last executing test programs:

1m54.053986409s ago: executing program 3 (id=774):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x3, 0x4e, 0x4, 0x1, 0x4, 0x9})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x47a4e5e24d1a1733)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c5}, 0x4044080)
nanosleep(&(0x7f0000000340), &(0x7f0000000380))
r4 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000003c0)=0xffffffffffffffff, 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r5 = socket(0x6, 0x2, 0x9)
sendto$inet6(r5, &(0x7f0000000400)="8475a4deeb722e350b6a4e00805a8c2138adc4c57613ce7650a1218b0c86e79f6c030e74ec8ace3f98025e1c661750fec33097b1989626eaf9e646b4a91640748904267335aa81e26de72e2b2456a1de20fd0cf5cd6d57788a808ff6b3042e976d10bdc2de07b48156d4d1d28f7c4be8b87ebbca8edc23fc8f0b7f62dd2d954545787ae9fb90d3ca687f501bb09fcaa5a3a0c0129ff8b5677d0ea6191a3b79cdc048a7d90bc2f3c94324489fa68f5ef95a3b373bab6696802c24eec0d13d7ca7b057abca0b87e4c70e6aed3ba1022a1cefb3c06230368e05f30007e6e501fc8f9944558d9d4487cb36bda5920541b52ad72f747731bd1667a8", 0xf9, 0x1, &(0x7f0000000500)={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10001}, 0x1c)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000540)=@req3={0x707, 0x8, 0x7, 0x81, 0xd, 0x5, 0xb}, 0x1c)
close(r1)
r6 = socket$inet(0x2, 0x6, 0x0)
setsockopt$inet_group_source_req(r6, 0x0, 0x2f, &(0x7f0000000580)={0x5, {{0x2, 0x2, @remote}}, {{0x2, 0x4e20, @remote}}}, 0x108)
r7 = accept4$llc(r5, &(0x7f00000006c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000700)=0x10, 0x800)
getsockname(r7, &(0x7f0000000740)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f00000007c0)=0x80)
r8 = socket$tipc(0x1e, 0x2, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000800)={0x42, 0x3}, 0x10)
setsockopt$inet_int(r6, 0x0, 0xd, &(0x7f0000000840)=0x4, 0x4)
setsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000880)={0x0, 0xea60}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup/syz0\x00', 0x1ff)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$inet(r9, &(0x7f0000000900)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r5, 0x0, 0x0, &(0x7f0000000940)=""/13, &(0x7f0000000980)=0xd)

1m35.926153389s ago: executing program 4 (id=1239):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x30, 0x0, 0x20000000)
r1 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0xf000}}], 0x48}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

1m35.514509414s ago: executing program 4 (id=1243):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010101}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0xffff, 0x1180000, @empty, 0x3}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x1}]}, {0x0, [0x2e]}}, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x20060004}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
write(r5, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b00000000000", 0x26)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000d9bffc), 0x4)
sendmsg$IPSET_CMD_PROTOCOL(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000000106010200000200000105000100070000000500010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x95)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x498, 0x30, 0xffff, 0x0, 0x3, {}, [{0x484, 0x1, [@m_police={0x480, 0x1, 0x0, 0x0, {{0xb}, {0x454, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1ff}, {0x0, 0x2, 0x0, 0x0, 0xa94}, 0x0, 0x0, 0xfffffffd}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}, @TCA_POLICE_RATE={0x404, 0x2, [0x6e91f939, 0x4e9, 0x33dd, 0x6, 0x3, 0x5, 0xff, 0x2, 0xfffffff8, 0x401, 0x1, 0x8, 0x5, 0x8d, 0x3, 0xf4f5, 0x6, 0x80000001, 0x0, 0x9, 0x8, 0xfffffffb, 0x9, 0x7, 0x10, 0x3, 0x2, 0x3c2, 0x200, 0x5, 0x7, 0xa6bc, 0xffffffff, 0x4, 0x1, 0xd5, 0x8, 0x9, 0xa, 0xc, 0x40, 0x80000000, 0x7, 0x1, 0xfa1, 0x5, 0x3, 0xf, 0x7ff, 0x9, 0x4f27a9a1, 0x5, 0xb, 0x29, 0x6, 0xffff, 0x9, 0x20000, 0x3, 0x6, 0x7, 0x0, 0x7, 0x2, 0x3ff, 0x0, 0x67, 0x0, 0x54, 0x3, 0xfffffffe, 0x3, 0x1, 0x7, 0x3, 0xf, 0x80, 0x401, 0x3ff, 0x5, 0x9, 0x7, 0x80, 0x3, 0x1ff, 0x5, 0xe, 0x7fffffff, 0x7, 0x2b, 0x9, 0x1, 0x0, 0x7f, 0x6, 0x2, 0x59a, 0x5, 0x9, 0x400, 0x7d, 0x800, 0x2aac, 0xfffffff8, 0x8, 0x200, 0xfffffffa, 0x400, 0xf46, 0xb, 0xfff, 0x9, 0x4, 0x2, 0x3, 0x39a, 0x2, 0x0, 0xd, 0x8001, 0x1, 0x8, 0x3, 0x0, 0x9, 0x7, 0x4, 0xc0, 0x80000001, 0x400000, 0x80, 0x5, 0x2, 0x1, 0x0, 0x4c2, 0x2, 0x6, 0x3, 0x28, 0x0, 0x4, 0x1200, 0x9, 0x5a, 0x101, 0x5, 0xa, 0x2, 0x5, 0x6, 0x49, 0x1, 0x10, 0x9, 0x8, 0x8e82, 0x1, 0xffff2775, 0xad0, 0x0, 0x19e, 0x9, 0x8, 0x16, 0x8, 0x4, 0x9, 0x7fff, 0x10, 0xa, 0x6, 0x0, 0x9, 0xbb, 0xd, 0xfff, 0x0, 0x8001, 0x7f, 0xb, 0xa802, 0x7, 0xffff, 0xf2, 0xffffffff, 0x2, 0x8001, 0xa031efb, 0x2300000, 0xe, 0x40000000, 0x1299, 0x9, 0x5, 0x5, 0xd, 0xfffffffd, 0xe00000, 0x1ff, 0x4, 0x1, 0x4, 0xc, 0xa74, 0x4, 0x6, 0x80000001, 0x2, 0x6, 0x9, 0x5, 0xf26, 0x2, 0x1, 0x0, 0x8, 0x6, 0x800, 0xf, 0x4, 0x7, 0x2, 0x8, 0x1, 0x0, 0x2, 0x4, 0x6ec2, 0x7ff, 0x7, 0x3, 0x1eb4, 0x3, 0x6, 0x2, 0x5, 0x4, 0x3, 0x0, 0xf, 0x8, 0x6, 0xf627, 0x10, 0x2a9, 0x3, 0x1, 0x2, 0x5, 0x9, 0x7fffffff, 0x9, 0x80000000, 0x3, 0x7f]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd0e}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x498}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000001, 0x40010, r6, 0xd1d00000)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r6, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0x408, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
splice(r5, &(0x7f0000000340)=0x2, r4, &(0x7f0000000380)=0xf, 0xc00000, 0x0)
r9 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e23}, 0x10)
sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10)
sendto$inet(r9, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7", 0x3d, 0x20000051, 0x0, 0x0)
recvmsg(r9, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x104)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r8)

1m33.834737576s ago: executing program 3 (id=774):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x3, 0x4e, 0x4, 0x1, 0x4, 0x9})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x47a4e5e24d1a1733)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c5}, 0x4044080)
nanosleep(&(0x7f0000000340), &(0x7f0000000380))
r4 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000003c0)=0xffffffffffffffff, 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r5 = socket(0x6, 0x2, 0x9)
sendto$inet6(r5, &(0x7f0000000400)="8475a4deeb722e350b6a4e00805a8c2138adc4c57613ce7650a1218b0c86e79f6c030e74ec8ace3f98025e1c661750fec33097b1989626eaf9e646b4a91640748904267335aa81e26de72e2b2456a1de20fd0cf5cd6d57788a808ff6b3042e976d10bdc2de07b48156d4d1d28f7c4be8b87ebbca8edc23fc8f0b7f62dd2d954545787ae9fb90d3ca687f501bb09fcaa5a3a0c0129ff8b5677d0ea6191a3b79cdc048a7d90bc2f3c94324489fa68f5ef95a3b373bab6696802c24eec0d13d7ca7b057abca0b87e4c70e6aed3ba1022a1cefb3c06230368e05f30007e6e501fc8f9944558d9d4487cb36bda5920541b52ad72f747731bd1667a8", 0xf9, 0x1, &(0x7f0000000500)={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10001}, 0x1c)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000540)=@req3={0x707, 0x8, 0x7, 0x81, 0xd, 0x5, 0xb}, 0x1c)
close(r1)
r6 = socket$inet(0x2, 0x6, 0x0)
setsockopt$inet_group_source_req(r6, 0x0, 0x2f, &(0x7f0000000580)={0x5, {{0x2, 0x2, @remote}}, {{0x2, 0x4e20, @remote}}}, 0x108)
r7 = accept4$llc(r5, &(0x7f00000006c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000700)=0x10, 0x800)
getsockname(r7, &(0x7f0000000740)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f00000007c0)=0x80)
r8 = socket$tipc(0x1e, 0x2, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000800)={0x42, 0x3}, 0x10)
setsockopt$inet_int(r6, 0x0, 0xd, &(0x7f0000000840)=0x4, 0x4)
setsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000880)={0x0, 0xea60}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup/syz0\x00', 0x1ff)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$inet(r9, &(0x7f0000000900)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r5, 0x0, 0x0, &(0x7f0000000940)=""/13, &(0x7f0000000980)=0xd)

1m12.214188539s ago: executing program 4 (id=1243):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010101}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0xffff, 0x1180000, @empty, 0x3}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x1}]}, {0x0, [0x2e]}}, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x20060004}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
write(r5, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b00000000000", 0x26)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000d9bffc), 0x4)
sendmsg$IPSET_CMD_PROTOCOL(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000000106010200000200000105000100070000000500010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x95)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x498, 0x30, 0xffff, 0x0, 0x3, {}, [{0x484, 0x1, [@m_police={0x480, 0x1, 0x0, 0x0, {{0xb}, {0x454, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1ff}, {0x0, 0x2, 0x0, 0x0, 0xa94}, 0x0, 0x0, 0xfffffffd}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}, @TCA_POLICE_RATE={0x404, 0x2, [0x6e91f939, 0x4e9, 0x33dd, 0x6, 0x3, 0x5, 0xff, 0x2, 0xfffffff8, 0x401, 0x1, 0x8, 0x5, 0x8d, 0x3, 0xf4f5, 0x6, 0x80000001, 0x0, 0x9, 0x8, 0xfffffffb, 0x9, 0x7, 0x10, 0x3, 0x2, 0x3c2, 0x200, 0x5, 0x7, 0xa6bc, 0xffffffff, 0x4, 0x1, 0xd5, 0x8, 0x9, 0xa, 0xc, 0x40, 0x80000000, 0x7, 0x1, 0xfa1, 0x5, 0x3, 0xf, 0x7ff, 0x9, 0x4f27a9a1, 0x5, 0xb, 0x29, 0x6, 0xffff, 0x9, 0x20000, 0x3, 0x6, 0x7, 0x0, 0x7, 0x2, 0x3ff, 0x0, 0x67, 0x0, 0x54, 0x3, 0xfffffffe, 0x3, 0x1, 0x7, 0x3, 0xf, 0x80, 0x401, 0x3ff, 0x5, 0x9, 0x7, 0x80, 0x3, 0x1ff, 0x5, 0xe, 0x7fffffff, 0x7, 0x2b, 0x9, 0x1, 0x0, 0x7f, 0x6, 0x2, 0x59a, 0x5, 0x9, 0x400, 0x7d, 0x800, 0x2aac, 0xfffffff8, 0x8, 0x200, 0xfffffffa, 0x400, 0xf46, 0xb, 0xfff, 0x9, 0x4, 0x2, 0x3, 0x39a, 0x2, 0x0, 0xd, 0x8001, 0x1, 0x8, 0x3, 0x0, 0x9, 0x7, 0x4, 0xc0, 0x80000001, 0x400000, 0x80, 0x5, 0x2, 0x1, 0x0, 0x4c2, 0x2, 0x6, 0x3, 0x28, 0x0, 0x4, 0x1200, 0x9, 0x5a, 0x101, 0x5, 0xa, 0x2, 0x5, 0x6, 0x49, 0x1, 0x10, 0x9, 0x8, 0x8e82, 0x1, 0xffff2775, 0xad0, 0x0, 0x19e, 0x9, 0x8, 0x16, 0x8, 0x4, 0x9, 0x7fff, 0x10, 0xa, 0x6, 0x0, 0x9, 0xbb, 0xd, 0xfff, 0x0, 0x8001, 0x7f, 0xb, 0xa802, 0x7, 0xffff, 0xf2, 0xffffffff, 0x2, 0x8001, 0xa031efb, 0x2300000, 0xe, 0x40000000, 0x1299, 0x9, 0x5, 0x5, 0xd, 0xfffffffd, 0xe00000, 0x1ff, 0x4, 0x1, 0x4, 0xc, 0xa74, 0x4, 0x6, 0x80000001, 0x2, 0x6, 0x9, 0x5, 0xf26, 0x2, 0x1, 0x0, 0x8, 0x6, 0x800, 0xf, 0x4, 0x7, 0x2, 0x8, 0x1, 0x0, 0x2, 0x4, 0x6ec2, 0x7ff, 0x7, 0x3, 0x1eb4, 0x3, 0x6, 0x2, 0x5, 0x4, 0x3, 0x0, 0xf, 0x8, 0x6, 0xf627, 0x10, 0x2a9, 0x3, 0x1, 0x2, 0x5, 0x9, 0x7fffffff, 0x9, 0x80000000, 0x3, 0x7f]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd0e}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x498}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000001, 0x40010, r6, 0xd1d00000)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r6, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0x408, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
splice(r5, &(0x7f0000000340)=0x2, r4, &(0x7f0000000380)=0xf, 0xc00000, 0x0)
r9 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e23}, 0x10)
sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10)
sendto$inet(r9, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7", 0x3d, 0x20000051, 0x0, 0x0)
recvmsg(r9, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x104)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r8)

1m6.905322291s ago: executing program 3 (id=774):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x3, 0x4e, 0x4, 0x1, 0x4, 0x9})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x47a4e5e24d1a1733)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c5}, 0x4044080)
nanosleep(&(0x7f0000000340), &(0x7f0000000380))
r4 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000003c0)=0xffffffffffffffff, 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r5 = socket(0x6, 0x2, 0x9)
sendto$inet6(r5, &(0x7f0000000400)="8475a4deeb722e350b6a4e00805a8c2138adc4c57613ce7650a1218b0c86e79f6c030e74ec8ace3f98025e1c661750fec33097b1989626eaf9e646b4a91640748904267335aa81e26de72e2b2456a1de20fd0cf5cd6d57788a808ff6b3042e976d10bdc2de07b48156d4d1d28f7c4be8b87ebbca8edc23fc8f0b7f62dd2d954545787ae9fb90d3ca687f501bb09fcaa5a3a0c0129ff8b5677d0ea6191a3b79cdc048a7d90bc2f3c94324489fa68f5ef95a3b373bab6696802c24eec0d13d7ca7b057abca0b87e4c70e6aed3ba1022a1cefb3c06230368e05f30007e6e501fc8f9944558d9d4487cb36bda5920541b52ad72f747731bd1667a8", 0xf9, 0x1, &(0x7f0000000500)={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10001}, 0x1c)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000540)=@req3={0x707, 0x8, 0x7, 0x81, 0xd, 0x5, 0xb}, 0x1c)
close(r1)
r6 = socket$inet(0x2, 0x6, 0x0)
setsockopt$inet_group_source_req(r6, 0x0, 0x2f, &(0x7f0000000580)={0x5, {{0x2, 0x2, @remote}}, {{0x2, 0x4e20, @remote}}}, 0x108)
r7 = accept4$llc(r5, &(0x7f00000006c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000700)=0x10, 0x800)
getsockname(r7, &(0x7f0000000740)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f00000007c0)=0x80)
r8 = socket$tipc(0x1e, 0x2, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000800)={0x42, 0x3}, 0x10)
setsockopt$inet_int(r6, 0x0, 0xd, &(0x7f0000000840)=0x4, 0x4)
setsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000880)={0x0, 0xea60}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup/syz0\x00', 0x1ff)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$inet(r9, &(0x7f0000000900)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r5, 0x0, 0x0, &(0x7f0000000940)=""/13, &(0x7f0000000980)=0xd)

47.434928151s ago: executing program 4 (id=1243):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010101}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0xffff, 0x1180000, @empty, 0x3}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x1}]}, {0x0, [0x2e]}}, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x20060004}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
write(r5, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b00000000000", 0x26)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000d9bffc), 0x4)
sendmsg$IPSET_CMD_PROTOCOL(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000000106010200000200000105000100070000000500010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x95)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x498, 0x30, 0xffff, 0x0, 0x3, {}, [{0x484, 0x1, [@m_police={0x480, 0x1, 0x0, 0x0, {{0xb}, {0x454, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1ff}, {0x0, 0x2, 0x0, 0x0, 0xa94}, 0x0, 0x0, 0xfffffffd}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}, @TCA_POLICE_RATE={0x404, 0x2, [0x6e91f939, 0x4e9, 0x33dd, 0x6, 0x3, 0x5, 0xff, 0x2, 0xfffffff8, 0x401, 0x1, 0x8, 0x5, 0x8d, 0x3, 0xf4f5, 0x6, 0x80000001, 0x0, 0x9, 0x8, 0xfffffffb, 0x9, 0x7, 0x10, 0x3, 0x2, 0x3c2, 0x200, 0x5, 0x7, 0xa6bc, 0xffffffff, 0x4, 0x1, 0xd5, 0x8, 0x9, 0xa, 0xc, 0x40, 0x80000000, 0x7, 0x1, 0xfa1, 0x5, 0x3, 0xf, 0x7ff, 0x9, 0x4f27a9a1, 0x5, 0xb, 0x29, 0x6, 0xffff, 0x9, 0x20000, 0x3, 0x6, 0x7, 0x0, 0x7, 0x2, 0x3ff, 0x0, 0x67, 0x0, 0x54, 0x3, 0xfffffffe, 0x3, 0x1, 0x7, 0x3, 0xf, 0x80, 0x401, 0x3ff, 0x5, 0x9, 0x7, 0x80, 0x3, 0x1ff, 0x5, 0xe, 0x7fffffff, 0x7, 0x2b, 0x9, 0x1, 0x0, 0x7f, 0x6, 0x2, 0x59a, 0x5, 0x9, 0x400, 0x7d, 0x800, 0x2aac, 0xfffffff8, 0x8, 0x200, 0xfffffffa, 0x400, 0xf46, 0xb, 0xfff, 0x9, 0x4, 0x2, 0x3, 0x39a, 0x2, 0x0, 0xd, 0x8001, 0x1, 0x8, 0x3, 0x0, 0x9, 0x7, 0x4, 0xc0, 0x80000001, 0x400000, 0x80, 0x5, 0x2, 0x1, 0x0, 0x4c2, 0x2, 0x6, 0x3, 0x28, 0x0, 0x4, 0x1200, 0x9, 0x5a, 0x101, 0x5, 0xa, 0x2, 0x5, 0x6, 0x49, 0x1, 0x10, 0x9, 0x8, 0x8e82, 0x1, 0xffff2775, 0xad0, 0x0, 0x19e, 0x9, 0x8, 0x16, 0x8, 0x4, 0x9, 0x7fff, 0x10, 0xa, 0x6, 0x0, 0x9, 0xbb, 0xd, 0xfff, 0x0, 0x8001, 0x7f, 0xb, 0xa802, 0x7, 0xffff, 0xf2, 0xffffffff, 0x2, 0x8001, 0xa031efb, 0x2300000, 0xe, 0x40000000, 0x1299, 0x9, 0x5, 0x5, 0xd, 0xfffffffd, 0xe00000, 0x1ff, 0x4, 0x1, 0x4, 0xc, 0xa74, 0x4, 0x6, 0x80000001, 0x2, 0x6, 0x9, 0x5, 0xf26, 0x2, 0x1, 0x0, 0x8, 0x6, 0x800, 0xf, 0x4, 0x7, 0x2, 0x8, 0x1, 0x0, 0x2, 0x4, 0x6ec2, 0x7ff, 0x7, 0x3, 0x1eb4, 0x3, 0x6, 0x2, 0x5, 0x4, 0x3, 0x0, 0xf, 0x8, 0x6, 0xf627, 0x10, 0x2a9, 0x3, 0x1, 0x2, 0x5, 0x9, 0x7fffffff, 0x9, 0x80000000, 0x3, 0x7f]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd0e}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x498}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000001, 0x40010, r6, 0xd1d00000)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r6, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0x408, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
splice(r5, &(0x7f0000000340)=0x2, r4, &(0x7f0000000380)=0xf, 0xc00000, 0x0)
r9 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e23}, 0x10)
sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10)
sendto$inet(r9, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7", 0x3d, 0x20000051, 0x0, 0x0)
recvmsg(r9, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x104)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r8)

43.818630627s ago: executing program 3 (id=774):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x3, 0x4e, 0x4, 0x1, 0x4, 0x9})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x47a4e5e24d1a1733)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c5}, 0x4044080)
nanosleep(&(0x7f0000000340), &(0x7f0000000380))
r4 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000003c0)=0xffffffffffffffff, 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r5 = socket(0x6, 0x2, 0x9)
sendto$inet6(r5, &(0x7f0000000400)="8475a4deeb722e350b6a4e00805a8c2138adc4c57613ce7650a1218b0c86e79f6c030e74ec8ace3f98025e1c661750fec33097b1989626eaf9e646b4a91640748904267335aa81e26de72e2b2456a1de20fd0cf5cd6d57788a808ff6b3042e976d10bdc2de07b48156d4d1d28f7c4be8b87ebbca8edc23fc8f0b7f62dd2d954545787ae9fb90d3ca687f501bb09fcaa5a3a0c0129ff8b5677d0ea6191a3b79cdc048a7d90bc2f3c94324489fa68f5ef95a3b373bab6696802c24eec0d13d7ca7b057abca0b87e4c70e6aed3ba1022a1cefb3c06230368e05f30007e6e501fc8f9944558d9d4487cb36bda5920541b52ad72f747731bd1667a8", 0xf9, 0x1, &(0x7f0000000500)={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10001}, 0x1c)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000540)=@req3={0x707, 0x8, 0x7, 0x81, 0xd, 0x5, 0xb}, 0x1c)
close(r1)
r6 = socket$inet(0x2, 0x6, 0x0)
setsockopt$inet_group_source_req(r6, 0x0, 0x2f, &(0x7f0000000580)={0x5, {{0x2, 0x2, @remote}}, {{0x2, 0x4e20, @remote}}}, 0x108)
r7 = accept4$llc(r5, &(0x7f00000006c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000700)=0x10, 0x800)
getsockname(r7, &(0x7f0000000740)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f00000007c0)=0x80)
r8 = socket$tipc(0x1e, 0x2, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000800)={0x42, 0x3}, 0x10)
setsockopt$inet_int(r6, 0x0, 0xd, &(0x7f0000000840)=0x4, 0x4)
setsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000880)={0x0, 0xea60}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup/syz0\x00', 0x1ff)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$inet(r9, &(0x7f0000000900)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r5, 0x0, 0x0, &(0x7f0000000940)=""/13, &(0x7f0000000980)=0xd)

27.257396734s ago: executing program 4 (id=1243):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010101}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0xffff, 0x1180000, @empty, 0x3}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x1}]}, {0x0, [0x2e]}}, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x20060004}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
write(r5, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b00000000000", 0x26)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000d9bffc), 0x4)
sendmsg$IPSET_CMD_PROTOCOL(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000000106010200000200000105000100070000000500010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x95)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x498, 0x30, 0xffff, 0x0, 0x3, {}, [{0x484, 0x1, [@m_police={0x480, 0x1, 0x0, 0x0, {{0xb}, {0x454, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1ff}, {0x0, 0x2, 0x0, 0x0, 0xa94}, 0x0, 0x0, 0xfffffffd}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}, @TCA_POLICE_RATE={0x404, 0x2, [0x6e91f939, 0x4e9, 0x33dd, 0x6, 0x3, 0x5, 0xff, 0x2, 0xfffffff8, 0x401, 0x1, 0x8, 0x5, 0x8d, 0x3, 0xf4f5, 0x6, 0x80000001, 0x0, 0x9, 0x8, 0xfffffffb, 0x9, 0x7, 0x10, 0x3, 0x2, 0x3c2, 0x200, 0x5, 0x7, 0xa6bc, 0xffffffff, 0x4, 0x1, 0xd5, 0x8, 0x9, 0xa, 0xc, 0x40, 0x80000000, 0x7, 0x1, 0xfa1, 0x5, 0x3, 0xf, 0x7ff, 0x9, 0x4f27a9a1, 0x5, 0xb, 0x29, 0x6, 0xffff, 0x9, 0x20000, 0x3, 0x6, 0x7, 0x0, 0x7, 0x2, 0x3ff, 0x0, 0x67, 0x0, 0x54, 0x3, 0xfffffffe, 0x3, 0x1, 0x7, 0x3, 0xf, 0x80, 0x401, 0x3ff, 0x5, 0x9, 0x7, 0x80, 0x3, 0x1ff, 0x5, 0xe, 0x7fffffff, 0x7, 0x2b, 0x9, 0x1, 0x0, 0x7f, 0x6, 0x2, 0x59a, 0x5, 0x9, 0x400, 0x7d, 0x800, 0x2aac, 0xfffffff8, 0x8, 0x200, 0xfffffffa, 0x400, 0xf46, 0xb, 0xfff, 0x9, 0x4, 0x2, 0x3, 0x39a, 0x2, 0x0, 0xd, 0x8001, 0x1, 0x8, 0x3, 0x0, 0x9, 0x7, 0x4, 0xc0, 0x80000001, 0x400000, 0x80, 0x5, 0x2, 0x1, 0x0, 0x4c2, 0x2, 0x6, 0x3, 0x28, 0x0, 0x4, 0x1200, 0x9, 0x5a, 0x101, 0x5, 0xa, 0x2, 0x5, 0x6, 0x49, 0x1, 0x10, 0x9, 0x8, 0x8e82, 0x1, 0xffff2775, 0xad0, 0x0, 0x19e, 0x9, 0x8, 0x16, 0x8, 0x4, 0x9, 0x7fff, 0x10, 0xa, 0x6, 0x0, 0x9, 0xbb, 0xd, 0xfff, 0x0, 0x8001, 0x7f, 0xb, 0xa802, 0x7, 0xffff, 0xf2, 0xffffffff, 0x2, 0x8001, 0xa031efb, 0x2300000, 0xe, 0x40000000, 0x1299, 0x9, 0x5, 0x5, 0xd, 0xfffffffd, 0xe00000, 0x1ff, 0x4, 0x1, 0x4, 0xc, 0xa74, 0x4, 0x6, 0x80000001, 0x2, 0x6, 0x9, 0x5, 0xf26, 0x2, 0x1, 0x0, 0x8, 0x6, 0x800, 0xf, 0x4, 0x7, 0x2, 0x8, 0x1, 0x0, 0x2, 0x4, 0x6ec2, 0x7ff, 0x7, 0x3, 0x1eb4, 0x3, 0x6, 0x2, 0x5, 0x4, 0x3, 0x0, 0xf, 0x8, 0x6, 0xf627, 0x10, 0x2a9, 0x3, 0x1, 0x2, 0x5, 0x9, 0x7fffffff, 0x9, 0x80000000, 0x3, 0x7f]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd0e}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x498}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000001, 0x40010, r6, 0xd1d00000)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r6, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0x408, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
splice(r5, &(0x7f0000000340)=0x2, r4, &(0x7f0000000380)=0xf, 0xc00000, 0x0)
r9 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e23}, 0x10)
sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10)
sendto$inet(r9, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7", 0x3d, 0x20000051, 0x0, 0x0)
recvmsg(r9, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x104)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r8)

25.957056719s ago: executing program 3 (id=774):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x3, 0x4e, 0x4, 0x1, 0x4, 0x9})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x47a4e5e24d1a1733)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c5}, 0x4044080)
nanosleep(&(0x7f0000000340), &(0x7f0000000380))
r4 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000003c0)=0xffffffffffffffff, 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r5 = socket(0x6, 0x2, 0x9)
sendto$inet6(r5, &(0x7f0000000400)="8475a4deeb722e350b6a4e00805a8c2138adc4c57613ce7650a1218b0c86e79f6c030e74ec8ace3f98025e1c661750fec33097b1989626eaf9e646b4a91640748904267335aa81e26de72e2b2456a1de20fd0cf5cd6d57788a808ff6b3042e976d10bdc2de07b48156d4d1d28f7c4be8b87ebbca8edc23fc8f0b7f62dd2d954545787ae9fb90d3ca687f501bb09fcaa5a3a0c0129ff8b5677d0ea6191a3b79cdc048a7d90bc2f3c94324489fa68f5ef95a3b373bab6696802c24eec0d13d7ca7b057abca0b87e4c70e6aed3ba1022a1cefb3c06230368e05f30007e6e501fc8f9944558d9d4487cb36bda5920541b52ad72f747731bd1667a8", 0xf9, 0x1, &(0x7f0000000500)={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10001}, 0x1c)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000540)=@req3={0x707, 0x8, 0x7, 0x81, 0xd, 0x5, 0xb}, 0x1c)
close(r1)
r6 = socket$inet(0x2, 0x6, 0x0)
setsockopt$inet_group_source_req(r6, 0x0, 0x2f, &(0x7f0000000580)={0x5, {{0x2, 0x2, @remote}}, {{0x2, 0x4e20, @remote}}}, 0x108)
r7 = accept4$llc(r5, &(0x7f00000006c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000700)=0x10, 0x800)
getsockname(r7, &(0x7f0000000740)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f00000007c0)=0x80)
r8 = socket$tipc(0x1e, 0x2, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000800)={0x42, 0x3}, 0x10)
setsockopt$inet_int(r6, 0x0, 0xd, &(0x7f0000000840)=0x4, 0x4)
setsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000880)={0x0, 0xea60}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup/syz0\x00', 0x1ff)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$inet(r9, &(0x7f0000000900)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r5, 0x0, 0x0, &(0x7f0000000940)=""/13, &(0x7f0000000980)=0xd)

6.34874665s ago: executing program 3 (id=774):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x3, 0x4e, 0x4, 0x1, 0x4, 0x9})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x47a4e5e24d1a1733)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c5}, 0x4044080)
nanosleep(&(0x7f0000000340), &(0x7f0000000380))
r4 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000003c0)=0xffffffffffffffff, 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r5 = socket(0x6, 0x2, 0x9)
sendto$inet6(r5, &(0x7f0000000400)="8475a4deeb722e350b6a4e00805a8c2138adc4c57613ce7650a1218b0c86e79f6c030e74ec8ace3f98025e1c661750fec33097b1989626eaf9e646b4a91640748904267335aa81e26de72e2b2456a1de20fd0cf5cd6d57788a808ff6b3042e976d10bdc2de07b48156d4d1d28f7c4be8b87ebbca8edc23fc8f0b7f62dd2d954545787ae9fb90d3ca687f501bb09fcaa5a3a0c0129ff8b5677d0ea6191a3b79cdc048a7d90bc2f3c94324489fa68f5ef95a3b373bab6696802c24eec0d13d7ca7b057abca0b87e4c70e6aed3ba1022a1cefb3c06230368e05f30007e6e501fc8f9944558d9d4487cb36bda5920541b52ad72f747731bd1667a8", 0xf9, 0x1, &(0x7f0000000500)={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10001}, 0x1c)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000540)=@req3={0x707, 0x8, 0x7, 0x81, 0xd, 0x5, 0xb}, 0x1c)
close(r1)
r6 = socket$inet(0x2, 0x6, 0x0)
setsockopt$inet_group_source_req(r6, 0x0, 0x2f, &(0x7f0000000580)={0x5, {{0x2, 0x2, @remote}}, {{0x2, 0x4e20, @remote}}}, 0x108)
r7 = accept4$llc(r5, &(0x7f00000006c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000700)=0x10, 0x800)
getsockname(r7, &(0x7f0000000740)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f00000007c0)=0x80)
r8 = socket$tipc(0x1e, 0x2, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000800)={0x42, 0x3}, 0x10)
setsockopt$inet_int(r6, 0x0, 0xd, &(0x7f0000000840)=0x4, 0x4)
setsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000880)={0x0, 0xea60}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup/syz0\x00', 0x1ff)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$inet(r9, &(0x7f0000000900)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r5, 0x0, 0x0, &(0x7f0000000940)=""/13, &(0x7f0000000980)=0xd)

5.63684225s ago: executing program 4 (id=1243):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010101}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0xffff, 0x1180000, @empty, 0x3}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x1}]}, {0x0, [0x2e]}}, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x20060004}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
write(r5, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b00000000000", 0x26)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000d9bffc), 0x4)
sendmsg$IPSET_CMD_PROTOCOL(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000000106010200000200000105000100070000000500010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x95)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x498, 0x30, 0xffff, 0x0, 0x3, {}, [{0x484, 0x1, [@m_police={0x480, 0x1, 0x0, 0x0, {{0xb}, {0x454, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1ff}, {0x0, 0x2, 0x0, 0x0, 0xa94}, 0x0, 0x0, 0xfffffffd}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}, @TCA_POLICE_RATE={0x404, 0x2, [0x6e91f939, 0x4e9, 0x33dd, 0x6, 0x3, 0x5, 0xff, 0x2, 0xfffffff8, 0x401, 0x1, 0x8, 0x5, 0x8d, 0x3, 0xf4f5, 0x6, 0x80000001, 0x0, 0x9, 0x8, 0xfffffffb, 0x9, 0x7, 0x10, 0x3, 0x2, 0x3c2, 0x200, 0x5, 0x7, 0xa6bc, 0xffffffff, 0x4, 0x1, 0xd5, 0x8, 0x9, 0xa, 0xc, 0x40, 0x80000000, 0x7, 0x1, 0xfa1, 0x5, 0x3, 0xf, 0x7ff, 0x9, 0x4f27a9a1, 0x5, 0xb, 0x29, 0x6, 0xffff, 0x9, 0x20000, 0x3, 0x6, 0x7, 0x0, 0x7, 0x2, 0x3ff, 0x0, 0x67, 0x0, 0x54, 0x3, 0xfffffffe, 0x3, 0x1, 0x7, 0x3, 0xf, 0x80, 0x401, 0x3ff, 0x5, 0x9, 0x7, 0x80, 0x3, 0x1ff, 0x5, 0xe, 0x7fffffff, 0x7, 0x2b, 0x9, 0x1, 0x0, 0x7f, 0x6, 0x2, 0x59a, 0x5, 0x9, 0x400, 0x7d, 0x800, 0x2aac, 0xfffffff8, 0x8, 0x200, 0xfffffffa, 0x400, 0xf46, 0xb, 0xfff, 0x9, 0x4, 0x2, 0x3, 0x39a, 0x2, 0x0, 0xd, 0x8001, 0x1, 0x8, 0x3, 0x0, 0x9, 0x7, 0x4, 0xc0, 0x80000001, 0x400000, 0x80, 0x5, 0x2, 0x1, 0x0, 0x4c2, 0x2, 0x6, 0x3, 0x28, 0x0, 0x4, 0x1200, 0x9, 0x5a, 0x101, 0x5, 0xa, 0x2, 0x5, 0x6, 0x49, 0x1, 0x10, 0x9, 0x8, 0x8e82, 0x1, 0xffff2775, 0xad0, 0x0, 0x19e, 0x9, 0x8, 0x16, 0x8, 0x4, 0x9, 0x7fff, 0x10, 0xa, 0x6, 0x0, 0x9, 0xbb, 0xd, 0xfff, 0x0, 0x8001, 0x7f, 0xb, 0xa802, 0x7, 0xffff, 0xf2, 0xffffffff, 0x2, 0x8001, 0xa031efb, 0x2300000, 0xe, 0x40000000, 0x1299, 0x9, 0x5, 0x5, 0xd, 0xfffffffd, 0xe00000, 0x1ff, 0x4, 0x1, 0x4, 0xc, 0xa74, 0x4, 0x6, 0x80000001, 0x2, 0x6, 0x9, 0x5, 0xf26, 0x2, 0x1, 0x0, 0x8, 0x6, 0x800, 0xf, 0x4, 0x7, 0x2, 0x8, 0x1, 0x0, 0x2, 0x4, 0x6ec2, 0x7ff, 0x7, 0x3, 0x1eb4, 0x3, 0x6, 0x2, 0x5, 0x4, 0x3, 0x0, 0xf, 0x8, 0x6, 0xf627, 0x10, 0x2a9, 0x3, 0x1, 0x2, 0x5, 0x9, 0x7fffffff, 0x9, 0x80000000, 0x3, 0x7f]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd0e}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x498}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000001, 0x40010, r6, 0xd1d00000)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r6, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0x408, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
splice(r5, &(0x7f0000000340)=0x2, r4, &(0x7f0000000380)=0xf, 0xc00000, 0x0)
r9 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e23}, 0x10)
sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10)
sendto$inet(r9, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7", 0x3d, 0x20000051, 0x0, 0x0)
recvmsg(r9, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x104)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r8)

4.046214541s ago: executing program 0 (id=1740):
recvmmsg(0xffffffffffffffff, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socketpair(0x26, 0x3, 0x7, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
bind$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2, 0x3}, 0x20) (async)
r2 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x2c}, {0x80000006}]}, 0x10)

3.831722959s ago: executing program 0 (id=1742):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x120, r1, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x120}}, 0x44810)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0)
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c041}, 0x400)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r4, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="a5302d672f"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x200048c0}, 0x14)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, r1, 0x800, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000740)={'vlan0\x00', &(0x7f0000000700)=@ethtool_sset_info={0x37, 0x6, 0x6, [0x25d8, 0x4, 0x93, 0x0, 0xad0, 0xe, 0x2]}})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r6, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x55, 0x6b}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x4000014)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000900)=0x4)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x108, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x8000000000000000}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0xa60}, {0xc, 0x90, 0xde}}]}, 0x108}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
ioctl(r7, 0x2, &(0x7f0000000b40)="38187c5d99ceeb1027df1c3287248a740c3ec8d2b893e180ddd333754ec57d38bfddb0255fad9700dcc452")
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0xa8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d36d37027df2c96d"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="71f824ed6485e8e0c70d6a13253991a7"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b27102593244181b9069b91b2479118f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="8adc14a699e180c9245e3e071bdde49e9ae4b3c939ff1c5c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d058381bb52f00c2"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa6d}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="688b5d3df3d271a81cef7947c57de47a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="de0321906d65129f9a39a610a394c02eaa76eb045d6fa7a2"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="208803be5cd7eca19fb0675740239152"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4818f0787059f671446c7f36be59cc70"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7ff}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x200}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "612d724dfcf315dc"}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0x810)
socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x19, 0x17, &(0x7f0000000d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@printk={@lx}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e40)='syzkaller\x00', 0xf, 0x12, &(0x7f0000000e80)=""/18, 0x41000, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000f00)={0x1, 0xd, 0x7, 0x8f}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000f40)=[0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x4, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r8, 0x0, 0xce, 0x65, &(0x7f0000001040)="6a445f4e4ee9c3e234c78a3df2c42455e23dd3318fa01b562a23effb9a719b3afc6635af360a2618fb1b843af235c935434711ceb297b87a3c75cd6f5c352f5f1ea1872a9575e636a764b5498df1e0ad7ceeb8c5f7a8c217c14569d3c3c34dfaaf293370de1b16067b7dee7c8fbcca92acde969734cc7cc63ba2306c5c4e23631640c0f4d5b822f95889a2fc00a46ac01b8caeece199f2129d819dc3214e804ee8299363824de92850b60550d0f3309c136f2fe7052d6ce2e63053844a6d59fcbdcae969df16547f5bf5f30ef195", &(0x7f0000001140)=""/101, 0x3, 0x0, 0x7e, 0xc1, &(0x7f00000011c0)="cc6551a5dc7c2e764aa81764423943d97386bd2e00033f6163f192517f7b6aea37bfc872a025327d6604701568ca87bd41fd00532faa5731d129a1363bf08974498b07aecf4476b59c7c4e0733d8e93347a39349f10cb608b932258f7ca7508c8e6e042bdd2dd4427af5a2b9c99793a300d537d0a3dcdbf585ad12c0c818", &(0x7f0000001240)="089227968ae4f68ac791695d0f2713518685d3019b536864e5b7a3ca89e084cf175479d9712ebfe40676281879fe6981a0be7b0b70c8f6fe86eb626cd45c09bcd7aaee9d0570ed636b87e5b7d46dd3f688649902b2ea8448c760ebee71f0048c27e30ea96045dcee92886bfa124dea9841fd69d2d648e8cbde6733e8a27cb253cce72f6428d49d00b8703e9ccc5a9a1475a9bb878f81a440732b48f1557fb021d48fd48e43de93dc1bf6fc5e756448abdae5493fa4a4794cd04e3ebbc24e7f5f5d", 0x3, 0x0, 0x7ff}, 0x50)
r9 = socket$netlink(0x10, 0x3, 0x1)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r9, 0x40189429, &(0x7f00000013c0)={0x1, 0x6, 0x100000001})
socket$rxrpc(0x21, 0x2, 0x2)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r10, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x1c, r11, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4c040)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r9, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x41000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x5c, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40801}, 0xc084)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r9, 0x8983, &(0x7f0000001680)={0x7, 'veth0_to_batadv\x00', {0x6}, 0x80})

3.423881496s ago: executing program 0 (id=1745):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
sendmmsg(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x3a, 0x84, 0x5, "10"}], 0x18}}], 0x2, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
close(r3)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r4, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d58c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb6220030100dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000066d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c9727ec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f0dafc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa1c22015e53fd8a46be933ab460d8629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8f12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d61800aaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e3c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c59869c9200a1306ffa5a71ca69e89a69fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0dc4b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec086174439af6ee6c7fdb2d19c9280fa9a02e8fa6a38acfff09050d912635fed175fd06f577d40000000000000000000000000000754bffd73c0888ba8834f20b3acea57b7817663e12c1a5503bc4c13af59bda21688d68698c53ce3aa767657774db09ece7ec888d3af290207d36fa433b35e17dc0f3dc728ea1c633a4ef9e7d9bf81b57492e0544800921d1b751c5fbc163"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

3.333759456s ago: executing program 1 (id=1747):
unshare(0x28000600) (async)
r0 = socket(0x18, 0x0, 0x0) (async)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa0179e12}) (async)
socket$inet6(0xa, 0x80000, 0x1ff) (async)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={<r3=>r2, 0xffffffff80000000, 0xfffffffffffffffb, 0x6})
getsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8, 0x0, 0x0, 0x100, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdc4, 0x0, 0x0, 0x8, 0x5e55b37311de6d89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})

2.835917514s ago: executing program 0 (id=1748):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x2b, 0x80000, 0x2, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000400)=""/4096, &(0x7f0000000180)=0x1000)
ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x5, 0x24000000})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001439)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x20022, 0x0)
ioctl$PPPIOCATTACH(r8, 0x4004743d, &(0x7f0000000240))
close(r7)
writev(r8, &(0x7f0000000840)=[{&(0x7f0000000280)="fa8e", 0x2}], 0x1)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010000104000000000000400000000000", @ANYRES32=0x0, @ANYBLOB="777f000000000000200012800c0001006d6163766c616e00100002800a000900aaaaaaaaaa04000008000500", @ANYRES32=r1, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0)

2.80996228s ago: executing program 1 (id=1749):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

2.778271805s ago: executing program 2 (id=1750):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r1=>0x0})
r2 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r2, &(0x7f0000000000)={0x1d, r1}, 0x10)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f00000000c0)=0x3, 0x4)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r4, r5, 0x4, 0x0, 0x0, @void, @value}, 0x10)
r6 = socket(0x1, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r6}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000240), &(0x7f0000000180)=@udp=r6}, 0x20)
sendmmsg$inet6(r3, &(0x7f00000090c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0)

2.651641505s ago: executing program 1 (id=1751):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000000))
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'team_slave_1\x00', 0x1}, 0x18)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc0001040}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd0, 0x2, 0x9, 0x201, 0x0, 0x0, {}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xbf17c96}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFCTH_TUPLE={0x4}, @NFCTH_TUPLE={0x90, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0xfffffffffffffe39}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x14002890}, 0x80)
syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001)
splice(r4, &(0x7f0000000380)=0x3, r3, &(0x7f00000003c0)=0x23999ad9, 0x1, 0x0)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x10}, 0x18)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r7, 0x4008941a, &(0x7f0000000480))
r8 = accept(r1, &(0x7f00000004c0)=@un=@abs, &(0x7f0000000540)=0x80)
bind$unix(r8, &(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e)
getsockopt$bt_sco_SCO_OPTIONS(r8, 0x11, 0x1, &(0x7f0000000600)=""/152, &(0x7f00000006c0)=0x98)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000001740)={'nat\x00', 0x0, 0x3, 0x1000, [0xfffffffffffffff8, 0x7, 0x100, 0x1, 0x2, 0x2], 0x3, &(0x7f0000000700)=[{}, {}, {}], &(0x7f0000000740)=""/4096}, &(0x7f00000017c0)=0x78)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001980)={'syztnl0\x00', &(0x7f0000001900)={'ip6_vti0\x00', 0x0, 0x2f, 0xd, 0x3, 0x0, 0x42, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x8000, 0xfff, 0x7803}})
setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000001f00)=0x610, 0x4)
write(r7, &(0x7f0000001f40)="eeb9c4a0c0234bd95591f3d6f75973a809467374d0de9a72eac1d02f469c1c095306908b1997470fc1e42049b9e53fbac21678e0550ce460a4cab7a45beb9a95fe894bfbf86a48556b58dc45df7dc431ca465524406ee59176a70f5bc77be0ed2f93317b0540007b895e7caea6", 0x6d)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000002140)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffff119}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffe}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4b}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x40040}, 0x1)
syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000717800"/32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000010300000", @ANYRES32, @ANYBLOB="00000000000000000000001c48000005002c0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f00000004c0))

870.151659ms ago: executing program 1 (id=1752):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x401, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000004100)={0x0, 0x0, &(0x7f00000040c0)={&(0x7f0000003f40)={0x38, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}]}]}, 0x38}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000080), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r3, 0x0)
ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000480)={@dev={0xac, 0x14, 0x14, 0x1a}, @loopback})
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020921dfb231000026bd700000000000"], 0x10}}, 0x20000000)
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000400)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000440)=0x2c)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000000020000000000a43f361c862880ffffffffffffff8b05e9010000000000e6ffffff0200007dea0d377ea7a2c9000c0016800835"], 0x30}}, 0x0)
r5 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r6, 0x3, {0x2}, 0xff}, 0x18)
close(0x3)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_inet_SIOCRTMSG(r8, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e20, @local}, 0x1, 0x0, 0x0, 0x0, 0xfff, &(0x7f00000000c0)='ipvlan0\x00', 0x3ff, 0x1, 0x6})
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7901000010000100000000000000ff00fc0000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a4}}, 0x0)

797.863034ms ago: executing program 2 (id=1753):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x108, 0xb, 0x108, 0x1c0, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'veth1_to_batadv\x00', '\x00', {}, {}, 0x32}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@esp={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1, 0xf, 0x4, @empty, @mcast1, 0x7800, 0x10, 0x3, 0x8e}})
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}}}, 0x10)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_buf(r3, 0x29, 0x23, &(0x7f0000000040)="32c6a3d8fa69a404d87e723e77b3893ec3c7e7726e27b24308235b453a1ee0026b61a0077b249ab9d3af4bed33467ee58c153b60632ddd17a87bf9283a060e9e161fca20e251db7ada5facda0cc2d257eb0ae2f58157a4c0932a74fbba315a195a375c90f7688cbeb006b319", 0x6c)
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000180)='blkio.bfq.dequeue\x00', 0x0, 0x0)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000000140))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x1ff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1400000024000900000000000000000009"], 0x14}}, 0x0)

712.111891ms ago: executing program 0 (id=1754):
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$l2tp(0x2, 0x2, 0x73)
ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"})

467.583533ms ago: executing program 2 (id=1755):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f70002800500010000000000300003801700018014000300fc00000000000000000000001100000014000400fe8000000000000000000000000000bb040002"], 0x58}}, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000007"], 0x24d8}], 0x1}, 0x0)

348.282309ms ago: executing program 0 (id=1756):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44, 0x0, 0x0, 0x3, 0x0, @void, @value}, 0x20)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349f7f2})
writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee", 0x3}], 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)

202.928472ms ago: executing program 1 (id=1757):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="060000000400000040020000070000000000000055172ae95ec6c2f4587ab5a60a5efa6a81d48c1f36bea5864a40d3b0839dd1baacf49cc8103b8e7f4fbce88b8832dcca3fc379e162f796958661ff6624c8a84e18a3d1b8be362fac0fc2fb76981a58502df02ee0bf43d64eefe6a677b94ae3127496a08c68580611710a4c19306feaf5952d047f2f488e8f2d099ca634002341e818f9a538a9f02fcf4c953ad243bb8fc1086bc63c2402d17f8d3bcfc6ff13bf775f71d2daac17e155476082001546297c7adbf0168494ccb307bdb7a18e6cb224eb62bc960ccf0edda38658b348d70373ceeb94bfa932016517065010aebe24", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00b5c36a00000000000000000000000500000000000000000000000000000022e1409025da19c4245198ed6d82b2c35b613f25d36b322d8bfdbc98f8bb0999f20f88e6df23c1365ef8f2cbb9b66c08da6be8eeebb9ed2ca919b1b73e51397c9a150eb25c9636c64f9bec2e6b487ba9f1540b76f13000f583a360"], 0x48)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x7b, 0xa, 0xff00}, [@call={0x1d, 0xa}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x10, 0x0, 0x0, 0x25000000}, @generic]}, &(0x7f0000000140)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x47, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d)
r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r2)
sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01042cbd48b61c0a0400a35f0000"], 0x14}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
poll(&(0x7f0000000180)=[{r5, 0xa}], 0x1, 0x7)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32=r5], 0x38}}, 0x0)
socket$isdn_base(0x22, 0x3, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)="15ae941e0e68c140de967d1d9117e834e89ac123524f291a27569136cf761f2e488bb8f495dcbf25c8221892395fbfe7cfd2b3260105e0801c4f052a662ae43080b31a1efb4d69a8ab9580db74542e2596349f088bed2b2c236129c7bdedd3001efc0ebe48c19e332f0761e001e896b3f63af5dde0a85d912c5f8e06dd48f0a1215efb3aef133bb0698bbae6a0342acbc966c6f1a33ee4bb4cc8241cfcf3ecf6ae0552084e48e07ac20b28075ad1b6e0dd9cafb390f84c544ab6080da8a3e04afeabf1c92a0ce809345fb0635019f7796970602af153daca304aecd9f68a1d5f0e761bde", &(0x7f00000000c0)="c9131b77bca105076b1040f6f3efac0100166f20b79a00"/33, 0xfff, r0, 0x0, 0xa0028000}, 0x38)

198.562256ms ago: executing program 2 (id=1758):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000002a00090000000719fe3efabc000000000400002c04001d805bfccdef0494693aca2925bb909b96ec"], 0x18}, 0x1, 0x3000000}, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="8500000055000000040000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, 0x0, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6)
ioctl$sock_bt_hci(r5, 0x800448d2, &(0x7f0000000000))
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x7f, 0x9, 0x5, 0x7ff, 0x1, 0xa76, 0x8, {<r7=>0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x9, 0x1, 0x808c, 0x3, 0x8}}, &(0x7f0000000100)=0xb0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000140)={r7, @in={{0x2, 0x4e24, @remote}}, [0x4, 0x50fc, 0x2, 0x1, 0x7, 0x9, 0x2, 0x3, 0x7, 0x6, 0x2b9ab3a9, 0xc31e, 0x0, 0x1, 0x9]}, &(0x7f0000000240)=0x100)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
socket$kcm(0x29, 0x2, 0x0)
r9 = socket(0x29, 0x2, 0x0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x200008c0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="8500000088000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x37)
syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x0)

144.710306ms ago: executing program 2 (id=1759):
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', r1, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
close(0xffffffffffffffff) (async)
close(0xffffffffffffffff)
syz_emit_ethernet(0xae, &(0x7f0000000840)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1, [{0x2, 0xa, "4efd30cc4fd5778d2eddbb50dcd9592d82d0f4824d00292bde7a4c3cbb9c8830e44d8bbf5cff62cb5652b1896b224ca8865ab267c2ec2c252e258b84b7dd7c3df974dd93dc0c51e30171cab29c79"}]}}}}}}, 0x0)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x2f54, 0x7, 0xa7, 0x800, r2, 0x9, '\x00', 0x0, r3, 0x3, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x2f54, 0x7, 0xa7, 0x800, r2, 0x9, '\x00', 0x0, r3, 0x3, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000a2c000000060a00000000000000000000000000001800048014000180090001006d6173710000000004"], 0x54}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x100, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @common=@SET={0x60}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c000a8008"], 0x34}}, 0x0)

47.72772ms ago: executing program 1 (id=1760):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000100", @ANYRES32=r1, @ANYBLOB="04227061", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x48}}, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x5)
close(r1)

0s ago: executing program 2 (id=1761):
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x11000)
vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000104000380600fe8800000000000000000000000000aa00104e2226bc3785fa9a6bd2963b89ba9ac4653ffcb44b896884922295072302b33f92c3718d6f3b79984762ad42c2c06b2763df80ab36431504f4de4494add7c31de1bfcfa08da4e123fadaab538914b86e3a39a555d4790dc08760a0195bb6d1c1729f606e6575369115e525e12ccc12e33d52c20e4d796b306f74fc24ea04260632cc8951888541dd00"/192, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e4000000907800001312345f8cf949a01b515682f44cecac91ba1d12d243471da14ff23d079da4ca814b7d7b"], 0x0)

kernel console output (not intermixed with test programs):

lave_0
[  247.625435][ T9855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  247.649803][ T9855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.679753][ T9855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  247.708306][ T9855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.725587][ T9855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  247.749708][ T9855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.772044][ T9855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  247.782960][ T9855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.793289][ T9855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  247.806641][ T9855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.820310][ T9855] batman_adv: batadv0: Interface activated: batadv_slave_1
[  247.908811][T10047] team0: Port device team_slave_0 added
[  247.957094][ T9855] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  247.979915][ T9855] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  247.988683][ T9855] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  248.007867][ T9855] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  248.028197][T10047] team0: Port device team_slave_1 added
[  248.093936][ T9845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.115441][ T9845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.126053][ T9845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.138603][ T9845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.148920][ T9845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.160618][ T9845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.171681][ T9845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.182716][ T9845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.193646][ T9845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.204223][ T9845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.215280][ T9845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.227741][ T9845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.243657][ T9845] batman_adv: batadv0: Interface activated: batadv_slave_0
[  248.261492][T10047] batman_adv: batadv0: Adding interface: batadv_slave_0
[  248.268498][T10047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.300058][ T5239] Bluetooth: hci1: command tx timeout
[  248.316818][T10047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  248.363528][T10047] batman_adv: batadv0: Adding interface: batadv_slave_1
[  248.380156][T10047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.418422][T10047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  248.442242][ T9845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.453200][ T9845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.463678][ T9845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.474887][ T9845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.485028][ T9845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.495558][ T9845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.505827][ T9845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.516461][ T9845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.526877][ T9845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.538251][ T9845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.555130][ T9845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.566603][ T9845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.591993][ T9845] batman_adv: batadv0: Interface activated: batadv_slave_1
[  248.617268][ T9845] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  248.641217][ T9845] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  248.652072][ T9845] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  248.673990][ T9845] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  248.857762][T10047] hsr_slave_0: entered promiscuous mode
[  248.879057][T10047] hsr_slave_1: entered promiscuous mode
[  248.888740][T10047] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  248.909122][T10047] Cannot create hsr debugfs directory
[  249.032297][ T1286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.033318][T10188] netlink: 'syz.2.1188': attribute type 10 has an invalid length.
[  249.049313][ T1286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.062680][T10188] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1188'.
[  249.368038][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.401831][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.565128][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.591180][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.905466][ T2904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.929701][ T2904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.138465][ T5311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  250.252993][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'.
[  250.292336][ T5282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  250.300687][T10225] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  250.319562][T10231] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1196'.
[  250.367379][T10225] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  250.380765][ T5239] Bluetooth: hci1: command tx timeout
[  250.389725][T10225] gretap1: entered promiscuous mode
[  250.395050][T10225] gretap1: entered allmulticast mode
[  250.608471][T10247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  250.661307][   T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  250.708012][   T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  250.868431][ T5314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.330134][ T5282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.490566][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.500672][ T5311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.564235][T10047] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  251.682697][T10047] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  251.730502][ T5311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.760994][T10310] Bluetooth: hci0: load_link_keys: too big key_count value 31744
[  251.780351][T10047] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  251.842407][T10311] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1204'.
[  251.867110][T10047] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  252.044403][T10338] x_tables: duplicate underflow at hook 2
[  252.333453][T10346] Cannot find map_set index 0 as target
[  252.511466][T10047] 8021q: adding VLAN 0 to HW filter on device bond0
[  252.605443][T10047] 8021q: adding VLAN 0 to HW filter on device team0
[  252.652544][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.659815][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  252.715367][T10355] pimreg3: entered allmulticast mode
[  252.739483][T10357] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1214'.
[  252.823051][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.830366][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  252.980831][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'.
[  253.017076][T10362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1215'.
[  253.049743][T10362] netlink: 'syz.2.1215': attribute type 1 has an invalid length.
[  253.147837][T10376] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1217'.
[  253.252621][T10365] syzkaller0: entered promiscuous mode
[  253.291680][T10365] syzkaller0: entered allmulticast mode
[  255.489889][ T5281] net_ratelimit: 5 callbacks suppressed
[  255.489913][ T5281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.056184][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  256.535368][ T5283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.801459][T10047] 8021q: adding VLAN 0 to HW filter on device batadv0
[  256.813181][T10442] netlink: 'syz.4.1222': attribute type 2 has an invalid length.
[  256.919980][T10449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1224'.
[  256.946542][ T5311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.986486][T10047] veth0_vlan: entered promiscuous mode
[  257.003972][T10452] C: renamed from lo (while UP)
[  257.021120][T10452] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  257.221535][T10047] veth1_vlan: entered promiscuous mode
[  257.401207][T10047] veth0_macvtap: entered promiscuous mode
[  257.467516][T10047] veth1_macvtap: entered promiscuous mode
[  257.537663][T10465] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1229'.
[  257.558299][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  257.594906][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.629766][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  257.662939][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.681464][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  257.699442][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.726465][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  257.738034][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.748775][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  257.762012][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.775049][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  257.786145][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.797814][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  257.820435][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.842145][T10047] batman_adv: batadv0: Interface activated: batadv_slave_0
[  257.889027][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  257.929323][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.967425][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.005062][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.030669][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.042386][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.062827][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.095067][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.108376][T10477] netlink: 'syz.4.1231': attribute type 1 has an invalid length.
[  258.124878][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.136166][T10477] netlink: 9372 bytes leftover after parsing attributes in process `syz.4.1231'.
[  258.179387][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.186768][T10477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1231'.
[  258.222885][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.264509][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.269460][T10477] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1231'.
[  258.279994][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.296236][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.325822][T10047] batman_adv: batadv0: Interface activated: batadv_slave_1
[  258.356438][T10491] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1234'.
[  258.371079][T10491] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8
[  258.390409][T10047] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  258.406732][T10047] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  258.430255][T10047] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  258.446210][T10047] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  258.468937][T10491] netlink: 'syz.2.1234': attribute type 15 has an invalid length.
[  258.823476][T10511] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1238'.
[  258.882784][T10513] tipc: Started in network mode
[  258.888500][T10513] tipc: Node identity ac1414, cluster identity 4711
[  258.901211][T10513] tipc: New replicast peer: 0.0.0.0
[  258.913267][T10513] tipc: Enabled bearer <udp:syz1>, priority 10
[  258.925145][ T6152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  258.938592][ T6152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  259.177067][ T2919] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.237024][T10520] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1244'.
[  259.441851][ T2919] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.484871][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  259.549674][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  259.655332][ T2919] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.887373][T10537] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1248'.
[  259.900786][   T25] tipc: Node number set to 2886996992
[  259.956573][ T2919] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.014312][T10538] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1248'.
[  260.030772][ T5242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  260.043981][ T5242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  260.055243][ T5242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  260.065577][ T5242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  260.073940][ T5242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  260.083002][ T5242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  260.276883][T10546] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1250'.
[  260.561921][ T2919] bridge_slave_1: left allmulticast mode
[  260.567647][ T2919] bridge_slave_1: left promiscuous mode
[  260.608332][ T2919] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.683041][ T2919] bridge_slave_0: left allmulticast mode
[  260.688752][ T2919] bridge_slave_0: left promiscuous mode
[  260.755613][ T2919] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.716622][ T2919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  261.733341][ T2919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  261.745610][ T2919] bond0 (unregistering): Released all slaves
[  262.209657][ T5242] Bluetooth: hci1: command tx timeout
[  262.404529][T10592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1257'.
[  262.438909][ T5239] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  262.468339][ T5239] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  262.483904][ T5239] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  262.501116][ T5239] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  262.514813][ T5239] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  262.524192][ T5239] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  263.517569][T10620] __nla_validate_parse: 1 callbacks suppressed
[  263.517590][T10620] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1260'.
[  263.758816][ T2919] hsr_slave_0: left promiscuous mode
[  263.796626][ T2919] hsr_slave_1: left promiscuous mode
[  263.872222][ T2919] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  263.909477][ T2919] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.918939][ T2919] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  263.932205][ T2919] batman_adv: batadv0: Removing interface: batadv_slave_1
[  264.016394][ T2919] veth1_macvtap: left promiscuous mode
[  264.029743][ T2919] veth0_macvtap: left promiscuous mode
[  264.041097][ T2919] veth1_vlan: left promiscuous mode
[  264.053454][ T2919] veth0_vlan: left promiscuous mode
[  264.289570][ T5239] Bluetooth: hci1: command tx timeout
[  264.619731][ T5239] Bluetooth: hci6: command tx timeout
[  264.891048][ T2919] team0 (unregistering): Port device team_slave_1 removed
[  264.949175][ T2919] team0 (unregistering): Port device team_slave_0 removed
[  265.736458][T10541] chnl_net:caif_netlink_parms(): no params data found
[  265.888487][T10660] netlink: 'syz.2.1266': attribute type 12 has an invalid length.
[  266.095832][T10665] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1267'.
[  266.232715][T10541] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.236992][T10674] xt_cluster: node mask cannot exceed total number of nodes
[  266.252642][T10541] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.272725][T10541] bridge_slave_0: entered allmulticast mode
[  266.282354][T10541] bridge_slave_0: entered promiscuous mode
[  266.348295][T10541] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.369351][ T5239] Bluetooth: hci1: command tx timeout
[  266.377052][T10541] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.403783][T10541] bridge_slave_1: entered allmulticast mode
[  266.460140][T10541] bridge_slave_1: entered promiscuous mode
[  266.689842][ T5239] Bluetooth: hci6: command tx timeout
[  266.819162][T10541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  266.916429][T10690] sctp: [Deprecated]: syz.2.1273 (pid 10690) Use of int in maxseg socket option.
[  266.916429][T10690] Use struct sctp_assoc_value instead
[  267.140292][T10541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  267.216779][T10701] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  267.422137][T10541] team0: Port device team_slave_0 added
[  267.521775][T10541] team0: Port device team_slave_1 added
[  267.546841][  T943] IPVS: starting estimator thread 0...
[  267.650554][T10716] IPVS: using max 16 ests per chain, 38400 per kthread
[  267.824262][ T2919] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.926814][T10541] batman_adv: batadv0: Adding interface: batadv_slave_0
[  267.954969][T10541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.983873][T10541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  268.033592][T10593] chnl_net:caif_netlink_parms(): no params data found
[  268.081555][ T2919] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.106859][T10541] batman_adv: batadv0: Adding interface: batadv_slave_1
[  268.122467][T10541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.151643][T10541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  268.184058][T10734] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1282'.
[  268.273862][ T2919] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.430808][T10541] hsr_slave_0: entered promiscuous mode
[  268.448194][T10541] hsr_slave_1: entered promiscuous mode
[  268.455299][ T5239] Bluetooth: hci1: command tx timeout
[  268.469954][T10541] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  268.478815][T10541] Cannot create hsr debugfs directory
[  268.528798][ T2919] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.770411][ T5239] Bluetooth: hci6: command tx timeout
[  269.161333][T10593] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.168551][T10593] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.205767][T10593] bridge_slave_0: entered allmulticast mode
[  269.232467][T10593] bridge_slave_0: entered promiscuous mode
[  269.252822][T10593] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.269470][T10593] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.298324][T10593] bridge_slave_1: entered allmulticast mode
[  269.334587][T10593] bridge_slave_1: entered promiscuous mode
[  269.459776][T10780] netlink: 'syz.1.1290': attribute type 4 has an invalid length.
[  269.468636][T10778] batman_adv: batadv0: Adding interface: dummy0
[  269.509028][T10778] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  269.557491][T10778] batman_adv: batadv0: Interface activated: dummy0
[  269.705107][T10593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  269.748331][T10778] batadv0: mtu less than device minimum
[  269.761022][T10778] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  269.773897][T10778] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  269.786650][T10778] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  269.799452][T10778] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  269.812183][T10778] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  269.824211][T10778] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  269.836170][T10778] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  269.847919][T10778] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  269.859879][T10778] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  269.964370][T10593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  269.974813][ T2919] bridge_slave_1: left allmulticast mode
[  269.989713][ T2919] bridge_slave_1: left promiscuous mode
[  270.000105][ T2919] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.012030][ T2919] bridge_slave_0: left allmulticast mode
[  270.017731][ T2919] bridge_slave_0: left promiscuous mode
[  270.024156][ T2919] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.556398][ T2919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  270.574897][ T2919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  270.596005][ T2919] bond0 (unregistering): Released all slaves
[  270.850068][ T5239] Bluetooth: hci6: command tx timeout
[  270.939393][T10811] sit0: entered promiscuous mode
[  271.057097][T10593] team0: Port device team_slave_0 added
[  271.081822][T10593] team0: Port device team_slave_1 added
[  271.139875][T10811] syzkaller1: entered promiscuous mode
[  271.145536][T10811] syzkaller1: entered allmulticast mode
[  271.334224][T10593] batman_adv: batadv0: Adding interface: batadv_slave_0
[  271.341712][T10593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.369731][T10593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  271.398324][T10593] batman_adv: batadv0: Adding interface: batadv_slave_1
[  271.421565][T10593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.478814][T10593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  271.680238][T10828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1300'.
[  271.691835][T10828] netlink: 'syz.0.1300': attribute type 7 has an invalid length.
[  271.699990][T10828] netlink: 'syz.0.1300': attribute type 8 has an invalid length.
[  271.708276][T10828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1300'.
[  271.769438][T10833] tipc: Started in network mode
[  271.774815][T10833] tipc: Node identity 2e57cac5197b, cluster identity 4711
[  271.789889][T10833] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.053868][T10840] netlink: 'syz.0.1302': attribute type 10 has an invalid length.
[  272.107176][T10840] team0: Failed to send options change via netlink (err -105)
[  272.115839][T10840] team0: Port device netdevsim0 added
[  272.126463][T10825] tipc: Resetting bearer <eth:syzkaller0>
[  272.176073][T10825] tipc: Disabling bearer <eth:syzkaller0>
[  272.366968][T10842] can: request_module (can-proto-0) failed.
[  272.400934][T10593] hsr_slave_0: entered promiscuous mode
[  272.420695][T10593] hsr_slave_1: entered promiscuous mode
[  272.437528][T10593] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  272.458828][T10593] Cannot create hsr debugfs directory
[  272.516918][ T2919] hsr_slave_0: left promiscuous mode
[  272.540115][ T2919] hsr_slave_1: left promiscuous mode
[  272.587115][ T2919] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  272.601379][ T2919] batman_adv: batadv0: Removing interface: batadv_slave_0
[  272.614644][ T2919] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  272.623488][ T2919] batman_adv: batadv0: Removing interface: batadv_slave_1
[  272.679118][ T2919] veth1_macvtap: left promiscuous mode
[  272.693814][ T2919] veth0_macvtap: left promiscuous mode
[  272.704774][ T2919] veth1_vlan: left promiscuous mode
[  272.728691][ T2919] veth0_vlan: left promiscuous mode
[  273.308539][T10870] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '#! 
[  273.308539][T10870] cct.usage_percpu_sys'
[  273.842601][ T2919] team0 (unregistering): Port device team_slave_1 removed
[  273.900723][ T2919] team0 (unregistering): Port device team_slave_0 removed
[  274.478045][T10842] netlink: 'syz.0.1303': attribute type 7 has an invalid length.
[  274.748887][T10874] netlink: 'syz.1.1308': attribute type 1 has an invalid length.
[  274.901937][T10875] bond1: (slave bridge1): Enslaving as a backup interface with an up link
[  274.918963][ T6168] net_ratelimit: 11 callbacks suppressed
[  274.918985][ T6168] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  274.921151][T10876] 8021q: adding VLAN 0 to HW filter on device bond1
[  275.272892][T10874] bond1 (unregistering): (slave bridge1): Removing an active aggregator
[  275.283077][T10874] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  275.302651][T10874] bond1 (unregistering): Released all slaves
[  275.337336][T10875] pimreg: entered allmulticast mode
[  275.565534][T10892] delete_channel: no stack
[  275.632812][T10541] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  275.699927][T10541] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  275.820297][T10541] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  275.851089][T10541] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  275.988888][T10898] –eth0_vlan: renamed from bridge_slave_1 (while UP)
[  276.004542][T10905] xt_time: invalid argument - start or stop time greater than 23:59:59
[  276.141111][T10907] netlink: 'syz.0.1319': attribute type 1 has an invalid length.
[  276.149008][T10907] netlink: 9116 bytes leftover after parsing attributes in process `syz.0.1319'.
[  276.183745][T10907] netlink: 'syz.0.1319': attribute type 1 has an invalid length.
[  276.198761][T10907] netlink: 209 bytes leftover after parsing attributes in process `syz.0.1319'.
[  276.418977][T10915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1321'.
[  276.634407][T10541] 8021q: adding VLAN 0 to HW filter on device bond0
[  276.760673][T10541] 8021q: adding VLAN 0 to HW filter on device team0
[  276.857730][ T6152] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.865118][ T6152] bridge0: port 1(bridge_slave_0) entered forwarding state
[  276.908865][ T6152] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.916134][ T6152] bridge0: port 2(bridge_slave_1) entered forwarding state
[  277.801600][T10541] 8021q: adding VLAN 0 to HW filter on device batadv0
[  277.813042][T10593] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  277.882021][T10593] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  277.914686][T10593] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  277.986831][T10593] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  278.351673][T10593] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.453143][T10593] 8021q: adding VLAN 0 to HW filter on device team0
[  278.511135][ T2919] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.518703][ T2919] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.614356][ T2919] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.621632][ T2919] bridge0: port 2(bridge_slave_1) entered forwarding state
[  278.652976][T10987] : renamed from bond0 (while UP)
[  278.952825][T11004] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1336'.
[  279.016476][T10541] veth0_vlan: entered promiscuous mode
[  279.110321][T11014] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1335'.
[  279.163300][T11017] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1335'.
[  279.270606][T11020] xt_l2tp: invalid flags combination: 4
[  279.348632][T10541] veth1_vlan: entered promiscuous mode
[  279.495065][T10541] veth0_macvtap: entered promiscuous mode
[  279.545958][T10541] veth1_macvtap: entered promiscuous mode
[  279.643319][T10541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.663785][T10541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.706601][T10541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.759629][T10541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.779288][T10541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.818689][T10541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.844075][T10541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.867164][T10541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.897903][T10541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.943251][T10541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.971060][T11046] dccp_invalid_packet: invalid packet type
[  279.982405][T10541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  280.007835][T10541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.044902][T10541] batman_adv: batadv0: Interface activated: batadv_slave_0
[  280.252967][T10541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.304911][T10541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.321653][T10541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.346452][T10541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.375970][T10541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.409080][T10541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.433903][T10541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.458540][T10541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.478163][T10541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.503121][T10541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.526990][T10541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.549782][T10541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.578205][T10541] batman_adv: batadv0: Interface activated: batadv_slave_1
[  280.728755][T10593] 8021q: adding VLAN 0 to HW filter on device batadv0
[  280.835446][T10541] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  280.879423][T10541] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  280.910760][T10541] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  280.929741][T10541] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  281.267343][T11086] bridge0: entered promiscuous mode
[  281.273485][ T6152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.287531][T11086] bridge0: entered allmulticast mode
[  281.294886][ T6152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.507241][T10593] veth0_vlan: entered promiscuous mode
[  281.582645][ T6168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.602831][T10593] veth1_vlan: entered promiscuous mode
[  281.618667][ T6168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.691901][T11108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1355'.
[  281.743819][T11110] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1356'.
[  282.054383][T11122] ieee802154 phy0 wpan0: encryption failed: -22
[  282.159891][T10593] veth0_macvtap: entered promiscuous mode
[  282.207161][T10593] veth1_macvtap: entered promiscuous mode
[  282.373841][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.416337][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.459431][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.484433][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.496519][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.507593][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.521464][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.533200][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.563347][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.584917][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.611502][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.630049][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.653007][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.675278][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.703002][T10593] batman_adv: batadv0: Interface activated: batadv_slave_0
[  282.737168][T11138] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1360'.
[  282.792745][T11139] bond0: entered promiscuous mode
[  282.811166][T11139] bond_slave_0: entered promiscuous mode
[  282.833681][T11139] bond_slave_1: entered promiscuous mode
[  282.852101][T11144] 8021q: VLANs not supported on ipvlan0
[  282.980424][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.045607][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.071518][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.094274][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.114913][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.137718][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.180798][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.232686][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.273654][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.304597][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.360094][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.389091][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.439522][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.469721][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.521683][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.565526][T10593] batman_adv: batadv0: Interface activated: batadv_slave_1
[  283.661624][T11132] bond0: left promiscuous mode
[  283.667694][T11132] bond_slave_0: left promiscuous mode
[  283.687421][T11132] bond_slave_1: left promiscuous mode
[  283.695389][ T5242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  283.708254][ T5242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  283.718664][ T5242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  283.741190][ T5242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  283.755773][ T5242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  283.764623][ T5242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  283.926051][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.010293][T10593] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  284.019070][T10593] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  284.057275][T10593] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  284.084037][T11190] netlink: 'syz.0.1368': attribute type 1 has an invalid length.
[  284.088191][T10593] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  284.099310][T11190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1368'.
[  284.223512][T11190] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1368'.
[  284.296220][T11199] can: request_module (can-proto-0) failed.
[  284.334775][T11205] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1370'.
[  284.348699][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.614630][T11217] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1373'.
[  284.737682][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.940332][T11227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1375'.
[  285.131188][T11229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1374'.
[  285.149132][T11232] Bluetooth: hci3: unsupported parameter 28
[  285.168339][T11232] Bluetooth: hci3: unsupported parameter 28
[  285.231427][T11233] Bluetooth: hci3: unsupported parameter 28
[  285.237394][T11233] Bluetooth: hci3: unsupported parameter 28
[  285.294706][ T6152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.365140][ T6152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.466763][T11239] xt_CT: You must specify a L4 protocol and not use inversions on it
[  285.515013][ T6145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.523756][ T6145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.534700][   T12] bridge_slave_1: left allmulticast mode
[  285.545499][   T12] bridge_slave_1: left promiscuous mode
[  285.554203][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.581350][T11239] xt_CT: You must specify a L4 protocol and not use inversions on it
[  285.611107][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1379'.
[  285.630565][   T12] bridge_slave_0: left allmulticast mode
[  285.636518][   T12] bridge_slave_0: left promiscuous mode
[  285.652191][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.895094][ T5242] Bluetooth: hci1: command tx timeout
[  286.129453][ T5242] Bluetooth: hci3: command 0x0406 tx timeout
[  286.129877][ T5239] Bluetooth: hci3: Opcode 0x1407 failed: -110
[  286.592892][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  286.618612][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  286.647766][   T12] bond0 (unregistering): Released all slaves
[  286.749563][T11261] netlink: 'syz.2.1381': attribute type 10 has an invalid length.
[  286.788095][T11261] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1381'.
[  286.991797][T11288] xt_TPROXY: Can be used only with -p tcp or -p udp
[  287.457122][T11300] netlink: 'syz.1.1385': attribute type 5 has an invalid length.
[  287.479757][T11300] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1385'.
[  287.800835][T11325] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode
[  287.821449][T11329] ipvlan0: entered promiscuous mode
[  287.970051][ T5239] Bluetooth: hci1: command tx timeout
[  288.003974][T11178] chnl_net:caif_netlink_parms(): no params data found
[  288.036854][T11333] netlink: 'syz.1.1390': attribute type 10 has an invalid length.
[  288.069708][T11333] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1390'.
[  288.113013][T11333] batman_adv: batadv0: Adding interface: virt_wifi0
[  288.126107][T11333] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.173703][T11333] batman_adv: batadv0: Interface activated: virt_wifi0
[  288.226170][T11324] ipvlan0: left promiscuous mode
[  288.240730][T11324] mac80211_hwsim hwsim32 wlan0: left promiscuous mode
[  288.310752][   T12] hsr_slave_0: left promiscuous mode
[  288.317899][   T12] hsr_slave_1: left promiscuous mode
[  288.336878][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  288.346497][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  288.370350][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  288.378686][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  288.448364][   T12] veth1_macvtap: left promiscuous mode
[  288.464966][   T12] veth0_macvtap: left promiscuous mode
[  288.475212][   T12] veth1_vlan: left promiscuous mode
[  288.488964][   T12] veth0_vlan: left promiscuous mode
[  288.883638][T11354] x_tables: duplicate entry at hook 1
[  289.248041][ T5242] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  289.258094][ T5242] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  289.269718][ T5242] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  289.311420][ T5242] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  289.327483][ T5242] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  289.338613][ T5242] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  289.513987][   T12] team0 (unregistering): Port device team_slave_1 removed
[  289.576959][   T12] team0 (unregistering): Port device team_slave_0 removed
[  290.049897][ T5242] Bluetooth: hci1: command tx timeout
[  290.491161][T11178] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.498603][T11178] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.508878][T11178] bridge_slave_0: entered allmulticast mode
[  290.531303][T11178] bridge_slave_0: entered promiscuous mode
[  290.548924][T11369] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1394'.
[  290.577430][T11178] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.580382][T11369] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1394'.
[  290.585508][T11178] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.632624][T11178] bridge_slave_1: entered allmulticast mode
[  290.657656][T11178] bridge_slave_1: entered promiscuous mode
[  290.661108][T11369] netlink: 'syz.2.1394': attribute type 3 has an invalid length.
[  290.670224][T11372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1396'.
[  290.781687][T11377] netlink: 5300 bytes leftover after parsing attributes in process `syz.2.1394'.
[  290.809746][T11377] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  291.000768][T11369] netlink: 'syz.2.1394': attribute type 3 has an invalid length.
[  291.017457][T11372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1396'.
[  291.051933][T11376] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1395'.
[  291.153370][T11178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  291.281544][T11178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  291.360399][T11389] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms
[  291.412154][ T5242] Bluetooth: hci6: command tx timeout
[  291.518343][T11388] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  291.549897][T11388] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  291.681069][T11178] team0: Port device team_slave_0 added
[  291.807457][T11178] team0: Port device team_slave_1 added
[  291.991833][T11178] batman_adv: batadv0: Adding interface: batadv_slave_0
[  291.998941][T11178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.045736][T11178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  292.073565][T11429] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1406'.
[  292.084716][T11178] batman_adv: batadv0: Adding interface: batadv_slave_1
[  292.093397][T11178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.120878][T11178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  292.132020][ T5242] Bluetooth: hci1: command tx timeout
[  292.232026][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1406'.
[  292.396810][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.499083][T11178] hsr_slave_0: entered promiscuous mode
[  292.507163][T11178] hsr_slave_1: entered promiscuous mode
[  292.514579][T11178] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  292.525257][T11178] Cannot create hsr debugfs directory
[  292.536770][T11436] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1408'.
[  292.555754][T11438] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  292.641068][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.963304][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.062166][T11451] netlink: 'syz.1.1412': attribute type 1 has an invalid length.
[  293.246317][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.297820][T11460] bond0 (unregistering): Released all slaves
[  293.480854][T11359] chnl_net:caif_netlink_parms(): no params data found
[  293.490200][ T5242] Bluetooth: hci6: command tx timeout
[  294.193481][T11484] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1416'.
[  294.204522][T11484] macvlan0: entered promiscuous mode
[  294.212022][T11484] macvlan0: entered allmulticast mode
[  294.221433][T11484] veth1_vlan: entered allmulticast mode
[  294.228674][   T12] bridge_slave_1: left allmulticast mode
[  294.242080][   T12] bridge_slave_1: left promiscuous mode
[  294.251293][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.270664][   T12] bridge_slave_0: left allmulticast mode
[  294.283136][   T12] bridge_slave_0: left promiscuous mode
[  294.295812][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.164843][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  295.186672][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  295.204257][   T12] bond0 (unregistering): Released all slaves
[  295.218064][T11359] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.239943][T11359] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.251778][T11359] bridge_slave_0: entered allmulticast mode
[  295.263540][T11359] bridge_slave_0: entered promiscuous mode
[  295.498752][T11359] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.509702][T11359] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.533313][T11359] bridge_slave_1: entered allmulticast mode
[  295.553442][T11359] bridge_slave_1: entered promiscuous mode
[  295.571367][ T5242] Bluetooth: hci6: command tx timeout
[  296.126161][T11359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  296.294109][T11359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  296.499069][T11359] team0: Port device team_slave_0 added
[  296.551274][T11560] netlink: 'syz.2.1432': attribute type 49 has an invalid length.
[  296.747293][T11359] team0: Port device team_slave_1 added
[  296.830160][T11571] __nla_validate_parse: 1 callbacks suppressed
[  296.830182][T11571] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1433'.
[  297.122197][   T12] hsr_slave_0: left promiscuous mode
[  297.134199][   T12] hsr_slave_1: left promiscuous mode
[  297.153855][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  297.171841][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  297.193003][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  297.200863][T11578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  297.209785][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  297.276613][   T12] veth1_macvtap: left promiscuous mode
[  297.291571][   T12] veth0_macvtap: left promiscuous mode
[  297.299870][   T12] veth1_vlan: left promiscuous mode
[  297.311710][   T12] veth0_vlan: left promiscuous mode
[  297.651395][ T5242] Bluetooth: hci6: command tx timeout
[  298.358829][   T12] team0 (unregistering): Port device team_slave_1 removed
[  298.418891][   T12] team0 (unregistering): Port device team_slave_0 removed
[  299.045112][T11359] batman_adv: batadv0: Adding interface: batadv_slave_0
[  299.054002][T11359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.086493][T11359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  299.194628][T11359] batman_adv: batadv0: Adding interface: batadv_slave_1
[  299.219992][T11359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.251403][T11359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  299.313348][T11607] netlink: 'syz.0.1440': attribute type 2 has an invalid length.
[  299.350605][T11607] netlink: 'syz.0.1440': attribute type 1 has an invalid length.
[  299.390234][T11609] netlink: 816 bytes leftover after parsing attributes in process `syz.2.1441'.
[  299.427082][T11178] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  299.439487][T11609] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1441'.
[  299.470806][T11178] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  299.500047][T11178] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  299.554634][T11359] hsr_slave_0: entered promiscuous mode
[  299.567787][T11359] hsr_slave_1: entered promiscuous mode
[  299.578142][T11359] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  299.589903][T11359] Cannot create hsr debugfs directory
[  299.595829][T11609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1441'.
[  299.627591][T11609] geneve2: entered promiscuous mode
[  299.690740][T11178] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  299.703122][T11619] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1443'.
[  299.904371][T11625] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1446'.
[  299.923090][T11630] x_tables: duplicate underflow at hook 1
[  300.165800][T11632] netlink: 'syz.0.1448': attribute type 21 has an invalid length.
[  300.182070][T11632] netlink: 'syz.0.1448': attribute type 20 has an invalid length.
[  300.195337][T11632] IPv6: NLM_F_CREATE should be specified when creating new route
[  300.268380][T11632] raw_sendmsg: syz.0.1448 forgot to set AF_INET. Fix it!
[  300.462067][T11643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1450'.
[  300.686726][T11178] 8021q: adding VLAN 0 to HW filter on device bond0
[  300.790439][T11178] 8021q: adding VLAN 0 to HW filter on device team0
[  300.876546][ T6152] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.883915][ T6152] bridge0: port 1(bridge_slave_0) entered forwarding state
[  300.934251][ T6152] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.941573][ T6152] bridge0: port 2(bridge_slave_1) entered forwarding state
[  301.010922][T11668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1453'.
[  301.111177][T11673] netlink: 'syz.1.1453': attribute type 7 has an invalid length.
[  301.234553][T11662] ipip0: entered promiscuous mode
[  301.287093][T11673] Êü: entered promiscuous mode
[  301.340407][T11359] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  301.392104][T11359] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  301.465696][T11359] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  301.510318][T11359] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  301.735541][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1461'.
[  301.747586][T11701] netlink: 'syz.0.1462': attribute type 10 has an invalid length.
[  301.781191][T11701] 8021q: adding VLAN 0 to HW filter on device team0
[  301.792573][T11701] bond0: (slave team0): Enslaving as an active interface with an up link
[  301.818735][T11703] netlink: 'syz.0.1462': attribute type 3 has an invalid length.
[  301.879879][T11701] netlink: 'syz.0.1462': attribute type 10 has an invalid length.
[  301.900557][T11701] bond0: (slave team0): Releasing backup interface
[  301.935779][T11701] bridge0: port 3(team0) entered blocking state
[  301.958758][T11701] bridge0: port 3(team0) entered disabled state
[  301.976469][T11701] team0: entered allmulticast mode
[  301.988174][T11701] team_slave_0: entered allmulticast mode
[  301.997881][T11701] team_slave_1: entered allmulticast mode
[  302.004211][T11701] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  302.014069][T11701] team0: entered promiscuous mode
[  302.019151][T11701] team_slave_0: entered promiscuous mode
[  302.026694][T11701] team_slave_1: entered promiscuous mode
[  302.033841][T11701] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  302.136419][T11178] 8021q: adding VLAN 0 to HW filter on device batadv0
[  302.205460][T11359] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.317155][T11359] 8021q: adding VLAN 0 to HW filter on device team0
[  302.381624][T11720] IPVS: Unknown mcast interface: lo
[  302.430616][ T2919] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.437925][ T2919] bridge0: port 1(bridge_slave_0) entered forwarding state
[  302.529028][ T2919] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.536482][ T2919] bridge0: port 2(bridge_slave_1) entered forwarding state
[  302.737854][T11359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  303.219119][T11178] veth0_vlan: entered promiscuous mode
[  303.312743][T11178] veth1_vlan: entered promiscuous mode
[  303.447648][T11359] 8021q: adding VLAN 0 to HW filter on device batadv0
[  303.594668][T11178] veth0_macvtap: entered promiscuous mode
[  303.611999][T11774] xt_hashlimit: size too large, truncated to 1048576
[  303.625916][T11774] xt_hashlimit: max too large, truncated to 1048576
[  303.638429][T11178] veth1_macvtap: entered promiscuous mode
[  303.647990][T11774] xt_hashlimit: overflow, try lower: 0/0
[  303.851939][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  303.887317][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.917874][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  303.937214][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.959276][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  303.984953][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.005362][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.016561][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.036851][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.058470][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.077359][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.091694][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.113804][T11178] batman_adv: batadv0: Interface activated: batadv_slave_0
[  304.199843][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.224737][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.259400][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.300373][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.340830][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.363304][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.411088][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.469309][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.504757][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.539512][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.561635][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.589348][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.612176][T11178] batman_adv: batadv0: Interface activated: batadv_slave_1
[  304.645282][T11178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  304.691560][T11178] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  304.705248][T11178] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  304.719333][T11178] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  304.771543][T11359] veth0_vlan: entered promiscuous mode
[  304.801626][T11802] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  304.820260][T11824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1483'.
[  304.882374][T11359] veth1_vlan: entered promiscuous mode
[  305.148240][T11359] veth0_macvtap: entered promiscuous mode
[  305.302318][T11359] veth1_macvtap: entered promiscuous mode
[  305.359305][ T2919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  305.385609][ T2919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  305.537189][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  305.584769][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.598271][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  305.641323][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.679384][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.719650][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.743147][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.776751][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.808643][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.852042][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.883600][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.919354][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.946836][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.967853][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.999402][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  306.021579][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.046445][T11359] batman_adv: batadv0: Interface activated: batadv_slave_0
[  306.066152][T11854] netlink: 'syz.2.1487': attribute type 12 has an invalid length.
[  306.088962][T11854] netlink: 'syz.2.1487': attribute type 29 has an invalid length.
[  306.109351][T11854] netlink: 'syz.2.1487': attribute type 2 has an invalid length.
[  306.127401][T11854] netlink: 'syz.2.1487': attribute type 2 has an invalid length.
[  306.158389][T11854] netlink: 'syz.2.1487': attribute type 1 has an invalid length.
[  306.176990][T11854] netlink: 'syz.2.1487': attribute type 37 has an invalid length.
[  306.197237][T11854] netlink: 'syz.2.1487': attribute type 2 has an invalid length.
[  306.216697][T11854] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.272969][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  306.319481][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.340911][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  306.374783][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.400019][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  306.425036][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.443916][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  306.464770][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.465363][T11871] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1488'.
[  306.474763][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  306.495738][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.506605][T11871] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8
[  306.523626][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  306.535543][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.546208][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  306.558340][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.574076][T11359] batman_adv: batadv0: Interface activated: batadv_slave_1
[  306.588263][T11871] geneve2: entered promiscuous mode
[  306.595073][T11871] geneve2: entered allmulticast mode
[  306.716076][T11872] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1489'.
[  306.870118][T11883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1490'.
[  306.912547][T11359] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  306.934633][T11890] netlink: zone id is out of range
[  306.949889][T11359] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  306.971489][T11359] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.971931][T11890] netlink: set zone limit has 4 unknown bytes
[  306.984153][T11892] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1492'.
[  306.996836][T11359] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  307.245977][T11899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1494'.
[  307.558343][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.872068][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.088621][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.239584][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.371425][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  308.382875][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  308.392405][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  308.404877][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  308.430211][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  308.430765][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.456000][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  308.508957][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.607398][T11942] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1500'.
[  308.844195][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.892395][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.936160][   T11] bridge_slave_1: left allmulticast mode
[  308.959773][   T11] bridge_slave_1: left promiscuous mode
[  308.965622][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.020400][   T11] bridge_slave_0: left allmulticast mode
[  309.029104][T11956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1503'.
[  309.030117][   T11] bridge_slave_0: left promiscuous mode
[  309.072510][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.211104][T11965] tipc: Trying to set illegal importance in message
[  309.218380][T11965] tipc: Trying to set illegal importance in message
[  309.867492][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  309.885441][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  309.898752][   T11] bond0 (unregistering): Released all slaves
[  310.228386][T11987] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING
[  310.353053][T11987] netlink: 'syz.0.1511': attribute type 20 has an invalid length.
[  310.361303][T11989] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1510'.
[  310.530006][ T5242] Bluetooth: hci1: command tx timeout
[  310.767037][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'.
[  311.400373][   T11] hsr_slave_0: left promiscuous mode
[  311.406578][   T11] hsr_slave_1: left promiscuous mode
[  311.414820][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  311.423279][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  311.432751][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  311.440896][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  311.467065][   T11] veth1_macvtap: left promiscuous mode
[  311.473181][   T11] veth0_macvtap: left promiscuous mode
[  311.478782][   T11] veth1_vlan: left promiscuous mode
[  311.484392][   T11] veth0_vlan: left promiscuous mode
[  312.184499][   T11] team0 (unregistering): Port device team_slave_1 removed
[  312.394283][   T11] team0 (unregistering): Port device team_slave_0 removed
[  312.592113][ T5239] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  312.611340][ T5244] Bluetooth: hci1: command tx timeout
[  312.621485][ T5239] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  312.631315][ T5239] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  312.656712][ T5239] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  312.684125][ T5239] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  312.701684][ T5239] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  313.315807][T11934] chnl_net:caif_netlink_parms(): no params data found
[  314.060593][T11934] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.067807][T11934] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.110069][T11934] bridge_slave_0: entered allmulticast mode
[  314.117503][T11934] bridge_slave_0: entered promiscuous mode
[  314.160626][T11934] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.169378][T11934] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.176664][T11934] bridge_slave_1: entered allmulticast mode
[  314.217119][T11934] bridge_slave_1: entered promiscuous mode
[  314.455530][T11934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  314.489631][ T5311] IPVS: starting estimator thread 0...
[  314.575605][T11934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  314.601324][T12098] IPVS: using max 17 ests per chain, 40800 per kthread
[  314.690382][ T5242] Bluetooth: hci1: command tx timeout
[  314.770185][ T5242] Bluetooth: hci6: command tx timeout
[  314.780190][T12110] netlink: 'syz.0.1532': attribute type 178 has an invalid length.
[  314.832858][T11934] team0: Port device team_slave_0 added
[  314.861266][T12109] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1532'.
[  314.911120][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1534'.
[  314.962773][T11934] team0: Port device team_slave_1 added
[  315.113222][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.206420][T11934] batman_adv: batadv0: Adding interface: batadv_slave_0
[  315.214472][T11934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  315.242299][T11934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  315.314987][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.396484][T11934] batman_adv: batadv0: Adding interface: batadv_slave_1
[  315.415038][T11934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  315.458515][T11934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  315.477002][T12135] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1539'.
[  315.486770][T12135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1539'.
[  315.638143][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.697083][T12147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1542'.
[  315.778769][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.014479][T11934] hsr_slave_0: entered promiscuous mode
[  316.046268][T11934] hsr_slave_1: entered promiscuous mode
[  316.055357][T11934] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  316.064585][T11934] Cannot create hsr debugfs directory
[  316.095068][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1547'.
[  316.119085][T12164] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  316.133974][T12164] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  316.216705][T12164] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1547'.
[  316.285992][T12038] chnl_net:caif_netlink_parms(): no params data found
[  316.604713][   T11] bridge_slave_1: left allmulticast mode
[  316.649593][   T11] bridge_slave_1: left promiscuous mode
[  316.680549][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.758463][   T11] bridge_slave_0: left allmulticast mode
[  316.768513][   T11] bridge_slave_0: left promiscuous mode
[  316.778151][ T5242] Bluetooth: hci1: command tx timeout
[  316.786423][T12189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1551'.
[  316.811582][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.861106][ T5242] Bluetooth: hci6: command tx timeout
[  317.500823][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  317.746547][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  317.758877][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  317.782424][   T11] bond0 (unregistering): Released all slaves
[  317.812058][T12190] netlink: 'syz.2.1551': attribute type 21 has an invalid length.
[  317.820284][T12190] netlink: 'syz.2.1551': attribute type 20 has an invalid length.
[  317.836880][T12190] IPv6: NLM_F_CREATE should be specified when creating new route
[  317.844992][T12191] netlink: 'syz.2.1551': attribute type 21 has an invalid length.
[  317.861541][T12191] netlink: 'syz.2.1551': attribute type 20 has an invalid length.
[  317.882728][T12195] netlink: 'syz.1.1553': attribute type 21 has an invalid length.
[  317.958779][T12202] wg2: entered promiscuous mode
[  317.970207][T12202] wg2: entered allmulticast mode
[  318.298362][T12038] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.325487][T12038] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.344937][T12038] bridge_slave_0: entered allmulticast mode
[  318.354828][T12038] bridge_slave_0: entered promiscuous mode
[  318.405766][T12229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1559'.
[  318.424619][T12228] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1560'.
[  318.443187][T12038] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.452760][T12038] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.461100][T12038] bridge_slave_1: entered allmulticast mode
[  318.470574][T12038] bridge_slave_1: entered promiscuous mode
[  318.477195][T12223] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  318.618581][T12228] bridge2: port 1(veth1_to_bond) entered blocking state
[  318.626849][T12228] bridge2: port 1(veth1_to_bond) entered disabled state
[  318.634374][T12228] veth1_to_bond: entered allmulticast mode
[  318.642995][T12228] veth1_to_bond: entered promiscuous mode
[  318.650908][T12228] bridge2: port 1(veth1_to_bond) entered blocking state
[  318.658060][T12228] bridge2: port 1(veth1_to_bond) entered forwarding state
[  318.692195][T12038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  318.758224][T12235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1561'.
[  318.761844][T12038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  318.929958][ T5242] Bluetooth: hci6: command tx timeout
[  319.115352][T12038] team0: Port device team_slave_0 added
[  319.217113][   T11] hsr_slave_0: left promiscuous mode
[  319.228333][   T11] hsr_slave_1: left promiscuous mode
[  319.243498][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  319.251797][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  319.271329][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  319.279098][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  319.339320][   T11] veth1_macvtap: left promiscuous mode
[  319.349355][   T11] veth0_macvtap: left promiscuous mode
[  319.359743][   T11] veth1_vlan: left promiscuous mode
[  319.372755][   T11] veth0_vlan: left promiscuous mode
[  320.124690][   T11] team0 (unregistering): Port device team_slave_1 removed
[  320.190402][   T11] team0 (unregistering): Port device team_slave_0 removed
[  320.847069][T12038] team0: Port device team_slave_1 added
[  321.017508][ T5242] Bluetooth: hci6: command tx timeout
[  321.318697][T12038] batman_adv: batadv0: Adding interface: batadv_slave_0
[  321.337617][T12038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.378683][T12038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  321.396513][T12270] netlink: zone id is out of range
[  321.447949][T12038] batman_adv: batadv0: Adding interface: batadv_slave_1
[  321.450886][T12271] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  321.491123][T12038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.539656][T12038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  321.672110][T12274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1570'.
[  321.860175][T12038] hsr_slave_0: entered promiscuous mode
[  321.876478][T12281] netlink: 'syz.0.1572': attribute type 15 has an invalid length.
[  321.886287][T12281] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  321.889612][T12038] hsr_slave_1: entered promiscuous mode
[  321.906887][T12282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1571'.
[  321.918054][T12038] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  321.949682][T12038] Cannot create hsr debugfs directory
[  322.043447][T11934] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  322.178909][T11934] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  322.203866][T11934] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  322.255159][T12293] vxcan1: tx address claim with dest, not broadcast
[  322.294595][T11934] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  322.391638][T12303] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1578'.
[  322.675625][T11934] 8021q: adding VLAN 0 to HW filter on device bond0
[  322.707052][T12313] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1581'.
[  322.737759][T11934] 8021q: adding VLAN 0 to HW filter on device team0
[  322.769820][ T2919] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.777296][ T2919] bridge0: port 1(bridge_slave_0) entered forwarding state
[  322.820029][ T2919] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.827299][ T2919] bridge0: port 2(bridge_slave_1) entered forwarding state
[  322.963554][T12038] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  322.976934][T12319] netlink: 'syz.1.1583': attribute type 34 has an invalid length.
[  322.986951][T12038] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  323.000666][T12038] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  323.035624][T12038] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  323.300333][T12038] 8021q: adding VLAN 0 to HW filter on device bond0
[  323.384813][T12038] 8021q: adding VLAN 0 to HW filter on device team0
[  323.442612][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.449949][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  323.508091][ T6168] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.515865][ T6168] bridge0: port 2(bridge_slave_1) entered forwarding state
[  323.655998][T11934] 8021q: adding VLAN 0 to HW filter on device batadv0
[  323.713922][T12339] netlink: 'syz.0.1588': attribute type 4 has an invalid length.
[  323.828585][T12038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  323.932391][T12347] xt_TPROXY: Can be used only with -p tcp or -p udp
[  323.961483][T12348] xt_TPROXY: Can be used only with -p tcp or -p udp
[  324.220342][T12368] 8021q: VLANs not supported on lo
[  324.220698][T12369] xt_CT: You must specify a L4 protocol and not use inversions on it
[  324.260164][T12368] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1594'.
[  324.335291][T12038] 8021q: adding VLAN 0 to HW filter on device batadv0
[  324.413821][T11934] veth0_vlan: entered promiscuous mode
[  324.442982][T11934] veth1_vlan: entered promiscuous mode
[  324.487408][T12374] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  324.567842][T12038] veth0_vlan: entered promiscuous mode
[  324.618970][T12038] veth1_vlan: entered promiscuous mode
[  324.697344][T11934] veth0_macvtap: entered promiscuous mode
[  324.744900][T11934] veth1_macvtap: entered promiscuous mode
[  324.806260][T12038] veth0_macvtap: entered promiscuous mode
[  324.851276][T12038] veth1_macvtap: entered promiscuous mode
[  324.929124][T11934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  324.949945][T11934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.971942][T11934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  324.993854][T11934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.005319][T11934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.021228][T11934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.031961][T11934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.046097][T11934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.060073][T11934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.070945][T11934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.093739][T11934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.119403][T11934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.138020][T11934] batman_adv: batadv0: Interface activated: batadv_slave_0
[  325.150204][T11934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.179715][T11934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.209403][T11934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.225518][T11934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.239438][T11934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.261050][T11934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.280336][T11934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.296868][T11934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.308966][T11934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.321566][T11934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.332389][T11934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.343592][T11934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.356383][T11934] batman_adv: batadv0: Interface activated: batadv_slave_1
[  325.367264][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.378620][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.393127][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.404314][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.418754][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.430329][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.440813][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.452223][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.462422][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.473486][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.483614][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.494363][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.504986][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.515607][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.528519][T12038] batman_adv: batadv0: Interface activated: batadv_slave_0
[  325.558529][T12405] netlink: 'syz.1.1602': attribute type 13 has an invalid length.
[  325.590941][T11934] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  325.610054][T11934] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  325.619704][T11934] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  325.628467][T11934] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  325.678538][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.697945][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.708939][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.720463][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.731437][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.742100][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.754033][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.770091][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.780802][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.792702][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.802725][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.814903][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.826990][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.837649][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.851245][T12038] batman_adv: batadv0: Interface activated: batadv_slave_1
[  325.862375][T12416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  325.972148][T12038] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  326.008572][T12038] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  326.018966][T12038] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  326.038639][T12038] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  326.259839][ T6146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.281408][ T6146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.315268][ T6168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.339049][ T6168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.391985][ T6146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.414536][ T6146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.426270][T12425] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1610'.
[  326.488015][ T6146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.497316][ T6146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.758377][T12431] netlink: 'syz.2.1613': attribute type 13 has an invalid length.
[  326.778905][T12431] veth0_macvtap: left promiscuous mode
[  326.788815][T12431] macvtap0: entered allmulticast mode
[  326.820967][T12431] macvtap0: refused to change device tx_queue_len
[  327.063447][T12444] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  327.437901][ T6152] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.716744][ T6152] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.901581][ T6152] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.014747][ T6152] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.362148][T12466] team0: left allmulticast mode
[  328.367173][T12466] team_slave_0: left allmulticast mode
[  328.417324][T12466] team_slave_1: left allmulticast mode
[  328.447913][T12466] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  328.500493][T12466] team0: left promiscuous mode
[  328.505355][T12466] team_slave_0: left promiscuous mode
[  328.541501][T12466] team_slave_1: left promiscuous mode
[  328.559657][T12466] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  328.580229][T12466] bridge0: port 3(team0) entered disabled state
[  328.619019][T12466] batman_adv: batadv0: Interface deactivated: dummy0
[  328.651997][T12466] batman_adv: batadv0: Removing interface: dummy0
[  328.696974][T12466] bridge_slave_0: left allmulticast mode
[  328.721370][T12466] bridge_slave_0: left promiscuous mode
[  328.741354][T12466] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.814558][T12466] bridge_slave_1: left allmulticast mode
[  328.825824][T12466] bridge_slave_1: left promiscuous mode
[  328.844886][T12466] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.890819][T12466] bond0: (slave bond_slave_0): Releasing backup interface
[  328.901586][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  328.919502][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  328.928633][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  328.940449][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  328.949006][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  328.950982][T12466] bond0: (slave bond_slave_1): Releasing backup interface
[  328.966062][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  329.020755][T12466] team0: Port device team_slave_0 removed
[  329.086210][T12466] team0: Port device team_slave_1 removed
[  329.095794][T12466] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  329.103537][T12466] batman_adv: batadv0: Removing interface: batadv_slave_0
[  329.118660][T12466] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  329.127097][T12466] batman_adv: batadv0: Removing interface: batadv_slave_1
[  329.157323][T12466] team0: Port device netdevsim0 removed
[  329.193667][T12473] 8021q: adding VLAN 0 to HW filter on device bond0
[  329.204521][T12473] team0: Port device bond0 added
[  329.217070][T12472] netlink: 'syz.1.1627': attribute type 10 has an invalid length.
[  329.260148][T12472] team0: Device hsr_slave_0 failed to register rx_handler
[  329.322262][ T6152] bridge_slave_1: left allmulticast mode
[  329.327965][ T6152] bridge_slave_1: left promiscuous mode
[  329.337875][ T6152] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.350132][ T6152] bridge_slave_0: left allmulticast mode
[  329.355825][ T6152] bridge_slave_0: left promiscuous mode
[  329.361979][ T6152] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.852943][ T6152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  329.866464][ T6152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  329.878882][ T6152] bond0 (unregistering): Released all slaves
[  330.197618][T12495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1630'.
[  330.342635][T12495] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1630'.
[  330.822173][ T5242] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  330.833419][ T5242] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  330.844195][ T5242] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  330.854490][ T5242] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  330.870280][ T5242] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  330.878066][ T5242] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  330.913459][ T6152] hsr_slave_0: left promiscuous mode
[  330.943667][ T6152] hsr_slave_1: left promiscuous mode
[  330.963208][ T6152] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  330.986875][ T6152] batman_adv: batadv0: Removing interface: batadv_slave_0
[  330.992929][T12526] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1639'.
[  331.003909][T12526] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8
[  331.007686][ T6152] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  331.013494][ T5242] Bluetooth: hci1: command tx timeout
[  331.033644][ T6152] batman_adv: batadv0: Removing interface: batadv_slave_1
[  331.043277][T12527] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  331.074996][ T6152] veth1_macvtap: left promiscuous mode
[  331.081271][ T6152] veth0_macvtap: left promiscuous mode
[  331.086913][ T6152] veth1_vlan: left promiscuous mode
[  331.093025][ T6152] veth0_vlan: left promiscuous mode
[  331.837240][ T6152] team0 (unregistering): Port device team_slave_1 removed
[  331.906393][ T6152] team0 (unregistering): Port device team_slave_0 removed
[  332.546758][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1639'.
[  332.564498][T12531] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1640'.
[  332.786150][T12541] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1642'.
[  332.808331][T12538] netlink: 'syz.0.1642': attribute type 8 has an invalid length.
[  332.831218][T12538] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  332.925280][T12544] netlink: 'syz.1.1644': attribute type 10 has an invalid length.
[  332.940375][ T5242] Bluetooth: hci6: command tx timeout
[  333.069080][T12544] : (slave netdevsim0): Enslaving as an active interface with an up link
[  333.089524][ T5242] Bluetooth: hci1: command tx timeout
[  333.094830][T12486] chnl_net:caif_netlink_parms(): no params data found
[  333.326877][T12486] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.347538][T12486] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.357126][T12486] bridge_slave_0: entered allmulticast mode
[  333.371534][T12486] bridge_slave_0: entered promiscuous mode
[  333.385162][T12486] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.416462][T12486] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.447875][T12486] bridge_slave_1: entered allmulticast mode
[  333.483484][T12486] bridge_slave_1: entered promiscuous mode
[  333.660077][T12486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  333.678833][T12567] IPVS: Scheduler module ip_vs_sip not found
[  333.694790][T12486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  333.830996][T12574] netlink: 'syz.0.1651': attribute type 1 has an invalid length.
[  333.868833][T12581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  333.942253][T12486] team0: Port device team_slave_0 added
[  333.955305][T12486] team0: Port device team_slave_1 added
[  333.956164][T12584] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1653'.
[  334.007063][T12576] bond1: (slave gre1): The slave device specified does not support setting the MAC address
[  334.029143][T12576] bond1: (slave gre1): Error -95 calling set_mac_address
[  334.061673][T12574] 8021q: adding VLAN 0 to HW filter on device bond1
[  334.146155][ T6152] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.363140][T12588] bond1 (unregistering): Released all slaves
[  334.383315][T12587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1653'.
[  334.493222][ T6152] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.525747][T12486] batman_adv: batadv0: Adding interface: batadv_slave_0
[  334.539866][T12486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  334.577426][T12486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  334.637200][ T6152] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.659630][T12486] batman_adv: batadv0: Adding interface: batadv_slave_1
[  334.677738][T12486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  334.736685][T12486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  334.767818][T12603] x_tables: duplicate underflow at hook 2
[  334.863674][ T6152] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.012853][T12486] hsr_slave_0: entered promiscuous mode
[  335.019316][ T5242] Bluetooth: hci6: command tx timeout
[  335.040067][T12486] hsr_slave_1: entered promiscuous mode
[  335.069687][T12486] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  335.077494][T12486] Cannot create hsr debugfs directory
[  335.163052][T12615] netlink: 'syz.2.1663': attribute type 1 has an invalid length.
[  335.180582][ T5242] Bluetooth: hci1: command tx timeout
[  335.185580][T12615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1663'.
[  335.468728][ T6152] bridge_slave_1: left allmulticast mode
[  335.475447][ T6152] bridge_slave_1: left promiscuous mode
[  335.487642][ T6152] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.498311][ T6152] bridge_slave_0: left allmulticast mode
[  335.504812][ T6152] bridge_slave_0: left promiscuous mode
[  335.512043][ T6152] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.028181][ T6152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  336.046968][ T6152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  336.061345][ T6152] bond0 (unregistering): Released all slaves
[  336.117571][T12516] chnl_net:caif_netlink_parms(): no params data found
[  336.467249][T12653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1673'.
[  336.644639][T12654] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1670'.
[  336.665152][T12657] netem: change failed
[  336.861679][T12664] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1676'.
[  336.895829][T12516] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.903572][T12516] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.911033][T12516] bridge_slave_0: entered allmulticast mode
[  336.921733][T12516] bridge_slave_0: entered promiscuous mode
[  336.942640][T12669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1675'.
[  336.953268][T12668] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1675'.
[  337.014279][T12516] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.026699][T12516] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.041002][T12516] bridge_slave_1: entered allmulticast mode
[  337.066776][T12516] bridge_slave_1: entered promiscuous mode
[  337.089502][ T5242] Bluetooth: hci6: command tx timeout
[  337.232343][T12516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  337.250459][ T5242] Bluetooth: hci1: command tx timeout
[  337.444917][T12516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  337.485414][ T6152] hsr_slave_0: left promiscuous mode
[  337.516275][ T6152] hsr_slave_1: left promiscuous mode
[  337.545089][ T6152] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  337.569562][ T6152] batman_adv: batadv0: Removing interface: batadv_slave_0
[  337.580752][ T6152] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  337.590606][ T6152] batman_adv: batadv0: Removing interface: batadv_slave_1
[  337.648262][ T6152] veth1_macvtap: left promiscuous mode
[  337.663901][ T6152] veth0_macvtap: left promiscuous mode
[  337.679536][ T6152] veth1_vlan: left promiscuous mode
[  337.687418][ T6152] veth0_vlan: left promiscuous mode
[  337.751801][T12694] netlink: 'syz.1.1683': attribute type 4 has an invalid length.
[  337.767328][T12694] netlink: 'syz.1.1683': attribute type 1 has an invalid length.
[  337.780144][T12694] netlink: 'syz.1.1683': attribute type 7 has an invalid length.
[  337.801974][T12693] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1684'.
[  337.822611][T12692] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1684'.
[  337.898209][   T29] audit: type=1107 audit(1726743573.758:2): pid=12689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Š63
ú\›†m!öiN›íŠÉÍ‹ôEð~8§*ÔŽFEß@P7+¼kÜÖ'
[  338.483998][ T6152] team0 (unregistering): Port device team_slave_1 removed
[  338.548396][ T6152] team0 (unregistering): Port device team_slave_0 removed
[  339.169721][ T5242] Bluetooth: hci6: command tx timeout
[  339.259906][T12516] team0: Port device team_slave_0 added
[  339.310523][T12516] team0: Port device team_slave_1 added
[  339.445619][T12516] batman_adv: batadv0: Adding interface: batadv_slave_0
[  339.453234][T12516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.490205][T12516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  339.583012][T12516] batman_adv: batadv0: Adding interface: batadv_slave_1
[  339.603291][T12516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.672766][T12516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  339.674342][T12708] netlink: 188904 bytes leftover after parsing attributes in process `syz.2.1686'.
[  339.699633][T12708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1686'.
[  339.936514][T12516] hsr_slave_0: entered promiscuous mode
[  339.953300][T12516] hsr_slave_1: entered promiscuous mode
[  339.961271][T12516] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  339.966266][T12713] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1689'.
[  339.968947][T12516] Cannot create hsr debugfs directory
[  340.069081][T12486] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  340.096950][T12486] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  340.155671][T12486] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  340.313155][T12486] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  340.757620][T12733] delete_channel: no stack
[  340.870326][T12735] delete_channel: no stack
[  341.002663][T12486] 8021q: adding VLAN 0 to HW filter on device bond0
[  341.108809][T12486] 8021q: adding VLAN 0 to HW filter on device team0
[  341.141639][ T6168] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.148861][ T6168] bridge0: port 1(bridge_slave_0) entered forwarding state
[  341.205507][ T6168] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.212819][ T6168] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.403481][T12516] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  341.414822][T12516] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  341.428301][T12516] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  341.443703][T12516] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  341.674971][T12516] 8021q: adding VLAN 0 to HW filter on device bond0
[  341.745569][T12516] 8021q: adding VLAN 0 to HW filter on device team0
[  341.782523][ T6168] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.789801][ T6168] bridge0: port 1(bridge_slave_0) entered forwarding state
[  341.840226][ T6165] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.847459][ T6165] bridge0: port 2(bridge_slave_1) entered forwarding state
[  342.062797][T12516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  342.323674][T12486] 8021q: adding VLAN 0 to HW filter on device batadv0
[  342.776264][T12790] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1706'.
[  342.816895][T12790] openvswitch: netlink: VXLAN extension 101 out of range max 1
[  342.940360][T12516] 8021q: adding VLAN 0 to HW filter on device batadv0
[  343.111245][T12516] veth0_vlan: entered promiscuous mode
[  343.167842][T12516] veth1_vlan: entered promiscuous mode
[  343.321848][T12486] veth0_vlan: entered promiscuous mode
[  343.362312][T12516] veth0_macvtap: entered promiscuous mode
[  343.386784][T12486] veth1_vlan: entered promiscuous mode
[  343.422846][T12516] veth1_macvtap: entered promiscuous mode
[  343.619153][T12817] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1711'.
[  343.623882][T12486] veth0_macvtap: entered promiscuous mode
[  343.644244][T12516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.656342][T12516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.676466][T12516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.690928][T12516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.709076][T12516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.723432][T12516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.734351][T12516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.745583][T12516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.755773][T12516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.766623][T12516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.781480][T12516] batman_adv: batadv0: Interface activated: batadv_slave_0
[  343.907044][T12827] No such timeout policy "syz0"
[  344.306328][T12838] netlink: 'syz.1.1716': attribute type 1 has an invalid length.
[  344.314699][T12838] netlink: 'syz.1.1716': attribute type 2 has an invalid length.
[  346.538221][T12486] veth1_macvtap: entered promiscuous mode
[  346.554935][T12516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  346.566031][T12516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.576630][T12516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  346.589153][T12516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.599779][T12516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  346.610361][T12516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.620749][T12516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  346.631423][T12516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.642423][T12516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  346.653695][T12516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.665979][T12516] batman_adv: batadv0: Interface activated: batadv_slave_1
[  346.697993][T12516] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  346.712260][T12516] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  346.738849][T12516] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  346.753525][T12516] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  346.797354][T12844] batadv_slave_1: entered promiscuous mode
[  346.808012][T12844] batadv_slave_1: left promiscuous mode
[  346.842828][T12844] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1718'.
[  346.882213][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.899845][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.921565][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.943939][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.959743][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.976418][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.986573][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.997603][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.007791][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  347.022720][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.034296][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  347.044803][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.057817][T12486] batman_adv: batadv0: Interface activated: batadv_slave_0
[  347.073289][T12852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1721'.
[  347.172523][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.197558][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.208417][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.218963][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.229798][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.246646][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.259122][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.286624][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.299379][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.317800][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.331688][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.344270][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.357449][T12486] batman_adv: batadv0: Interface activated: batadv_slave_1
[  347.371925][T12486] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  347.381672][T12486] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  347.390838][T12486] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  347.400427][T12486] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  347.525765][ T6168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.544038][ T6168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.597155][T12859] xt_cgroup: xt_cgroup: no path or classid specified
[  347.625863][T12859] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1723'.
[  347.642200][ T6165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.651255][ T6165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.708911][ T6152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.725574][ T6152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.787679][ T6165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.803198][ T6165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  348.417063][ T6165] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.658848][ T6165] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.956198][ T6165] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.082135][ T6165] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.125820][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  349.134625][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  349.153954][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  349.164153][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  349.180953][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  349.188553][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  349.225059][ T6165] bridge_slave_1: left allmulticast mode
[  349.231384][ T6165] bridge_slave_1: left promiscuous mode
[  349.237172][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.248583][ T6165] bridge_slave_0: left allmulticast mode
[  349.268464][ T6165] bridge_slave_0: left promiscuous mode
[  349.274707][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.851450][ T4623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  349.870818][ T4623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  349.881186][ T4623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  349.900567][ T4623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  349.912651][ T4623] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  349.922086][ T4623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  350.091957][ T6165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  350.104648][ T6165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  350.116793][ T6165] bond0 (unregistering): Released all slaves
[  350.297763][ T4623] Bluetooth: hci4: command 0x0406 tx timeout
[  350.304027][ T9789] Bluetooth: hci5: command 0x0406 tx timeout
[  350.312809][ T5235] Bluetooth: hci2: command 0x0406 tx timeout
[  350.355088][T12921] netlink: 'syz.1.1738': attribute type 3 has an invalid length.
[  350.366399][T12921] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1738'.
[  351.105832][T12917] chnl_net:caif_netlink_parms(): no params data found
[  351.249609][ T5244] Bluetooth: hci1: command tx timeout
[  351.274202][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1746'.
[  351.285553][T12947] netlink: 'syz.2.1746': attribute type 2 has an invalid length.
[  351.297893][T12947] netlink: 'syz.2.1746': attribute type 1 has an invalid length.
[  351.306954][T12947] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1746'.
[  351.819923][ T6165] hsr_slave_0: left promiscuous mode
[  351.836620][ T6165] hsr_slave_1: left promiscuous mode
[  351.848737][ T6165] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  351.869562][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_0
[  351.883535][ T6165] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  351.892569][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_1
[  351.935509][ T6165] veth1_macvtap: left promiscuous mode
[  351.941566][ T6165] veth0_macvtap: left promiscuous mode
[  351.948207][ T6165] veth1_vlan: left promiscuous mode
[  351.954344][ T6165] veth0_vlan: left promiscuous mode
[  351.959939][T12970] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1751'.
[  351.970208][ T5244] Bluetooth: hci6: command tx timeout
[  352.738953][ T6165] team0 (unregistering): Port device team_slave_1 removed
[  352.803047][ T6165] team0 (unregistering): Port device team_slave_0 removed
[  353.334141][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  353.346916][ T5242] Bluetooth: hci1: command tx timeout
[  353.503581][T12917] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.512969][T12917] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.529982][T12917] bridge_slave_0: entered allmulticast mode
[  353.537720][T12917] bridge_slave_0: entered promiscuous mode
[  353.563626][T12965] netlink: 'syz.0.1748': attribute type 9 has an invalid length.
[  353.577433][T12969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1750'.
[  353.638003][T12917] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.650618][T12917] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.658065][T12917] bridge_slave_1: entered allmulticast mode
[  353.665823][T12917] bridge_slave_1: entered promiscuous mode
[  353.815931][T12917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  353.921830][T12974] netlink: 65 bytes leftover after parsing attributes in process `syz.1.1752'.
[  353.942085][T12976] xt_CT: No such helper "netbios-ns"
[  353.966692][T12976] tipc: Can't bind to reserved service type 0
[  353.984580][T12917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  354.049438][ T5242] Bluetooth: hci6: command tx timeout
[  354.165540][T12987] netlink: 'syz.2.1755': attribute type 1 has an invalid length.
[  354.185356][T12987] netlink: 9324 bytes leftover after parsing attributes in process `syz.2.1755'.
[  354.205178][T12987] netlink: 'syz.2.1755': attribute type 1 has an invalid length.
[  354.223014][T12987] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1755'.
[  354.267819][T12917] team0: Port device team_slave_0 added
[  354.291385][T12917] team0: Port device team_slave_1 added
[  354.317333][T12895] chnl_net:caif_netlink_parms(): no params data found
[  354.450215][T12998] Cannot find add_set index 0 as target
[  354.550104][T12917] batman_adv: batadv0: Adding interface: batadv_slave_0
[  354.557150][T12917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.583829][T12917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  354.611765][   T30] INFO: task syz.1.1129:9646 blocked for more than 143 seconds.
[  354.619778][   T30]       Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0
[  354.628064][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  354.637910][   T30] task:syz.1.1129      state:D stack:26640 pid:9646  tgid:9645  ppid:5241   flags:0x00000004
[  354.648432][T13002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1760'.
[  354.648660][   T30] Call Trace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  354.661062][   T30]  <TASK>
[  354.679399][   T30]  __schedule+0x1800/0x4a60
[  354.686605][   T30]  ? __pfx___schedule+0x10/0x10
[  354.715585][   T30]  ? __pfx_lock_release+0x10/0x10
[  354.734341][T12999] caif:caif_disconnect_client(): nothing to disconnect
[  354.759333][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  354.762354][T12917] batman_adv: batadv0: Adding interface: batadv_slave_1
[  354.783889][   T30]  ? schedule+0x90/0x320
[  354.801344][   T30]  schedule+0x14b/0x320
[  354.805605][   T30]  schedule_preempt_disabled+0x13/0x30
[  354.819341][T12917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.847679][   T30]  __mutex_lock+0x6a4/0xd70
[  354.852580][   T30]  ? __mutex_lock+0x527/0xd70
[  354.857308][   T30]  ? nfsd_nl_version_get_doit+0x181/0x790
[  354.863416][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  354.868584][   T30]  ? genlmsg_put+0x145/0x2e0
[  354.868895][T12917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.873421][   T30]  nfsd_nl_version_get_doit+0x181/0x790
[  354.873479][   T30]  ? genl_get_cmd+0x65d/0xbe0
[  354.873512][   T30]  ? __asan_memcpy+0x40/0x70
[  354.873541][   T30]  ? __pfx_nfsd_nl_version_get_doit+0x10/0x10
[  354.901679][T12895] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR
[  354.905321][   T30]  ? genl_get_cmd+0x65d/0xbe0
[  354.946826][   T30]  ? dev_hard_start_xmit+0x773/0x7e0
[  354.952358][   T30]  genl_rcv_msg+0xb14/0xec0
[  354.956908][   T30]  ? mark_lock+0x9a/0x350
[  354.961402][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  354.966497][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  354.971950][   T30]  ? __pfx_nfsd_nl_version_get_doit+0x10/0x10
[  354.978060][   T30]  ? __pfx___might_resched+0x10/0x10
[  354.983498][   T30]  netlink_rcv_skb+0x1e3/0x430
[  354.988301][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  354.994858][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  355.000784][   T30]  ? __netlink_deliver_tap+0x77e/0x7c0
[  355.006311][   T30]  genl_rcv+0x28/0x40
[  355.010490][   T30]  netlink_unicast+0x7f6/0x990
[  355.015292][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  355.020636][   T30]  ? __virt_addr_valid+0x183/0x530
[  355.025752][   T30]  ? __check_object_size+0x49c/0x900
[  355.031425][   T30]  ? bpf_lsm_netlink_send+0x9/0x10
[  355.036577][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  355.042281][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  355.047619][   T30]  ? __import_iovec+0x536/0x820
[  355.052540][   T30]  ? aa_sock_msg_perm+0x91/0x160
[  355.057516][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  355.063287][   T30]  ? security_socket_sendmsg+0x87/0xb0
[  355.068823][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  355.074231][   T30]  __sock_sendmsg+0x221/0x270
[  355.079057][   T30]  ____sys_sendmsg+0x525/0x7d0
[  355.083966][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  355.089743][   T30]  __sys_sendmsg+0x2b0/0x3a0
[  355.094390][   T30]  ? __pfx___sys_sendmsg+0x10/0x10
[  355.100708][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  355.107094][   T30]  ? do_syscall_64+0x100/0x230
[  355.112396][   T30]  ? do_syscall_64+0xb6/0x230
[  355.117155][   T30]  do_syscall_64+0xf3/0x230
[  355.121891][   T30]  ? clear_bhb_loop+0x35/0x90
[  355.126623][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.132936][   T30] RIP: 0033:0x7ff35a17def9
[  355.137400][   T30] RSP: 002b:00007ff35af2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  355.146790][   T30] RAX: ffffffffffffffda RBX: 00007ff35a335f80 RCX: 00007ff35a17def9
[  355.155384][   T30] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004
[  355.163627][   T30] RBP: 00007ff35a1f0b76 R08: 0000000000000000 R09: 0000000000000000
[  355.171894][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  355.180399][   T30] R13: 0000000000000000 R14: 00007ff35a335f80 R15: 00007ffe86298bc8
[  355.188422][   T30]  </TASK>
[  355.193895][   T30] 
[  355.193895][   T30] Showing all locks held in the system:
[  355.229398][   T30] 1 lock held by khungtaskd/30:
[  355.234328][   T30]  #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  355.289536][   T30] 3 locks held by kworker/0:2/943:
[  355.294719][   T30]  #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  355.339485][   T30]  #1: ffffc90003b77d00 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  355.389079][   T30]  #2: ffffffff8e93d5c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530
[  355.419564][ T5242] Bluetooth: hci1: command tx timeout
[  355.425488][   T30] 2 locks held by getty/4993:
[  355.448963][   T30]  #0: ffff888030af20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  355.497870][   T30]  #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00
[  355.531723][   T30] 3 locks held by kworker/1:6/5319:
[  355.537039][   T30]  #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  355.609310][   T30]  #1: ffffc90003fdfd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  355.641246][   T30]  #2: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[  355.679361][   T30] 3 locks held by kworker/u8:15/6146:
[  355.684821][   T30] 4 locks held by kworker/u8:31/6165:
[  355.699294][   T30]  #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  355.739335][   T30]  #1: ffffc90015e8fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  355.769317][   T30]  #2: ffffffff8fc7ba90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[  355.778853][   T30]  #3: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: ipmr_net_exit_batch+0x20/0x90
[  355.801963][   T30] 3 locks held by kworker/u8:34/6168:
[  355.807408][   T30]  #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  355.819904][   T30]  #1: ffffc900160efd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  355.837580][   T30]  #2: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  355.846835][   T30] 2 locks held by syz.4.572/7371:
[  355.852019][   T30]  #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40
[  355.862926][   T30]  #1: ffffffff8ec0b768 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90
[  355.873305][   T30] 2 locks held by syz.1.1129/9646:
[  355.878445][   T30]  #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40
[  355.886838][   T30]  #1: ffffffff8ec0b768 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_version_get_doit+0x181/0x790
[  355.899469][   T30] 3 locks held by syz-executor/9849:
[  355.904817][   T30]  #0: ffff88805a424d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510
[  355.916585][   T30]  #1: ffff88805a424078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0
[  355.926510][   T30]  #2: ffffffff8fdf4d28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240
[  355.936643][   T30] 3 locks held by syz-executor/9851:
[  355.942240][   T30]  #0: ffff88807e064d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510
[  355.952256][   T30]  #1: ffff88807e064078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0
[  355.962519][   T30]  #2: ffffffff8fdf4d28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240
[  355.973237][   T30] 3 locks held by syz-executor/12895:
[  355.978648][   T30]  #0: ffff888058430d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510
[  355.988810][   T30]  #1: ffff888058430078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0
[  355.998790][   T30]  #2: ffffffff8fdf4d28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240
[  356.009311][   T30] 3 locks held by syz-executor/12917:
[  356.014715][   T30]  #0: ffff8880611d4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510
[  356.026243][   T30]  #1: ffff8880611d4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0
[  356.036117][   T30]  #2: ffffffff8fdf4d28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240
[  356.046724][   T30] 1 lock held by syz.1.1760/12999:
[  356.052126][   T30]  #0: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[  356.063882][   T30] 
[  356.067071][   T30] =============================================
[  356.067071][   T30] 
[  356.090481][   T30] NMI backtrace for cpu 0
[  356.094898][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0
[  356.105454][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  356.115553][   T30] Call Trace:
[  356.118873][   T30]  <TASK>
[  356.121837][   T30]  dump_stack_lvl+0x241/0x360
[  356.126572][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  356.131822][   T30]  ? __pfx__printk+0x10/0x10
[  356.136496][   T30]  ? vprintk_emit+0x667/0x7c0
[  356.141214][   T30]  ? __pfx_vprintk_emit+0x10/0x10
[  356.146289][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  356.151279][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  356.156785][   T30]  ? _printk+0xd5/0x120
[  356.160992][   T30]  ? __pfx__printk+0x10/0x10
[  356.165642][   T30]  ? __wake_up_klogd+0xcc/0x110
[  356.170529][   T30]  ? __pfx__printk+0x10/0x10
[  356.175142][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  356.180181][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  356.186179][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  356.192181][   T30]  watchdog+0xff4/0x1040
[  356.196446][   T30]  ? watchdog+0x1ea/0x1040
[  356.200914][   T30]  ? __pfx_watchdog+0x10/0x10
[  356.205609][   T30]  kthread+0x2f0/0x390
[  356.209734][   T30]  ? __pfx_watchdog+0x10/0x10
[  356.214427][   T30]  ? __pfx_kthread+0x10/0x10
[  356.219041][   T30]  ret_from_fork+0x4b/0x80
[  356.223475][   T30]  ? __pfx_kthread+0x10/0x10
[  356.228093][   T30]  ret_from_fork_asm+0x1a/0x30
[  356.232890][   T30]  </TASK>
[  356.237800][   T30] Sending NMI from CPU 0 to CPUs 1:
[  356.243456][    C1] NMI backtrace for cpu 1
[  356.243472][    C1] CPU: 1 UID: 0 PID: 12999 Comm: syz.1.1760 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0
[  356.243494][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  356.243504][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x5d/0x70
[  356.243536][    C1] Code: f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 <c3> cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90
[  356.243557][    C1] RSP: 0018:ffffc9000410f510 EFLAGS: 00000293
[  356.243574][    C1] RAX: ffffffff81412601 RBX: ffffc9000410f588 RCX: ffff88801ff70000
[  356.243588][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  356.243599][    C1] RBP: 0000000000000001 R08: ffffffff814125f8 R09: ffffffff814140bf
[  356.243612][    C1] R10: 0000000000000003 R11: ffff88801ff70000 R12: ffff88801ff70000
[  356.243625][    C1] R13: ffffffff817f2f80 R14: dffffc0000000000 R15: 1ffff92000821eb1
[  356.243639][    C1] FS:  0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000
[  356.243654][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  356.243667][    C1] CR2: 000000110c335315 CR3: 000000000e734000 CR4: 00000000003506f0
[  356.243683][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  356.243693][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  356.243705][    C1] Call Trace:
[  356.243712][    C1]  <NMI>
[  356.243719][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  356.243742][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  356.243769][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  356.243789][    C1]  ? nmi_handle+0x2a/0x5a0
[  356.243817][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  356.243847][    C1]  ? nmi_handle+0x14f/0x5a0
[  356.243865][    C1]  ? nmi_handle+0x2a/0x5a0
[  356.243883][    C1]  ? __sanitizer_cov_trace_pc+0x5d/0x70
[  356.243907][    C1]  ? default_do_nmi+0x63/0x160
[  356.243929][    C1]  ? exc_nmi+0x123/0x1f0
[  356.243950][    C1]  ? end_repeat_nmi+0xf/0x53
[  356.243971][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  356.243996][    C1]  ? unwind_next_frame+0x196f/0x2a00
[  356.244022][    C1]  ? unwind_get_return_address+0x68/0xc0
[  356.244048][    C1]  ? unwind_get_return_address+0x71/0xc0
[  356.244082][    C1]  ? __sanitizer_cov_trace_pc+0x5d/0x70
[  356.244108][    C1]  ? __sanitizer_cov_trace_pc+0x5d/0x70
[  356.244134][    C1]  ? __sanitizer_cov_trace_pc+0x5d/0x70
[  356.244158][    C1]  </NMI>
[  356.244164][    C1]  <TASK>
[  356.244170][    C1]  unwind_get_return_address+0x71/0xc0
[  356.244196][    C1]  ? vfree+0x186/0x2e0
[  356.244223][    C1]  arch_stack_walk+0x125/0x1b0
[  356.244245][    C1]  ? kcov_close+0x2b/0x50
[  356.244273][    C1]  stack_trace_save+0x118/0x1d0
[  356.244297][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  356.244327][    C1]  save_stack+0xfb/0x1f0
[  356.244352][    C1]  ? __pfx_save_stack+0x10/0x10
[  356.244373][    C1]  ? free_unref_page+0xd22/0xea0
[  356.244395][    C1]  ? vfree+0x186/0x2e0
[  356.244429][    C1]  ? page_ext_get+0x20/0x2a0
[  356.244456][    C1]  __reset_page_owner+0x76/0x430
[  356.244485][    C1]  free_unref_page+0xd22/0xea0
[  356.244515][    C1]  vfree+0x186/0x2e0
[  356.244543][    C1]  kcov_close+0x2b/0x50
[  356.244566][    C1]  ? __pfx_kcov_close+0x10/0x10
[  356.244589][    C1]  __fput+0x24a/0x8a0
[  356.244623][    C1]  task_work_run+0x24f/0x310
[  356.244646][    C1]  ? __pfx_task_work_run+0x10/0x10
[  356.244667][    C1]  ? do_exit+0xa2a/0x27f0
[  356.244682][    C1]  ? kmem_cache_free+0x145/0x350
[  356.244703][    C1]  do_exit+0xa2f/0x27f0
[  356.244726][    C1]  ? __pfx_do_exit+0x10/0x10
[  356.244742][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  356.244766][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  356.244793][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  356.244817][    C1]  ? _raw_spin_lock_irq+0xdf/0x120
[  356.244846][    C1]  do_group_exit+0x207/0x2c0
[  356.244862][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  356.244885][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[  356.244912][    C1]  get_signal+0x16a1/0x1740
[  356.244943][    C1]  ? __pfx_get_signal+0x10/0x10
[  356.244963][    C1]  ? kasan_quarantine_put+0xdc/0x230
[  356.244987][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[  356.245016][    C1]  arch_do_signal_or_restart+0x96/0x860
[  356.245043][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  356.245065][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  356.245102][    C1]  ? syscall_exit_to_user_mode+0xa3/0x370
[  356.245131][    C1]  syscall_exit_to_user_mode+0xc9/0x370
[  356.245159][    C1]  do_syscall_64+0x100/0x230
[  356.245186][    C1]  ? clear_bhb_loop+0x35/0x90
[  356.245208][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.245228][    C1] RIP: 0033:0x7fb2f017def9
[  356.245243][    C1] Code: Unable to access opcode bytes at 0x7fb2f017decf.
[  356.245251][    C1] RSP: 002b:00007ffd56218538 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  356.245269][    C1] RAX: 0000000000000000 RBX: 00007fb2f0337a80 RCX: 00007fb2f017def9
[  356.245281][    C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  356.245292][    C1] RBP: 00007fb2f0337a80 R08: 00007fb2f0322000 R09: 00007ffd5621882f
[  356.245305][    C1] R10: 00000000003ffd94 R11: 0000000000000246 R12: 0000000000056bfa
[  356.245316][    C1] R13: 00007ffd56218640 R14: 0000000000000032 R15: ffffffffffffffff
[  356.245340][    C1]  </TASK>
[  356.281835][ T5242] Bluetooth: hci6: command tx timeout
[  356.318685][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  356.318708][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0
[  356.318736][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  356.318751][   T30] Call Trace:
[  356.318763][   T30]  <TASK>
[  356.318774][   T30]  dump_stack_lvl+0x241/0x360
[  356.318829][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  356.318867][   T30]  ? __pfx__printk+0x10/0x10
[  356.318898][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  356.318942][   T30]  ? vscnprintf+0x5d/0x90
[  356.318971][   T30]  panic+0x349/0x860
[  356.319008][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  356.319039][   T30]  ? __pfx_panic+0x10/0x10
[  356.319068][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  356.319097][   T30]  ? __irq_work_queue_local+0x137/0x410
[  356.319132][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  356.319162][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  356.319190][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  356.319222][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  356.319255][   T30]  watchdog+0x1033/0x1040
[  356.319291][   T30]  ? watchdog+0x1ea/0x1040
[  356.319333][   T30]  ? __pfx_watchdog+0x10/0x10
[  356.319366][   T30]  kthread+0x2f0/0x390
[  356.319402][   T30]  ? __pfx_watchdog+0x10/0x10
[  356.319434][   T30]  ? __pfx_kthread+0x10/0x10
[  356.319470][   T30]  ret_from_fork+0x4b/0x80
[  356.319503][   T30]  ? __pfx_kthread+0x10/0x10
[  356.319539][   T30]  ret_from_fork_asm+0x1a/0x30
[  356.319590][   T30]  </TASK>
[  356.323443][   T30] Kernel Offset: disabled