] batman_adv: batadv0: Interface activated: batadv_slave_0
[  239.641999][T12575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.652704][T12575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.662745][T12575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.673380][T12575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.683443][T12575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.693985][T12575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.703961][T12575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.714483][T12575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.725444][T12575] batman_adv: batadv0: Interface activated: batadv_slave_1
[  239.797437][ T5832] Bluetooth: hci0: command tx timeout
[  239.815403][ T6919] hsr_slave_0: left promiscuous mode
[  239.853530][ T6919] hsr_slave_1: left promiscuous mode
[  239.873478][ T6919] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  239.891137][ T6919] batman_adv: batadv0: Removing interface: batadv_slave_0
[  239.898479][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  239.906762][ T6919] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  239.915918][ T6919] batman_adv: batadv0: Removing interface: batadv_slave_1
[  239.920747][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  239.932308][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  239.941544][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  239.949900][   T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  239.965749][ T6919] veth1_macvtap: left promiscuous mode
[  239.965806][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  239.980086][ T6919] veth0_macvtap: left promiscuous mode
[  239.985940][ T6919] veth1_vlan: left promiscuous mode
[  239.992311][ T6919] veth0_vlan: left promiscuous mode
[  240.226717][T12839] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1517'.
[  240.577524][ T6919] team0 (unregistering): Port device team_slave_1 removed
[  240.621203][ T6919] team0 (unregistering): Port device team_slave_0 removed
[  241.029979][T12834] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  241.085447][T12825] xfrm0 speed is unknown, defaulting to 1000
[  241.129889][T12828] geneve2: entered promiscuous mode
[  241.135166][T12828] geneve2: entered allmulticast mode
[  241.207369][T12575] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  241.244489][T12575] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  241.264426][T12575] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  241.274608][T12575] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  241.352045][T12845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1518'.
[  241.507511][T12835] xfrm0 speed is unknown, defaulting to 1000
[  241.858039][ T6925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.874910][ T6925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.934789][T12869] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1521'.
[  242.054338][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.072017][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.089631][ T5837] Bluetooth: hci4: command tx timeout
[  242.531303][T12835] chnl_net:caif_netlink_parms(): no params data found
[  242.659276][T12905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  242.908809][ T2119] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.994991][T12835] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.019066][T12835] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.027425][T12835] bridge_slave_0: entered allmulticast mode
[  243.056009][T12835] bridge_slave_0: entered promiscuous mode
[  243.093650][ T2119] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.113413][T12835] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.121894][T12835] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.130336][T12835] bridge_slave_1: entered allmulticast mode
[  243.136965][T12835] bridge_slave_1: entered promiscuous mode
[  243.201221][ T2119] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.253261][T12835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  243.265949][T12835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  243.297556][ T2119] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.326117][T12835] team0: Port device team_slave_0 added
[  243.335213][T12835] team0: Port device team_slave_1 added
[  243.362955][T12835] batman_adv: batadv0: Adding interface: batadv_slave_0
[  243.371167][T12835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.398491][T12835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  243.422601][T12835] batman_adv: batadv0: Adding interface: batadv_slave_1
[  243.432383][T12835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.459438][T12835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  243.540652][T12835] hsr_slave_0: entered promiscuous mode
[  243.555307][T12835] hsr_slave_1: entered promiscuous mode
[  243.564270][T12835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  243.572668][T12835] Cannot create hsr debugfs directory
[  243.643840][ T2119] bridge_slave_1: left allmulticast mode
[  243.651466][ T2119] bridge_slave_1: left promiscuous mode
[  243.658887][ T2119] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.795385][ T2119] bridge_slave_0: left allmulticast mode
[  243.826767][ T2119] bridge_slave_0: left promiscuous mode
[  243.849637][ T2119] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.168112][ T5837] Bluetooth: hci4: command tx timeout
[  244.373274][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  244.384081][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  244.393328][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  244.405494][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  244.413249][ T5832] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  244.424304][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  244.447656][T12956] xt_bpf: check failed: parse error
[  244.700601][ T2119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  244.711490][ T2119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  244.723535][ T2119] bond0 (unregistering): Released all slaves
[  244.750402][T12961] netlink: 'syz.4.1538': attribute type 10 has an invalid length.
[  244.879189][T12961] syz_tun: entered promiscuous mode
[  244.898990][T12961] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  245.107057][T12969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1542'.
[  245.178440][T12969] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  245.198285][T12969] batman_adv: batadv0: Removing interface: batadv_slave_0
[  245.223211][T12969] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  245.236565][T12969] batman_adv: batadv0: Removing interface: batadv_slave_1
[  245.571351][T12982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1548'.
[  245.847510][T12982] infiniband syz1: set down
[  246.031110][T12982] veth1_vlan (unregistering): left allmulticast mode
[  246.090110][T12982] bond0: (slave macvlan0): Releasing backup interface
[  246.171435][T12952] xfrm0 speed is unknown, defaulting to 1000
[  246.215248][ T5890] smc: removing ib device syz1
[  246.251623][ T5832] Bluetooth: hci4: command tx timeout
[  246.322602][ T5881] ==================================================================
[  246.330726][ T5881] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190
[  246.339514][ T5881] Read of size 8 at addr ffff88805c7a62e8 by task kworker/0:6/5881
[  246.347428][ T5881] 
[  246.349768][ T5881] CPU: 0 UID: 0 PID: 5881 Comm: kworker/0:6 Not tainted 6.13.0-rc3-syzkaller-00156-g2b6ffcd7873b #0
[  246.360545][ T5881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  246.370623][ T5881] Workqueue: events smc_ib_port_event_work
[  246.376488][ T5881] Call Trace:
[  246.379780][ T5881]  <TASK>
[  246.382711][ T5881]  dump_stack_lvl+0x241/0x360
[  246.387395][ T5881]  ? __pfx_dump_stack_lvl+0x10/0x10
[  246.392614][ T5881]  ? __pfx__printk+0x10/0x10
[  246.397198][ T5881]  ? _printk+0xd5/0x120
[  246.401348][ T5881]  ? __virt_addr_valid+0x183/0x530
[  246.406453][ T5881]  ? __virt_addr_valid+0x183/0x530
[  246.411560][ T5881]  print_report+0x169/0x550
[  246.416057][ T5881]  ? __virt_addr_valid+0x183/0x530
[  246.421158][ T5881]  ? __virt_addr_valid+0x183/0x530
[  246.426264][ T5881]  ? __virt_addr_valid+0x45f/0x530
[  246.431367][ T5881]  ? __phys_addr+0xba/0x170
[  246.435864][ T5881]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  246.441851][ T5881]  kasan_report+0x143/0x180
[  246.446374][ T5881]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  246.452439][ T5881]  __ethtool_get_link_ksettings+0x6e/0x190
[  246.458245][ T5881]  ib_get_eth_speed+0x160/0x800
[  246.463094][ T5881]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  246.468461][ T5881]  ? rxe_query_port+0x4f/0x260
[  246.473219][ T5881]  rxe_query_port+0x76/0x260
[  246.477807][ T5881]  ib_query_port+0x166/0x7d0
[  246.482399][ T5881]  smc_ib_port_event_work+0x14e/0xa50
[  246.487780][ T5881]  ? process_scheduled_works+0x976/0x1840
[  246.493515][ T5881]  process_scheduled_works+0xa66/0x1840
[  246.499059][ T5881]  ? __pfx_process_scheduled_works+0x10/0x10
[  246.505027][ T5881]  ? assign_work+0x364/0x3d0
[  246.509610][ T5881]  worker_thread+0x870/0xd30
[  246.514196][ T5881]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  246.520084][ T5881]  ? __kthread_parkme+0x169/0x1d0
[  246.525107][ T5881]  ? __pfx_worker_thread+0x10/0x10
[  246.530214][ T5881]  kthread+0x2f0/0x390
[  246.534285][ T5881]  ? __pfx_worker_thread+0x10/0x10
[  246.539387][ T5881]  ? __pfx_kthread+0x10/0x10
[  246.543973][ T5881]  ret_from_fork+0x4b/0x80
[  246.548377][ T5881]  ? __pfx_kthread+0x10/0x10
[  246.552959][ T5881]  ret_from_fork_asm+0x1a/0x30
[  246.557715][ T5881]  </TASK>
[  246.560726][ T5881] 
[  246.563037][ T5881] Allocated by task 5827:
[  246.567347][ T5881]  kasan_save_track+0x3f/0x80
[  246.572022][ T5881]  __kasan_kmalloc+0x98/0xb0
[  246.576600][ T5881]  __kmalloc_node_noprof+0x290/0x4d0
[  246.581879][ T5881]  __kvmalloc_node_noprof+0x72/0x190
[  246.587151][ T5881]  alloc_netdev_mqs+0xa4/0x1080
[  246.591995][ T5881]  rtnl_create_link+0x2f9/0xc20
[  246.596834][ T5881]  rtnl_newlink_create+0x210/0xa40
[  246.601938][ T5881]  rtnl_newlink+0x1c7e/0x2210
[  246.606605][ T5881]  rtnetlink_rcv_msg+0x791/0xcf0
[  246.611538][ T5881]  netlink_rcv_skb+0x1e3/0x430
[  246.616312][ T5881]  netlink_unicast+0x7f6/0x990
[  246.621095][ T5881]  netlink_sendmsg+0x8e4/0xcb0
[  246.625865][ T5881]  __sock_sendmsg+0x221/0x270
[  246.630543][ T5881]  __sys_sendto+0x363/0x4c0
[  246.635035][ T5881]  __x64_sys_sendto+0xde/0x100
[  246.639805][ T5881]  do_syscall_64+0xf3/0x230
[  246.644299][ T5881]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.650188][ T5881] 
[  246.652496][ T5881] Freed by task 12982:
[  246.656545][ T5881]  kasan_save_track+0x3f/0x80
[  246.661211][ T5881]  kasan_save_free_info+0x40/0x50
[  246.666227][ T5881]  __kasan_slab_free+0x59/0x70
[  246.670996][ T5881]  kfree+0x196/0x430
[  246.674895][ T5881]  device_release+0x99/0x1c0
[  246.679480][ T5881]  kobject_put+0x22f/0x480
[  246.683892][ T5881]  netdev_run_todo+0xe79/0x1000
[  246.688732][ T5881]  rtnl_dellink+0x760/0x8d0
[  246.693224][ T5881]  rtnetlink_rcv_msg+0x791/0xcf0
[  246.698154][ T5881]  netlink_rcv_skb+0x1e3/0x430
[  246.702915][ T5881]  netlink_unicast+0x7f6/0x990
[  246.707670][ T5881]  netlink_sendmsg+0x8e4/0xcb0
[  246.712429][ T5881]  __sock_sendmsg+0x221/0x270
[  246.717098][ T5881]  ____sys_sendmsg+0x52a/0x7e0
[  246.721856][ T5881]  __sys_sendmsg+0x269/0x350
[  246.726440][ T5881]  do_syscall_64+0xf3/0x230
[  246.730937][ T5881]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.736836][ T5881] 
[  246.739146][ T5881] The buggy address belongs to the object at ffff88805c7a6000
[  246.739146][ T5881]  which belongs to the cache kmalloc-cg-4k of size 4096
[  246.753450][ T5881] The buggy address is located 744 bytes inside of
[  246.753450][ T5881]  freed 4096-byte region [ffff88805c7a6000, ffff88805c7a7000)
[  246.767325][ T5881] 
[  246.769640][ T5881] The buggy address belongs to the physical page:
[  246.776038][ T5881] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5c7a0
[  246.784786][ T5881] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  246.793269][ T5881] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  246.800803][ T5881] page_type: f5(slab)
[  246.804775][ T5881] raw: 00fff00000000040 ffff88801ac4f500 dead000000000122 0000000000000000
[  246.813343][ T5881] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000
[  246.821927][ T5881] head: 00fff00000000040 ffff88801ac4f500 dead000000000122 0000000000000000
[  246.830583][ T5881] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000
[  246.839239][ T5881] head: 00fff00000000003 ffffea000171e801 ffffffffffffffff 0000000000000000
[  246.847901][ T5881] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  246.856559][ T5881] page dumped because: kasan: bad access detected
[  246.862993][ T5881] page_owner tracks the page as allocated
[  246.868701][ T5881] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5827, tgid 5827 (syz-executor), ts 63591141439, free_ts 16343652539
[  246.890060][ T5881]  post_alloc_hook+0x1f3/0x230
[  246.894824][ T5881]  get_page_from_freelist+0x365c/0x37a0
[  246.900356][ T5881]  __alloc_pages_noprof+0x292/0x710
[  246.905539][ T5881]  alloc_pages_mpol_noprof+0x3e8/0x680
[  246.910984][ T5881]  alloc_slab_page+0x6a/0x110
[  246.915650][ T5881]  allocate_slab+0x5a/0x2b0
[  246.920147][ T5881]  ___slab_alloc+0xc27/0x14a0
[  246.924838][ T5881]  __slab_alloc+0x58/0xa0
[  246.929173][ T5881]  __kmalloc_cache_noprof+0x27b/0x390
[  246.934545][ T5881]  ipv6_add_dev+0x570/0x1220
[  246.939134][ T5881]  addrconf_notify+0x6a7/0x1020
[  246.943975][ T5881]  notifier_call_chain+0x1a5/0x3f0
[  246.949075][ T5881]  register_netdevice+0x167f/0x1b00
[  246.954258][ T5881]  virt_wifi_newlink+0x3ba/0x7c0
[  246.959185][ T5881]  rtnl_newlink_create+0x2ee/0xa40
[  246.964288][ T5881]  rtnl_newlink+0x1c7e/0x2210
[  246.968952][ T5881] page last free pid 1 tgid 1 stack trace:
[  246.974737][ T5881]  free_unref_page+0xd3f/0x1010
[  246.979581][ T5881]  free_contig_range+0x14c/0x430
[  246.984504][ T5881]  destroy_args+0x92/0x910
[  246.988908][ T5881]  debug_vm_pgtable+0x4be/0x550
[  246.993745][ T5881]  do_one_initcall+0x248/0x870
[  246.998499][ T5881]  do_initcall_level+0x157/0x210
[  247.003424][ T5881]  do_initcalls+0x3f/0x80
[  247.007742][ T5881]  kernel_init_freeable+0x435/0x5d0
[  247.012938][ T5881]  kernel_init+0x1d/0x2b0
[  247.017253][ T5881]  ret_from_fork+0x4b/0x80
[  247.021659][ T5881]  ret_from_fork_asm+0x1a/0x30
[  247.026409][ T5881] 
[  247.028718][ T5881] Memory state around the buggy address:
[  247.034332][ T5881]  ffff88805c7a6180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  247.042381][ T5881]  ffff88805c7a6200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  247.050428][ T5881] >ffff88805c7a6280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  247.058469][ T5881]                                                           ^
[  247.065907][ T5881]  ffff88805c7a6300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  247.073954][ T5881]  ffff88805c7a6380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  247.081999][ T5881] ==================================================================
[  247.095175][ T5832] Bluetooth: hci0: command tx timeout
[  247.141754][ T5881] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  247.148986][ T5881] CPU: 0 UID: 0 PID: 5881 Comm: kworker/0:6 Not tainted 6.13.0-rc3-syzkaller-00156-g2b6ffcd7873b #0
[  247.159759][ T5881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  247.169811][ T5881] Workqueue: events smc_ib_port_event_work
[  247.175621][ T5881] Call Trace:
[  247.178887][ T5881]  <TASK>
[  247.181807][ T5881]  dump_stack_lvl+0x241/0x360
[  247.186476][ T5881]  ? __pfx_dump_stack_lvl+0x10/0x10
[  247.191663][ T5881]  ? __pfx__printk+0x10/0x10
[  247.196245][ T5881]  ? preempt_schedule+0xe1/0xf0
[  247.201091][ T5881]  ? vscnprintf+0x5d/0x90
[  247.205412][ T5881]  panic+0x349/0x880
[  247.209299][ T5881]  ? check_panic_on_warn+0x21/0xb0
[  247.214400][ T5881]  ? __pfx_panic+0x10/0x10
[  247.218809][ T5881]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[  247.224782][ T5881]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  247.231101][ T5881]  ? print_report+0x502/0x550
[  247.235771][ T5881]  check_panic_on_warn+0x86/0xb0
[  247.240700][ T5881]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  247.246667][ T5881]  end_report+0x77/0x160
[  247.250897][ T5881]  kasan_report+0x154/0x180
[  247.255390][ T5881]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  247.261366][ T5881]  __ethtool_get_link_ksettings+0x6e/0x190
[  247.267160][ T5881]  ib_get_eth_speed+0x160/0x800
[  247.272008][ T5881]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  247.277375][ T5881]  ? rxe_query_port+0x4f/0x260
[  247.282132][ T5881]  rxe_query_port+0x76/0x260
[  247.286715][ T5881]  ib_query_port+0x166/0x7d0
[  247.291294][ T5881]  smc_ib_port_event_work+0x14e/0xa50
[  247.296659][ T5881]  ? process_scheduled_works+0x976/0x1840
[  247.302368][ T5881]  process_scheduled_works+0xa66/0x1840
[  247.307920][ T5881]  ? __pfx_process_scheduled_works+0x10/0x10
[  247.313901][ T5881]  ? assign_work+0x364/0x3d0
[  247.318480][ T5881]  worker_thread+0x870/0xd30
[  247.323061][ T5881]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  247.328948][ T5881]  ? __kthread_parkme+0x169/0x1d0
[  247.333968][ T5881]  ? __pfx_worker_thread+0x10/0x10
[  247.339074][ T5881]  kthread+0x2f0/0x390
[  247.343131][ T5881]  ? __pfx_worker_thread+0x10/0x10
[  247.348228][ T5881]  ? __pfx_kthread+0x10/0x10
[  247.352806][ T5881]  ret_from_fork+0x4b/0x80
[  247.357210][ T5881]  ? __pfx_kthread+0x10/0x10
[  247.361790][ T5881]  ret_from_fork_asm+0x1a/0x30
[  247.366546][ T5881]  </TASK>
[  247.369804][ T5881] Kernel Offset: disabled
[  247.374119][ T5881] Rebooting in 86400 seconds..