last executing test programs:

1m26.888022587s ago: executing program 2 (id=636):
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xfff7e000)

1m13.899142505s ago: executing program 2 (id=636):
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xfff7e000)

1m3.315874009s ago: executing program 2 (id=636):
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xfff7e000)

58.522994841s ago: executing program 0 (id=1161):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000040), 0x40000000000029d, 0x832b, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@bridge_dellink={0x2c, 0x11, 0x0, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r2, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@allocspi={0x150, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@broadcast}, {@in=@dev, 0x0, 0x6c}, @in6=@mcast2}, 0x0, 0x7fff}, [@migrate={0x50, 0x11, [{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in, @in6=@empty, @in6=@local}]}, @proto={0x5, 0x1b}]}, 0x150}}, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r4 = socket(0x40000000015, 0x5, 0x3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000280)={0x1, [<r7=>0x0]}, &(0x7f00000002c0)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={r7, 0x1}, 0x8)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf2505000000090000000d0001007564703a73797a32000000000c0002800800040006000000"], 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0xe02, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socket(0x28, 0x5, 0x0)
accept$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14)
epoll_create(0x3ff)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)

58.326046015s ago: executing program 0 (id=1163):
socket$l2tp(0x2, 0x2, 0x73) (async)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0xfffe, @dev, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {@rand_addr, 0x200}, {@multicast2}, {@local}, {@local}, {@empty}]}]}}}}}}}, 0x0) (async)
socket$rds(0x15, 0x5, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2a8, 0xf0, 0x5802, 0x294, 0xf0, 0x294, 0x1d8, 0x378, 0x378, 0x1d8, 0x378, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @private0, [], [], 'macvtap0\x00', 'vlan1\x00', {}, {}, 0x0, 0x0, 0x9}, 0x0, 0xa8, 0xf0, 0x52020000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x0, 0x6536, 0xdfc, 0x25676d1d, 0x1000, 0x1ff, 0x81]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000001c0), &(0x7f0000000200)=r5}, 0x20) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x27, 0x0, 0x120, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x44, r9, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r7], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)

53.381123927s ago: executing program 2 (id=636):
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xfff7e000)

50.265928152s ago: executing program 0 (id=1163):
socket$l2tp(0x2, 0x2, 0x73) (async)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0xfffe, @dev, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {@rand_addr, 0x200}, {@multicast2}, {@local}, {@local}, {@empty}]}]}}}}}}}, 0x0) (async)
socket$rds(0x15, 0x5, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2a8, 0xf0, 0x5802, 0x294, 0xf0, 0x294, 0x1d8, 0x378, 0x378, 0x1d8, 0x378, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @private0, [], [], 'macvtap0\x00', 'vlan1\x00', {}, {}, 0x0, 0x0, 0x9}, 0x0, 0xa8, 0xf0, 0x52020000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x0, 0x6536, 0xdfc, 0x25676d1d, 0x1000, 0x1ff, 0x81]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000001c0), &(0x7f0000000200)=r5}, 0x20) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x27, 0x0, 0x120, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x44, r9, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r7], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)

35.370115489s ago: executing program 2 (id=636):
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xfff7e000)

33.671651665s ago: executing program 0 (id=1163):
socket$l2tp(0x2, 0x2, 0x73) (async)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0xfffe, @dev, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {@rand_addr, 0x200}, {@multicast2}, {@local}, {@local}, {@empty}]}]}}}}}}}, 0x0) (async)
socket$rds(0x15, 0x5, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2a8, 0xf0, 0x5802, 0x294, 0xf0, 0x294, 0x1d8, 0x378, 0x378, 0x1d8, 0x378, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @private0, [], [], 'macvtap0\x00', 'vlan1\x00', {}, {}, 0x0, 0x0, 0x9}, 0x0, 0xa8, 0xf0, 0x52020000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x0, 0x6536, 0xdfc, 0x25676d1d, 0x1000, 0x1ff, 0x81]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000001c0), &(0x7f0000000200)=r5}, 0x20) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x27, 0x0, 0x120, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x44, r9, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r7], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)

16.195380472s ago: executing program 2 (id=636):
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xfff7e000)

15.266756063s ago: executing program 0 (id=1163):
socket$l2tp(0x2, 0x2, 0x73) (async)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0xfffe, @dev, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {@rand_addr, 0x200}, {@multicast2}, {@local}, {@local}, {@empty}]}]}}}}}}}, 0x0) (async)
socket$rds(0x15, 0x5, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2a8, 0xf0, 0x5802, 0x294, 0xf0, 0x294, 0x1d8, 0x378, 0x378, 0x1d8, 0x378, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @private0, [], [], 'macvtap0\x00', 'vlan1\x00', {}, {}, 0x0, 0x0, 0x9}, 0x0, 0xa8, 0xf0, 0x52020000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x0, 0x6536, 0xdfc, 0x25676d1d, 0x1000, 0x1ff, 0x81]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000001c0), &(0x7f0000000200)=r5}, 0x20) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x27, 0x0, 0x120, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x44, r9, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r7], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)

3.901077419s ago: executing program 3 (id=1452):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310)
setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
socket$xdp(0x2c, 0x3, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000f3437b00001e3b"], 0x1c}}, 0x0)
recvmmsg$unix(r7, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f0000000680)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x10000, 0x0)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000200eab556a705251e618294ff0051f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socket$inet(0x2, 0x80000, 0x2005)
r8 = socket(0x1e, 0x1, 0x0)
sendmsg$AUDIT_USER_TTY(r8, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb8, 0x464, 0x400, 0x70bd28, 0x25dfdbfd, "ec6d4cdfe73e2bf711fe75df856d8579a2128151668499dcfdbe0d039dbfb7442faf7000e91abed9e058710480c403c5e2e12d08441072f69aa8c92325fff94134afb567090ba957a2041a60fed5680802df0b4e7d9c16ca9247d4f778159e9fd2e65ebe0faca4c03c4741f09eeb1eccd5a6b48dd7de1e690b64159efad9b8fc204a2b54a686c22083d578cc0ea6420dce1f6f8996e5e45a04c14e27ed0753a5f0cc6292bc", ["", "", "", "", "", "", "", "", ""]}, 0xb8}, 0x1, 0x0, 0x0, 0x4c005}, 0x4080)
connect$tipc(r8, &(0x7f0000000040)=@id, 0x10)
shutdown(r8, 0x2)
read(r8, &(0x7f0000000140)=""/154, 0x9a)
socket$alg(0x26, 0x5, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000540)={{0x5e, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x4, 'wlc\x00', 0x0, 0x4, 0xc}, {@private=0xa010102, 0x4e22, 0x0, 0x92c7, 0xb7, 0x9}}, 0x44)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xb804, 0x0)
epoll_create1(0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000800), 0x0)

3.67039678s ago: executing program 4 (id=1453):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00')
socket(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000140)={"e2a2618b1f2d02c1f8b30672d0ba158e", 0x0, 0x0, {0x0, 0x3000}, {0x7, 0x6}, 0xd, [0x10000, 0x9, 0x5941, 0x7fffffffffffffff, 0x200000000003, 0x10, 0x2009, 0x2, 0x10, 0x4, 0x4, 0xfffffffffffffff9, 0x9, 0x40000000000006, 0x3, 0x5]})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x44, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x5396ebcf8cd913b0}, 0x10)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x141802, 0x0)
ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000300)=0x3)
ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r9, &(0x7f0000000040)=[{&(0x7f0000000340)="00214717000000ff0206c91f00000000002bd2fb5e6b", 0x16}, {&(0x7f0000000380)="529d342ae9b0985f5d5e0ac1b1e3a2b9113e55dcdd34b830782c6cea38f587eae7718e16e10b810da348a38272f87238aec6ae68371933ec035d19f281b29c8b38a936bfa5acfa2780898dc36f7fd26d29fa56e99f", 0x55}, {&(0x7f0000000400)="c51c5252b1d485625a91e43fe144bd8b68d4d4a9af8fa85d09072213a25490dec35b24c8179c05bb9fda41d6e44c7c27e182e6069322e7a3acfbec77ed00489ed3b5dcd0289e09a1f778a96f2dda6713992afec449806230a5136716962e5b6fe7642b08205b096cdcea73b52640553828756617722a971dfd8297aa9cced1b8b7bd649ebcafcd9c51058375c1bb77ad5a5c989f9f11b32054167e623c79ed01a3651b2d318c939d0e090f01464547fb3793e3ed9af3c79b", 0xb8}], 0x3, 0x98e, 0x1)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1)
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r10, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x8049)
sendto$inet6(r2, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f)

3.619912833s ago: executing program 3 (id=1454):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200002004000000080000000100006df146c900", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000f3fe2d9985e800000000000000000000000000000000000091f475253b7e90099e8bc565ead53ca6f3f9a4c6362816fc982dc274c3b27dd9a3fbf226d3c7083795eec9595ef0e779ee778d28877ee4f0ee1f6b31632841c3630498958a1197ba08e524202c05252477da9f7408a11ba305fb79b77de4042a352767521b57bc62762061ca776f46dbdc3d9674091d4a9ef16ca3d9664ff3d9a2ea89d1e7"], 0x48)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911024000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000100100000c"], 0x28, 0xe000}, 0x5}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000b000014000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090500000000019400000000070000b7020000000000006b9af0ff000000007609000000000000dbaaf0fff1000000bf86000000000000070800000d000000bfa400000000000007040000f0ffffff560000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000089000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000140)=0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0)

3.449066921s ago: executing program 3 (id=1455):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc)
bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x2e67ca747b6f121a}, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
r7 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc)
r8 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r8, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x51ee2927639cc674}, 0xc)
r9 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
r10 = socket$netlink(0x10, 0x3, 0xb)
bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc)
r11 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r11, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc)
r12 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r12, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc)
bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48)
r13 = socket$netlink(0x10, 0x3, 0x4)
writev(r13, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1)

3.448222181s ago: executing program 4 (id=1456):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58)
accept4(r1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$inet6(0xa, 0x6, 0x0)
shutdown(r2, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x609, 0x4, 0x0, &(0x7f0000000140)="dd800000", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket(0xa, 0x40000000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0)
close(r4)
socket$netlink(0x10, 0x3, 0x0)
preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000100)=""/113, 0x71}, {0x0}], 0x2, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
unshare(0x60020c80)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f000000000000000000000000000039d1c723d667ee8b42bce1f54f75594182"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r8}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xb, &(0x7f0000000980)=@framed={{}, [@map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x181}, @alu={0x4, 0x0, 0x7, 0x5, 0xb, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @alu={0x4, 0x1, 0x5, 0x4, 0xa, 0x6, 0x4}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="614b00000043912892488c504ba433f681fcc236d82ecab20235a1b5fad1410e00d249548d5fd1da619a975e2b0d050000006396f51f61d7690600000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

3.380876665s ago: executing program 3 (id=1458):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000529f0a50c1a671520ad9230ba42e2e7026b623e77000000000a27ec08dbdf7050000003573201e4d64371c46a91d4db5486a8e2efae6f561c6641a812fdacac2d67a91890589d1b7a1ec4e0c81cb943d90e5f7ce3306eeb444f7dcb1915df31ccf625e0fe8d98e5367d53e1880a6d2c791cd78a321b439e41d9d1755a4fb6c399e6ec9eada6a80daac7ffb56c6ddc886f324931838fbc32c0b7a8d"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
close(0x3)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
r2 = socket$rds(0x15, 0x5, 0x0)
ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, 0x0, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r0}, 0x18)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0xf000)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private, 0x4e24, 0x0, 0x0, 0xfffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x1}, {0x0, 0xffffffffffffff6e}, 0xfffffffd, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x1, 0x0, 0x1}}, 0xb8}}, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=@updpolicy={0x280, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x20, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa5755c883c9506dc, 0x4, 0x6}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @policy={0xac, 0x7, {{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x40}, 0x4e21, 0x8, 0x4e23, 0x0, 0xa, 0xa0, 0x50, 0x4}, {0x1, 0x9e95, 0x65, 0x1ff, 0x2, 0x5, 0x8}, {0x7, 0x2, 0xf, 0xe3fe}, 0xfffffff9, 0x6e6bc0, 0x0, 0x1, 0x0, 0x2}}, @sa={0xe4, 0x6, {{@in=@remote, @in=@remote, 0x4e21, 0x5, 0x4e20, 0x4, 0x2, 0x80, 0x80, 0x32}, {@in=@rand_addr=0x64010101, 0x4d2, 0x3c}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, {0x3, 0x100000000, 0x7fffffff, 0x6, 0xfff, 0x5, 0x100000001, 0x4}, {0x7ff, 0xffff, 0x95e, 0x6}, {0x3, 0x2, 0xe}, 0x70bd2a, 0x3501, 0x2, 0x1, 0x4, 0x8}}]}, 0x280}}, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x1, <r10=>0x0}, 0x8)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x4000, r4}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x7, &(0x7f0000000040)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_fd={0x18, 0x2, 0x1, 0x0, r6}, @call={0x85, 0x0, 0x0, 0x54}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @alu={0x7, 0x1, 0xc, 0x4, 0xb, 0xffffffffffffffc0, 0x1}], &(0x7f0000000180)='GPL\x00', 0x2, 0x7c, &(0x7f00000004c0)=""/124, 0x41100, 0x1, '\x00', 0x0, @fallback=0x29, r5, 0x8, &(0x7f00000001c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x3, 0x1, 0x873d}, 0x10, r10, r3, 0x4, &(0x7f0000000700)=[0xffffffffffffffff, r11, r12, r13], &(0x7f0000000740)=[{0x3, 0x5, 0xb, 0x4}, {0x2, 0x2, 0x7, 0x4}, {0x1, 0x2, 0x1, 0x7}, {0x0, 0x4, 0x10, 0x2}], 0x10, 0x9, @void, @value}, 0x94)
ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})

2.805595391s ago: executing program 1 (id=1461):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x4000010, r0, 0x6a083000)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
r2 = getpid()
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r6=>0x0})
r7 = syz_open_procfs$namespace(r2, &(0x7f0000000180)='ns/time\x00')
close(r7)
r8 = socket(0x29, 0x2, 0xffff)
ioctl(r3, 0xeb99, &(0x7f00000001c0)="0a30547bd2f30bbe52553f32b33029c880d4cf796ac6b4ffe8b6d7032af659efbc22b6e6784f21b0bc71c6cd9fdb01d86b2eb710c49e4db04e56082ae444b3e4ea9be2d692835b675ace984d16cde211a4c59d8f457077c5f6fd1d392ab7831f8a74de665893069763")
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x8, &(0x7f0000000280)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f00000002c0)='GPL\x00', 0x10000, 0x2e, &(0x7f0000000300)=""/46, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x3, 0xfffffffa, 0x3}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000400)=[{0x5, 0x3, 0x2, 0x9}, {0x4, 0x5, 0xc, 0x9}, {0x0, 0x3, 0xd, 0x3}, {0x1, 0x3, 0x0, 0x7}, {0x1, 0x4, 0x10, 0x5}, {0x2, 0x5, 0xd, 0x1}, {0x1, 0x4, 0xb, 0x9}, {0x1, 0x1, 0xa, 0x4}, {0x0, 0x5, 0xf, 0x6}, {0x4, 0x1, 0x0, 0xb}], 0x10, 0x2, @void, @value}, 0x94)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000240)='workqueue_queue_work\x00', r9, 0x0, 0x6}, 0x18)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r8, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x1412, 0x100, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004004}, 0x4040024)
r11 = accept(r3, &(0x7f00000006c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000740)=0x80)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r8)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r11, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r12, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}}, 0x40008)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r8)
sendmsg$NL80211_CMD_VENDOR(r11, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xa4, r13, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x86, 0xc5, "9df87629db76484e65f30e7e373edb30ed559741b495a83270468f18bccfea912ad663c58c128039679a0845bfe6b0c234de8a5d44ab6b5dee176555dd9f80e0d2efffc1860ef9dcc55e2bdbfe29688bea800b6bb155e8c393c627fc570c9480111e1e022dcbe5434ea83e19347717baff9dc6a4936a6fe1c1a7eb43ec67e0f363d7"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004)
r14 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a80), 0x80140, 0x0)
ioctl$PPPIOCSPASS(r14, 0x40107447, &(0x7f0000000b40)={0x9, &(0x7f0000000ac0)=[{0x80, 0x2, 0xb, 0x749}, {0x0, 0x5, 0x4, 0x6}, {0x5, 0xc, 0x6, 0x4}, {0x6, 0x5, 0x2, 0xe}, {0x0, 0x3, 0x3, 0x9}, {0x9, 0x7, 0x80, 0x3}, {0xd, 0x61, 0x7, 0x400}, {0x9, 0xf6, 0x8, 0x9}, {0x5, 0xff, 0x8, 0x1c}]})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000001c80)={'syztnl1\x00', &(0x7f0000001c00)={'ip6tnl0\x00', <r15=>0x0, 0x2f, 0xba, 0x5, 0x2, 0x10, @mcast2, @remote, 0x7, 0x7, 0x3, 0xffffffff}})
r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e80)={&(0x7f0000001cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd7, 0xd7, 0x7, [@typedef={0xb, 0x0, 0x0, 0x8, 0x3}, @union={0x2, 0x2, 0x0, 0x5, 0x1, 0x7fffffff, [{0x7, 0x6, 0x8001}, {0x1, 0x0, 0x4}]}, @var={0x8, 0x0, 0x0, 0xe, 0x1}, @datasec={0xe, 0x7, 0x0, 0xf, 0x3, [{0x5, 0x0, 0x3}, {0x2, 0x9, 0x84}, {0x4, 0x7, 0xfef}, {0x4, 0x2, 0x1}, {0x1, 0xb, 0xf3}, {0x5, 0x0, 0x8000}, {0x2, 0x88, 0x9}], "8a0db8"}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x10, 0x2}, {0x6, 0x4}, {0x6, 0x3}, {0x9, 0x2}, {0x5, 0x5}]}]}, {0x0, [0x0, 0x30, 0x0, 0x0, 0x0]}}, &(0x7f0000001dc0)=""/166, 0xf7, 0xa6, 0x1, 0x6, 0x10000, @value}, 0x28)
r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001f40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffff7, '\x00', 0x0, r10, 0x2, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002040)={{0xffffffffffffffff, <r18=>0xffffffffffffffff}, &(0x7f0000001fc0), &(0x7f0000002000)='%pS    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x7, 0x1, &(0x7f0000000b80)=@raw=[@exit], &(0x7f0000000bc0)='GPL\x00', 0xb27, 0x1000, &(0x7f0000000c00)=""/4096, 0x41000, 0x40, '\x00', r15, @fallback=0x19, r16, 0x8, &(0x7f0000001ec0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001f00)={0x5, 0xf, 0xd6eb, 0x4}, 0x10, 0x0, r9, 0x7, &(0x7f0000002080)=[r17, r18], &(0x7f00000020c0)=[{0x4, 0x1, 0x0, 0x4}, {0x0, 0x2, 0xb}, {0x0, 0x5, 0x3, 0x9}, {0x4, 0x2, 0xe, 0x5}, {0x5, 0x2, 0x10, 0x5}, {0x5, 0x3, 0x8, 0x9}, {0x4, 0x3, 0xc, 0x4}], 0x10, 0x7, @void, @value}, 0x94)
sendmsg$nl_route(r8, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)=@bridge_newvlan={0x34, 0x70, 0x400, 0x70bd2b, 0x25dfdbff, {0x7, 0x0, 0x0, r15}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x8f}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)

2.437071779s ago: executing program 1 (id=1462):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000001214010028bd7000fcdbdf2508004f0000000000080067"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) (async)
sendto$inet6(r0, &(0x7f00000000c0)="e04f435a72215652248e4b006c9e2690ead2520f325bc4856898d6b434e1087d7e5ef79a1a5059a988ebd4fa53995119ee14614e3d4b9c2df7d181098ef5fff6291dd5e4f60a61", 0x47, 0x4, &(0x7f0000000140)={0xa, 0x4e23, 0x6, @private2, 0xd6}, 0x1c)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)={0x28, 0x41, 0xb, 0x70bd27, 0x4000, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0xa, 0x1, 0x0, 0x1, [@generic="78a449a0dd64"]}]}, 0x28}}, 0x4040080) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@empty, 0x0, 0x1, 0xff, 0x5, 0x4, 0x2413}, 0x20) (async)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=@base={0x10, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r3, &(0x7f00000005c0), &(0x7f00000003c0)=""/79}, 0x20) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1c689}, [@IFLA_IFNAME={0x14, 0x3, 'team_slave_1\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x7, 0x6}}]}]}]}, 0x5c}}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2)

2.371923656s ago: executing program 3 (id=1463):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000040)=0x80000000, 0x4)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r5, &(0x7f0000004fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004f80)=""/17, 0x11}, 0x401}], 0x1, 0x2, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000069000010000000000100200018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000000400000850000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xfe3, &(0x7f0000001e00)=""/4067, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010f0000000000371c0107"], 0x1c}}, 0x0)
r6 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0x9}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfc, 0x0, 0xa, 0xffffffff, 0x0, 0xa, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x8, 0x5, 0xc, 0x0, 0x1, 0x8, 0xb53f}}, {0x4}}]}]}, 0x68}}, 0x404c000)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000007c0)="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", 0xfffffffffffffffa)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x632a, 0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003100)=ANY=[@ANYBLOB="340000000d06030000000000000000000000000305000100070000000e0003006269746d61703a697000000005000500070000007a24c7a3c55bcc8b3d672913fae08af218c39bbc36941fc99ad586a7f605d68f76f23d9e365e66d7527c50eecfde367fa30845e33d5c6dacc28c9a3756f4858716454a06fb1fc24e189719dd13215ca07d74db81e8d58cad98039b3f1780c3094f710547b8f1bbb6358f321bfa47d1f5b857"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24000004)
sendfile(r7, r2, &(0x7f0000000740)=0x10, 0xfff0000000000000)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000030c0)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003080)={&(0x7f00000031c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="20002cbd702b3c81cc60d5f0ed000500b64eb95f000008003c000700000005002e0000000000050030000100000008003b000703000000003b00f007000013b2166cc0da52e6b85301c46bbad55fb3839c5bd327cac1dfa3197554ccf77600a8ddd802ae1a00b71195efa441f48c5cf8a2232c736526b4c6a0b78e186519c38962d514f89e990cee1393cb702a90fb33331d8d77d40ffc130170dc69f2a911b136869529f36fa3c30728d7973817cc631e8fe39ef05014bd5f6b1d692eac01b88c0c3a0d"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r0, &(0x7f0000002f00)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0xada, @mcast1, 0x7ff}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="2c4ce5624b5d9a5069475c2acad0e9bc0f40da5cdbaa3cd4a4de8d7395e118e47b45ce55819016eaa885a497e6640da0dd51f765c08c4b2e54", 0x39}, {&(0x7f00000000c0)="c1a73ec354edc44cfc72bad2c957a0caf282cd5ca16765ec4be5efccb7a1a6427493c94baa67c405cd4038dea8dc4237be70cc5258eaba274c007975a43fc431123224", 0x43}, {&(0x7f0000000a80)="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", 0x1000}], 0x3, &(0x7f0000001a80)=[@hoplimit={{0x14, 0x29, 0x34, 0x40}}, @dstopts_2292={{0x98, 0x29, 0x4, {0xc, 0xf, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0xff, 0x8f3, [0x4, 0x8, 0x2, 0x2]}}, @pad1, @jumbo={0xc2, 0x4, 0x692}, @calipso={0x7, 0x30, {0x2, 0xa, 0x81, 0x5, [0x814, 0x93c8, 0x7, 0x2, 0x5]}}, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7f}}, @rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x1, 0x4, 0x0, [@rand_addr=' \x01\x00']}}}, @rthdr={{0xa8, 0x29, 0x39, {0x6, 0x12, 0x1, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @mcast1, @local, @local, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x41}, @loopback]}}}, @hopopts={{0x1048, 0x29, 0x36, {0x73, 0x205, '\x00', [@pad1, @pad1, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x40}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x59}, @generic={0x7, 0x1000, "fc6c4dade5188bddb923ced23ea0fa8e9f3ac541d3f2f98e5a0447e52c89c58b95fc77f0a409a5b96e797e8c7a8608131b112b7575d3f940d31994ae8fe03dd20ec64097970845cd45b8cea5493e1505d674cfa1e526afdac7d5d948f73f914ee17a5628ae44fe012f79099b97ac8798195333a72e284927ae449ba5c9091d71f2df66d576429d6ce4199adc740a42e0ab5462bd648bca187bd64f8568e16e62ac0f41ab9612afc66e1fa251b24d25c989a2a4dbf010d7f5e5816fb3b3810937d599b57c2cad31f14b62e19084912fcd3dcdc01ec226e51675d04f387303cc51481466ff4abb79bcbb22fd687e2e5ade3ab1ab0ee2f2a3b05e9e0934bdffd3979ccca7f5a74cfd665e45550d2c60d63ee07b6e17faece4be3cc052b87bd403d831a41c120b0e283c1bbeb6facd93898a37377821af3ccde27128df72f1df397c96b956a026e341768eb8d08b8bfa2b22e52d8a704e7752cb97f27671e70794927e453b5afcc71e812e13e093eec59288a5fd25ad9f745522412f344f5031c2a6bf51e86b2d5bf102f7778bd0f3aa968a51972ae69903f77b5c8489ad13add1b7c63bd4f7404767679e9012f9155481491c2ee5f09d009ff1c80ef893964c526b0e14c4a409547a24eae54389810f813bb09ed1643c4d4f124aeb3a18420c8de115ea8b4e00c30dc01a582ac5a2269b84839c41063a308359c0f4278fd3bf819791abf99cb121131956301c788022106a352a5d5c2ff79a6c9c90b5ba0ecd56ac961c9f5bf1d0fbbb4bb68893d38bdd16bb479c350473f342a303624c198724a39cb0c8479d9eb79e1a58d90d393b0d908fd066bf3d86fff6f6813b6dafa360288e33da6f88da550cee65c4b411e19633cc44870f4df656798575f80c1db45127851ceecab6452dc49cbfbcafd55845deb8eac75d3f279bc41c8b251ab1307ca550922ec1efdfd13c332b29d3ec28b3a72b95dcba1df0222f3d77d90a38a6a262c4735793359c01ce6bd1a98f401de46bbf42bbf2cc537c2968858b0c929f81731b167347a7d9b9332ce4c7af2385ed383677a7efd9cadc889769dd92a711884893c448d819eaf7f1796346dadcf9890b3a3687eaad8916f89ac6e3d0fa8a5ae504eaa68a0960e9e6cf7d203a4b3d9a9479573b6281d6e6718c9aeefc97a0dc262b2147e7f07d30ae65a06ce17a74665e5548bfab39414e153d238c970d0dd3aa5d37c60d0c3bec5e3b4b8e68cd85e140a3fd4ad45c6d9991cc411e408914b9c7d8e856921d753372373b70c5a0a63e885ffd3d9e0683279fec7b32ad8e0fd5db970f8aed41819d2a7dec17b115dc5362d2db027d3942aa682eaa9c10da80ba31ed67f0d9813c7151421d0bc7cfcb2e4860ea20f6078bbf43fe9f20fac003c4a3bda7ade94ebe5573a0f3567eb7292ad30b45fd0d4b9e5416b7b691db5df53cb3740a6ee83741327a19a962f3e7295ba57679b5e6d8b8dbbfff71f7dc262e64971fffda913f27ad01dede4f65df7bc60a83d54fe3d7587333d109956347d91fb07f04a53b258e9701c9b660912333245fc26c28811773d7f1a28d2f40a0fc0bf80a4fe470cd4d5aa5465a9c0dba1d7808d4bb93f505a7a888eff1059d352431785d42583ba55828e44855d5f1cb662b750e751d5a0610b8d6759a888a4dc44adb382844db3cbd2242f7c5886be99ca064acfecfc874407794abb959c6547604e295ad4b8b588e4e99cef35eaef271b4867574763dcfd8b5f7c73b2a287b20f3b3644fb4d73b354f5b03bb4ff65205e17c8e8405ed10e98372ffc60e07af34ce7b653906ecec1ddb8841e1897d03109c684951c48cd95a7070f2f2b49b998a8c2019ce0ceb82da874791a80037fa0b9a24dadbf2a6e4bb5115876aebe20461efe121f71df7bd918c9f1799b9b9e93411552727f47f0602162e6aa74907a3ac7bb7240a44416c0f655155e8670c392a08462e923991fae446f56c292a969714037cf37b459c56ef8d7705102b51dbd0b9abcf98a4da118cc9b47e36516c91a78d5697555c0ed836bf1e77e27b03feb4239f23f8d37e1c8bd36065845c9579bc46fe9b720cdb04609fb3e03a22274c36b7a8dfdf82a8f9f1201bdaec33e7c3ac388d6fcb0694b3024aed323701cacebaa952b1a1edba5b63d53bd73569dd0628e1798b1971466ead14005e177724e40296a15668b73f2f97850a32def264fdbd418acf392a46c94babb38efdb98366c8d2ec0a39c41476421e86e6b2a2c13abeaf57cb87c440653a2ff209dde8a20b2e34fa261f04699612a84455a87416ae26e88660950f2cc0397d2fd8cd9a3031fe51f231d9f11dfa48cf64c34cc58e3a9ec12745082379b9a8e524d3bb8e0a115d1f8652425f1df5c9225e819b74722afa8038b075d4ca68a98d926bdfc875a0b5074fc2bfd77482b02861aba6221cff0aac2eee0869a1cc763019ba019116b3f1c41bb92f671283ade98fa4e5d7584c7eae15eb381a270021d56870b0ddff4eee2247028d260ca56bd9c087bac14e8e1895e27af67d2a787da5cc005fa15279a78c8d785ae2e587e642bfbab8ddcc9ae9e42b4ea1f310ce7d3053fd918de4d5b244b7fe4677fa1e7e4272eeb82535a45a7c363bbe11004ac69d214135a9f5c71c3b3ddbd075d42ae8ac2fb817e597d7daaa9a342d0bf186719ae925df2677264a8e31d72422e98631a96f228c6933babd1e6ac03dc473f7818f600dc383bf9ad4c29b0337af08340abd6c8ebe9e936b003f407e70391cae826939f83b545da73c50a85fa4f4dbcd7fd7f839b4e66b211b6d2b5a07014484e7017d4a13b35c460750dbc028996385126b9c43e498292bb66eb797feccbd011024ef9fd036b22905297ead8f122cb3cad6549fc21c6ea6db44b99d5f9bff43648950a202bdc003b2b7b8da4e7499b54cde0b505df51b0ec0a528008436e746269922f9dcdf2a025291c40bd14aed02ee980b40317950910e3fb48305da2afd696c75aaef82f3ef4dad2dd829796c641f017556aa13af1da895c6574d17e3823ee80b462f3bc9996d7b0002eb6d3a880c7bcdc81744243568d55e6b016beb3432e5376cdc10cffc8daa28a485523bb516087512b085be7e492c8e23c777144263fcc74a7761aac2a0fb665f82d9cf2e56c6bfe26c5102848fc2b03e6ed1b5154aafafc5d3e4186a730e9e044b25fb8c534bc4c90fa2edfb082f95e3e4a1530b6b373f58d1efa9874a3dc0faf61cc187236fa68a144361ada93dd9f3825a7bd5415c41336737bd24ae2b077975d31eaf6cc535f7c51fbdcaafe0a6c043ef4010e566980ce274a90dd3dc5e586796b9942fb53e08d0342ba8b1677cfd26f94a0ed85708bb1d30c73eb3554141a9128095d629f32f6c3e110c852f27235553f2ea0aeb02d5f8fc8d56aa360d2139339ec9c4fda3c323fbd6b37e99caa2f6fc3cb8b860795e55fc19d67a1fd4a4e2fc8a6a76a4d4f09211b42a78c4e6e7b5869c01533749abbca64cdab986075e989ca1fcef92b4de2f0e38846c3a2f936b736041c940eb9e08e3784d12c199d5605758e7bfb9d13c2e079fd588decfdcc9bf1d7d1bb459884dce3cc2bea432cc93ecd55dc9d8c5fdf7655baac78abb303413ca43f05d67e1df72eb9dfd529c7ee75e28fbad3996f61ad358d991d9860f7ab95705b0e91048aa2265c51b8ba0ce5aa675527c82a97da40c9f5f7b8b735d242598cab91f550f3e835d31d12f150c1052ad14e52cf6cbd88cd7a3836df3a1dda956e41f26ccf6ed2c41c3c33e097698ef083ec8153c60ca130b4dfcd3379158207ac563e7f77fa34efe284542a59cece3fe2a51c3a0abd7a58d28152ea2d97f0df9f3d6eb4ec373860101d7a59c0f6122ebbb03c98ef3bf6cc4f56f80dd55767c1fdfe5fad8e41af9a8a6006d3c1b01a6fb6cbd960803e22c19e023702c9b414b8c8accf726ad4cfe032d7fb182542e0575338591c6090d0b4d85ee4cc7f944a72f395a90223d5fa127fba52dea3e0a0441210aaf3fd432e2f67a5fae900b4f9d7372aa5dff6ada323dcce730ded2347645ab5175b31fea981d6df4b16e8570adb2e18abbdb7b6c4e94e99d3c866a79e5acbb3a5faa6953a030076eaa2298678b28ee7127605e0295b085cf8be66874fb58c2aa541d9115abf7f1a36afe4d66d8ffeea560221fd47420de295b2b9e2811b4aa7ba2efc8b4cff6af90c140cb9537f2d6815a7fbddc9fe4417d57704cecffa2d01cc91bbb0284928631ffc9f262530cf5a7059e86f04cc36e2c7da217881546e4dd89bdfce0f1ac2740ca0f33173d5fb4cc37f45efffc0293fff7150f97cbb6022fa0e7b9bf00297bf1659938dbca06c96acf3c83b05ae5060cf6ab6096e5a41ecc0f6f524c97269336d4c155b26b460b62f54e47b8ab30083cf984f063a784322c7c992d717a08c6aab60ca79151f3605fabfd00ee275adb11267e0171460b7bb94fb9d2e0c7f95b74586dba7d44299c18a24089db3e3d2e590a280af68f87d628081d7b315b6e425f559a6022cc0109abba9cc8b37b70127c443959f3db2b7b714edec72c73d39c6a9db84fc4c1dc6ec9d1b12e4b1200c7dfa5ce501e434cd8037825574ab44368ae71f84df542e4c1f6e8c009e7444856c43b7561e16b92d50ae465699afb9abf42630ffa3702daaacbd408614adf1af26ae567fc161568b0786de2cc038d2418c2a2d0951c91be8cee7e645a3fc00200218d74fa5bc6860992f8c2fcef744f5587ea4b21ddb5c58918a4f48a4bf43d260172f0c2fcaed703a16bf93174d18b53796894c53cef325029522ae62c75a788782d0b3bac078479f126b40b0c3bad4927d920c2a9a17f660cdb8d187307c39e885e9777bfbf66334c5876736cd1b99cdde91578a7690132332772f8ae6f2756733d28ced76777537e5fd98760d1e864c3ebc9a907a5bcb5374cca4a16c05c70d8f0073235707d17cd733a05ce7c196e72013d36dc4632bdff63d627edfb3a12f394da6d494e048f16147ad6b4df35ecc0c388db3ae05937352d033addbbdac41a6e02370cecad564cba9cbd31408eaab4aab0fc3308ecea0af72bbf6be8cfa27032efbc95bf61da56093966dfd1473400ea80d74d67bb2e0f307fb348b2e37cd22901d4362499a213d6a1d47bf81c7df110a607ff5b63a43a96c9f92e77648b4a8e782b90f2f261f0100beae655f198ed1166e606b3d0ee482ea96565f141b93fd23ab7a84dbf4b757c2ed9af9a9bf97349b44ae205cac9299a9f2e1e9cdaf59562da78202b9c2eaecd55e473b635d20d80e5b91fcac8d7fe7c5fc8afbaadfa8b41ed3bef13217605f01eaa120f1cd0c945aa85775f0d95b90efd16430baa73799b0b34c5631d5ac51dde08835c3e99688df5fc3a4b57b049b3dd2e5125f1b230f91d7bb7665cca8613f52fadb0574561d3bec6f9e85a7627fee8e8cf31086d5082face407fe0ef622f4f7573ae507d136980e5ff798158c3171321aa27270c6f754b6142e03cc61275991aafe27125dfe12339d711ce64771c38ecb396ea8663580cbc1d680bdb121d62cd87528f272e1b2495bc4e7fe0e0556b4aabe9561326620bc1ad8cbd62e70b2a98d9b547c8a38bf4186c6ed7d8f069067aceedc09c6c630cb0f8ba086b3422cc1400aaf0535e2a271668527cc680d9b382591a3eaeff19bb91c0a344bafdb3876c035c04d5d4ac0497dc6e792d52930892b2d5aea42f61bd6a45de9259ee308269e8fda8885d8e13b39dc795518238168c78abb2b1d6905ccd64b29ed50f233a3dff3989b59efaa2"}]}}}], 0x11e0}}, {{&(0x7f0000000240)={0xa, 0x4e23, 0x8, @loopback, 0x8}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000280)="6203b764e9a07a6f8db9d615723de05239573c71adc14312edd6ca330308976d3dedc700e014e7d0f75185429c1772f415af76d58aa68c93e2192f2584681a1f14d9692d42409e30135540c5095215d23ddccdb556f500591dd7b9551e29d6ea19bb4a1cf21d56fda63a592869bacc9367be734bbc3119f2a5602b3c0611eaae923e8272ea6bb2ad126b0c0c5b5f4301fd1cfa8b65353ae2d755b8095ab46dd78cc39ad74bb32cbf6500c14591928ce9a618ed5d441544a80e63ace59cbaefa9806cb82c4ecf21eee3aba06f0fa7bbf48d5fa106c3f23dea370733df3af6431ed71c8943ae7dc031bb", 0xe9}], 0x1, &(0x7f0000000440)=[@rthdrdstopts={{0xa0, 0x29, 0x37, {0x2, 0x10, '\x00', [@generic={0x1, 0x36, "923743ea228435fa701a0cdbeb76e0ef7d52430bb937e67947c20e5d19157bc17f3932cc03fe3142da98af4729d108ea11158ab4524a"}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @private0}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}, @calipso={0x7, 0x20, {0x2, 0x6, 0x51, 0xa61e, [0x100, 0xcc, 0x1]}}]}}}], 0xa0}}, {{&(0x7f0000000540)={0xa, 0x4e24, 0x3, @private0, 0xb28}, 0x1c, &(0x7f0000002e80)=[{&(0x7f0000000580)="0a6a8806e77ef2185d70ce0abace89741737726064caa34d1a8c6355066c1207883b95c242d76e842e5eda8fcb26ad4e02f47a98143ff1a2a50db9cf9c", 0x3d}, {&(0x7f00000005c0)="bc74ab59b0fa3aa6edeb3b85fb94a45b777bdbdec0a15f4bf61650", 0x1b}, {&(0x7f0000000600)="6f865b00771dd25a76a4825c7dd9ed4d0b20dce78650d9dbee45fc8208c2fc231301b1713cb58cc8ac46c8b10a4d334a345be59df9eab95062446a96baa8292e5f47cf834f3b14beba864b601eba", 0x4e}, {&(0x7f0000000680)="c3b460c47685876c7877a7313f8412957e08327dede5f43668495e05716545df8818a9e4f21cbf60933bb01f1eda02f708fe864bed9c5e24fd3e49e7f740a436da3c6ee32bdac53b47862bcf841e", 0x4e}, {&(0x7f0000000700)="51d824e2f2a357f8fc4975f3144504bda525899ce050ab34", 0x18}, {&(0x7f0000002c80)="e260fa9493c62d09af3c327ff9421ae5812dbfc131315e25ae7d8df361a2855c81c9244f1609cf87e156878aadd4be005f30c863d62ca7223d97326d25119f984ef107a000bbbb7dd9fabb2cc48131f928bdca58ca3bc8d703e06d31c158ae1be3d9af929cb268d02d69c639335b402a1726a808afbba01bbc2144f4fb15eaa0eef8d4b94302a19187495a572536a881f2af5d0d9a3d13a226589d0268040c92da", 0xa1}, {&(0x7f0000002d40)="7a4c52b233616f8019ac8c9fbd76164ad8682ab6b3e8550f424334d4e560e2982394d2e0cb6c63816ff054c69ae05a3c2ad501847d3077f6d344681aefe151b9c18e8eb92e9718b22ddacb0dbdf827bbea7fee5f0d284fcb85c805a8c79c265e85b8353e919989ebe1e4e91ecd", 0x6d}, {&(0x7f0000002dc0)="398b7b722b628bae85ce4b84bf8504f398a71e4c23e9e40037602f51a58a465eb546d611b463c5dd478fe5b9163d69056d41b4ae09bc894aca96e0aa521c7a7bb8372d1be1a39d084750e587ff94d0d1e105d08b1adb4ef16020323ee70987fe94902c00e46c5a68de411510c73ef7c4c42367f9cbb75ceae2e650709b829d2f31bedd7f5229a9a64d3c871092401fe3699ab4307480ce4284c481e580280fca4962d3a28c0f50b57c9bb54f9be08918fb49a5df437b959cd7f44e", 0xbb}], 0x8}}], 0x3, 0x80b18fc30f034ff0)
recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/23, 0x17}, 0x2f88}], 0x1, 0x40002000, 0x0)

2.164102066s ago: executing program 1 (id=1464):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="09090000000800000000000008410000004c00180000006062726f6164636173742d6c696e6b000000000000000000000000000000000000f6afbb333565de6cce89000000000000000000000000000000000000000000000000000000000000000001000000000000000000"], 0x68}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000480)={&(0x7f0000000240), 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x24008840)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0000, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'macvlan1\x00', 0x2})
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x2c020400)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020004000000080000000100000000000000000034db993ad1e2c3087c1e1b3f785fef333f994728f06284f891f137e03d57e916b8142f640c4522a9bc78acccbfd98833ecb35f6a84f6c766348aeabcccb19d237d2b034d627828137c5d711989af0d8ba132e4d13768d9df1d24d00af58c420166bd1a618ea14542524dd627408bff526c1adaa542880e004f3dd42903a41e121043c7da12984ec92505b7d1a24e42ce681e261be0673d7c3ad5088035ece8fa93f43036af160bc64c868a0401574013bb2e5357a5c730", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="00000000feffffff00"/28], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x9, <r9=>0x0}, 0x8)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xc, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000ff0300000000000009007f00180100002020642500655d000000f8ab00000000bfa10000000000fa06010000f8ffffffb702000008000000b70300950000005300"/83], &(0x7f00000005c0)='GPL\x00', 0xc000000, 0x98, &(0x7f0000000600)=""/152, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x22, r7, 0x8, &(0x7f00000006c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0xe, 0x9, 0xfffffbff}, 0x10, r9, r6, 0x7, &(0x7f0000000800)=[0xffffffffffffffff, r8, r8, r8, r8, r8, r8, r10], &(0x7f0000000840)=[{0x1, 0x2, 0x2, 0x6}, {0x3, 0x3, 0x2, 0x11}, {0x1, 0x2, 0x5, 0x5}, {0x2, 0x2, 0x2, 0x9}, {0x5, 0x2, 0x1, 0x7}, {0x2, 0x1, 0xd}, {0x2, 0x2, 0xb, 0xa}], 0x10, 0x6, @void, @value}, 0x94)
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$packet(r11, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r12, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@caif=@util={0x25, "2680f5905792a6151c38489c30e4ef11"}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @loopback, 0x60}, 0x80, 0x0}}], 0x2, 0x48094)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
unshare(0x12000200)
write$cgroup_int(r13, &(0x7f0000000000), 0xffffff6a)
sendfile(r12, r13, 0x0, 0xffffffff000)
shutdown(r11, 0x1)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x15, 0x0, 0x3, 0xfffffffe}, {0x0, 0x4, 0xe}, {0x0, 0x0, 0x9}, {}, {0x6, 0x3}]})

1.380973837s ago: executing program 3 (id=1465):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x400448cb, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0xc, &(0x7f0000000680)=ANY=[@ANYRES32=r0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r6, 0x200000000114, 0x2717, 0x0, &(0x7f0000000080)=0xf0ff7f)
setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x9}, 0x8)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r8, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)

1.380523312s ago: executing program 4 (id=1466):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)="f5ffe5a215b5ffff99", 0x9}, {&(0x7f0000000080)="36552c99f4a0d3a3f172aa8803f837d78991b1ef54d2f656b266dc1f6b5ebd2798492f376710fe60e9cf793160b01d21e43a949d475e38ff00e55ec1bd618b57feef2328b2fb42f4c04572bc8881c79aa98dc3cc2bb5008fefe599842899a58e0851e18012", 0x65}, {&(0x7f0000000740)="f0e47ada3ac124c1d1cefebc20da429b6d2e7812872fb22f0f6b1ff97c3aa2130aeac7c2c681ef74e7ac59d9ad90ebd4a604b907ad6ffadb42f8c947696e2ae79c8981580dfee30f6d13a10d9a0377102c83385e551ebd77565a9a51934aa7ddb4647b05ebf85dde08ccab3de2d3c62eabccc682461f05bcd9cdd0f8d33a16b1a40651f3976212ba10fe8570c20e238706dd68d1665970ede3b8deb8a473b4292bfc32cc26d99804b69be6fb4b3969ad9c81375fa5a93060a7d96ae71ee5971a808052a2d7fad3c27ec5", 0xca}], 0x3}}], 0x1, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000380)=0x6, 0x4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_opts(r5, 0x29, 0x37, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3f0, 0x98, 0x0, 0xfeffffff, 0x280, 0x1b0, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xc}}, @common=@socket0={{0x20}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}, {{@ip={@loopback, @loopback, 0xffffff00, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @rand_addr=0x64010101, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450)
bind$bt_l2cap(r3, &(0x7f0000000000), 0xe)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x18, 0x8, &(0x7f0000000480)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x73, 0xa, 0xff00}, [@call={0x3d}, @exit, @generic={0x4, 0x1, 0x0, 0x3, 0x32b}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xba1}]}, &(0x7f0000000140)='GPL\x00', 0xa, 0x95, &(0x7f0000000180)=""/149, 0x0, 0xc4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
listen(r3, 0x0)

1.222129849s ago: executing program 0 (id=1163):
socket$l2tp(0x2, 0x2, 0x73) (async)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0xfffe, @dev, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {@rand_addr, 0x200}, {@multicast2}, {@local}, {@local}, {@empty}]}]}}}}}}}, 0x0) (async)
socket$rds(0x15, 0x5, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2a8, 0xf0, 0x5802, 0x294, 0xf0, 0x294, 0x1d8, 0x378, 0x378, 0x1d8, 0x378, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @private0, [], [], 'macvtap0\x00', 'vlan1\x00', {}, {}, 0x0, 0x0, 0x9}, 0x0, 0xa8, 0xf0, 0x52020000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x0, 0x6536, 0xdfc, 0x25676d1d, 0x1000, 0x1ff, 0x81]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000001c0), &(0x7f0000000200)=r5}, 0x20) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x27, 0x0, 0x120, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x44, r9, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r7], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1.15821868s ago: executing program 1 (id=1467):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000280)=0x6e, 0x80000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'ipvlan1\x00'})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50)
r2 = accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10, 0x80000)
unshare(0x8040480)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r3}, 0x10)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8)
close(r5)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_GET_PROG_INFO(0x1c, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'})

245.642352ms ago: executing program 1 (id=1468):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc)
bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x2e67ca747b6f121a}, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
r7 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc)
r8 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r8, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x51ee2927639cc674}, 0xc)
r9 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
r10 = socket$netlink(0x10, 0x3, 0xb)
bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc)
r11 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r11, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc)
r12 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r12, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc)
bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48)
r13 = socket$netlink(0x10, 0x3, 0x4)
writev(r13, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1)

243.220321ms ago: executing program 4 (id=1469):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000000, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000001e00851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

123.312661ms ago: executing program 1 (id=1470):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0)
socket$packet(0x11, 0x0, 0x300)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0)
recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/163, 0xa3}, {&(0x7f00000016c0)=""/215, 0xd7}, {&(0x7f00000017c0)=""/106, 0x6a}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000001840)=""/105, 0x69}, {&(0x7f00000018c0)=""/147, 0x93}], 0x8}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x62, 0x0)

61.045481ms ago: executing program 4 (id=1471):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_netfilter(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xffffff70}, 0x1, 0x0, 0x0, 0x20005080}, 0x80)
sendto$inet6(r1, &(0x7f0000000040)="5efbcc59", 0x4, 0x1, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000001c0)=0x5, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x10)

0s ago: executing program 4 (id=1472):
r0 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (rerun: 32)
close(r2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32)
splice(r1, 0x0, r2, &(0x7f00000002c0), 0x6, 0x0) (async, rerun: 32)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4)
socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff014}, {0x6}]}, 0x10) (async, rerun: 64)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="200029bd7000fddbdf252e00000010009d001e000000ff0f0700fbff07000a00c800505050505050000010009d000c0000000300020000000a0010009d0000002000ff01010406000010040005010400d00005001801210000001e001f000004e3b451d715ee516333c7f486c56d2d09e00c000000000000060006001d0000000800"], 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4040)

kernel console output (not intermixed with test programs):

ve_0 (retrying later): interface not active
[  211.427493][ T9156] batman_adv: batadv0: Adding interface: batadv_slave_1
[  211.436956][ T9156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.464756][ T9156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  211.546443][ T9256] openvswitch: netlink: nsh attribute has 3 unknown bytes.
[  211.631425][ T9156] hsr_slave_0: entered promiscuous mode
[  211.638125][ T9156] hsr_slave_1: entered promiscuous mode
[  211.644810][ T9156] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  211.652425][ T9156] Cannot create hsr debugfs directory
[  212.052693][ T9259] ip6gre0 speed is unknown, defaulting to 1000
[  212.276950][ T9292] Bluetooth: MGMT ver 1.23
[  212.306234][ T9292] bond0: (slave team0): Releasing backup interface
[  212.332214][ T9292] team0: Port device batadv0 removed
[  212.342911][ T9292] bridge_slave_0: left allmulticast mode
[  212.385439][ T9292] bridge_slave_0: left promiscuous mode
[  212.391317][ T9292] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.404847][ T9292] bridge_slave_1: left allmulticast mode
[  212.420868][ T9292] bridge_slave_1: left promiscuous mode
[  212.434867][ T9292] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.463699][ T9292] bond0: (slave bond_slave_0): Releasing backup interface
[  212.482679][ T9292] bond0: (slave bond_slave_1): Releasing backup interface
[  212.484593][ T5842] Bluetooth: hci3: command tx timeout
[  212.510095][ T9292] team0: Port device team_slave_0 removed
[  212.525100][ T9292] team0: Port device team_slave_1 removed
[  212.531662][ T9292] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  212.539348][ T9292] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.547922][ T9298] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  212.555909][ T9292] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.573395][ T9292] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.603435][ T9292] bond0: (slave macvlan0): Releasing backup interface
[  212.626277][ T9292] veth1_vlan: left allmulticast mode
[  212.659205][ T9302] netlink: 'syz.1.856': attribute type 1 has an invalid length.
[  212.659229][ T9259] lo speed is unknown, defaulting to 1000
[  212.871521][ T9310] netlink: 'syz.4.858': attribute type 11 has an invalid length.
[  213.089219][ T9156] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  213.133245][ T9156] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  213.202721][ T9156] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  213.240337][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.861'.
[  213.261986][ T9156] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  213.278192][ T9318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.861'.
[  213.464046][ T9156] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.489655][ T9326] netlink: 76 bytes leftover after parsing attributes in process `syz.0.863'.
[  213.523323][ T9156] 8021q: adding VLAN 0 to HW filter on device team0
[  213.563932][ T8543] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.571124][ T8543] bridge0: port 1(bridge_slave_0) entered forwarding state
[  213.600469][ T8543] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.607686][ T8543] bridge0: port 2(bridge_slave_1) entered forwarding state
[  213.821240][ T9335] bond0: (slave team0): Releasing backup interface
[  213.892699][ T9335] team0 (unregistering): Port device team_slave_0 removed
[  213.906938][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.870'.
[  213.909957][ T9335] team0 (unregistering): Port device team_slave_1 removed
[  213.960316][ T9354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.870'.
[  214.131543][ T9363] macsec0: entered promiscuous mode
[  214.144474][ T9363] macsec0: entered allmulticast mode
[  214.336994][ T9372] netlink: 20 bytes leftover after parsing attributes in process `syz.3.874'.
[  214.347109][ T9156] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.441153][ T9156] veth0_vlan: entered promiscuous mode
[  214.453231][ T9156] veth1_vlan: entered promiscuous mode
[  214.476967][ T9156] veth0_macvtap: entered promiscuous mode
[  214.486126][ T9156] veth1_macvtap: entered promiscuous mode
[  214.501497][ T9156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.512064][ T9156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.521966][ T9156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.532575][ T9156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.542713][ T9156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.553222][ T9156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.564500][ T9156] batman_adv: batadv0: Interface activated: batadv_slave_0
[  214.564735][ T5842] Bluetooth: hci3: command tx timeout
[  214.608203][ T9156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.631356][ T9156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.646265][ T9156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.658685][ T9156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.669372][ T9156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.680866][ T9156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.691534][ T9156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.702845][ T9156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.715780][ T9156] batman_adv: batadv0: Interface activated: batadv_slave_1
[  214.729196][ T9156] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  214.739991][ T9156] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  214.750248][ T9156] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  214.759349][ T9156] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  214.995590][ T8545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.009572][ T8545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.086046][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.107698][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.224507][ T9387] af_packet: tpacket_rcv: packet too big, clamped from 4368 to 3952. macoff=96
[  215.231876][ T9379] ip6gre0 speed is unknown, defaulting to 1000
[  215.483298][ T9391] vcan0: tx drop: invalid da for name 0x0000000000000002
[  215.500985][ T9391] veth1_vlan: left promiscuous mode
[  215.510506][ T9391] batman_adv: batadv0: Adding interface: macvlan1
[  215.517705][ T9391] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.544957][ T9391] batman_adv: batadv0: Not using interface macvlan1 (retrying later): interface not active
[  215.558334][ T9391] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[  215.584752][ T9379] lo speed is unknown, defaulting to 1000
[  215.721442][ T9398] x_tables: unsorted underflow at hook 2
[  215.721747][ T9400] xt_l2tp: invalid flags combination: c
[  215.849908][ T9402] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  216.072075][ T7256] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.120824][ T9406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.888'.
[  216.525804][ T7256] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.733360][ T9412] netlink: 24 bytes leftover after parsing attributes in process `syz.4.891'.
[  216.748104][ T9415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.890'.
[  216.792754][ T9415] vlan4: entered promiscuous mode
[  216.812177][ T9415] xfrm0: entered promiscuous mode
[  216.830374][ T9415] vlan4: entered allmulticast mode
[  216.849912][ T9415] xfrm0: entered allmulticast mode
[  216.875621][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.889'.
[  216.964464][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.889'.
[  216.973740][ T9420] netlink: 32 bytes leftover after parsing attributes in process `syz.1.889'.
[  217.083586][ T7256] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.122256][ T5842] block nbd0: Receive control failed (result -107)
[  217.151581][ T9434] netlink: 16 bytes leftover after parsing attributes in process `syz.4.893'.
[  217.175279][ T9420] nbd0: detected capacity change from 0 to 256
[  217.238806][ T7256] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.359665][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  217.374696][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  217.383180][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  217.391921][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  217.398908][ T9417] ip6gre0 speed is unknown, defaulting to 1000
[  217.406747][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  217.415596][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  217.467979][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.894'.
[  217.502703][ T7256] bridge_slave_1: left allmulticast mode
[  217.521443][ T7256] bridge_slave_1: left promiscuous mode
[  217.537474][ T7256] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.554314][ T7256] bridge_slave_0: left allmulticast mode
[  217.560277][ T7256] bridge_slave_0: left promiscuous mode
[  217.572681][ T7256] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.904699][ T7256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  217.916296][ T7256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  217.929819][ T7256] bond0 (unregistering): Released all slaves
[  217.949136][ T9417] lo speed is unknown, defaulting to 1000
[  217.990987][ T9444] netlink: 'syz.3.895': attribute type 11 has an invalid length.
[  218.011838][ T9444] netlink: 224 bytes leftover after parsing attributes in process `syz.3.895'.
[  218.077465][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.895'.
[  218.321363][ T9438] ip6gre0 speed is unknown, defaulting to 1000
[  218.835199][ T9438] lo speed is unknown, defaulting to 1000
[  219.073893][ T7256] hsr_slave_0: left promiscuous mode
[  219.093638][ T7256] hsr_slave_1: left promiscuous mode
[  219.099885][ T7256] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  219.124483][ T7256] batman_adv: batadv0: Removing interface: batadv_slave_0
[  219.145006][ T7256] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  219.152517][ T7256] batman_adv: batadv0: Removing interface: batadv_slave_1
[  219.197821][ T7256] veth1_macvtap: left promiscuous mode
[  219.203606][ T7256] veth0_macvtap: left promiscuous mode
[  219.211516][ T7256] veth1_vlan: left promiscuous mode
[  219.217521][ T7256] veth0_vlan: left promiscuous mode
[  219.444980][ T5842] Bluetooth: hci3: command tx timeout
[  219.792448][ T7256] team0 (unregistering): Port device team_slave_1 removed
[  219.837508][ T7256] team0 (unregistering): Port device team_slave_0 removed
[  220.553503][ T9438] chnl_net:caif_netlink_parms(): no params data found
[  220.617098][ T9496] netlink: 'syz.4.909': attribute type 4 has an invalid length.
[  220.634464][ T9501] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.814023][ T9438] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.833457][ T9438] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.842235][ T9506] openvswitch: netlink: IP tunnel TTL not specified.
[  220.851135][ T9438] bridge_slave_0: entered allmulticast mode
[  220.865338][ T9438] bridge_slave_0: entered promiscuous mode
[  220.889905][ T9498] ip6gre0 speed is unknown, defaulting to 1000
[  220.897924][ T9438] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.914333][ T9438] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.937032][ T9438] bridge_slave_1: entered allmulticast mode
[  220.952321][ T9438] bridge_slave_1: entered promiscuous mode
[  221.016066][ T9438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  221.055560][ T9438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  221.141242][ T9438] team0: Port device team_slave_0 added
[  221.155391][ T9498] lo speed is unknown, defaulting to 1000
[  221.167477][ T9438] team0: Port device team_slave_1 added
[  221.223750][ T9438] batman_adv: batadv0: Adding interface: batadv_slave_0
[  221.241976][ T9438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.276743][ T9438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  221.289986][ T9438] batman_adv: batadv0: Adding interface: batadv_slave_1
[  221.297730][ T9438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.341044][ T9438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  221.469457][ T9438] hsr_slave_0: entered promiscuous mode
[  221.497414][ T9438] hsr_slave_1: entered promiscuous mode
[  221.529855][ T5842] Bluetooth: hci3: command tx timeout
[  221.536306][ T9438] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  221.544019][ T9438] Cannot create hsr debugfs directory
[  223.611730][ T5842] Bluetooth: hci3: command tx timeout
[  224.926302][ T9532] __nla_validate_parse: 2 callbacks suppressed
[  224.926323][ T9532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.915'.
[  225.087045][ T9438] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  225.127369][ T9438] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  225.146559][ T9438] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  225.178571][ T9438] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  225.256589][ T9548] syzkaller1: entered promiscuous mode
[  225.281052][ T9548] syzkaller1: entered allmulticast mode
[  225.580948][ T9438] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.633200][ T9438] 8021q: adding VLAN 0 to HW filter on device team0
[  225.671939][ T7257] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.679228][ T7257] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.687354][ T5842] Bluetooth: hci3: command tx timeout
[  225.728874][ T8544] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.736141][ T8544] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.763445][ T9557] ip6tnl1: entered allmulticast mode
[  225.790687][ T9559] IPVS: Unknown mcast interface: veth��
[  225.860540][ T9559] netlink: 32 bytes leftover after parsing attributes in process `syz.4.925'.
[  225.871139][ T9559] netlink: 32 bytes leftover after parsing attributes in process `syz.4.925'.
[  225.880638][ T9545] ip6gre0 speed is unknown, defaulting to 1000
[  225.939880][ T9551] netlink: 'syz.0.918': attribute type 2 has an invalid length.
[  225.986428][ T9438] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  226.002309][ T9438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  226.038225][ T9565] netlink: 72 bytes leftover after parsing attributes in process `syz.3.926'.
[  226.076214][ T9551] Tq�!7: entered promiscuous mode
[  226.205385][ T9571] netlink: 104 bytes leftover after parsing attributes in process `syz.3.928'.
[  226.335746][ T9545] lo speed is unknown, defaulting to 1000
[  226.407158][ T9438] 8021q: adding VLAN 0 to HW filter on device batadv0
[  226.485575][ T9438] veth0_vlan: entered promiscuous mode
[  226.496737][ T9438] veth1_vlan: entered promiscuous mode
[  226.521330][ T9438] veth0_macvtap: entered promiscuous mode
[  226.533132][ T9438] veth1_macvtap: entered promiscuous mode
[  226.571309][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.582118][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.592225][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.603182][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.613316][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.624162][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.636771][ T9438] batman_adv: batadv0: Interface activated: batadv_slave_0
[  226.646637][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.657431][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.667610][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.678330][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.688262][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.699099][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.709004][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.719872][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.732014][ T9438] batman_adv: batadv0: Interface activated: batadv_slave_1
[  226.806510][ T9438] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.816473][ T9438] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.825426][ T9438] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.834374][ T9438] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.138821][ T7257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.193753][ T7257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.282316][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.300840][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.302871][ T9609] netlink: 44 bytes leftover after parsing attributes in process `syz.3.936'.
[  227.380565][ T9614] netlink: 92 bytes leftover after parsing attributes in process `syz.1.938'.
[  227.398278][ T9613] gre0: entered promiscuous mode
[  227.766273][ T9611] infiniband syz2: set down
[  227.795350][ T9611] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.803063][ T9611] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.306078][ T9611] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  228.355396][ T9611] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.408124][ T9611] xfrm0: left allmulticast mode
[  228.413064][ T9611] xfrm0: left promiscuous mode
[  228.715377][ T9611] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.724501][ T9611] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.733486][ T9611] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.743693][ T9611] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.997541][ T5884] ip6gre0 speed is unknown, defaulting to 1000
[  229.017516][ T9639] batadv_slave_1: entered promiscuous mode
[  229.032040][ T5884] ip6gre0 speed is unknown, defaulting to 1000
[  229.095401][ T9638] batadv_slave_1: left promiscuous mode
[  229.410049][ T8543] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.755929][ T9647] ip6gre0 speed is unknown, defaulting to 1000
[  229.891708][ T9647] lo speed is unknown, defaulting to 1000
[  229.981110][ T9652] ip6gre0 speed is unknown, defaulting to 1000
[  230.067443][ T9652] lo speed is unknown, defaulting to 1000
[  230.265811][ T9668] netlink: 16 bytes leftover after parsing attributes in process `syz.0.951'.
[  230.286419][ T9667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.951'.
[  230.315969][ T9668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.951'.
[  230.345668][ T9671] openvswitch: netlink: Actions may not be safe on all matching packets
[  230.349080][ T9672] openvswitch: netlink: Actions may not be safe on all matching packets
[  230.359181][ T9668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.951'.
[  230.600603][ T9678] xt_CONNSECMARK: invalid mode: 254
[  230.639463][ T9679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.955'.
[  230.649199][ T8543] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.755229][ T8543] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.922261][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  230.938147][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  230.947205][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  230.962210][ T8543] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.980921][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  230.991735][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  230.999379][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  231.170090][ T9687] ip6gre0 speed is unknown, defaulting to 1000
[  231.278242][ T9687] lo speed is unknown, defaulting to 1000
[  231.351048][ T8543] bridge_slave_1: left allmulticast mode
[  231.372658][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.961'.
[  231.383102][ T8543] bridge_slave_1: left promiscuous mode
[  231.389583][ T8543] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.405982][ T8543] bridge_slave_0: left allmulticast mode
[  231.411769][ T8543] bridge_slave_0: left promiscuous mode
[  231.422043][ T8543] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.973582][ T8543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  231.997884][ T8543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  232.027742][ T8543] bond0 (unregistering): Released all slaves
[  232.069166][ T9700] vlan2: entered allmulticast mode
[  232.089421][ T9700] xfrm0: entered allmulticast mode
[  232.285733][ T9725] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536
[  232.403011][ T9727] netlink: 'syz.1.967': attribute type 10 has an invalid length.
[  232.493830][ T9687] chnl_net:caif_netlink_parms(): no params data found
[  233.006534][ T8543] hsr_slave_0: left promiscuous mode
[  233.042448][ T8543] hsr_slave_1: left promiscuous mode
[  233.049309][ T8543] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  233.056961][ T8543] batman_adv: batadv0: Removing interface: batadv_slave_0
[  233.064411][ T5842] Bluetooth: hci3: command tx timeout
[  233.077239][ T9772] netlink: 76 bytes leftover after parsing attributes in process `syz.0.975'.
[  233.090725][ T8543] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  233.099476][ T8543] batman_adv: batadv0: Removing interface: batadv_slave_1
[  233.139224][ T8543] veth1_macvtap: left promiscuous mode
[  233.144978][ T8543] veth0_macvtap: left promiscuous mode
[  233.150612][ T8543] veth1_vlan: left promiscuous mode
[  233.156083][ T8543] veth0_vlan: left promiscuous mode
[  233.713515][ T8543] team0 (unregistering): Port device team_slave_1 removed
[  233.759425][ T8543] team0 (unregistering): Port device team_slave_0 removed
[  234.190517][ T9687] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.197876][ T9687] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.212858][ T9687] bridge_slave_0: entered allmulticast mode
[  234.219749][ T9687] bridge_slave_0: entered promiscuous mode
[  234.227871][ T9687] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.235246][ T9687] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.242475][ T9687] bridge_slave_1: entered allmulticast mode
[  234.251515][ T9687] bridge_slave_1: entered promiscuous mode
[  234.272161][ T9766] netlink: 80 bytes leftover after parsing attributes in process `syz.1.977'.
[  234.350765][ T9773] syzkaller0: entered promiscuous mode
[  234.369149][ T9773] syzkaller0: entered allmulticast mode
[  234.577479][ T9794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  235.135390][ T5842] Bluetooth: hci3: command tx timeout
[  235.439207][ T9803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.983'.
[  236.505899][ T9687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  236.519626][ T9687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.570727][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.982'.
[  236.683636][ T9687] team0: Port device team_slave_0 added
[  236.725097][ T9687] team0: Port device team_slave_1 added
[  236.833271][ T9687] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.846064][ T9687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.894899][ T9687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  236.912136][ T9687] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.932903][ T9687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.970078][ T9687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  237.062778][ T9823] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  237.120057][ T9687] hsr_slave_0: entered promiscuous mode
[  237.130606][ T9687] hsr_slave_1: entered promiscuous mode
[  237.140550][ T9687] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  237.164455][ T9687] Cannot create hsr debugfs directory
[  237.173144][ T9831] netlink: 'syz.3.991': attribute type 29 has an invalid length.
[  237.206667][ T5842] Bluetooth: hci3: command tx timeout
[  237.217323][ T9828] bridge0: entered allmulticast mode
[  237.245429][ T9828] pim6reg: entered allmulticast mode
[  237.525286][ T9843] netlink: 'syz.1.994': attribute type 1 has an invalid length.
[  237.630111][ T9843] bond3: entered promiscuous mode
[  237.636001][ T9843] 8021q: adding VLAN 0 to HW filter on device bond3
[  237.732334][ T9846] 8021q: adding VLAN 0 to HW filter on device bond3
[  237.784756][ T9846] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  237.814265][ T9846] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  237.846119][ T9846] bond3: (slave ip6gre1): making interface the new active one
[  237.873991][ T9859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.994'.
[  237.874600][ T9846] ip6gre1: entered promiscuous mode
[  237.916180][ T9846] bond3: (slave ip6gre1): Enslaving as an active interface with an up link
[  238.230753][ T9872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  238.323234][ T9859] bond3 (unregistering): (slave ip6gre1): Releasing backup interface
[  238.339090][ T9859] ip6gre1: left promiscuous mode
[  238.366091][ T9859] bond3 (unregistering): Released all slaves
[  238.531444][ T9880] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1004'.
[  238.542913][ T9880] netem: unknown loss type 13
[  238.548082][ T9880] netem: change failed
[  238.766548][ T9687] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  238.776673][ T9890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  238.777891][ T9687] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  238.815381][ T9687] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  238.829609][ T9687] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  238.931974][ T9687] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.976305][ T9687] 8021q: adding VLAN 0 to HW filter on device team0
[  238.998075][ T7256] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.005268][ T7256] bridge0: port 1(bridge_slave_0) entered forwarding state
[  239.054854][ T8544] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.062048][ T8544] bridge0: port 2(bridge_slave_1) entered forwarding state
[  239.093301][ T9897] : renamed from ipvlan1
[  239.265582][ T9903] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1012'.
[  239.285105][ T5842] Bluetooth: hci3: command tx timeout
[  239.391398][ T9687] 8021q: adding VLAN 0 to HW filter on device batadv0
[  239.469379][ T9915] netlink: 'syz.1.1012': attribute type 8 has an invalid length.
[  239.528720][ T9687] veth0_vlan: entered promiscuous mode
[  239.571459][ T9687] veth1_vlan: entered promiscuous mode
[  239.646051][ T9925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1016'.
[  239.663107][ T9687] veth0_macvtap: entered promiscuous mode
[  239.697365][ T9687] veth1_macvtap: entered promiscuous mode
[  239.727595][ T9687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.753019][ T9687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.781996][ T9687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.808450][ T9687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.833004][ T9687] batman_adv: batadv0: Interface activated: batadv_slave_0
[  239.848505][ T9935] xt_TCPMSS: Only works on TCP SYN packets
[  239.874592][ T9687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.907509][ T9687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.934305][ T9687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.952958][ T9687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.974261][ T9687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.990349][ T9941] netlink: 'syz.3.1020': attribute type 1 has an invalid length.
[  239.994105][ T9942] netlink: 'syz.3.1020': attribute type 1 has an invalid length.
[  240.011353][ T9687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.025684][ T9687] batman_adv: batadv0: Interface activated: batadv_slave_1
[  240.051795][ T9941] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  240.066393][ T9942] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  240.146423][ T9687] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.163649][ T9687] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.172740][ T9687] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.181566][ T9687] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.347867][ T8544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.394188][ T8544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.478611][ T9938] ip6gre0 speed is unknown, defaulting to 1000
[  240.479341][ T8543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.494407][ T8543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.728834][ T9975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1030'.
[  240.830094][ T9979] syz1: rxe_newlink: already configured on team_slave_0
[  240.914692][ T9938] lo speed is unknown, defaulting to 1000
[  240.959909][ T9983] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1031'.
[  241.073211][ T9986] pimreg: entered allmulticast mode
[  241.088561][ T9986] pimreg: left allmulticast mode
[  241.122591][ T9988] netlink: 'syz.0.1033': attribute type 27 has an invalid length.
[  241.451101][ T9996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'.
[  241.583156][ T9997] delete_channel: no stack
[  241.710901][T10006] netlink: 'syz.4.1039': attribute type 1 has an invalid length.
[  241.755035][T10013] openvswitch: netlink: IP tunnel dst address not specified
[  241.883815][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1043'.
[  242.081553][T10026] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1045'.
[  242.092582][T10027] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1045'.
[  242.133124][T10028] netlink: 'syz.4.1044': attribute type 21 has an invalid length.
[  242.141737][T10028] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1044'.
[  242.329920][   T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.142546][T10039] dummy0: entered promiscuous mode
[  243.181181][T10039] macvtap0: entered promiscuous mode
[  243.206458][T10039] macvtap0: entered allmulticast mode
[  243.232597][T10039] dummy0: entered allmulticast mode
[  243.260127][T10039] dummy0: left allmulticast mode
[  243.266112][T10039] dummy0: left promiscuous mode
[  243.295214][T10051] ax25_connect(): syz.0.1051 uses autobind, please contact jreuter@yaina.de
[  243.342716][T10046] bpq0: entered promiscuous mode
[  243.348283][T10046] bpq0: entered allmulticast mode
[  243.367874][T10052] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1052'.
[  243.377513][T10049] delete_channel: no stack
[  243.528976][   T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.619187][T10060] netlink: 'syz.0.1056': attribute type 49 has an invalid length.
[  243.645784][T10060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1056'.
[  243.668991][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  243.678913][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  243.715485][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  243.725114][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  243.736672][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  243.745099][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  243.786181][   T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.002744][   T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.301582][T10065] ip6gre0 speed is unknown, defaulting to 1000
[  244.414908][   T35] bridge_slave_1: left allmulticast mode
[  244.427945][   T35] bridge_slave_1: left promiscuous mode
[  244.463186][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.527536][   T35] bridge_slave_0: left allmulticast mode
[  244.533269][   T35] bridge_slave_0: left promiscuous mode
[  244.577286][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.716876][T10095] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1061'.
[  244.737994][T10095] netlink: zone id is out of range
[  244.748851][T10095] netlink: zone id is out of range
[  244.755627][T10095] netlink: zone id is out of range
[  244.760835][T10095] netlink: zone id is out of range
[  244.766655][T10095] netlink: zone id is out of range
[  244.771842][T10095] netlink: zone id is out of range
[  244.780881][T10095] netlink: zone id is out of range
[  244.786204][T10095] netlink: zone id is out of range
[  244.791359][T10095] netlink: get zone limit has 8 unknown bytes
[  245.071007][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  245.083296][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  245.097774][   T35] bond0 (unregistering): Released all slaves
[  245.109429][T10065] lo speed is unknown, defaulting to 1000
[  245.130987][T10085] syzkaller1: entered promiscuous mode
[  245.139096][T10085] syzkaller1: entered allmulticast mode
[  245.359136][T10102] netlink: 'syz.3.1065': attribute type 4 has an invalid length.
[  245.467740][T10116] netlink: 'syz.0.1066': attribute type 1 has an invalid length.
[  245.869465][ T5842] Bluetooth: hci3: command tx timeout
[  245.876549][T10130] __nla_validate_parse: 3 callbacks suppressed
[  245.876569][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1071'.
[  245.962318][   T35] hsr_slave_0: left promiscuous mode
[  245.982781][   T35] hsr_slave_1: left promiscuous mode
[  246.000717][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.006699][T10141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1074'.
[  246.022533][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.068209][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.076280][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.197791][T10151] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.1076'.
[  246.213635][   T35] veth1_macvtap: left promiscuous mode
[  246.214296][T10151] openvswitch: netlink: Message has 2 unknown bytes.
[  246.220080][   T35] veth0_macvtap: left promiscuous mode
[  246.232012][   T35] veth1_vlan: left promiscuous mode
[  246.237618][   T35] veth0_vlan: left promiscuous mode
[  246.762803][   T35] team0 (unregistering): Port device team_slave_1 removed
[  246.806328][   T35] team0 (unregistering): Port device team_slave_0 removed
[  247.229636][T10134] ip_vti0: entered promiscuous mode
[  247.256216][T10065] chnl_net:caif_netlink_parms(): no params data found
[  247.493629][T10157] hsr0: entered promiscuous mode
[  247.621383][T10157] hsr0: left promiscuous mode
[  247.628305][T10065] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.646236][T10065] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.653581][T10065] bridge_slave_0: entered allmulticast mode
[  247.661580][T10065] bridge_slave_0: entered promiscuous mode
[  247.669476][T10065] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.676940][T10065] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.684370][T10065] bridge_slave_1: entered allmulticast mode
[  247.691533][T10065] bridge_slave_1: entered promiscuous mode
[  247.759025][T10176] netlink: 'syz.4.1085': attribute type 1 has an invalid length.
[  247.770243][T10176] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1085'.
[  247.783698][T10065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  247.857297][T10065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  247.930009][ T5842] Bluetooth: hci3: command tx timeout
[  247.990345][T10065] team0: Port device team_slave_0 added
[  248.019028][T10065] team0: Port device team_slave_1 added
[  248.095615][T10065] batman_adv: batadv0: Adding interface: batadv_slave_0
[  248.110889][T10065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.143438][T10065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  248.178361][T10065] batman_adv: batadv0: Adding interface: batadv_slave_1
[  248.199165][T10065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.226005][T10065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  248.304451][T10207] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1093'.
[  248.326586][T10065] hsr_slave_0: entered promiscuous mode
[  248.333228][T10065] hsr_slave_1: entered promiscuous mode
[  248.337175][T10207] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1093'.
[  248.343227][T10065] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  248.362106][T10065] Cannot create hsr debugfs directory
[  248.449636][T10173] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  248.771018][ T5884] IPVS: starting estimator thread 0...
[  248.777658][T10224] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20000
[  248.826485][T10229] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1100'.
[  248.841063][T10231] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1101'.
[  248.845172][T10229] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1100'.
[  248.861782][T10232] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1101'.
[  248.900163][T10227] IPVS: using max 18 ests per chain, 43200 per kthread
[  248.926057][T10234] syzkaller1: entered promiscuous mode
[  248.931607][T10234] syzkaller1: entered allmulticast mode
[  249.069632][T10065] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  249.114001][T10243] unsupported nlmsg_type 40
[  249.140528][T10065] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  249.160998][T10241] lo: entered allmulticast mode
[  249.166854][T10065] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  249.177940][T10065] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  249.406274][T10065] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.450842][T10065] 8021q: adding VLAN 0 to HW filter on device team0
[  249.464843][   T29] audit: type=1107 audit(1737067711.223:2): pid=10247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='/u%ſ;/��yL�k�e2�koU�h.�*d�)��Q�$þ������*m~�a�&gB�"$f_Af{���Z��/�C�k��S����D'
[  249.502496][ T8543] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.509730][ T8543] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.552287][ T8544] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.559491][ T8544] bridge0: port 2(bridge_slave_1) entered forwarding state
[  249.603296][T10065] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  249.638397][T10065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  250.004813][ T5849] Bluetooth: hci3: command tx timeout
[  250.066060][T10065] 8021q: adding VLAN 0 to HW filter on device batadv0
[  250.261660][T10065] veth0_vlan: entered promiscuous mode
[  250.409770][T10065] veth1_vlan: entered promiscuous mode
[  250.538810][T10065] veth0_macvtap: entered promiscuous mode
[  250.577082][T10065] veth1_macvtap: entered promiscuous mode
[  250.632878][T10065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  250.643656][T10065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  250.654428][T10065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  250.665338][T10065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  250.676430][T10065] batman_adv: batadv0: Interface activated: batadv_slave_0
[  250.686672][T10065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  250.697364][T10065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  250.707261][T10065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  250.718303][T10065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  250.728404][T10065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  250.738966][T10065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  250.750152][T10065] batman_adv: batadv0: Interface activated: batadv_slave_1
[  250.785698][T10303] vlan5: entered promiscuous mode
[  250.790950][T10303] vlan5: entered allmulticast mode
[  250.797120][T10303] vlan0: entered allmulticast mode
[  250.803817][T10303] vlan0: entered promiscuous mode
[  250.814633][T10303] team0: Port device vlan5 added
[  250.823383][T10065] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  250.832743][T10065] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  250.854114][T10065] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  250.862873][T10065] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.246842][ T8544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  251.274664][ T8544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  251.350150][ T8544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  251.367782][ T8544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  251.428076][T10340] batman_adv: batadv0: Removing interface: batadv_slave_0
[  251.475222][T10340] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.503401][T10340] batman_adv: batadv0: Removing interface: batadv_slave_1
[  251.522195][T10345] net_ratelimit: 2 callbacks suppressed
[  251.522228][T10345] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[  251.715787][T10342] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  251.751682][T10342] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  251.778647][T10342] gretap2: entered promiscuous mode
[  251.796278][T10342] gretap2: entered allmulticast mode
[  251.985335][T10366] __nla_validate_parse: 7 callbacks suppressed
[  251.985357][T10366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1131'.
[  252.017226][T10366] tipc: Enabling of bearer <dth:t> rejected, media not registered
[  252.084878][ T5849] Bluetooth: hci3: command 0x0419 tx timeout
[  252.098012][T10366] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  252.107285][T10366] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  252.116168][T10366] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  252.125342][T10366] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  252.164904][T10366] vxlan0: entered promiscuous mode
[  252.170108][T10366] vxlan0: entered allmulticast mode
[  252.273919][T10366] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  252.283441][T10366] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  252.292484][T10366] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  252.301646][T10366] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  252.739228][T10399] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1136'.
[  252.796845][T10392] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1135'.
[  252.942923][ T8544] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.096298][T10372] ip6gre0 speed is unknown, defaulting to 1000
[  253.310208][ T8544] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.333253][T10372] lo speed is unknown, defaulting to 1000
[  253.442400][ T8544] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.532817][ T8544] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.772689][ T8544] bridge_slave_1: left allmulticast mode
[  253.782827][ T8544] bridge_slave_1: left promiscuous mode
[  253.788867][ T8544] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.802415][ T8544] bridge_slave_0: left allmulticast mode
[  253.811097][ T8544] bridge_slave_0: left promiscuous mode
[  253.819208][ T8544] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.318075][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  254.331613][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  254.340955][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  254.349414][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  254.365240][ T5849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  254.373809][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  254.558016][ T8544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  254.577965][ T8544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  254.595138][ T8544] bond0 (unregistering): Released all slaves
[  254.617401][T10424] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1142'.
[  254.634255][T10428] netlink: 'syz.4.1141': attribute type 5 has an invalid length.
[  255.005115][T10421] ip6gre0 speed is unknown, defaulting to 1000
[  255.254747][T10421] lo speed is unknown, defaulting to 1000
[  255.323970][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1148'.
[  255.562356][T10465] netlink: 'syz.0.1150': attribute type 10 has an invalid length.
[  255.714304][T10465] netlink: 'syz.0.1150': attribute type 1 has an invalid length.
[  255.738792][T10421] chnl_net:caif_netlink_parms(): no params data found
[  255.743268][T10465] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1150'.
[  255.857623][ T8544] hsr_slave_0: left promiscuous mode
[  255.873398][ T8544] hsr_slave_1: left promiscuous mode
[  255.891649][ T8544] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  255.910952][ T8544] batman_adv: batadv0: Removing interface: batadv_slave_0
[  255.927050][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  255.941858][ T8544] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  255.962648][ T8544] batman_adv: batadv0: Removing interface: batadv_slave_1
[  256.003917][ T8544] veth1_macvtap: left promiscuous mode
[  256.010457][ T8544] veth0_macvtap: left promiscuous mode
[  256.017163][ T8544] veth1_vlan: left promiscuous mode
[  256.023767][ T8544] veth0_vlan: left promiscuous mode
[  256.490426][ T5842] Bluetooth: hci3: command tx timeout
[  256.579618][ T8544] team0 (unregistering): Port device team_slave_1 removed
[  256.642324][ T8544] team0 (unregistering): Port device team_slave_0 removed
[  257.459146][T10421] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.465518][T10495] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1158'.
[  257.476244][T10421] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.483688][T10421] bridge_slave_0: entered allmulticast mode
[  257.499050][T10421] bridge_slave_0: entered promiscuous mode
[  257.520976][T10497] vlan3: entered promiscuous mode
[  257.527660][T10497] macvtap0: entered promiscuous mode
[  257.554970][T10421] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.562477][T10421] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.569941][T10421] bridge_slave_1: entered allmulticast mode
[  257.578154][T10421] bridge_slave_1: entered promiscuous mode
[  257.758131][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1162'.
[  257.768048][T10421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  257.788892][T10421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  257.861394][T10421] team0: Port device team_slave_0 added
[  257.896762][T10421] team0: Port device team_slave_1 added
[  257.969344][T10421] batman_adv: batadv0: Adding interface: batadv_slave_0
[  257.982142][T10421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.015407][T10421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  258.029528][T10421] batman_adv: batadv0: Adding interface: batadv_slave_1
[  258.037039][T10421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.063230][T10421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  258.196694][T10421] hsr_slave_0: entered promiscuous mode
[  258.209755][T10421] hsr_slave_1: entered promiscuous mode
[  258.218258][T10421] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  258.232008][T10421] Cannot create hsr debugfs directory
[  258.564660][ T5842] Bluetooth: hci3: command tx timeout
[  258.666474][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  258.677589][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  258.686019][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  258.699124][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  258.711702][ T5849] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  258.726052][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  258.781067][T10525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1169'.
[  258.844560][T10528] netlink: 'syz.4.1170': attribute type 1 has an invalid length.
[  258.963372][T10522] ip6gre0 speed is unknown, defaulting to 1000
[  259.001881][T10421] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  259.022124][T10421] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  259.049045][T10421] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  259.064015][T10421] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  259.218404][T10522] lo speed is unknown, defaulting to 1000
[  259.222376][T10421] 8021q: adding VLAN 0 to HW filter on device bond0
[  259.313824][T10421] 8021q: adding VLAN 0 to HW filter on device team0
[  259.329162][ T7256] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.336385][ T7256] bridge0: port 1(bridge_slave_0) entered forwarding state
[  259.365669][ T7256] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.372807][ T7256] bridge0: port 2(bridge_slave_1) entered forwarding state
[  259.389896][T10540] netlink: 'syz.1.1174': attribute type 5 has an invalid length.
[  259.404811][T10540] : entered promiscuous mode
[  259.553973][T10522] chnl_net:caif_netlink_parms(): no params data found
[  259.882094][T10522] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.894484][T10522] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.901745][T10522] bridge_slave_0: entered allmulticast mode
[  259.909087][T10522] bridge_slave_0: entered promiscuous mode
[  259.930533][T10421] 8021q: adding VLAN 0 to HW filter on device batadv0
[  259.944923][T10522] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.984835][T10522] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.992166][T10522] bridge_slave_1: entered allmulticast mode
[  260.009758][T10522] bridge_slave_1: entered promiscuous mode
[  260.099423][T10522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  260.126186][T10522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  260.193658][T10421] veth0_vlan: entered promiscuous mode
[  260.205820][T10421] veth1_vlan: entered promiscuous mode
[  260.238379][T10421] veth0_macvtap: entered promiscuous mode
[  260.247674][T10421] veth1_macvtap: entered promiscuous mode
[  260.263599][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  260.274174][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.284013][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  260.295215][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.306218][T10421] batman_adv: batadv0: Interface activated: batadv_slave_0
[  260.440186][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  260.451642][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.478085][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  260.495778][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.506845][T10421] batman_adv: batadv0: Interface activated: batadv_slave_1
[  260.560763][T10593] macsec1: entered promiscuous mode
[  260.574631][T10593] bond0: entered promiscuous mode
[  260.579944][T10593] bond_slave_0: entered promiscuous mode
[  260.600313][T10593] bond_slave_1: entered promiscuous mode
[  260.614918][T10593] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  260.628237][T10593] bond0: left promiscuous mode
[  260.633153][T10593] bond_slave_0: left promiscuous mode
[  260.640100][T10593] bond_slave_1: left promiscuous mode
[  260.646253][T10593] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[  260.669783][ T5842] Bluetooth: hci3: command tx timeout
[  260.717975][T10421] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.727309][T10421] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  260.738201][T10421] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  260.749062][T10421] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  260.763371][T10522] team0: Port device team_slave_0 added
[  260.778519][T10522] team0: Port device team_slave_1 added
[  260.804500][ T5842] Bluetooth: hci0: command tx timeout
[  260.828921][T10607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1187'.
[  260.857720][T10610] veth1: entered allmulticast mode
[  260.889770][T10610] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1189'.
[  260.961783][T10522] batman_adv: batadv0: Adding interface: batadv_slave_0
[  260.984233][T10522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.017325][T10522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  261.030180][T10522] batman_adv: batadv0: Adding interface: batadv_slave_1
[  261.037459][T10522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.082768][T10522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  261.218053][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.237065][T10522] hsr_slave_0: entered promiscuous mode
[  261.243562][T10522] hsr_slave_1: entered promiscuous mode
[  261.251103][T10522] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  261.256755][ T7256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.258725][T10522] Cannot create hsr debugfs directory
[  261.276442][ T7256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.288319][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.779152][T10522] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.916518][T10522] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.038752][T10522] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.169743][T10522] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.567899][T10522] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  262.601213][T10522] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  262.665088][T10522] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  262.687248][T10522] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  262.894458][ T5842] Bluetooth: hci0: command tx timeout
[  262.993278][ T8544] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.115070][T10522] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.133163][T10522] 8021q: adding VLAN 0 to HW filter on device team0
[  263.146153][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.153311][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  263.177060][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  263.184250][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  263.233325][T10522] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  263.244016][T10522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  263.402462][T10522] 8021q: adding VLAN 0 to HW filter on device batadv0
[  263.436257][T10522] veth0_vlan: entered promiscuous mode
[  263.452746][T10522] veth1_vlan: entered promiscuous mode
[  263.490840][T10522] veth0_macvtap: entered promiscuous mode
[  263.504484][T10522] veth1_macvtap: entered promiscuous mode
[  263.521626][T10522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.533135][T10522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.543340][T10522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.553999][T10522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.564535][T10522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.575168][T10522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.599707][T10522] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.640409][T10522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.656311][T10522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.679354][T10522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.693662][T10522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.704915][T10522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.723894][T10522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.735993][T10522] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.767726][ T8544] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.793142][T10522] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.802731][T10522] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.811801][T10522] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.820869][T10522] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  263.940483][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.001153][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.193795][ T8545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.224746][ T8545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.274865][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  264.277304][ T8544] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.305420][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  264.313939][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  264.351217][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  264.359997][ T5849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  264.367475][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  264.452710][ T8544] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.856384][ T8544] bridge_slave_1: left allmulticast mode
[  264.862111][ T8544] bridge_slave_1: left promiscuous mode
[  264.868087][ T8544] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.918826][ T8544] bridge_slave_0: left allmulticast mode
[  264.928646][ T8544] bridge_slave_0: left promiscuous mode
[  264.944896][ T8544] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.438332][ T8544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  265.453257][ T8544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  265.465320][ T8544] bond0 (unregistering): Released all slaves
[  265.489949][T10656] ip6gre0 speed is unknown, defaulting to 1000
[  265.860572][T10656] lo speed is unknown, defaulting to 1000
[  265.860600][T10653] ip6gre0 speed is unknown, defaulting to 1000
[  266.001797][T10684] pim6reg1: entered promiscuous mode
[  266.026243][T10684] pim6reg1: entered allmulticast mode
[  266.227692][T10653] lo speed is unknown, defaulting to 1000
[  266.410393][T10694] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1213'.
[  266.495093][ T5842] Bluetooth: hci3: command tx timeout
[  266.873570][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  266.883240][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  266.891692][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  266.905315][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  266.912945][ T5849] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  266.921427][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  267.136232][ T8544] hsr_slave_0: left promiscuous mode
[  267.156895][ T8544] hsr_slave_1: left promiscuous mode
[  267.163203][ T8544] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  267.179563][ T8544] batman_adv: batadv0: Removing interface: batadv_slave_0
[  267.191063][ T8544] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  267.198846][ T8544] batman_adv: batadv0: Removing interface: batadv_slave_1
[  267.240494][ T8544] veth1_macvtap: left promiscuous mode
[  267.246707][ T8544] veth0_macvtap: left promiscuous mode
[  267.252329][ T8544] veth1_vlan: left promiscuous mode
[  267.252695][T10716] netlink: 'syz.4.1218': attribute type 1 has an invalid length.
[  267.257837][ T8544] veth0_vlan: left promiscuous mode
[  267.279675][T10716] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1218'.
[  267.951753][ T8544] team0 (unregistering): Port device team_slave_1 removed
[  267.998958][ T8544] team0 (unregistering): Port device team_slave_0 removed
[  268.565066][ T5842] Bluetooth: hci3: command tx timeout
[  268.607710][T10653] chnl_net:caif_netlink_parms(): no params data found
[  268.615185][T10734] sctp: [Deprecated]: syz.4.1223 (pid 10734) Use of struct sctp_assoc_value in delayed_ack socket option.
[  268.615185][T10734] Use struct sctp_sack_info instead
[  268.912349][T10706] ip6gre0 speed is unknown, defaulting to 1000
[  269.005509][ T5842] Bluetooth: hci0: command tx timeout
[  269.117814][T10706] lo speed is unknown, defaulting to 1000
[  269.151497][T10653] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.184862][T10653] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.200523][T10653] bridge_slave_0: entered allmulticast mode
[  269.218058][T10653] bridge_slave_0: entered promiscuous mode
[  269.270547][T10653] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.280051][T10653] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.288233][T10653] bridge_slave_1: entered allmulticast mode
[  269.296341][T10653] bridge_slave_1: entered promiscuous mode
[  269.331256][T10759] netlink: 'syz.3.1230': attribute type 21 has an invalid length.
[  269.339580][T10759] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1230'.
[  269.348854][T10759] netlink: 'syz.3.1230': attribute type 5 has an invalid length.
[  269.358059][T10759] netlink: 'syz.3.1230': attribute type 6 has an invalid length.
[  269.367401][T10759] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1230'.
[  269.384953][T10761] dvmrp0: entered allmulticast mode
[  269.395396][T10762] pimreg: entered allmulticast mode
[  269.442238][T10653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  269.488097][T10653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  269.587302][T10653] team0: Port device team_slave_0 added
[  269.607909][T10768] x_tables: duplicate underflow at hook 2
[  269.615359][T10768] netlink: 'syz.3.1232': attribute type 5 has an invalid length.
[  269.616274][T10653] team0: Port device team_slave_1 added
[  269.694519][ T8544] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.718401][T10653] batman_adv: batadv0: Adding interface: batadv_slave_0
[  269.764495][T10653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  269.819044][T10653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  269.861714][T10653] batman_adv: batadv0: Adding interface: batadv_slave_1
[  269.870079][T10653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  269.912418][T10653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  269.923807][T10773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1234'.
[  269.998744][ T8544] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.136919][ T8544] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.196615][T10787] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1238'.
[  270.306020][ T8544] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.337621][T10653] hsr_slave_0: entered promiscuous mode
[  270.344939][T10653] hsr_slave_1: entered promiscuous mode
[  270.350995][T10653] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  270.364188][T10653] Cannot create hsr debugfs directory
[  270.642585][T10706] chnl_net:caif_netlink_parms(): no params data found
[  270.683441][T10810] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1244'.
[  270.684917][ T5842] Bluetooth: hci3: command tx timeout
[  270.695059][T10807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1243'.
[  270.768831][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1243'.
[  270.778263][T10807] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1243'.
[  270.817035][ T8544] bridge_slave_1: left allmulticast mode
[  270.838950][ T8544] bridge_slave_1: left promiscuous mode
[  270.864648][ T8544] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.902486][ T8544] bridge_slave_0: left allmulticast mode
[  270.912573][ T8544] bridge_slave_0: left promiscuous mode
[  270.920094][ T8544] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.048830][ T5842] Bluetooth: hci0: command tx timeout
[  271.729253][ T8544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  271.747364][ T8544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  271.759085][ T8544] bond0 (unregistering): Released all slaves
[  271.785542][T10831] netlink: 'syz.3.1248': attribute type 1 has an invalid length.
[  272.150377][T10852] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  272.226779][T10849] ip6gre0 speed is unknown, defaulting to 1000
[  272.347178][T10706] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.372030][T10706] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.382219][T10706] bridge_slave_0: entered allmulticast mode
[  272.395299][T10706] bridge_slave_0: entered promiscuous mode
[  272.415935][T10706] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.423495][T10706] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.432222][T10706] bridge_slave_1: entered allmulticast mode
[  272.453042][T10706] bridge_slave_1: entered promiscuous mode
[  272.558314][T10706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  272.570796][T10849] lo speed is unknown, defaulting to 1000
[  272.580912][T10706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  272.678590][T10872] bond0: (slave bond_slave_0): Releasing backup interface
[  272.725091][ T5842] Bluetooth: hci3: command tx timeout
[  272.748714][T10872] bond0: (slave bond_slave_1): Releasing backup interface
[  272.777422][T10872] bond0: (slave wlan1): Releasing backup interface
[  272.862677][T10706] team0: Port device team_slave_0 added
[  272.955037][ T8544] hsr_slave_0: left promiscuous mode
[  272.975457][ T8544] hsr_slave_1: left promiscuous mode
[  272.981401][ T8544] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  273.003153][ T8544] batman_adv: batadv0: Removing interface: batadv_slave_0
[  273.012490][ T8544] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  273.030781][ T8544] batman_adv: batadv0: Removing interface: batadv_slave_1
[  273.069949][ T8544] veth1_macvtap: left promiscuous mode
[  273.075970][ T8544] veth0_macvtap: left promiscuous mode
[  273.084649][ T8544] veth1_vlan: left promiscuous mode
[  273.089987][ T8544] veth0_vlan: left promiscuous mode
[  273.124050][T10891] __nla_validate_parse: 2 callbacks suppressed
[  273.132214][ T5842] Bluetooth: hci0: command tx timeout
[  273.139081][T10891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1263'.
[  273.590751][ T8544] team0 (unregistering): Port device team_slave_1 removed
[  273.637244][ T8544] team0 (unregistering): Port device team_slave_0 removed
[  274.065388][T10706] team0: Port device team_slave_1 added
[  274.075912][T10885] mac80211_hwsim hwsim6 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  274.202225][T10653] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  274.212668][T10706] batman_adv: batadv0: Adding interface: batadv_slave_0
[  274.225008][T10706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.260570][T10706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.273756][T10706] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.281112][T10706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.307680][T10706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  274.320762][T10653] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  274.409218][T10653] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  274.429830][T10897] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1265'.
[  274.512580][T10899] xt_hashlimit: size too large, truncated to 1048576
[  274.529269][T10653] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  274.649807][T10706] hsr_slave_0: entered promiscuous mode
[  274.665525][T10706] hsr_slave_1: entered promiscuous mode
[  274.671748][T10706] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  274.686838][T10706] Cannot create hsr debugfs directory
[  274.702063][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1266'.
[  275.143441][T10653] 8021q: adding VLAN 0 to HW filter on device bond0
[  275.204553][ T5842] Bluetooth: hci0: command tx timeout
[  275.212127][T10653] 8021q: adding VLAN 0 to HW filter on device team0
[  275.344966][ T8544] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.352153][ T8544] bridge0: port 1(bridge_slave_0) entered forwarding state
[  275.455396][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.462561][ T5893] bridge0: port 2(bridge_slave_1) entered forwarding state
[  275.726614][T10706] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  275.746908][T10706] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  275.781000][T10706] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  275.829922][T10706] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  276.009183][T10653] 8021q: adding VLAN 0 to HW filter on device batadv0
[  276.111965][T10706] 8021q: adding VLAN 0 to HW filter on device bond0
[  276.178390][T10706] 8021q: adding VLAN 0 to HW filter on device team0
[  276.208397][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.215634][ T5893] bridge0: port 1(bridge_slave_0) entered forwarding state
[  276.263823][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.271093][ T5893] bridge0: port 2(bridge_slave_1) entered forwarding state
[  276.322814][T10653] veth0_vlan: entered promiscuous mode
[  276.423724][T10653] veth1_vlan: entered promiscuous mode
[  276.490401][T10653] veth0_macvtap: entered promiscuous mode
[  276.543810][T10653] veth1_macvtap: entered promiscuous mode
[  276.576403][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  276.596302][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.624470][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  276.655724][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.696067][T10653] batman_adv: batadv0: Interface activated: batadv_slave_0
[  276.756648][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  276.771539][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.802068][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  276.832324][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.845807][T10653] batman_adv: batadv0: Interface activated: batadv_slave_1
[  276.857327][T10653] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  276.892527][T10653] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  276.924235][T10653] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  276.944455][T10653] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  276.972801][T10961] openvswitch: netlink: Invalid VLAN frame
[  277.155890][T10706] 8021q: adding VLAN 0 to HW filter on device batadv0
[  277.266041][ T8543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.278480][ T8543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.340353][T10966] syzkaller0: create flow: hash 3632178506 index 1
[  277.423389][T10969] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1284'.
[  277.475630][T10971] netlink: 'syz.3.1284': attribute type 10 has an invalid length.
[  277.535128][T10972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1284'.
[  277.549080][ T8543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.561756][T10962] syzkaller0: delete flow: hash 3632178506 index 1
[  277.568695][ T8543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  280.026094][T10979] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1286'.
[  280.037817][T10979] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1286'.
[  280.370941][T10972] team0: left allmulticast mode
[  280.376838][T10972] team_slave_0: left allmulticast mode
[  280.383394][T10972] team_slave_1: left allmulticast mode
[  280.389889][T10972] bridge0: port 3(team0) entered disabled state
[  280.429030][T10972] bridge_slave_1: left allmulticast mode
[  280.443001][T10972] bridge_slave_1: left promiscuous mode
[  280.449948][T10972] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.471023][T10972] bridge_slave_0: left allmulticast mode
[  280.489087][T10972] bridge_slave_0: left promiscuous mode
[  280.495514][T10972] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.619187][T10706] veth0_vlan: entered promiscuous mode
[  280.657950][T10984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1288'.
[  280.676650][T10706] veth1_vlan: entered promiscuous mode
[  280.912475][ T8712] IPVS: starting estimator thread 0...
[  280.913303][ T8543] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.926035][T10993] netlink: 'syz.3.1290': attribute type 39 has an invalid length.
[  281.024536][T10994] IPVS: using max 20 ests per chain, 48000 per kthread
[  281.045601][T10706] veth0_macvtap: entered promiscuous mode
[  281.069751][T10706] veth1_macvtap: entered promiscuous mode
[  281.102118][T10706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  281.113330][T10706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.123682][T10706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  281.136983][T10706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.147082][T10706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  281.157692][T10706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.177421][T10706] batman_adv: batadv0: Interface activated: batadv_slave_0
[  281.223812][ T8543] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.245541][T10706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.264204][T10706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.281511][T10706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.292898][T10706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.303738][T10706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.314720][T10706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.325842][T10706] batman_adv: batadv0: Interface activated: batadv_slave_1
[  281.355940][ T8543] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.379776][T10706] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  281.389720][T10706] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  281.398645][T10706] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  281.407705][T10706] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  281.438905][ T8543] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.513283][ T5893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.522500][ T5893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.549873][ T8544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.560656][ T8544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.682896][ T8543] bridge_slave_1: left allmulticast mode
[  281.688974][ T8543] bridge_slave_1: left promiscuous mode
[  281.695256][ T8543] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.706819][ T8543] bridge_slave_0: left allmulticast mode
[  281.712502][ T8543] bridge_slave_0: left promiscuous mode
[  281.718340][ T8543] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.563342][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  282.580583][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  282.606657][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  282.619015][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  282.629025][ T5849] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  282.635395][ T8543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  282.645667][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  282.659570][ T8543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  282.691052][ T8543] bond0 (unregistering): Released all slaves
[  283.132906][T11025] tipc: Enabling of bearer <eth:\lo> rejected, failed to enable media
[  283.163424][T11027] tipc: Enabling of bearer <eth:\lo> rejected, failed to enable media
[  283.180163][T11017] ip6gre0 speed is unknown, defaulting to 1000
[  283.370461][T11030] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1298'.
[  283.393399][T11030] netlink: 'syz.3.1298': attribute type 7 has an invalid length.
[  283.420594][T11030] netlink: 'syz.3.1298': attribute type 8 has an invalid length.
[  283.441029][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1298'.
[  283.574447][T11031] xt_CT: No such helper "syz0"
[  283.587590][T11033] bond2: left promiscuous mode
[  283.634736][T11033] macsec0: left promiscuous mode
[  283.646494][T11033] macsec0: left allmulticast mode
[  283.756322][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  283.765764][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  283.776699][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  283.789420][T11033] Bluetooth: MGMT ver 1.23
[  283.799533][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  283.817359][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  283.825031][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  283.853196][T11017] lo speed is unknown, defaulting to 1000
[  283.891414][T11035] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1299'.
[  284.005749][ T8543] hsr_slave_0: left promiscuous mode
[  284.013567][ T8543] hsr_slave_1: left promiscuous mode
[  284.026986][ T8543] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  284.039773][ T8543] batman_adv: batadv0: Removing interface: batadv_slave_0
[  284.061079][ T8543] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  284.073630][ T8543] batman_adv: batadv0: Removing interface: batadv_slave_1
[  284.116311][ T8543] veth1_macvtap: left promiscuous mode
[  284.121977][ T8543] veth0_macvtap: left promiscuous mode
[  284.127712][ T8543] veth1_vlan: left promiscuous mode
[  284.133132][ T8543] veth0_vlan: left promiscuous mode
[  284.163816][T11058] netlink: 'syz.1.1303': attribute type 10 has an invalid length.
[  284.722939][ T8543] team0 (unregistering): Port device team_slave_1 removed
[  284.736714][ T5842] Bluetooth: hci0: command tx timeout
[  284.784461][ T8543] team0 (unregistering): Port device team_slave_0 removed
[  285.239780][T11039] tipc: Started in network mode
[  285.245512][T11039] tipc: Node identity 4253fee8919c, cluster identity 4711
[  285.252924][T11039] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  285.292588][T11044] syzkaller0: entered promiscuous mode
[  285.298705][T11044] syzkaller0: entered allmulticast mode
[  285.305566][T11044] tipc: Resetting bearer <eth:syzkaller0>
[  285.314960][T11038] tipc: Resetting bearer <eth:syzkaller0>
[  285.847307][ T5849] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  285.926185][ T5849] Bluetooth: hci3: command tx timeout
[  286.300046][ T5924] tipc: Node number set to 3553623784
[  286.816129][ T5849] Bluetooth: hci0: command 0x041b tx timeout
[  287.253014][T11038] tipc: Disabling bearer <eth:syzkaller0>
[  287.588247][T11041] ip6gre0 speed is unknown, defaulting to 1000
[  287.628924][T11017] chnl_net:caif_netlink_parms(): no params data found
[  287.914690][T11041] lo speed is unknown, defaulting to 1000
[  288.010926][ T5849] Bluetooth: hci3: command tx timeout
[  288.014359][T11017] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.042820][T11017] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.054466][T11017] bridge_slave_0: entered allmulticast mode
[  288.061568][T11017] bridge_slave_0: entered promiscuous mode
[  288.103653][T11017] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.111889][T11017] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.119361][T11017] bridge_slave_1: entered allmulticast mode
[  288.126878][T11017] bridge_slave_1: entered promiscuous mode
[  288.217680][T11017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  288.305671][T11017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  288.394874][ T8543] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.522405][ T8543] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.546161][T11017] team0: Port device team_slave_0 added
[  288.557658][T11041] chnl_net:caif_netlink_parms(): no params data found
[  288.565989][T11130] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1318'.
[  288.592599][T11017] team0: Port device team_slave_1 added
[  288.615403][T11132] netlink: 'syz.1.1317': attribute type 4 has an invalid length.
[  288.717747][ T8543] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.801082][T11017] batman_adv: batadv0: Adding interface: batadv_slave_0
[  288.811669][T11017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.812302][T11137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1320'.
[  288.838336][T11017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  288.884249][ T5849] Bluetooth: hci0: command 0x041b tx timeout
[  288.903511][ T8543] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.923358][T11140] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1320'.
[  288.924741][T11017] batman_adv: batadv0: Adding interface: batadv_slave_1
[  288.943935][T11017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.970814][T11017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  289.138135][T11148] netlink: 'syz.4.1321': attribute type 1 has an invalid length.
[  289.152367][T11017] hsr_slave_0: entered promiscuous mode
[  289.159490][T11017] hsr_slave_1: entered promiscuous mode
[  289.170003][T11017] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  289.196453][T11017] Cannot create hsr debugfs directory
[  289.223113][T11041] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.239174][T11041] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.246954][T11041] bridge_slave_0: entered allmulticast mode
[  289.257693][T11041] bridge_slave_0: entered promiscuous mode
[  289.266789][T11148] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  289.315686][T11041] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.345202][T11041] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.352485][T11041] bridge_slave_1: entered allmulticast mode
[  289.366973][T11041] bridge_slave_1: entered promiscuous mode
[  289.388132][T11156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1323'.
[  289.463682][T11157] bridge0: entered promiscuous mode
[  289.532886][T11156] bridge0 (unregistering): left allmulticast mode
[  289.541238][T11156] bridge0 (unregistering): left promiscuous mode
[  289.597659][ T8543] bridge_slave_1: left allmulticast mode
[  289.603382][ T8543] bridge_slave_1: left promiscuous mode
[  289.608905][T11170] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1326'.
[  289.609665][ T8543] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.640027][ T8543] bridge_slave_0: left allmulticast mode
[  289.646202][ T8543] bridge_slave_0: left promiscuous mode
[  289.652036][ T8543] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.096770][ T5849] Bluetooth: hci3: command tx timeout
[  290.375773][ T8543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  290.386294][T11177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1328'.
[  290.396066][ T8543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  290.407240][ T8543] bond0 (unregistering): Released all slaves
[  290.445492][T11041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  290.470320][T11165] netdevsim netdevsim4 ������: renamed from netdevsim0 (while UP)
[  290.533966][T11041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  290.819083][T11041] team0: Port device team_slave_0 added
[  290.852163][T11041] team0: Port device team_slave_1 added
[  290.964295][ T5849] Bluetooth: hci0: command 0x041b tx timeout
[  291.152650][T11041] batman_adv: batadv0: Adding interface: batadv_slave_0
[  291.163474][T11041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.233757][T11041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  291.356540][T11041] batman_adv: batadv0: Adding interface: batadv_slave_1
[  291.372795][T11041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.421266][T11041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  291.609181][T11223] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  291.618173][T11223] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  291.627146][T11223] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  291.636307][T11223] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  291.704285][T11223] vxlan0: entered promiscuous mode
[  291.724193][T11223] vxlan0: entered allmulticast mode
[  291.750898][T11223] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  291.760606][T11223] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  291.772607][T11223] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  291.781930][T11223] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  291.885192][ T8543] hsr_slave_0: left promiscuous mode
[  291.897787][ T8543] hsr_slave_1: left promiscuous mode
[  291.904534][ T8543] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  291.925367][ T8543] batman_adv: batadv0: Removing interface: batadv_slave_0
[  291.943627][ T8543] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  291.964578][ T8543] batman_adv: batadv0: Removing interface: batadv_slave_1
[  292.010105][ T8543] veth1_macvtap: left promiscuous mode
[  292.015747][ T8543] veth0_macvtap: left promiscuous mode
[  292.021433][ T8543] veth1_vlan: left promiscuous mode
[  292.028479][ T8543] veth0_vlan: left promiscuous mode
[  292.165302][ T5849] Bluetooth: hci3: command tx timeout
[  292.573313][ T8543] team0 (unregistering): Port device team_slave_1 removed
[  292.622685][ T8543] team0 (unregistering): Port device team_slave_0 removed
[  293.045692][ T5849] Bluetooth: hci0: command 0x041b tx timeout
[  293.112304][T11041] hsr_slave_0: entered promiscuous mode
[  293.156265][T11041] hsr_slave_1: entered promiscuous mode
[  293.162465][T11041] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  293.209438][T11041] Cannot create hsr debugfs directory
[  293.512744][T11233] ip6gre0 speed is unknown, defaulting to 1000
[  296.088776][T11017] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  296.109135][T11017] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  296.143955][T11233] lo speed is unknown, defaulting to 1000
[  296.146865][T11264] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1349'.
[  296.210631][T11017] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  296.255092][T11017] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  296.312356][T11269] raw_sendmsg: syz.1.1351 forgot to set AF_INET. Fix it!
[  296.709458][T11017] 8021q: adding VLAN 0 to HW filter on device bond0
[  296.781659][T11017] 8021q: adding VLAN 0 to HW filter on device team0
[  296.819269][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.826511][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  296.866834][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.874076][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  297.229002][T11041] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  297.265955][T11041] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  297.298790][T11041] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  297.319124][T11041] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  297.440627][T11017] 8021q: adding VLAN 0 to HW filter on device batadv0
[  297.545470][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1359'.
[  297.671363][T11319] netlink: 'syz.4.1359': attribute type 15 has an invalid length.
[  297.700900][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1359'.
[  297.736710][T11041] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.753185][T11041] 8021q: adding VLAN 0 to HW filter on device team0
[  297.778210][ T7266] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.785370][ T7266] bridge0: port 1(bridge_slave_0) entered forwarding state
[  297.807421][ T7266] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.814582][ T7266] bridge0: port 2(bridge_slave_1) entered forwarding state
[  297.931085][T11337] macsec1: entered promiscuous mode
[  297.943458][T11337] gretap0: entered promiscuous mode
[  297.969799][T11337] gretap0: left promiscuous mode
[  298.007210][T11338] macsec1: entered promiscuous mode
[  298.012645][T11338] gretap0: entered promiscuous mode
[  298.026826][T11338] gretap0: left promiscuous mode
[  298.046160][T11335] netlink: 'syz.3.1362': attribute type 3 has an invalid length.
[  298.054432][T11335] netlink: 'syz.3.1362': attribute type 1 has an invalid length.
[  298.080474][T11017] veth0_vlan: entered promiscuous mode
[  298.117372][T11017] veth1_vlan: entered promiscuous mode
[  298.233416][T11017] veth0_macvtap: entered promiscuous mode
[  298.260436][T11017] veth1_macvtap: entered promiscuous mode
[  298.288205][T11349] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1364'.
[  298.303618][T11017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  298.316788][T11017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.327805][T11017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  298.340216][T11356] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  298.356938][T11017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.380042][T11349] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  298.382165][T11017] batman_adv: batadv0: Interface activated: batadv_slave_0
[  298.426536][T11017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  298.454358][T11017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.472485][T11017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  298.483622][T11017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.495947][T11017] batman_adv: batadv0: Interface activated: batadv_slave_1
[  298.536724][T11017] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  298.548108][T11017] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  298.559207][T11017] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  298.569069][T11017] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  298.671368][T11041] 8021q: adding VLAN 0 to HW filter on device batadv0
[  298.709559][ T7266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.748665][ T7266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.810946][ T7257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.833729][ T7257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.873510][T11041] veth0_vlan: entered promiscuous mode
[  298.922827][T11041] veth1_vlan: entered promiscuous mode
[  299.127451][T11041] veth0_macvtap: entered promiscuous mode
[  299.135492][T11373] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1371'.
[  299.155874][T11041] veth1_macvtap: entered promiscuous mode
[  299.201823][T11041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  299.233428][T11041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.244309][T11041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  299.278265][T11041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.300264][T11041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  299.313029][T11041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.327131][T11041] batman_adv: batadv0: Interface activated: batadv_slave_0
[  299.343051][T11041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  299.353718][T11041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.384080][T11041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  299.404069][T11041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.413926][T11041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  299.426209][T11041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.438340][T11382] netlink: 'syz.1.1374': attribute type 1 has an invalid length.
[  299.449339][T11041] batman_adv: batadv0: Interface activated: batadv_slave_1
[  299.460059][T11378] tun1: tun_chr_ioctl cmd 35108
[  299.470563][T11041] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.534096][T11041] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.542855][T11041] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.572996][T11041] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  299.646306][T11392] netlink: 'syz.4.1378': attribute type 3 has an invalid length.
[  299.724476][T11394] netlink: 34 bytes leftover after parsing attributes in process `syz.1.1377'.
[  299.746742][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.776650][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.872350][ T7255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.895238][ T7255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.095064][T11411] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.1383'.
[  300.113098][ T7257] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.131207][T11411] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  300.694775][ T7257] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.880341][ T7257] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.956654][ T7257] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.080794][ T7257] bridge_slave_1: left allmulticast mode
[  301.091395][ T7257] bridge_slave_1: left promiscuous mode
[  301.098986][ T7257] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.120358][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  301.131867][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  301.132321][ T7257] bridge_slave_0: left allmulticast mode
[  301.140291][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  301.152556][ T7257] bridge_slave_0: left promiscuous mode
[  301.153181][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  301.158468][ T7257] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.182152][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  301.193337][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  301.354489][T11426] Cannot find del_set index 65534 as target
[  301.623827][T11435] netlink: 'syz.1.1387': attribute type 9 has an invalid length.
[  301.756476][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  301.768008][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  301.786747][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  301.809857][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  301.826960][ T5849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  301.857804][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  301.935300][ T7257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  301.946458][ T7257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  301.958437][ T7257] bond0 (unregistering): Released all slaves
[  302.087998][T11449] netlink: 448 bytes leftover after parsing attributes in process `syz.1.1389'.
[  302.255074][T11454] netlink: 'syz.1.1389': attribute type 13 has an invalid length.
[  302.294665][T11454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1389'.
[  302.344580][T11454] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  302.424587][T11443] ip6gre0 speed is unknown, defaulting to 1000
[  302.506152][T11460] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1392'.
[  302.729623][T11464] netlink: zone id is out of range
[  302.740353][T11464] netlink: zone id is out of range
[  302.745077][T11419] ip6gre0 speed is unknown, defaulting to 1000
[  302.765579][T11464] netlink: zone id is out of range
[  302.765948][T11443] lo speed is unknown, defaulting to 1000
[  302.858065][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1395'.
[  302.937311][T11469] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  302.946769][T11465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1395'.
[  303.030471][T11464] netlink: set zone limit has 4 unknown bytes
[  303.284892][ T5849] Bluetooth: hci0: command tx timeout
[  303.333542][T11419] lo speed is unknown, defaulting to 1000
[  303.417398][T11443] chnl_net:caif_netlink_parms(): no params data found
[  303.632958][ T7257] hsr_slave_0: left promiscuous mode
[  303.651650][ T7257] hsr_slave_1: left promiscuous mode
[  303.665338][ T7257] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  303.672839][ T7257] batman_adv: batadv0: Removing interface: batadv_slave_0
[  303.713322][ T7257] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  303.723008][ T7257] batman_adv: batadv0: Removing interface: batadv_slave_1
[  303.771751][ T7257] veth1_macvtap: left promiscuous mode
[  303.781204][ T7257] veth0_macvtap: left promiscuous mode
[  303.787177][ T7257] veth1_vlan: left promiscuous mode
[  303.797098][ T7257] veth0_vlan: left promiscuous mode
[  303.933608][ T5849] Bluetooth: hci3: command tx timeout
[  304.084696][ T5849] Bluetooth: hci4: command 0x0406 tx timeout
[  304.409256][ T7257] team0 (unregistering): Port device team_slave_1 removed
[  304.456909][ T7257] team0 (unregistering): Port device team_slave_0 removed
[  305.001270][T11513] unknown channel width for channel at 909000KHz?
[  305.009669][T11513] unknown channel width for channel at 909000KHz?
[  305.032338][T11521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1408'.
[  305.041412][T11513] unknown channel width for channel at 909000KHz?
[  305.042214][T11443] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.060286][T11519] netlink: 'syz.4.1408': attribute type 12 has an invalid length.
[  305.068470][T11443] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.087532][T11443] bridge_slave_0: entered allmulticast mode
[  305.106694][T11443] bridge_slave_0: entered promiscuous mode
[  305.125568][T11443] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.133085][T11443] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.141642][T11443] bridge_slave_1: entered allmulticast mode
[  305.150767][T11443] bridge_slave_1: entered promiscuous mode
[  305.250656][T11443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  305.263345][T11523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1409'.
[  305.275553][T11443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  305.364319][ T5842] Bluetooth: hci0: command tx timeout
[  305.476820][T11443] team0: Port device team_slave_0 added
[  305.523750][T11443] team0: Port device team_slave_1 added
[  305.615534][T11419] chnl_net:caif_netlink_parms(): no params data found
[  305.665314][T11443] batman_adv: batadv0: Adding interface: batadv_slave_0
[  305.672325][T11443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  305.710143][T11443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  305.722774][T11539] infiniband syz1: set active
[  305.733862][T11539] infiniband syz1: set down
[  305.789150][T11443] batman_adv: batadv0: Adding interface: batadv_slave_1
[  305.796681][T11443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  305.850059][T11443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  306.004391][ T5842] Bluetooth: hci3: command tx timeout
[  306.111849][T11419] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.135175][T11419] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.145999][T11419] bridge_slave_0: entered allmulticast mode
[  306.153188][T11419] bridge_slave_0: entered promiscuous mode
[  306.188366][T11443] hsr_slave_0: entered promiscuous mode
[  306.206944][T11443] hsr_slave_1: entered promiscuous mode
[  306.233846][T11443] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  306.251469][T11443] Cannot create hsr debugfs directory
[  306.262106][T11419] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.270388][T11419] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.284484][T11419] bridge_slave_1: entered allmulticast mode
[  306.295005][T11569] Bluetooth: MGMT ver 1.23
[  306.304875][T11419] bridge_slave_1: entered promiscuous mode
[  306.388928][T11419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  306.402840][T11419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  306.493833][T11572] syzkaller1: entered promiscuous mode
[  306.500094][T11572] syzkaller1: entered allmulticast mode
[  306.538753][ T7257] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.562867][T11419] team0: Port device team_slave_0 added
[  306.569782][T11574] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1424'.
[  306.581341][T11574] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1424'.
[  306.627220][ T7257] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.655910][T11572] macsec1: entered promiscuous mode
[  306.661177][T11572] batadv0: entered promiscuous mode
[  306.685371][T11572] macsec1: entered allmulticast mode
[  306.690734][T11572] batadv0: entered allmulticast mode
[  306.701854][T11572] batadv0: left allmulticast mode
[  306.711160][T11572] batadv0: left promiscuous mode
[  306.733138][T11419] team0: Port device team_slave_1 added
[  306.773446][ T7257] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.806292][T11419] batman_adv: batadv0: Adding interface: batadv_slave_0
[  306.814612][T11419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  306.858497][T11419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  306.886821][T11419] batman_adv: batadv0: Adding interface: batadv_slave_1
[  306.893983][T11419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  306.925536][T11419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  306.986673][ T7257] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.201284][T11587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1428'.
[  307.236344][T11419] hsr_slave_0: entered promiscuous mode
[  307.243011][T11419] hsr_slave_1: entered promiscuous mode
[  307.253334][T11588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1428'.
[  307.265580][T11419] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  307.273195][T11419] Cannot create hsr debugfs directory
[  307.444610][ T5842] Bluetooth: hci0: command tx timeout
[  307.603242][ T7257] bridge_slave_1: left allmulticast mode
[  307.625479][ T7257] bridge_slave_1: left promiscuous mode
[  307.631477][ T7257] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.653793][ T7257] bridge_slave_0: left allmulticast mode
[  307.666847][ T7257] bridge_slave_0: left promiscuous mode
[  307.687225][ T7257] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.835261][T11606] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1432'.
[  308.084295][ T5842] Bluetooth: hci3: command tx timeout
[  308.279862][ T7257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  308.292649][ T7257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  308.303341][ T7257] bond0 (unregistering): Released all slaves
[  308.351214][T11612] vlan0: left allmulticast mode
[  308.372507][T11612] vlan0: left promiscuous mode
[  308.829207][T11630] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1440'.
[  308.844804][T11630] nbd: couldn't find a device at index 64
[  309.083130][T11443] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  309.136898][T11443] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  309.173625][T11633] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1441'.
[  309.176276][T11443] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  309.258585][ T7257] hsr_slave_0: left promiscuous mode
[  309.264841][ T7257] hsr_slave_1: left promiscuous mode
[  309.276123][ T7257] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  309.303347][ T7257] batman_adv: batadv0: Removing interface: batadv_slave_0
[  309.321063][ T7257] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  309.336641][ T7257] batman_adv: batadv0: Removing interface: batadv_slave_1
[  309.430295][ T7257] veth1_macvtap: left promiscuous mode
[  309.454143][ T7257] veth0_macvtap: left promiscuous mode
[  309.459908][ T7257] veth1_vlan: left promiscuous mode
[  309.474572][ T7257] veth0_vlan: left promiscuous mode
[  309.524313][ T5842] Bluetooth: hci0: command tx timeout
[  310.164681][ T5842] Bluetooth: hci3: command tx timeout
[  310.268054][T11645] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7
[  310.843378][ T7257] team0 (unregistering): Port device team_slave_1 removed
[  310.908935][ T7257] team0 (unregistering): Port device team_slave_0 removed
[  311.669212][T11443] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  311.900111][T11443] 8021q: adding VLAN 0 to HW filter on device bond0
[  312.006178][T11443] 8021q: adding VLAN 0 to HW filter on device team0
[  312.058836][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.066160][ T5893] bridge0: port 1(bridge_slave_0) entered forwarding state
[  312.112313][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.119536][ T5893] bridge0: port 2(bridge_slave_1) entered forwarding state
[  312.168159][T11443] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  312.178889][T11443] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  312.348749][T11419] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  312.372878][T11419] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  312.392710][T11419] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  312.408460][T11419] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  312.481646][T11443] 8021q: adding VLAN 0 to HW filter on device batadv0
[  312.589758][T11677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1454'.
[  312.642470][T11419] 8021q: adding VLAN 0 to HW filter on device bond0
[  312.705346][T11443] veth0_vlan: entered promiscuous mode
[  312.760075][T11419] 8021q: adding VLAN 0 to HW filter on device team0
[  312.788119][T11443] veth1_vlan: entered promiscuous mode
[  312.816835][ T8543] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.824001][ T8543] bridge0: port 1(bridge_slave_0) entered forwarding state
[  312.849738][ T8547] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.856964][ T8547] bridge0: port 2(bridge_slave_1) entered forwarding state
[  312.959416][T11443] veth0_macvtap: entered promiscuous mode
[  312.981354][T11443] veth1_macvtap: entered promiscuous mode
[  313.010017][T11443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  313.011771][T11690] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8
[  313.030996][T11443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.051936][T11443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  313.076951][T11443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.110950][T11443] batman_adv: batadv0: Interface activated: batadv_slave_0
[  313.202913][T11443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  313.231926][T11443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.254370][T11443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  313.279891][T11443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.307489][T11443] batman_adv: batadv0: Interface activated: batadv_slave_1
[  313.365026][T11682] ip6gre0 speed is unknown, defaulting to 1000
[  313.367064][T11443] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  313.385603][T11443] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  313.403886][T11443] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  313.415406][T11443] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  313.628640][ T8547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  313.649809][ T8547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  313.770197][ T8547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  313.823974][ T8547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  313.841452][T11419] 8021q: adding VLAN 0 to HW filter on device batadv0
[  313.876590][T11704] team_slave_1: entered allmulticast mode
[  313.882984][T11704] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check.
[  314.071932][T11419] veth0_vlan: entered promiscuous mode
[  314.078611][T11682] lo speed is unknown, defaulting to 1000
[  314.091943][T11419] veth1_vlan: entered promiscuous mode
[  314.148589][T11419] veth0_macvtap: entered promiscuous mode
[  314.171047][T11419] veth1_macvtap: entered promiscuous mode
[  314.252742][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  314.283727][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.296909][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  314.319800][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.343516][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  314.364705][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.388350][T11419] batman_adv: batadv0: Interface activated: batadv_slave_0
[  314.460067][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  314.476722][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.488370][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  314.499358][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.509480][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  314.520476][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.531852][T11419] batman_adv: batadv0: Interface activated: batadv_slave_1
[  314.609726][T11419] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  314.636837][T11419] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  314.659068][T11419] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  314.673403][T11419] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  314.946349][ T7255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  314.985665][ T7255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.031378][T11720] xt_TCPMSS: Only works on TCP SYN packets
[  315.119334][ T7255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.135888][ T7255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.522876][ T5893] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.991540][ T5893] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.126611][ T5893] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.165254][ T5849] Bluetooth: hci0: command 0x0405 tx timeout
[  316.264590][T11718] ==================================================================
[  316.272725][T11718] BUG: KASAN: slab-use-after-free in skb_queue_purge_reason+0xb9/0x500
[  316.281022][T11718] Read of size 8 at addr ffff88805263a058 by task syz.3.1465/11718
[  316.288940][T11718] 
[  316.291305][T11718] CPU: 1 UID: 0 PID: 11718 Comm: syz.3.1465 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0
[  316.302192][T11718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  316.312288][T11718] Call Trace:
[  316.315596][T11718]  <TASK>
[  316.318564][T11718]  dump_stack_lvl+0x241/0x360
[  316.323289][T11718]  ? __pfx_dump_stack_lvl+0x10/0x10
[  316.328536][T11718]  ? __pfx__printk+0x10/0x10
[  316.333156][T11718]  ? _printk+0xd5/0x120
[  316.337333][T11718]  ? __virt_addr_valid+0x183/0x530
[  316.342462][T11718]  ? __virt_addr_valid+0x183/0x530
[  316.347591][T11718]  print_report+0x169/0x550
[  316.352115][T11718]  ? __virt_addr_valid+0x183/0x530
[  316.357243][T11718]  ? __virt_addr_valid+0x183/0x530
[  316.362371][T11718]  ? __virt_addr_valid+0x45f/0x530
[  316.367497][T11718]  ? __phys_addr+0xba/0x170
[  316.372017][T11718]  ? skb_queue_purge_reason+0xb9/0x500
[  316.377534][T11718]  kasan_report+0x143/0x180
[  316.382052][T11718]  ? skb_queue_purge_reason+0xb9/0x500
[  316.387521][T11718]  skb_queue_purge_reason+0xb9/0x500
[  316.392814][T11718]  ? mark_lock+0x9a/0x360
[  316.397163][T11718]  ? __pfx_skb_queue_purge_reason+0x10/0x10
[  316.403071][T11718]  ? __pfx_hci_conn_hash_flush+0x10/0x10
[  316.408723][T11718]  ? drain_workqueue+0x2d3/0x3a0
[  316.413687][T11718]  vhci_flush+0x44/0x50
[  316.417854][T11718]  ? __pfx_vhci_flush+0x10/0x10
[  316.422708][T11718]  hci_dev_reset+0x42a/0x5d0
[  316.427324][T11718]  sock_do_ioctl+0x158/0x460
[  316.431931][T11718]  ? __pfx_sock_do_ioctl+0x10/0x10
[  316.437068][T11718]  sock_ioctl+0x626/0x8e0
[  316.441412][T11718]  ? __pfx_sock_ioctl+0x10/0x10
[  316.446271][T11718]  ? __fget_files+0x2a/0x410
[  316.450884][T11718]  ? __fget_files+0x2a/0x410
[  316.455497][T11718]  ? __pfx_sock_ioctl+0x10/0x10
[  316.460368][T11718]  __se_sys_ioctl+0xf5/0x170
[  316.464973][T11718]  do_syscall_64+0xf3/0x230
[  316.469487][T11718]  ? clear_bhb_loop+0x35/0x90
[  316.474186][T11718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.480116][T11718] RIP: 0033:0x7f04c1185d29
[  316.484543][T11718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  316.504162][T11718] RSP: 002b:00007f04c1ef0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  316.512609][T11718] RAX: ffffffffffffffda RBX: 00007f04c1375fa0 RCX: 00007f04c1185d29
[  316.520588][T11718] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000004
[  316.528563][T11718] RBP: 00007f04c1201b08 R08: 0000000000000000 R09: 0000000000000000
[  316.536561][T11718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  316.544542][T11718] R13: 0000000000000000 R14: 00007f04c1375fa0 R15: 00007ffdab2d8f58
[  316.552531][T11718]  </TASK>
[  316.555553][T11718] 
[  316.557884][T11718] Allocated by task 11419:
[  316.562304][T11718]  kasan_save_track+0x3f/0x80
[  316.567005][T11718]  __kasan_kmalloc+0x98/0xb0
[  316.571606][T11718]  __kmalloc_cache_noprof+0x243/0x390
[  316.576997][T11718]  vhci_open+0x57/0x360
[  316.581165][T11718]  misc_open+0x2cc/0x340
[  316.585418][T11718]  chrdev_open+0x521/0x600
[  316.589852][T11718]  do_dentry_open+0xbe1/0x1b70
[  316.594625][T11718]  vfs_open+0x3e/0x330
[  316.598709][T11718]  path_openat+0x2c84/0x3590
[  316.603299][T11718]  do_filp_open+0x27f/0x4e0
[  316.607803][T11718]  do_sys_openat2+0x13e/0x1d0
[  316.612539][T11718]  __x64_sys_openat+0x247/0x2a0
[  316.617401][T11718]  do_syscall_64+0xf3/0x230
[  316.621914][T11718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.627821][T11718] 
[  316.630170][T11718] Freed by task 11419:
[  316.634240][T11718]  kasan_save_track+0x3f/0x80
[  316.638926][T11718]  kasan_save_free_info+0x40/0x50
[  316.643963][T11718]  __kasan_slab_free+0x59/0x70
[  316.648738][T11718]  kfree+0x196/0x430
[  316.652676][T11718]  vhci_release+0xbc/0xd0
[  316.657020][T11718]  __fput+0x23c/0xa50
[  316.661014][T11718]  task_work_run+0x24f/0x310
[  316.665617][T11718]  do_exit+0xa2a/0x28e0
[  316.669791][T11718]  do_group_exit+0x207/0x2c0
[  316.674390][T11718]  __x64_sys_exit_group+0x3f/0x40
[  316.679421][T11718]  x64_sys_call+0x26a8/0x26b0
[  316.684105][T11718]  do_syscall_64+0xf3/0x230
[  316.688632][T11718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.694544][T11718] 
[  316.696871][T11718] The buggy address belongs to the object at ffff88805263a000
[  316.696871][T11718]  which belongs to the cache kmalloc-1k of size 1024
[  316.710931][T11718] The buggy address is located 88 bytes inside of
[  316.710931][T11718]  freed 1024-byte region [ffff88805263a000, ffff88805263a400)
[  316.724759][T11718] 
[  316.727096][T11718] The buggy address belongs to the physical page:
[  316.733517][T11718] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x52638
[  316.742284][T11718] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  316.750801][T11718] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  316.758358][T11718] page_type: f5(slab)
[  316.762344][T11718] raw: 00fff00000000040 ffff88801ac41dc0 ffffea0001e44600 dead000000000002
[  316.770954][T11718] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000
[  316.779579][T11718] head: 00fff00000000040 ffff88801ac41dc0 ffffea0001e44600 dead000000000002
[  316.788274][T11718] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000
[  316.796962][T11718] head: 00fff00000000003 ffffea0001498e01 ffffffffffffffff 0000000000000000
[  316.805642][T11718] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  316.814315][T11718] page dumped because: kasan: bad access detected
[  316.820751][T11718] page_owner tracks the page as allocated
[  316.826468][T11718] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7267, tgid 7267 (kworker/u8:23), ts 147601447683, free_ts 108672875298
[  316.846013][T11718]  post_alloc_hook+0x1f3/0x230
[  316.850794][T11718]  get_page_from_freelist+0x365c/0x37a0
[  316.856343][T11718]  __alloc_pages_noprof+0x292/0x710
[  316.861538][T11718]  alloc_pages_mpol_noprof+0x3e8/0x680
[  316.866999][T11718]  alloc_slab_page+0x6a/0x110
[  316.871683][T11718]  allocate_slab+0x5a/0x2b0
[  316.876194][T11718]  ___slab_alloc+0xc27/0x14a0
[  316.880886][T11718]  __slab_alloc+0x58/0xa0
[  316.885232][T11718]  __kmalloc_noprof+0x2e6/0x4c0
[  316.890096][T11718]  ieee802_11_parse_elems_full+0xdb/0x2880
[  316.895910][T11718]  ieee80211_inform_bss+0x15f/0x1080
[  316.901207][T11718]  cfg80211_inform_single_bss_data+0xec1/0x2070
[  316.907452][T11718]  cfg80211_inform_bss_data+0x3ce/0x5e80
[  316.913108][T11718]  cfg80211_inform_bss_frame_data+0x3bb/0x720
[  316.919184][T11718]  ieee80211_bss_info_update+0x8a7/0xbc0
[  316.924833][T11718]  ieee80211_ibss_rx_queued_mgmt+0x1969/0x2d70
[  316.930998][T11718] page last free pid 6974 tgid 6974 stack trace:
[  316.937323][T11718]  free_unref_page+0xd3f/0x1010
[  316.942177][T11718]  packet_set_ring+0x18f6/0x2450
[  316.947126][T11718]  packet_release+0x7de/0xcd0
[  316.951813][T11718]  sock_close+0xbc/0x240
[  316.956067][T11718]  __fput+0x23c/0xa50
[  316.960062][T11718]  task_work_run+0x24f/0x310
[  316.964672][T11718]  syscall_exit_to_user_mode+0x13f/0x340
[  316.970325][T11718]  do_syscall_64+0x100/0x230
[  316.974930][T11718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.980877][T11718] 
[  316.983200][T11718] Memory state around the buggy address:
[  316.988829][T11718]  ffff888052639f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  316.996896][T11718]  ffff888052639f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  317.004957][T11718] >ffff88805263a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  317.013020][T11718]                                                     ^
[  317.019954][T11718]  ffff88805263a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  317.028014][T11718]  ffff88805263a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  317.036072][T11718] ==================================================================
[  317.051574][T11718] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  317.058823][T11718] CPU: 0 UID: 0 PID: 11718 Comm: syz.3.1465 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0
[  317.069609][T11718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  317.079697][T11718] Call Trace:
[  317.082991][T11718]  <TASK>
[  317.085922][T11718]  dump_stack_lvl+0x241/0x360
[  317.090615][T11718]  ? __pfx_dump_stack_lvl+0x10/0x10
[  317.095847][T11718]  ? __pfx__printk+0x10/0x10
[  317.100468][T11718]  ? preempt_schedule+0xe1/0xf0
[  317.105337][T11718]  ? vscnprintf+0x5d/0x90
[  317.110101][T11718]  panic+0x349/0x880
[  317.114013][T11718]  ? check_panic_on_warn+0x21/0xb0
[  317.119153][T11718]  ? __pfx_panic+0x10/0x10
[  317.123629][T11718]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[  317.129639][T11718]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  317.136003][T11718]  ? print_report+0x502/0x550
[  317.140724][T11718]  check_panic_on_warn+0x86/0xb0
[  317.145689][T11718]  ? skb_queue_purge_reason+0xb9/0x500
[  317.151190][T11718]  end_report+0x77/0x160
[  317.155465][T11718]  kasan_report+0x154/0x180
[  317.159994][T11718]  ? skb_queue_purge_reason+0xb9/0x500
[  317.165482][T11718]  skb_queue_purge_reason+0xb9/0x500
[  317.170813][T11718]  ? mark_lock+0x9a/0x360
[  317.175172][T11718]  ? __pfx_skb_queue_purge_reason+0x10/0x10
[  317.181090][T11718]  ? __pfx_hci_conn_hash_flush+0x10/0x10
[  317.186742][T11718]  ? drain_workqueue+0x2d3/0x3a0
[  317.191702][T11718]  vhci_flush+0x44/0x50
[  317.195902][T11718]  ? __pfx_vhci_flush+0x10/0x10
[  317.200763][T11718]  hci_dev_reset+0x42a/0x5d0
[  317.205402][T11718]  sock_do_ioctl+0x158/0x460
[  317.210012][T11718]  ? __pfx_sock_do_ioctl+0x10/0x10
[  317.215149][T11718]  sock_ioctl+0x626/0x8e0
[  317.219501][T11718]  ? __pfx_sock_ioctl+0x10/0x10
[  317.224379][T11718]  ? __fget_files+0x2a/0x410
[  317.228979][T11718]  ? __fget_files+0x2a/0x410
[  317.233586][T11718]  ? __pfx_sock_ioctl+0x10/0x10
[  317.238464][T11718]  __se_sys_ioctl+0xf5/0x170
[  317.243052][T11718]  do_syscall_64+0xf3/0x230
[  317.247578][T11718]  ? clear_bhb_loop+0x35/0x90
[  317.252286][T11718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.258190][T11718] RIP: 0033:0x7f04c1185d29
[  317.262612][T11718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  317.282226][T11718] RSP: 002b:00007f04c1ef0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  317.290668][T11718] RAX: ffffffffffffffda RBX: 00007f04c1375fa0 RCX: 00007f04c1185d29
[  317.298664][T11718] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000004
[  317.306655][T11718] RBP: 00007f04c1201b08 R08: 0000000000000000 R09: 0000000000000000
[  317.314634][T11718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  317.322650][T11718] R13: 0000000000000000 R14: 00007f04c1375fa0 R15: 00007ffdab2d8f58
[  317.330645][T11718]  </TASK>
[  317.334000][T11718] Kernel Offset: disabled
[  317.338338][T11718] Rebooting in 86400 seconds..