last executing test programs:

1m35.477520872s ago: executing program 1 (id=676):
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r1, 0x3)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r2, &(0x7f0000001000)={0x2, 0x4e23}, 0x10)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004840)=ANY=[@ANYBLOB="f000"], 0x1308}}], 0x1, 0x4000)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r5, &(0x7f0000000040)='`', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000005580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000180)='n', 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000480)='I', 0x1}], 0x1}}], 0x2, 0x40000c0)
r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
connect$unix(r6, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1e, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in6={0xa, 0x4e24, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e22, @broadcast}]}, &(0x7f0000000340)=0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = socket$igmp6(0xa, 0x3, 0x2)
sendmmsg$inet6(r7, &(0x7f00000008c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0xd40, @empty, 0xc}, 0x1c, 0x0}}], 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)='f', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0)
sendmsg$inet(r0, &(0x7f0000000f00)={&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='&', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c)
r9 = socket$igmp6(0xa, 0x3, 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000580)="c9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYRESOCT=r8], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg(r8, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x4, 0x12)

1m34.570015227s ago: executing program 1 (id=680):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000005c0)="95e6ca09", 0x4}, {&(0x7f0000000440)="4607ee", 0x3}], 0x2, 0x0, 0x0, 0x8000}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) (async)
accept$alg(r0, 0x0, 0x0) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async)
sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000005c0)="95e6ca09", 0x4}, {&(0x7f0000000440)="4607ee", 0x3}], 0x2, 0x0, 0x0, 0x8000}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) (async)

1m33.957192727s ago: executing program 1 (id=683):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000f8ffffff000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000f00c0000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000000000000008006966623000000000000000000000000064756d6d79300000000000000000000069705f767469300000000c0000000000697036746e6c30000000000000000000aaaaaaaaaabb0000000000000182c20000000000000000000000b8000000b8000000e80000006970000000000000000000000000000000000000000000a823c565625b8d720020000000000000007f0000e1ab141400000000000000000041554449540000bcb92dfff07fca000000466ef58f5dc8438b000000000000000800"/376]}, 0x1f0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000018000000050005000000000005000600070000000800030001000000"], 0x2c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000300)=ANY=[@ANYBLOB="60001000ee7b37820fff43e0b40000000000000000000000000000002cb4e43836e764276741f2c03b60295bc3bf40493eecd6f73f4bf6a3e5b8bac7f35b55d311bc5f90a8fa1fc26c3e0717", @ANYRES16=r5, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@initdev, @multicast1, <r7=>0x0}, &(0x7f00000000c0)=0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x17, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32, @ANYRES8=r8], 0x1c}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x9c, r5, 0x100, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
pread64(r12, 0x0, 0x0, 0x2)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r10)

1m33.53567683s ago: executing program 1 (id=688):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, 0x0, &(0x7f0000000080)=""/210}, 0x20)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000000)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05500c0000000000f44d06000000f608000300", @ANYRES32=r5, @ANYBLOB="0800050003000000"], 0x24}}, 0x0)
syz_emit_ethernet(0xbe, &(0x7f00000005c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {0x0, 0x883e, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ae48d214546cf494b71f43c55a318b9653ae7c027534e6ad57e52bbceb7efce4", "b994e42ec4927209e044042133b54bba67b868281605c57745a9edad3f0e8cdbf2a9ab0e22cacf1df5cef1625a24c878", "805dbb6310ce51ea44b269157630f5ce0b7457e4d24ff86ff17e509e", {"f518f69ab516612289a2379b31368997", "c069d81d9f5b8f0308c3f1393d5e4736"}}}}}}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x7c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x46, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @random=0x1, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x2, 0x1, 0x4, 0x0, {0x4, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x1, 0x2, 0x7}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7965}]}, 0x7c}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014003000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0)
close(0xffffffffffffffff)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x15, &(0x7f0000001480)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)

1m33.367962167s ago: executing program 1 (id=691):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$sock_int(r0, 0x1, 0xa, 0x0, &(0x7f0000000180))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
shutdown(r1, 0x1)

1m33.161650067s ago: executing program 1 (id=695):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000915b1d26f600aee916650646c6ce490029b0b091e502e011a6597582640d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
r5 = socket(0x10, 0x3, 0x0)
unshare(0x20000400)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0xb189, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6, <r7=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r7, 0x0, 0x0}, 0x20)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x6d96}]}}]}, 0x44}}, 0x0)
bind$can_j1939(r2, &(0x7f0000001200)={0x1d, r3}, 0x18)
connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3}, 0x18)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0)
writev(r2, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x54, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [{0x8, 0xb, 0x10001}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x7db}, {0x8, 0xb, 0x3}, {0x8}, {0x8, 0xb, 0x2}]}, 0x54}}, 0x0)

1m17.962818123s ago: executing program 32 (id=695):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000915b1d26f600aee916650646c6ce490029b0b091e502e011a6597582640d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
r5 = socket(0x10, 0x3, 0x0)
unshare(0x20000400)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0xb189, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6, <r7=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r7, 0x0, 0x0}, 0x20)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x6d96}]}}]}, 0x44}}, 0x0)
bind$can_j1939(r2, &(0x7f0000001200)={0x1d, r3}, 0x18)
connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3}, 0x18)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0)
writev(r2, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x54, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [{0x8, 0xb, 0x10001}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x7db}, {0x8, 0xb, 0x3}, {0x8}, {0x8, 0xb, 0x2}]}, 0x54}}, 0x0)

54.114215345s ago: executing program 0 (id=457):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000900)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000002b00)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)="58d84c3fb4facf57280364e0f3b64cc93ba07b97762f5fd200b5bb48de7a77878f42d34dfa31bbdb3c8fa016371c9441170000000000008509003d9e97cc2e3001480bedd06faa", 0x47}, {&(0x7f00000002c0)="9e39cdede732", 0x6}, {&(0x7f0000000980)="0cf10d26a3d34e0a62eea9d456dbe10644d554843f11fa5ea57b4716dfd53118d73a1028905bc3e2a9e0da01ac9c76b685411514a735bd687b9e501c693b02c0aefbad6877709b270df5502d26b5b4a78ab74bf88d88841b0e8ef9ae603b689ac959576a0889ce92e48cb79904ec352f7d86a008d0057fcce2b95d8105560cf31d38a6e5fce55b3b0e12e1806f034331f5de4f5f7fe21ae69a96f0141e481e357520c3db5234749dbde33bef5aa50b0e5e588ecfd746fe3559b104e37fa902a2269c4de8738bf9f6c123b437dcfd9b335d16f673ad0cf12d793c4571d0bff5c1acf4e81e433d24885a36b5ebcc56336e2aa96c7d5bbd65", 0xf7}], 0x3}, 0x20008040)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24040041}, 0x4004)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002800400"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)

53.839859792s ago: executing program 0 (id=457):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000900)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000002b00)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)="58d84c3fb4facf57280364e0f3b64cc93ba07b97762f5fd200b5bb48de7a77878f42d34dfa31bbdb3c8fa016371c9441170000000000008509003d9e97cc2e3001480bedd06faa", 0x47}, {&(0x7f00000002c0)="9e39cdede732", 0x6}, {&(0x7f0000000980)="0cf10d26a3d34e0a62eea9d456dbe10644d554843f11fa5ea57b4716dfd53118d73a1028905bc3e2a9e0da01ac9c76b685411514a735bd687b9e501c693b02c0aefbad6877709b270df5502d26b5b4a78ab74bf88d88841b0e8ef9ae603b689ac959576a0889ce92e48cb79904ec352f7d86a008d0057fcce2b95d8105560cf31d38a6e5fce55b3b0e12e1806f034331f5de4f5f7fe21ae69a96f0141e481e357520c3db5234749dbde33bef5aa50b0e5e588ecfd746fe3559b104e37fa902a2269c4de8738bf9f6c123b437dcfd9b335d16f673ad0cf12d793c4571d0bff5c1acf4e81e433d24885a36b5ebcc56336e2aa96c7d5bbd65", 0xf7}], 0x3}, 0x20008040)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24040041}, 0x4004)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002800400"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)

43.427887808s ago: executing program 0 (id=457):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000900)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000002b00)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)="58d84c3fb4facf57280364e0f3b64cc93ba07b97762f5fd200b5bb48de7a77878f42d34dfa31bbdb3c8fa016371c9441170000000000008509003d9e97cc2e3001480bedd06faa", 0x47}, {&(0x7f00000002c0)="9e39cdede732", 0x6}, {&(0x7f0000000980)="0cf10d26a3d34e0a62eea9d456dbe10644d554843f11fa5ea57b4716dfd53118d73a1028905bc3e2a9e0da01ac9c76b685411514a735bd687b9e501c693b02c0aefbad6877709b270df5502d26b5b4a78ab74bf88d88841b0e8ef9ae603b689ac959576a0889ce92e48cb79904ec352f7d86a008d0057fcce2b95d8105560cf31d38a6e5fce55b3b0e12e1806f034331f5de4f5f7fe21ae69a96f0141e481e357520c3db5234749dbde33bef5aa50b0e5e588ecfd746fe3559b104e37fa902a2269c4de8738bf9f6c123b437dcfd9b335d16f673ad0cf12d793c4571d0bff5c1acf4e81e433d24885a36b5ebcc56336e2aa96c7d5bbd65", 0xf7}], 0x3}, 0x20008040)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24040041}, 0x4004)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002800400"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)

31.988177687s ago: executing program 0 (id=457):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000900)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000002b00)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)="58d84c3fb4facf57280364e0f3b64cc93ba07b97762f5fd200b5bb48de7a77878f42d34dfa31bbdb3c8fa016371c9441170000000000008509003d9e97cc2e3001480bedd06faa", 0x47}, {&(0x7f00000002c0)="9e39cdede732", 0x6}, {&(0x7f0000000980)="0cf10d26a3d34e0a62eea9d456dbe10644d554843f11fa5ea57b4716dfd53118d73a1028905bc3e2a9e0da01ac9c76b685411514a735bd687b9e501c693b02c0aefbad6877709b270df5502d26b5b4a78ab74bf88d88841b0e8ef9ae603b689ac959576a0889ce92e48cb79904ec352f7d86a008d0057fcce2b95d8105560cf31d38a6e5fce55b3b0e12e1806f034331f5de4f5f7fe21ae69a96f0141e481e357520c3db5234749dbde33bef5aa50b0e5e588ecfd746fe3559b104e37fa902a2269c4de8738bf9f6c123b437dcfd9b335d16f673ad0cf12d793c4571d0bff5c1acf4e81e433d24885a36b5ebcc56336e2aa96c7d5bbd65", 0xf7}], 0x3}, 0x20008040)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24040041}, 0x4004)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002800400"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)

20.15391653s ago: executing program 0 (id=457):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000900)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000002b00)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)="58d84c3fb4facf57280364e0f3b64cc93ba07b97762f5fd200b5bb48de7a77878f42d34dfa31bbdb3c8fa016371c9441170000000000008509003d9e97cc2e3001480bedd06faa", 0x47}, {&(0x7f00000002c0)="9e39cdede732", 0x6}, {&(0x7f0000000980)="0cf10d26a3d34e0a62eea9d456dbe10644d554843f11fa5ea57b4716dfd53118d73a1028905bc3e2a9e0da01ac9c76b685411514a735bd687b9e501c693b02c0aefbad6877709b270df5502d26b5b4a78ab74bf88d88841b0e8ef9ae603b689ac959576a0889ce92e48cb79904ec352f7d86a008d0057fcce2b95d8105560cf31d38a6e5fce55b3b0e12e1806f034331f5de4f5f7fe21ae69a96f0141e481e357520c3db5234749dbde33bef5aa50b0e5e588ecfd746fe3559b104e37fa902a2269c4de8738bf9f6c123b437dcfd9b335d16f673ad0cf12d793c4571d0bff5c1acf4e81e433d24885a36b5ebcc56336e2aa96c7d5bbd65", 0xf7}], 0x3}, 0x20008040)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24040041}, 0x4004)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002800400"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)

10.854487117s ago: executing program 0 (id=457):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000900)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000002b00)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)="58d84c3fb4facf57280364e0f3b64cc93ba07b97762f5fd200b5bb48de7a77878f42d34dfa31bbdb3c8fa016371c9441170000000000008509003d9e97cc2e3001480bedd06faa", 0x47}, {&(0x7f00000002c0)="9e39cdede732", 0x6}, {&(0x7f0000000980)="0cf10d26a3d34e0a62eea9d456dbe10644d554843f11fa5ea57b4716dfd53118d73a1028905bc3e2a9e0da01ac9c76b685411514a735bd687b9e501c693b02c0aefbad6877709b270df5502d26b5b4a78ab74bf88d88841b0e8ef9ae603b689ac959576a0889ce92e48cb79904ec352f7d86a008d0057fcce2b95d8105560cf31d38a6e5fce55b3b0e12e1806f034331f5de4f5f7fe21ae69a96f0141e481e357520c3db5234749dbde33bef5aa50b0e5e588ecfd746fe3559b104e37fa902a2269c4de8738bf9f6c123b437dcfd9b335d16f673ad0cf12d793c4571d0bff5c1acf4e81e433d24885a36b5ebcc56336e2aa96c7d5bbd65", 0xf7}], 0x3}, 0x20008040)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24040041}, 0x4004)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002800400"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)

3.987955341s ago: executing program 4 (id=1235):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
sendto$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$rxrpc(0x21, 0x2, 0xa) (async)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={&(0x7f0000000000)='i', 0x0, 0x0, 0x0, 0x9, r3}, 0x38)
bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0xf59, 0x2, 0x0, {0x2, 0x4e20, @loopback}}, 0x24)
mmap(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80)

3.499285946s ago: executing program 4 (id=1239):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="fd45010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}}, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r6, 0x1}, 0x14}}, 0x0)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x1638, 0x1408, 0x1408, 0x12d0, 0x12d0, 0x12d0, 0x1568, 0x1568, 0x1568, 0x1568, 0x1568, 0x6, 0x0, {[{{@ipv6={@loopback, @local, [0x100fffe00, 0xffffff00, 0x0, 0xffffffff], [0xff, 0xff, 0xff, 0xffffff00], 'netpci0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x4, 0x8, 0x3, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x6f}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0x1108, 0x1130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0x7, {0x5}}}, @common=@inet=@l2tp={{0x30}, {0x2, 0x3, 0x3, 0x1, 0x4}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x10, @ipv4=@remote, 0x4e20}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback, 0x9, 0xb, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1698)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000001c0)=0x299c, 0x4)
r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x800442d2, &(0x7f0000001700)={0x2, &(0x7f00000016c0)=[{0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}]})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r9=>0x0})
getsockopt$IP_SET_OP_VERSION(r5, 0x1, 0x53, &(0x7f0000000140), &(0x7f0000000180)=0x8)
setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000040)=0x92c, 0x4)
sendto$packet(r4, 0x0, 0x0, 0x11, &(0x7f0000000200)={0x11, 0x16, r9, 0x1, 0x3, 0x6, @broadcast}, 0x14)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100))

3.058139395s ago: executing program 4 (id=1242):
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000180)={r3, 0x2000000, 0x1e, 0x0, &(0x7f0000000000)="0990ffff480000927370dd00327c26f0e5ab52894ed7b55291a58e29b354", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000040)={0x9, 0x18, '\x00', 0xd07c9d9939c224f6, &(0x7f0000000000)=[0x0, 0x0, 0x0]})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$tipc(0x1e, 0x5, 0x0)
r8 = epoll_create1(0x80000)
r9 = socket(0x1, 0x80802, 0x0)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000100))
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)={0x80000006})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYBLOB="7aa48aef321b6946aca08d8d4d7140aef6a2128248e0044d45969333ee1b00b3cf65ef969e0da9b26fe2964fe851f460d6bf88d9dd7ee72d76133c766c44db8f563ed01b1922e9930b6c39564038c5b32353dac3db258048a4"], 0x30}}, 0x20008054)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='percpu_alloc_percpu\x00', r11}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r12 = socket$inet6_dccp(0xa, 0x6, 0x0)
connect$inet6(r12, &(0x7f0000000380)={0xa, 0x4e20, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000004700)={'team0\x00', <r15=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r13, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r14, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r15}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100b, &(0x7f0000002440)=""/4107, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="fe000000000000000d002b8008000100c8f423756a0bed7ed82d3fa1f96815fd4bd8435cfffca5c0f738065787c66e6ff472ccbb432455895f4ef480049f767380c43baabcc0e94b8d8afb65c54b17de852a395996c2fd0c54a12c14699c2668a2de12b61d17ccc134b33159338018b0d3b3f8eabc8d6dceda3c6bdccbc60a3abea8996469733d731ddd880815836486ec36d1b712eafecf2d2d1e1d6f8df9ca7cd5636e73ed2cbf728854e7069d0a46ecad7aca493e8422e46ae036e1931313eca10caa4e16e499c0cc14b2838ba1a39d257f42da361476195f5f5b8d42121a9c8355319e9dc636d125486f17718cd8346d22c2170356b1a532d9e5c5da1a1c07ff52b0bcd775678fa8a8889138c18b102f4b6d08125338d994b2af95fd21775d", @ANYRES32=r16, @ANYBLOB="08002c0000000080"], 0x34}}, 0x0)

2.846421982s ago: executing program 4 (id=1245):
unshare(0x62040200) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) (async)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=@deltclass={0x8d4, 0x29, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x6}, {0xe, 0xc}, {0xc, 0xfff3}}, [@tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x7}}, @tclass_kind_options=@c_htb={{0x8}, {0x888, 0x2, [@TCA_HTB_CEIL64={0xc}, @TCA_HTB_PARMS={0x30, 0x1, {{0x6, 0x1, 0x0, 0x0, 0xffff, 0x3ff}, {0x9, 0x1, 0x1, 0x3, 0x2, 0x6}, 0x8, 0x6d, 0x9, 0x96}}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RTAB={0x404, 0x4, [0x0, 0xd7e2, 0x1, 0x800, 0x40, 0x6f07, 0x0, 0x4, 0x0, 0x3ff, 0x771, 0xc, 0x3, 0x5, 0x8, 0x8b66, 0x10000, 0x77d, 0x1000, 0x7, 0x0, 0x5, 0x7, 0x8, 0x3, 0x3, 0xa8, 0x4, 0x8, 0x1, 0x56ca, 0x7, 0xffffff01, 0x9, 0x80000001, 0x9ade, 0x28e9, 0x1, 0x8000, 0x3, 0x7ff, 0xfffffff9, 0xb, 0x3, 0x4, 0x1, 0x9, 0x465, 0x37b2, 0x3ff, 0x2, 0x7fffffff, 0x1, 0xfffff33d, 0x1, 0x7fffffff, 0xffffffff, 0x80000001, 0x7, 0x7, 0x8, 0x6, 0xff, 0x400, 0xdb65, 0x6, 0x400000, 0x7f, 0x3, 0x3ff, 0x40, 0x5, 0x6, 0x4, 0x5, 0x7, 0x1cf, 0x2, 0x7, 0xffffffff, 0xffffffd3, 0x9, 0x6, 0x1, 0x4, 0x9, 0xffffffff, 0x6, 0x4553, 0x4, 0x7, 0x820, 0x7, 0xb, 0x8, 0x2, 0x1, 0x4, 0x1, 0x7c36, 0xfffffeff, 0x4, 0x8, 0x2b4, 0xb90, 0x7, 0x5, 0x9, 0x5, 0xfffffffd, 0x8, 0x2, 0x3ff, 0x356, 0x6, 0x8, 0x412884e, 0x2, 0x3, 0x8, 0x0, 0x6, 0xe42, 0x8, 0xc1, 0x4, 0x2, 0x0, 0x2, 0x1000, 0x7fffffff, 0x10, 0x0, 0xfffffffd, 0x3, 0x40, 0x40, 0x1, 0x9, 0x4, 0x4, 0x10000, 0xc50000, 0xfffffff9, 0x0, 0x101, 0x9, 0x0, 0x52f5, 0x8, 0x1, 0x0, 0x8, 0x1400, 0x8, 0x4, 0x7, 0x5, 0xbd, 0x2089, 0x80000000, 0x6, 0x2, 0x11, 0xfffffffc, 0x81, 0x8, 0x9, 0x5, 0x80000000, 0x2, 0x8, 0xe9b1, 0xa, 0x9, 0x5, 0x1, 0x7fffffff, 0x9, 0x40, 0x5, 0x4, 0xfff, 0x10, 0x88000000, 0xffffffff, 0x1, 0x8000, 0x8000, 0xf, 0x380, 0x81, 0x7ff, 0x0, 0x3, 0x2, 0x4, 0x9f, 0x8, 0xffffa30c, 0x6, 0x3e9, 0x7, 0x5, 0x5d, 0x400, 0x80ef, 0x5, 0x4e52, 0x8ae39681, 0x10, 0x6, 0x8, 0x3, 0x10000, 0xfffffff8, 0x2, 0xb, 0x2, 0x8, 0x2, 0x1, 0xc37, 0xc8, 0x81, 0x2, 0x2, 0x8001, 0x6, 0xa25, 0x0, 0x2, 0x7f, 0x9, 0x1, 0x7, 0x1, 0x80000001, 0x3, 0x6, 0x81, 0x101, 0x0, 0x7f, 0x5, 0x9, 0x2, 0x6, 0x9, 0x3, 0x400, 0x6, 0x10001, 0x1000, 0xfffffffb, 0x7]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x8, 0x1, 0x9, 0xfff9, 0x5, 0x9}, {0x5, 0x2, 0x4, 0x4, 0x80, 0x2}, 0x4, 0x4, 0x2ddf, 0x2, 0x9}}, @TCA_HTB_RTAB={0x404, 0x4, [0x800, 0x8, 0x6, 0xffffffff, 0x2, 0x3, 0x6, 0x80000001, 0x7, 0xec, 0x6, 0x0, 0x8000, 0x6, 0x81, 0x3, 0x4, 0xfffff800, 0x1, 0x7, 0x9, 0x24000000, 0x100, 0xcca7, 0x0, 0xfffffff7, 0x4, 0x9, 0x8, 0x6, 0x81, 0xe294, 0x1, 0x8, 0x4, 0x3, 0x3, 0x2, 0x10000, 0x382, 0x8cf, 0x2, 0x1, 0x7, 0x0, 0x1, 0x8001, 0xf, 0x1, 0x3, 0x6, 0xc9, 0x9, 0x8, 0x5, 0x0, 0x0, 0x7fffffff, 0x101, 0x18e8, 0x0, 0xa, 0x3, 0x200, 0x6, 0x10001, 0xd, 0x80000001, 0x9, 0x7fff, 0x400, 0x9f, 0xb45, 0x6, 0x7, 0x2, 0xf, 0x0, 0x4, 0x4, 0x0, 0x10000, 0x5, 0x67, 0x81, 0x6, 0xc4de, 0x9, 0x6, 0x8, 0x8001, 0x16, 0x2, 0x5, 0x8, 0x8, 0x2, 0x4, 0xfffffffb, 0xfffffff9, 0x1, 0xa, 0x80, 0x9, 0x4, 0x7ff, 0x9, 0x3, 0x5, 0x40f, 0xfff, 0x1, 0x6, 0x5, 0x40, 0x6f, 0x3, 0x0, 0x31129b4d, 0x5f, 0x1, 0x6, 0x80, 0x5, 0x5, 0x9, 0x3, 0x5, 0x9, 0x4, 0xf8a, 0x85, 0x7f2, 0x4, 0xfffffff8, 0xfffffffd, 0xffffffff, 0x8, 0x2, 0x4, 0x7fff, 0xf, 0x8, 0x462794f5, 0x40, 0x80000001, 0x1, 0x2f2d, 0xa, 0x7ff, 0x0, 0x7f, 0x6, 0x0, 0x100, 0xfffffffd, 0x2, 0x1, 0x7, 0x1, 0x9, 0x4c40, 0x5, 0xffffffd6, 0x4, 0x5, 0xfffffffd, 0x81, 0xfff, 0x6, 0x5f, 0x2, 0x9, 0x7, 0x9, 0x7, 0x7e, 0xd, 0x2, 0x1, 0x2b30, 0x0, 0x4, 0xffffffff, 0x9, 0x0, 0x1000, 0x1000, 0x4, 0xffffffff, 0x2, 0x3, 0x7, 0x1, 0x9, 0xd, 0x1, 0x401, 0x3, 0x200003, 0x9, 0x569, 0xfffffff7, 0x7, 0x2, 0x7, 0x5, 0x2, 0x4, 0x5, 0x9, 0x5, 0x7ff, 0x16, 0x1, 0xf72, 0xa052, 0x0, 0x40, 0x4, 0x0, 0x4, 0x3, 0x3ff, 0xb9, 0x40, 0x80, 0x4, 0x1, 0x0, 0x0, 0x7ff, 0x4, 0x5, 0x80000001, 0x4, 0x10, 0x9, 0x200, 0x0, 0x2, 0xeb, 0x5, 0x0, 0x101, 0x327, 0x1, 0x0, 0x541, 0xb5, 0x2, 0x7, 0x8, 0xb, 0x9, 0x1]}]}}]}, 0x8d4}}, 0x4000) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311a200000000008510000002000000810000007600000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800010000000000000000000a0080000004000000050000140005"], 0x30}}, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) (async)
write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaaaa08006c8a3959d54515"], 0x26) (async)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000008d020600300012800b000100697036746e6c000020000280050009000400000014000200fe8000000000000000000000000000bb080004000905", @ANYRESDEC], 0x58}}, 0x0) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x6, &(0x7f0000002ac0)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x88b2, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x27, 0x8, 0x50, &(0x7f0000000140)="f9ad48cc420029fc", 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="00961bd69a90b5929b44b9b1100000003f3e039c34fdaa1c421212676898ec82ca6be51a1d4a123574fa66eec7d24bf4dc32eb6a30a385f278a6684c43a39f61e598bfcac02cecb593cf27a8a5e6ee84fd12bc66e20a81fe", @ANYRES16=r7, @ANYBLOB="2b0326bd7000fbdbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) (async)
socket(0xa, 0x40000000002, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x470981, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000057c0), 0x0, 0x44000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0)
bind$x25(r8, &(0x7f0000000080), 0x12)

2.172595853s ago: executing program 2 (id=1251):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket(0x10, 0x803, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
socket$packet(0x11, 0x3, 0x300)
socket$l2tp6(0xa, 0x2, 0x73)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0xffffffe2, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000006a0019012cbd7000fedbdf250200000000000000080005000a7ed04f2db03149e6b985102c71546e3463165a5bad44006a76c02a441fe4ee93368487205ce4c5295ff6313ce30448", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40d0}, 0x0)
bind$alg(r3, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000"], 0x7c}}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff04"], 0x528}}, 0xc000)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000320800034000000007080004400000000f08000140000000002c0005800c0001007061796c6f6164001c00028008000340000000e1080004400000008b2c000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x40000)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000240)={'wlan0\x00', 0x400})
write$tun(r7, &(0x7f0000000200)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @local, @multicast2, @local, @local}}, 0x1c)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0100"})
socket$inet6_dccp(0xa, 0x6, 0x0)

1.671768199s ago: executing program 5 (id=1253):
r0 = socket$packet(0x11, 0x653c7787ad5ebf17, 0x300)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x253, 0x0, 0x0, 0x0, 0x400}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x1}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x9, 0x3, 0xb, 0x0, 0x8}, @generic={0x40, 0x8, 0x0, 0x964, 0x5}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xae, &(0x7f00000000c0)=""/174, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x1, 0x6, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x1], 0x0, 0x10, 0x3f, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4)
r2 = accept$inet(r1, &(0x7f0000000300)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10)
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000400)=""/95, 0x5f}], 0x1, &(0x7f00000004c0)=""/3, 0x3}, 0x12102)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000540)={@rand_addr=0x64010101, @multicast1}, 0xc)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580), 0x200, 0x0)
ioctl$PPPIOCGIDLE64(r4, 0x8010743f, &(0x7f00000005c0))
socket$alg(0x26, 0x5, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'pimreg\x00', <r6=>0x0})
sendto$packet(r3, &(0x7f0000000600)="2b99814a3ca3560612683cf6743fdf4ae4cf55ee5f476396e9399314fa267567ec2f31f3694410460342d6e0c939a52366005d1b3fdf0ce6ccea8b56e601d06fec52d30b79d0c8aad074aaf96227051f09acb7120e52ca7ccbe8a5975b", 0x5d, 0x400c004, &(0x7f00000006c0)={0x11, 0xc, r6, 0x1, 0xee, 0x6, @remote}, 0x14)
getsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000000700), &(0x7f0000000740)=0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f00000008c0)={'filter\x00', 0x0, 0x4, 0xc8, [0x10001, 0x3, 0x6, 0x8, 0x1, 0x218], 0x3, &(0x7f0000000780)=[{}, {}, {}], &(0x7f00000007c0)=""/200}, &(0x7f0000000940)=0x78)
r7 = socket$qrtr(0x2a, 0x2, 0x0)
sendmsg$qrtr(r7, &(0x7f0000000c40)={&(0x7f0000000980)={0x2a, 0x1, 0x8000}, 0xc, &(0x7f0000000b40)=[{&(0x7f00000009c0)="41edbcd959fc6e7c9a8c0f6bd70568134b3aa923402638349341b45326f74f1ba0507cafdaad57b71183f62ae5c0d3b07ca3456fc9ff81fab5783b77c712970a61ccdba7f602ae4e25d1acdfc9bbef2f630faa26e1178c5bf7e928f395861d00be8b17880e7812b60e", 0x69}, {&(0x7f0000000a40)="1b8a420dcb32f714ffb76a270936cb5ed22a25c29910a021ff37916b0a29669133d6d8b0a47d480656946c63e343db351582846ee8c863851dbdbe8c54e79fc95824348e9b01cd899b6112bd8709e2a1a24e54c285bfc10dadbc904311e4cb32ca6ef9429ee53751a578dc46351fe690b795c0484736c440976623d04e5928e7c588769ab41e9992fb4f807bc8346f451f7bbf4fc9ece28b2274187146a071b1a18eb7b9b05391d88dd5d71cec905a4c73b2cc1c94d8d2e094a9e9cd0837332f08fa0658b0117603bca773d726bf63872f37fe9f0f7bc4", 0xd7}], 0x2, &(0x7f0000000b80)=[{0x10, 0x11, 0x6}, {0xb0, 0xdf, 0x3, "d5fc58646771fe72e34310af9e3c344199e34431abd46b1a7dcfa1a80beffb3f3407215c52d04b1610337bbf2dbfb275ec355829a0e634aceeaca9bf7be795ede86d31d5d0ccde1e636bb1fdbb8f1fbed703efe8e0353d71af51fc2816e5f6cd50f6acde46c7fd5e212c34e857884e9731b26e0a82f4fceefdd668c3a2a4675b19e2c31f6ea80569a4a3edd394e98a43cc704714c767ee742d5be706517a"}], 0xc0}, 0x38)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, 0xffffffffffffffff, 0x1)
setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10)
r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000cc0)='syz1\x00', 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000d00)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000d40)={0x0, 0x1, 0xc, 0xa}, &(0x7f0000000d80)=0x10)
listen(r5, 0xff)
sendmsg$nl_route_sched(r9, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)=@deltclass={0x48, 0x29, 0x400, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x7, 0xc}, {0xfff3, 0xf}, {0x1, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_RATE={0x6, 0x5, {0x2, 0x40}}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20080)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000001140)={&(0x7f0000000f00), 0xc, &(0x7f0000001100)={&(0x7f0000000f40)={0x194, 0x0, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_SEQ_ADJ_ORIG={0x54, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4c}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x80000000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xcb14}]}, @CTA_MARK_MASK={0x8}, @CTA_SEQ_ADJ_ORIG={0x54, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x669}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xc}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x41}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1ff}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x80}, @CTA_TUPLE_ORIG={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x8, 0x7, 0x1, 0x80000001]}, @CTA_TUPLE_MASTER={0x6c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}]}, 0x194}, 0x1, 0x0, 0x0, 0x20000000}, 0xd0)
epoll_create(0x2)
syz_genetlink_get_family_id$tipc(&(0x7f0000001180), r3)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001200), r3)
sendmsg$DEVLINK_CMD_TRAP_GET(r10, &(0x7f0000001380)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001340)={&(0x7f0000001240)={0x100, r11, 0x200, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x100}, 0x1, 0x0, 0x0, 0x884}, 0x4c800)

1.577794228s ago: executing program 3 (id=1254):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000004680)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}], 0x1, 0x20000000) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 64)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r7=>0x0}) (async, rerun: 32)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="030000000000ffffffff1d00000008002100", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x280d0}, 0x40014) (async)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000200)=@assoc_value, 0x8) (async, rerun: 64)
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x4c, r6, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) (rerun: 64)
sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x13c, r4, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TESTDATA={0x4a, 0x45, "b453ab9b0fff3d5bb59ac8540d2e97117a05d27ce2ea2e4970ca2b434ef60529e5350465a5765206c181992507d5cc5d880f25ef17fb5f7a2bf4a24fe4da165e7a5a9bfe331a"}, @NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0xcd, 0x45, "f51b93928ba97e557fc409d3c8deacfed7bea4226e49e7d332284161eb7a4e08787a609453fc66983a8dcaa07430414ec699b3becac900ff920ab7772dba25b319cba173f2efb49b1fe8894b63c0904819af086f598f65b67977cb575dbc91709cc2aeb27ef86cf2f5fa6c3d6636c6430ec64ac8f9ca0c1c7beebe447c22e32e0377db8daea03a622023b678a41cf0059824bbfbdaeb45a1433e7fe91ac6bea04af388cf3bcdbccee733c4a5b67683893478166bf81827c157285d6c84b459afcede45fbeece39d60d"}]}, 0x13c}, 0x1, 0x0, 0x0, 0x44000081}, 0x20000000) (async)
syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0xc, 0xa, 0x2, 0x0, [{@remote}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0)
ioctl$sock_proto_private(r2, 0x89e8, 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async)
r14 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r14, 0x6, 0x28, 0x0, &(0x7f0000001a80)) (async)
ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r15=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r15, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000"], 0x7c}}, 0x0)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r11, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x4008804)

1.513188416s ago: executing program 5 (id=1255):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xb}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x7}, {0x0, 0x0, 0x0, 0x6}, 0x4, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x7}}, 0xe8)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
sendto$inet6(r0, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006040a0000000d0085a168d0bf46d32345653600648d04000b000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0xe0ffffff)

1.393297162s ago: executing program 2 (id=1256):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x40015}, 0x4044844)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
unshare(0x22020400)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0}}, 0x10)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x1, 0xc1}}}}, 0x30}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xf0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x40)
r4 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30)

1.275799582s ago: executing program 5 (id=1257):
socket$netlink(0x10, 0x3, 0xf)
socket$netlink(0x10, 0x3, 0x0)
socket$inet(0xa, 0x801, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x20050800)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r3, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB='\b'], 0x90}}, 0x0)
r4 = socket$inet(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x16, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0)
r8 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r8, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x47090000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x424, 0x3f4, 0x8, 0x70bd29, 0xd, {0x0, 0x1, 0x3d, [0x1cd5, 0x8, 0x8e, 0xffff7d1a, 0x5, 0x4, 0x2, 0x3, 0x2, 0x1, 0x9, 0x10001, 0x5, 0x8, 0x0, 0x81, 0x5, 0x11, 0xe, 0x6, 0xfffffffa, 0x5, 0x2, 0x2476, 0x2, 0xffffffff, 0x0, 0x4, 0x400, 0xff, 0x0, 0x4a000000, 0x200, 0x800, 0x2, 0x6, 0x10000, 0x6, 0x8, 0x0, 0x0, 0xffffffff, 0x8000, 0x1, 0x81, 0x3, 0x3, 0xfffffff7, 0x8, 0x1, 0x1, 0x3, 0xd2db, 0x8, 0x3, 0x8bf, 0x0, 0x0, 0x1000, 0x7ff, 0x1ff, 0x9, 0xfffffffa, 0x4f], [0x7fff, 0x80000000, 0x6, 0x1ff, 0xffff8001, 0x10, 0x1, 0xc0000000, 0x1, 0x5, 0x6, 0x6, 0x2, 0x0, 0x4, 0x1, 0x8, 0x5, 0x8, 0x400, 0x3, 0xda, 0x3, 0x4, 0x3, 0x712da10e, 0x1, 0x2, 0x3, 0x2, 0x7, 0x9, 0x7, 0xfffffffb, 0x154, 0x66, 0x2, 0x6, 0x0, 0xfffffffb, 0x6, 0x7, 0x7, 0x9, 0xffffff7f, 0x9, 0x7, 0x0, 0x8000, 0x4, 0x4, 0x9, 0xf, 0xfffffffd, 0x1, 0x0, 0x1, 0x0, 0x8, 0x8, 0x1, 0x6, 0x114, 0x10000], [0x0, 0x9, 0x2, 0x1, 0xffffff00, 0x183200, 0x6, 0x8, 0xd, 0x2, 0x7, 0x8, 0xfffffc01, 0x3, 0x8, 0x8, 0x2, 0x10, 0x0, 0xa, 0x1, 0x42, 0x63215145, 0x1, 0x80000000, 0x5f4, 0x7, 0x6, 0x7, 0x4, 0x9, 0x0, 0x2, 0xa310, 0x1, 0x2, 0xfff, 0xaa, 0x60, 0x6, 0x7, 0x6, 0x5, 0xd, 0x90, 0x3, 0xb220, 0x10001, 0x0, 0x3, 0x2, 0x1000, 0x50, 0x3, 0x10001, 0xc, 0x8, 0x8, 0x8, 0x1, 0x9, 0x2, 0xfffffff7, 0x5], [0x6, 0xcd, 0x6, 0xf, 0x74, 0xf, 0x8, 0x5, 0x3, 0x8, 0x0, 0x4800000, 0x7, 0x6, 0x4, 0x9, 0x40, 0x8001, 0x7, 0x2, 0x3ff, 0xce, 0xfffffffb, 0xffffff80, 0xd, 0x7, 0x4, 0x2dec, 0x0, 0x4, 0x9f71, 0x1, 0x2, 0xfffffffd, 0xfffffffe, 0x4, 0xef7, 0x7, 0x81, 0x60, 0x8000, 0x9, 0x2, 0x4, 0x80, 0x7, 0x10, 0x5, 0xaab0, 0x8, 0x0, 0x6, 0x3f, 0x4, 0x5, 0x10000, 0x99, 0x8, 0x0, 0x698d, 0x0, 0x2, 0x3, 0x9d], 0x2, [']\x00']}, ["", "", "", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f00000039c0)={0xaa, 0x88, 0x7, 0x9, 0xb, 0x8f, 0x7f, 0x0, 0x10, 0x8, 0xeb, 0x80, 0xc, 0xff}, 0xe)

1.274490263s ago: executing program 3 (id=1258):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10)
r4 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffbd, 0x4)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="a7a055130ec306008a698baed8e4a06ad0682624e326103500008f4557b5006d00000000000000d851d528ceed362c9d4789c5b3acf4d5de5a2c3b072831120ba1eafc8afe3a6de491190e82ba579201d0d62bde81e7bce7e4cc9431cfabbb3f276e49cc2e3646375ec778556602ae8046c2b0e66808e383743da9b00816876d41c6943587e5e5421a5dfec47aa5ecb4810da11bf9d4dc15cc211dfb8ddacd8afde7c733dda58303f5db26201db4d7913317f0c17b7a4c230ded1f4569"], 0x8)
sendmmsg(r4, &(0x7f0000002b00), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='cq_alloc_error\x00', r3, 0x0, 0xe6}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r5}, 0x18)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendmsg$can_j1939(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x3, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x1}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000000}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00'})
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r7, 0x0, 0xd, 0xffffffffffffffff, &(0x7f0000000340))
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000006a00000228bd70ebd0ea8e9946debcbd00fe9b0000042c81f158755044c6b9a1f211c34c0af41e33ab9795"], 0x18}, 0x1, 0x0, 0x0, 0x4004010}, 0x20040891)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="a9040500000000001c0012800b00010069703667726500000c0002800800040001000100080004000000fd"], 0x44}}, 0x0)

1.204013242s ago: executing program 4 (id=1259):
r0 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$inet_mreqn(r0, 0x0, 0x62, 0x0, &(0x7f0000000080))
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f00000000c0))
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x3}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0x1, <r4=>0xffffffffffffffff}, 0x4)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r6=>0x0}, 0x8)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b100000000001e000000000000809500000c00000000e50400000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000010000ca6c2b000000000005eaff029500010000"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r7, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff})
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18080000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000000000085000000a5000000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000540)=r11, 0x4)
r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r12, r8, 0x0, r8}, 0x10)
r13 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r13, 0x1, 0x3e, &(0x7f00000000c0)=0x5, 0x4)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r14, &(0x7f0000000000), 0xffffff6a)
sendfile(r13, r14, 0x0, 0xffffffff000)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0xffffffffffffffff, <r15=>0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%+9llu \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x25, &(0x7f0000000800)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000018440000f8ffffff00000000000000008520000003000000950000000000000018570000050000000000000000000000850000002500000018460000fbffffff0000000000000000185a00000400"/112], 0x0, 0x7, 0xec, &(0x7f0000000400)=""/236, 0x41000, 0x72, '\x00', 0x0, @fallback=0x2, r5, 0x8, &(0x7f0000000580)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x7, 0x5, 0x81}, 0x10, r6, r8, 0x4, &(0x7f00000006c0)=[r14, r15], &(0x7f0000000700)=[{0x2, 0x3}, {0x3, 0x4, 0x7, 0x5}, {0x4, 0x3, 0xf, 0x4}, {0x3, 0x2, 0x3, 0x6}], 0x10, 0x4, @void, @value}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.0376834s ago: executing program 2 (id=1260):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x40, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9c6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x40}, 0x1, 0x0, 0x0, 0xc804}, 0x0)
ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000080)=0x2)

811.973307ms ago: executing program 3 (id=1261):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000280)={0x3, 0x101, 0xfffd, 0x4}, 0xc)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x1e, &(0x7f0000000140)={@local, @link_local, @void, {@can={0xc, {{0x1, 0x1, 0x0, 0x1}, 0x0, 0xb9fb56a5be0f4ad9, 0x0, 0x0, "5a38bca78ea874d5"}}}}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f00000009c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}]}}}}}}}, 0x0)

738.097266ms ago: executing program 5 (id=1262):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="85000000610000007600000000000000270000ad9738cf4344ef81e2000099000095000000000000001d6100f6ba304ffd21c2530780e72a88b058357b206c4fab6379da9f92324ee080621b8a2c16183b544fa2f5df3cd87e991162ce787c30f38f43c75f08d8a2a678aa0b0749c4a8761f45afae746c2ec498baf7c1a71fc3a962bb55ec20a0c70ab88e5b9b9f34f404000000000000001dd92d5f5324de7aab1cc682c183424fa0ce99dc8584c7bfcc1f370cc47348d41d16b4037bc96374fc9200000000000000000000799072feb3aa42778c94921dda57a713030000000000000017189c9120539fd4bd26c29ac097a45659d31ee41c6fab7eebbbc480f7184b066d4d751a1260a0dbda5f7b7e9de66558348bca40eac92a2a030000002986d6cbfc619ab01b37a26087f1ef5f83776386ba93201ace00020f32b9b0a9deec4289152df97a9157cbba0f938e3131b4eff1fcf6eab4c91d5421f730f61be73951d25873985590070000000000000063994cd6b518c152dd4f1b6fed581d"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
r2 = getpid()
write$cgroup_pid(r1, &(0x7f0000000380)=r2, 0x12)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="3a0354881aa7b3885cc1d128dd86d33ac4e94c51c2552935f971", @ANYRES64=0x0], 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x20, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)={0x20, r8, 0x101, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r7}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r2, r3, 0x0, 0x2, &(0x7f0000000000)='{\x00'}, 0x30)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)={0x300, r5, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}]}, @TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "6335fa01e8c5ef01f36334803bd38c64c120dc6d5a9cd69c6d84fc"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x448f}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "f418b7295a05ac18700e2da88faa720a9d3fdbdb0eb158b750e4b34f"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "5e35355f65081e34ded791e89ffc6ad388f6ab633c69"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7284}]}, @TIPC_NLA_MEDIA={0x124, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9d5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9a5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x30}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x897a}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf5af}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="85000000610000007600000000000000270000ad9738cf4344ef81e2000099000095000000000000001d6100f6ba304ffd21c2530780e72a88b058357b206c4fab6379da9f92324ee080621b8a2c16183b544fa2f5df3cd87e991162ce787c30f38f43c75f08d8a2a678aa0b0749c4a8761f45afae746c2ec498baf7c1a71fc3a962bb55ec20a0c70ab88e5b9b9f34f404000000000000001dd92d5f5324de7aab1cc682c183424fa0ce99dc8584c7bfcc1f370cc47348d41d16b4037bc96374fc9200000000000000000000799072feb3aa42778c94921dda57a713030000000000000017189c9120539fd4bd26c29ac097a45659d31ee41c6fab7eebbbc480f7184b066d4d751a1260a0dbda5f7b7e9de66558348bca40eac92a2a030000002986d6cbfc619ab01b37a26087f1ef5f83776386ba93201ace00020f32b9b0a9deec4289152df97a9157cbba0f938e3131b4eff1fcf6eab4c91d5421f730f61be73951d25873985590070000000000000063994cd6b518c152dd4f1b6fed581d"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) (async)
openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) (async)
getpid() (async)
write$cgroup_pid(r1, &(0x7f0000000380)=r2, 0x12) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x10) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="3a0354881aa7b3885cc1d128dd86d33ac4e94c51c2552935f971", @ANYRES64=0x0], 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x20, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)) (async)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async)
sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)={0x20, r8, 0x101, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r7}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r2, r3, 0x0, 0x2, &(0x7f0000000000)='{\x00'}, 0x30) (async)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)={0x300, r5, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}]}, @TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "6335fa01e8c5ef01f36334803bd38c64c120dc6d5a9cd69c6d84fc"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x448f}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "f418b7295a05ac18700e2da88faa720a9d3fdbdb0eb158b750e4b34f"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "5e35355f65081e34ded791e89ffc6ad388f6ab633c69"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7284}]}, @TIPC_NLA_MEDIA={0x124, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9d5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9a5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x30}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x897a}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf5af}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async)

679.561103ms ago: executing program 2 (id=1263):
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x800, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x36, 0x0, &(0x7f0000000040)="f6f4e9a100000000002a8bc686ddb7dbfc007024f8082d130827533e00000000000096f3e30307ae846a11fef93204856ea2f1fefaec", 0x0, 0x4, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50)
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async)
r3 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
listen(r2, 0x3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(0x3) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e00000004000000040000000900000004000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000dd124e9f37bd5cb54fe0ccc70000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000481418000000001004000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async)
socket$kcm(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0xe0}}, 0x0) (async)
r7 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
r8 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@ipv4_newrule={0x40, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_macvtap\x00'}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8}]}, 0x40}}, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)={0x230, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc99}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1002}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb5f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x49}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8d}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xa3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000850) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000080000000000000002000000180100002020702500000000002020207b1af8ff00000000bda000000000000027000000f8ffffffb702000008000000b7030000000000002500f8ff0600100095"], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
recvmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f0000000200)=""/157, 0x9d}], 0x4}, 0x0)

571.806091ms ago: executing program 3 (id=1264):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10012, r0, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000001040), &(0x7f0000000200)=0x44)
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x0, 0x4d032, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0)
setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f00000001c0)="95a689c89ac0613f7f6bd69296186d2aacb32731f3cff82f97f526833c75d1a9ff2c19e6146dd218c09a32af5d7b24574ef0f61bf1260f115b9b5ad13feec752dbd1", 0x42)
r5 = accept4(r3, 0x0, 0x0, 0x80000)
sendmmsg$unix(r5, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44081}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000001701000000000000", @ANYRES32=r5, @ANYRES32=r3], 0x18}}], 0x2, 0x88)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r6)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000b40)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x2c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1000}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24000010)
getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000300)=<r10=>0x0, &(0x7f0000000340)=0x4)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="9fdbe1ae5d1f30eb010025000000000081000c0000080c0000960a47878e9c9a638d000200000200000000000043a9000000000000443daba87f8b932a9bc8f5f9f0f37e8ea2"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r11, 0x20, &(0x7f0000000040)={0xffffffffffffffff, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x1000004, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x81}, 0x10, r12, 0xffffffffffffffff, 0xfffffffffffffcf9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, &(0x7f0000000240), &(0x7f00000002c0)='GPL\x00', 0x7fffffff, 0xa2, &(0x7f00000003c0)=""/162, 0x40f00, 0x2, '\x00', r10, @sched_cls=0x2e, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x5, 0x1, 0x0, 0x4}, 0x10, r12, r4, 0x0, &(0x7f00000004c0)=[r4, r4, r4, r4, r4], 0x0, 0x10, 0x738, @void, @value}, 0x94)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000029000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00\x00\x00\x00'], 0x20}}, 0x0)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f00000006c0)={0x7, 0x9, 0x422e, 0x3, 0xfffffffe})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x275a, 0x0)
ioctl$IMGETVERSION(r5, 0x80044942, &(0x7f0000000140))
socket(0x15, 0x6, 0x17b60000)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f00000000c0))
ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000080)={0x9, 0x9})

468.503755ms ago: executing program 2 (id=1265):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) (async)
r1 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={<r3=>r0}) (async)
r4 = getpid()
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e65746465768b00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x100, r6, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x7fff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6f6}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x40}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0xff01}, {0x8, 0xb, 0xe}}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x8001) (async)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x268, 0x300, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x10000000}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0)

451.895281ms ago: executing program 5 (id=1266):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x5}, 0x1c)
sendmsg$inet6(r2, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b000000000000071000"], 0x30}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="ec000000210001002dbd9300fedbdf25e04a2aaa701fceec967daf23b5f1baa0f209c3a4330000f0ff0000000000000000000000640101000000000000000000b3000000004e228001000700000a00bbc41ce5", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b36b6e00010000009c001100000000000000000000000000000000007f000001000000000000000000000000e0000001000000000000000000000000fc0000000000000000000000000000002b030000ff34000002000a007f000001000000000000000000000000ac141419000000000000000000000000e0000001000000000000000000000000ac141442000000000000000000000000ff0300000135000005000200"], 0xec}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010201010000000000030000030000060800044000000001"], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x40010)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="05000000000000006b110800000000008510000002000000850000000000000095000000000000009500a50500000000389230606378b65aa92ac1ac2a77cdc867e41e3acbda96d4b848d263de77bf1e6d8b17e03ac18017c094eb881e6721800447c053bce13d776a9f2f8bc80fc77125ca0e9d3cc9f63517c6c5a71e2004ceccae75dcc22e558eb718c6b53aa64c55779d8beb5a24d7fcc71ab745ecd2704999caf4de238ef8197223d0deee84b86b71056305a69d8293bd79f8427f51a3359c02d0620a7416679104e9bec7106950d972d0deb2868c36a9f58cfa3f349b00be63e5ca022ca9aae618af"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

239.889235ms ago: executing program 3 (id=1267):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x7fff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000540)="0ce4", 0x2}], 0x1}}], 0x1, 0x4008055) (async)
shutdown(r0, 0x1) (async)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0xa, @dev={0xfe, 0x80, '\x00', 0x13}, 0x80000001}]}, &(0x7f0000000200)=0x10) (async)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @fwd={0x2, 0x0, 0x0, 0x12}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x1, 0x3, 0x0, @void, @value}, 0x28)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000140)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x7, 0x1, 0x9, 0xb, 0x4, 0x50, 0x4}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000240)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x2, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000300)=[{0x4, 0x4, 0x10, 0x3}, {0x0, 0x4, 0x8, 0x9}, {0x1, 0x2, 0x3, 0x5}, {0x2, 0x3, 0xe, 0xc}, {0xffffffff, 0x5, 0xd, 0x8}, {0x1, 0x1, 0x10}, {0x2, 0x5, 0x2, 0xf}, {0x2, 0x2, 0x7, 0x3}], 0x10, 0xff, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0x1000, 0x1000, &(0x7f00000009c0)="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", &(0x7f00000019c0)=""/4096, 0xebe0, 0x0, 0x27, 0x97, &(0x7f0000000440)="f3601bafc16d1b1bb496572bb312ea29e7feddcefa93ecf4d2b852e05ffd2b976959e81ec1eef8", &(0x7f0000000480)="f5521abb60384b7d7da1ce931ba7ee3399fee45305b316454f2ba5d884c5abba6ccdd1bcfc88e69a77c7a5dde0673bbfbcf316fe45cce6c13f30eeff0f93708cc7bef4c1c6e385908f77a8aa0eaf346b85a8f2fdc9bf2eef40b29fdfd64ce18b97cf8c0a2857a643d8fa6075e73df83b6893e8abf853a8e302275461c6bd922c0e49d0de29db8b42651eb5bb2e8a1cf0bcedfc376be1e3", 0x7, 0x0, 0x8}, 0x50) (async)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c)
r4 = socket(0x400000000010, 0x3, 0x0)
write(r4, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x4}, 0x90) (async)
pipe(&(0x7f00000005c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fbdbdf250500000008000400f8ffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x14)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYRES16=r1], &(0x7f0000000900)=""/139, 0x50, 0x8b, 0x1, 0x0, 0x0, @void, @value}, 0x28)

207.571113ms ago: executing program 5 (id=1268):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r3, &(0x7f0000000280)="1441", 0x2, 0x44810, 0x0, 0x0)
r4 = socket(0x1f, 0x1, 0x800)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', <r5=>0x0})
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000140)=0xa5b, 0x4)
bind$packet(r4, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$packet(r4, &(0x7f00000002c0)="913dcf3296db5d6d52d2f3b42d66", 0xe, 0x0, 0x0, 0x0)
sendmsg$rds(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/91, 0x5b}], 0x1, 0x0, 0x0, 0x44}, 0x4800)
recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, &(0x7f0000000000)=@raw=[@printk={@lu={0x18, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb8}}, @exit], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, 0x0, 0xfffffeac)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f42fc3199f000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af735ed41793bdf9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbc68223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f00001000000000eeff7c5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729eec082830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d424c14283a94395b64645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d620100000000000000494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd779a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9b0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000002684c2d8eb8cac98930fa6a893ca44c0f64c07a87eb7b05f56ca6c70cb3a0eb328a15fe96a88235155e6d64bd434f641ddf9db2245e47e5904453577895dd81d"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x9, 0x7, 0xff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r6, 0x0, 0x1000000000000}, 0x18)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r8 = accept4$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14, 0x0)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000340)={0x1, 0x2}, 0x4)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r9, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r9, 0x4030582a, &(0x7f0000000380)={0x0, 0x0, 0x10, 0x80000000})
socket$kcm(0x29, 0x154d6089a415a44d, 0x0)
writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="e3", 0x1}], 0x1)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r7)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

134.476369ms ago: executing program 2 (id=1269):
syz_extract_tcp_res$synack(&(0x7f0000000000)={<r0=>0x41424344}, 0x1, 0x0)
syz_extract_tcp_res(&(0x7f0000000180)={<r1=>0x41424344}, 0x2, 0x2)
syz_emit_ethernet(0x1125, &(0x7f0000002280)={@local, @random="7f0e000b0011", @void, {@ipv4={0x800, @tcp={{0x1b, 0x4, 0x2, 0x0, 0x1117, 0x64, 0x0, 0x9, 0x6, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x23}, {[@ssrr={0x89, 0x13, 0xbb, [@remote, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x2f}]}, @timestamp={0x44, 0xc, 0xaa, 0x0, 0x6, [0x4, 0xffffffff]}, @ra={0x94, 0x4, 0x1}, @noop, @ssrr={0x89, 0x17, 0x3f, [@loopback, @remote, @remote, @empty, @loopback]}, @ssrr={0x89, 0xf, 0x4, [@rand_addr=0x64010102, @multicast2, @multicast1]}, @timestamp={0x44, 0xc, 0x51, 0x0, 0x1, [0x1ff, 0xf]}, @noop]}}, {{0x4e24, 0x4e22, r0, r1, 0x0, 0x0, 0x14, 0x20, 0x0, 0x0, 0x3, {[@sack={0x5, 0x16, [0x1, 0x8, 0x7fff, 0x8000000, 0x7]}, @nop, @md5sig={0x13, 0x12, "e5eb5332b225bb585cdb9022a5668d5e"}, @md5sig={0x13, 0x12, "a1a7203280ee0c6735e021a7ff30d965"}]}}, {"a8f10a00027bebb330f8eaf066517cff6e6dae9f5d01cb11303a9bc826d6adced2d127ee9e75860d154b419d9ff99eeab178c43182824b0292e95d9b3bd8fd2c0fb5794d69fc1810a1c3d85e8b3985ecf5b3e7577a6e7d0d288c3f4d127a784f9ad37deab84da2ecd0419ecccfc65443539ef935f6107696e7b40d77757f33fa470cb4d0dfcd618ed7d6bccfc920a8f9e29ded62267869934b40b2caed83f1455150ae270a31a2a097b275cf9606f73c79ab02da2ba5677cd36b16e029749fd502ea35657278081c42062e8e2cde9e72ec6a2c404ec7cc687f5d617f074e482fd73a5af0c04f502029f0989376b216963cff8da8dad833d110c9a2ffd8c0336930db1442c24cb0fa342bdd1d019356d550246dfa1a346d85fce4f8e36189e90d1eed91448d4ef409f3db9e2454872ddb134cfd224a44e064204141e5dcba39e5107edf1c8789c251ef87e3e5f620c426a0477adf9e26225b677d76d3a9e4e65f12c8eea399c4dd15705401b444612253752d893546f9bcee325bbef881d295bcd6c5be3137dc7cf1c154902ad25c36a6168e2a3cbec40ec6d2518901a24e22f9be3506ba41af99dfb6bd455ef827bc483984ec9b0a86a1d4dddb6bdeb90e6c1f7aec342f1c5f0ae7e720f64c821676796e30de379890b164e602d3da9f70635335489733a392379e75866d6b222e18ffc533314d616f3506026418bc2026670cda9c70c9115f52bf945ac4068611fa0c3dd8502629bfc14de1961a0cf442e67889940d15b7abf75144ee5720dcdfd90155df604d0a7c596311d8c7f15706ade93470288e45efab6ec2a80132197e615a17916dec83bd6ae4f8efb7bd4ac2f16c18ab487d5a8ada5253516edc2425e354ccc1674ba465d50e4f0b1d278bf130f5249d1b28aacd06d23974f85df220bd47349bf641b383de0edb1ef0cb02d088465c8fdb9339d7d4af8aaab0143b283b17ada58c8128bfbcc26cf60a57d87177571bb76fa5e9ad7372157ba73ba40d52c0be74222b4092f6f19bf4976cccb611bd852300be05f91e893aa3d29cfb486a46f122abbdac0c2683de28515aee14746a4f745b3c7f0310ccb87833afc21862e0b8dd779c6e78db252baa3bee7a26e6fdf6723dc29e31db03530f2447eb93b5d3e3b6d55bdc83a598afa56e5f6f240eb13cb0d0219c5b9d8353a96c3ea36e9ce9e8c118036679c1bb3765a8d9f24de892352cd3303933b89f10d60cb950a097429185a563b2c80fd6364c35cf660d3301415e05f49a986ec9eaed3071afb9cd434122bf656d8b3127137b59d5172b06cdc514b77eca76d4ce96bf04e7ecc7f6298ed66e7aba5b333c2c007d5af821874ee09b49254506d42c176eaa4fb9fbc4ec84a5ecb59ea69ba5cdd473290e3aca28857ca55a07bc84b7462c1f6ac8035c284baf60bf8313c0f1dbc3a475eb1e42287bf7dded6c45ecdc4024874982ab5cadee3c0f65c321d7eda82456edbe2f38dcccec0c93fb795fc24521f7be05f19f552dd5aad5535095c10626eac4b84fe6ea1b7aea78ed142289fd1c10918e8723d3e46efe3190d2619fe76c658c640a7b7786598a2962b8385516fc6b2febed59256a8652fceffa8199352ae201fc371921d69e9a5c0ea91953c58e6d11ae3f0f89e1a2ab1070f3fb7fa1b1de88785ca201b36ab0055519faf4d014ae735379851d5e32013a3b355acdbd4d7c4ea9dd330fd4d654c90494ae878d9adca17fdc76540f47e7ed8a1b15233834953540eaf0e98aa0ce9782a478d419c6316649cb81fec37cbd58dde6cb5fd636f8223b5149b8b72743999757c34a9b8bd8e09e2636efce077805ac280758d34b7b60bbf90378645de1f8123693ed69505ffbfa10f0f650ef174c25f16afbb7dd8ec37416af24792e93afcf72dacf65d9c3e50d2295d70cc7379684139701b24e77ffa502f173483fab7d35a19f1a181b1b28a5c6ea3354fdf5f9a23ede63ff52eae655d2ea4f98a748f12ecafed4a95972ce94b10afcd7abfa77e02220c9f933eddc35bdf04b39b1c3486b0e764f290ef082f614468ac2cc6d177e16d4325978eea1c03b0bbb4a32623b6ef3d46aa3ca07cdef411fc59479390692136be5d3c26a42afb3deb8b3143c8186f9e4ff1168a645ee0d2d320b49063c23b3cc8c50739b49914f9846137afa88cfb2b5611fda1ee4e9327ad88f26a1fef5ca93ef4a18e5d1022675168b172dbe0b80551ec77d9b355b80e6881e51137f9eaddc61c1dd796d35c5387573f6491f09aaa9b127d74856c7d03efad3d9ed17c38f63b5930a4faf034f4a11ceeab4a3dc70f0d8253998f9aa01afe0af57a46e9e0d8f473e6f08d958dea3b7206091f07201002485f710f0d7f4271825427d9c42c38c05fb931e2a1d7a9b2676c224e88b03ab1ee609c57b645991d5ba37e3541bcdad5dbb8f9a548c718bcde34df6cfd0b66ceb2ec4a7da8f196176419c2f5235ef8d099586cb03050862f6632ed648afac67317340d41882be3cc05b5f25ad75827986b1eff01ea2900fe19cbc4f5c551da89ca1fee6efc3166df77914b536bd2a7f73af9c28c7c21d414faee3f0a692a351218a27ba65ad787b845d7305b8d920a48d535db3dc1f4b697029ece895241782f628f243c338b6c3fcf2314f2606d4097fe81ff984a81089f6221772846e86dafe416beaedd6393f191947ef60cce3c9c324a19953f3ae7a143d9150b7a532faf8989e6a03e948d4f4a638adb7e2ddfcb80213ba84078618a046b9f24d0e1c93f1debf792b4cb251a8edad58a8fc23045d6c5d086a7d55ccd91465b519f6bbe8c678d6b7401a77a4dfcbd847980eaf1a6b3d19aafcac7969f91e8a8e5d1d34c43663075460b410043aa15ea6b76bd0756065601d09d5730975711ea790bbecd2a294a171e733e91bd2ad09d3cd732a4f0115909fa72bcfd1b729dc4f242a9294223db66a1809e1e2d6c9e8ea82bafe8824e4f46a69188b312e9999f48cb1be20b6f6f9a2a2ea4d7e74ba2f290c49f0a3d369c43cd413d1fdd776edb91ed9bb3529590603e3b623e9181dc415684e02762416263dec144b50cb304605fbe121029041bfd6f5d3d93698655110ef658294bbd6110ca0c822be48eaf057b6618c8e238f4b6a82554581ec7933d0b6dc71d127fb2e6e7c7b97c42092a1513419ecfc29970556b36c2d367c31b9d454268503273581af0f1ebe2fc5405cc9b9990ed39f634e0982f0d4918f3c9b26d021a939bfc9823171da50367bfcc54631ba16ee5b6a2adc81626748c4ad5573c35e69498d312ff5fe58bfb7ff20a3d9a484df167ec5bd6a2ec18c451354592e8514b79b2aa809ba6f206cd846049f31992f212ffc65b80ded27554b8c8dbe466a0f2a44d1a6e7174532f92e1a31098c7e29f18d45d150b3ffeb80c977eb2c237748582ee5c582cec600f87298fc0d6aa80ba024014cd08cea658fd0ad3e36fedf1c86ae56edf49cf6413d495f854ee63506e778bcae19d545578c1eb07939165e8b6a0b774389cf1293de3ca303ecb83f3cb66f1293e61b45b6bab0dd6782021d18e3b020ca30594962e741740d81707a86207e9bc5a0849957f3b2d6fdee13ac9696c7d6b21ed210080974d8482fe934edb59b187e42ad7e242cf82329556e4255bf745bb872955ad72f405c29626e697e462fc263e96f1076fd9f82d8673ce7539e16a82a86639ee3b64bbad8edff32fc696e7f25a67aa4aa579c6aa481945d82c2e36031cabdab354f0256e1ccd97318ce4b2e4ecbdc2405d7ffa979f3a3d571f7decebd38f3543b514d09dd7b6c9b2f9bd7a8e2ce3b81e69024a794c409f5b639a57696bd694733c3af9e3d3ca54f90968644bfb2038fae5a3026aabbe180eaeee8165563959d3358f01ac093657d476c86367cf7596719540742b3db8639d0d22f900686e1236d7ee33f1b74f1e0a1252d23987fa7c51e71d6fc1bdb54acd1414cbb163b9cc655a4743825ba56211ca027568af6ee0b18e5c5a6bfdc9747edbf2815e84d8bc57a8a882f51e80b600f2602870dab7116fdb695ef816e654413f88ecea5c2dfdfa120d5f6263daea2a2f2abea3abac2ffc4b3d8f5f498b781636e44beb6a1a340eadc12b35800ebbf3903254aa8f578131ef8ad6ba06efe086816270ae54deb80fea95bdebff8b8603fa0b86b14d08d4c83c06505a5072375569ebb438029d2dbb280bf45d69029c203a361fac2224a278e9dd2dae30fe28c67d5c97f72dae30d1b2d8422b4ef8c3134ead969e0cc4ec1c1aaa04848a659e74b0d6c7ea814f466d2c160a766b42756c6bb38bf60b4c418224d9a6aed7161e67c98666a6cf704f5ac5478be74d78a6e821698d9d9c6b5d6ddb32fdf449cfddff12f3306932dfadbc458227c15d16f7e623276e3c5c5b50dc797a26bdf72b33bb95988e9c981b9f386773db56d1d3306c8ac5081807bbfcdf24eb76cbefdf0cc74b3fbb45f1202f1e8f9a18d910c16f92ee29271b7d9caf9ae2d32d127b3b85e5493da548a051edb828877f49b63d2e778798c24a9682653bce6fcfa291390291a5648e3f1776e7003cf7a3ef2a43920dfc41ee1eafacd7d334fea63c76beeac84e60392c580cd807690f3b4a7bc82fa5ab204184b4ffee8e41ad7fe1557c4fe2912b996a2d32189130fb47ec3b542888223b54f4ce495dbf7f668f56c70aade906c31ce7cc9fcf8dbd2ebd7a693c0f27d02dc261c7087b350dc7a23795658755c6a2dee3c6e64e82ecdcdf073a91a454b7765affeec951330cb9ad5589b0b3f5192c27d69a7e9228babd6bedfd1525561e67c21697046d8645c745991c2ca0547156866bc1d4115726786dd26141e0d6c9c0985aa4e1e1bd7ae9f6069295303b857f77abe429f4483365c83ba3314c885561be800fc1b1c911777f86200a7e6e0064731e78847c77392dd2338d7b5321bc641839db3773324dbc46ed6a9269d8f2383d4828e3ab85a46024363b32b27afaa30ac883e93ec7824fc9322a6c5eb1082bce96637d0fd9140f896f7ceb8049ee17ecd672f1fa44a79145986e72a98273e6736781fc0485bb63c3f869632ad81f266f4f1c7f18a95adaccfe6881f27c746824f00007da2e1d5ff2e1205888c6036d40dbb8a302693cf161696cc916652b8f50ec3f25367d59073018a80f2d1fa895123312dbf0c702615c42f41b8cfedc851e9196d66f32ddd1ae8301b314c1be0ee412d72f31ec8a247ca7a24f4103d9fa39db3a52ae374f92bb532d9a7b6362f3abd40734f67dc26a23cf66e6ece220e40e469baefa294cfcce51696066f933188c8ada7563a162bfe9b2028a32ae6177aa096a0a55f2dc568567beca3557f21943aae4d87e9e58d172af71c127fbb8afebab2a7191674f01997f6f58d3e649da665518c8a8ce38e3a21aa87f7d35ae7c46f45d6a02373c5b707febf08095c46205130469df497461a04ab7442b79385842c74bf48671b8962548b69837ab8d41486d703b19f19cd76e0dc144335484ddacbd8551389080741f359cd4a5e3e85df71345e833d2c58ceed2d269bde5cfebc58f03335d2caee6e59a021b7cfa700933f89918db649ce2ab0925a22ec9693bb7494694087a34fa18948b85aae0ecf83503d19f849f9aca3652a96db12b3e4820e49c3d0b59e2fa954b09354ff08295ea7e09b4d85fb9844e5efbcc9a29d0825af3f3610c7f09c25efb4bc7d0dcc25d27fcff05cac779c537d4e910b1f4211d25d0be598d6d772ffb6cec3ab2debe97b979edb6e44accf8eee9953999c6a6223bc09c4fe38338db1255d972de01aa3e06afef73a9a897eb8d69bf261c3320c6a08abc08c171d85fa515494fc96b5c5056efc7aa2b54fcbe33edca29200000000004aa1d3c1f6717d52f03e8060b4a129019a7e0b75a3e2df75a4204996deb8bb498b2be5"}}}}}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'hsr0\x00', <r4=>0x0})
socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @local}]}, 0x0)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000f40)=""/4089, 0x46, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x28)
unshare(0x20000400)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000380), 0x2, r6}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r6, &(0x7f00000001c0), &(0x7f00000002c0)=""/211}, 0x20)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) (async)
syz_extract_tcp_res(&(0x7f0000000180), 0x2, 0x2) (async)
syz_emit_ethernet(0x1125, &(0x7f0000002280)={@local, @random="7f0e000b0011", @void, {@ipv4={0x800, @tcp={{0x1b, 0x4, 0x2, 0x0, 0x1117, 0x64, 0x0, 0x9, 0x6, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x23}, {[@ssrr={0x89, 0x13, 0xbb, [@remote, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x2f}]}, @timestamp={0x44, 0xc, 0xaa, 0x0, 0x6, [0x4, 0xffffffff]}, @ra={0x94, 0x4, 0x1}, @noop, @ssrr={0x89, 0x17, 0x3f, [@loopback, @remote, @remote, @empty, @loopback]}, @ssrr={0x89, 0xf, 0x4, [@rand_addr=0x64010102, @multicast2, @multicast1]}, @timestamp={0x44, 0xc, 0x51, 0x0, 0x1, [0x1ff, 0xf]}, @noop]}}, {{0x4e24, 0x4e22, r0, r1, 0x0, 0x0, 0x14, 0x20, 0x0, 0x0, 0x3, {[@sack={0x5, 0x16, [0x1, 0x8, 0x7fff, 0x8000000, 0x7]}, @nop, @md5sig={0x13, 0x12, "e5eb5332b225bb585cdb9022a5668d5e"}, @md5sig={0x13, 0x12, "a1a7203280ee0c6735e021a7ff30d965"}]}}, {"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"}}}}}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'hsr0\x00'}) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @local}]}, 0x0) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000f40)=""/4089, 0x46, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async)
unshare(0x20000400) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000380), 0x2, r6}, 0x38) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r6, &(0x7f00000001c0), &(0x7f00000002c0)=""/211}, 0x20) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) (async)

131.944536ms ago: executing program 4 (id=1270):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ppoll(0x0, 0x0, 0x0, &(0x7f00000012c0), 0x8)
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000240)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ppoll(&(0x7f0000000200)=[{r1, 0xc085}, {r0, 0x1048}], 0x2, 0x0, 0x0, 0x0)
connect$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

0s ago: executing program 3 (id=1271):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2800d8f52c18e5bcc34800005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x2c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40054)

kernel console output (not intermixed with test programs):

3.834332][ T8324] validate_nla: 4 callbacks suppressed
[  123.834351][ T8324] netlink: 'syz.2.636': attribute type 3 has an invalid length.
[  123.940281][ T8324] xt_CT: No such helper "snmp"
[  123.990303][ T8324] netlink: 'syz.2.636': attribute type 1 has an invalid length.
[  124.001062][ T5906] hid-generic 0005:046D:FFF9.0001: item fetching failed at offset 0/1
[  124.024988][ T8331] netlink: 76 bytes leftover after parsing attributes in process `syz.1.638'.
[  124.045510][ T5906] hid-generic 0005:046D:FFF9.0001: probe with driver hid-generic failed with error -22
[  124.169443][ T8343] netlink: 'syz.2.642': attribute type 10 has an invalid length.
[  124.243227][   T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.269552][ T8343] syz_tun: entered promiscuous mode
[  124.281725][ T8343] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  124.361343][ T8354] netlink: 16 bytes leftover after parsing attributes in process `syz.2.645'.
[  124.375998][ T8354] netlink: 20 bytes leftover after parsing attributes in process `syz.2.645'.
[  124.409709][   T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.438358][ T8352] rdma_rxe: rxe_newlink: failed to add lo
[  124.445490][ T5832] Bluetooth: hci1: command tx timeout
[  124.584415][   T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.599995][ T8361] openvswitch: netlink: Tunnel attr 228 out of range max 16
[  124.670929][ T8321] chnl_net:caif_netlink_parms(): no params data found
[  124.791055][   T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.982234][ T8380] netlink: 76 bytes leftover after parsing attributes in process `syz.2.653'.
[  125.268119][ T8321] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.282142][ T8321] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.289654][ T8321] bridge_slave_0: entered allmulticast mode
[  125.296807][ T8321] bridge_slave_0: entered promiscuous mode
[  125.365094][ T8321] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.384942][ T8321] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.392207][ T8321] bridge_slave_1: entered allmulticast mode
[  125.448582][ T8321] bridge_slave_1: entered promiscuous mode
[  125.485096][   T52] bridge_slave_1: left allmulticast mode
[  125.490792][   T52] bridge_slave_1: left promiscuous mode
[  125.514351][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.570205][   T52] bridge_slave_0: left allmulticast mode
[  125.576870][   T52] bridge_slave_0: left promiscuous mode
[  125.589333][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.739757][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'.
[  125.750748][ T8419] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  125.752752][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'.
[  126.187088][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  126.199235][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  126.209764][   T52] bond0 (unregistering): Released all slaves
[  126.255118][ T8321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.269270][ T8424] netlink: 'syz.3.658': attribute type 29 has an invalid length.
[  126.308726][ T8433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.378443][ T8321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.389054][ T8433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.407471][ T8431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.524116][ T5832] Bluetooth: hci1: command tx timeout
[  126.641210][ T8321] team0: Port device team_slave_0 added
[  126.676962][ T8321] team0: Port device team_slave_1 added
[  126.885178][ T8465] netlink: 277 bytes leftover after parsing attributes in process `syz.3.669'.
[  126.921970][ T8321] batman_adv: batadv0: Adding interface: batadv_slave_0
[  126.961484][ T8321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.035816][ T8321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.075695][ T8321] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.082671][ T8321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.164093][ T8321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.196443][ T5906] IPVS: starting estimator thread 0...
[  127.283823][ T8481] IPVS: using max 20 ests per chain, 48000 per kthread
[  127.739164][   T52] hsr_slave_0: left promiscuous mode
[  127.756544][   T52] hsr_slave_1: left promiscuous mode
[  127.769695][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.788626][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.894356][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.901966][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.985058][ T8532] netlink: 16 bytes leftover after parsing attributes in process `syz.4.678'.
[  128.004257][   T52] veth1_macvtap: left promiscuous mode
[  128.014281][ T8532] netlink: 52 bytes leftover after parsing attributes in process `syz.4.678'.
[  128.027841][   T52] veth0_macvtap: left promiscuous mode
[  128.034097][ T8532] netlink: 24 bytes leftover after parsing attributes in process `syz.4.678'.
[  128.047596][   T52] veth1_vlan: left promiscuous mode
[  128.053206][   T52] veth0_vlan: left promiscuous mode
[  128.338872][ T8539] netlink: 'syz.3.679': attribute type 1 has an invalid length.
[  128.467382][ T8541] netlink: 28 bytes leftover after parsing attributes in process `syz.3.679'.
[  128.598648][   T52] team0 (unregistering): Port device team_slave_1 removed
[  128.606816][ T5832] Bluetooth: hci1: command tx timeout
[  128.651629][   T52] team0 (unregistering): Port device team_slave_0 removed
[  129.018279][ T8321] hsr_slave_0: entered promiscuous mode
[  129.027059][ T8321] hsr_slave_1: entered promiscuous mode
[  129.033063][ T8321] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  129.040935][ T8321] Cannot create hsr debugfs directory
[  129.060771][ T8532] vlan0: entered allmulticast mode
[  129.093798][ T8539] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  129.113206][ T8544] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  129.268059][ T8558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.684'.
[  129.592559][ T8574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.688'.
[  129.627377][ T8574] netlink: 'syz.1.688': attribute type 21 has an invalid length.
[  129.947330][ T8321] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  129.971960][ T8321] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  129.976961][ T8592] netlink: 'syz.4.694': attribute type 12 has an invalid length.
[  130.002602][ T8321] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  130.012667][ T8321] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  130.105347][ T8594] netlink: 52 bytes leftover after parsing attributes in process `syz.1.695'.
[  130.392121][ T8321] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.480323][ T8321] 8021q: adding VLAN 0 to HW filter on device team0
[  130.515900][ T7731] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.523052][ T7731] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.572554][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.579722][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.666127][ T8619] lo speed is unknown, defaulting to 1000
[  130.684118][ T5832] Bluetooth: hci1: command tx timeout
[  130.711583][ T8624] netlink: 16 bytes leftover after parsing attributes in process `syz.3.704'.
[  131.086804][ T8637] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  131.117902][ T8321] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.173657][ T8321] veth0_vlan: entered promiscuous mode
[  131.185375][ T8321] veth1_vlan: entered promiscuous mode
[  131.207298][ T8321] veth0_macvtap: entered promiscuous mode
[  131.216266][ T8321] veth1_macvtap: entered promiscuous mode
[  131.232444][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.243464][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.253949][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.264481][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.275538][ T8321] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.285356][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.296062][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.306123][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.316887][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.329925][ T8321] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.340556][ T8321] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.349585][ T8321] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.358726][ T8321] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.367699][ T8321] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.421917][ T8647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.708'.
[  131.520207][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.530913][ T8650] netlink: 'syz.2.710': attribute type 1 has an invalid length.
[  131.539659][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.602855][ T7731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.610994][ T7731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.201261][ T8664] __nla_validate_parse: 3 callbacks suppressed
[  132.201282][ T8664] netlink: 96 bytes leftover after parsing attributes in process `syz.4.712'.
[  132.874713][   T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.096248][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  133.102619][ T5832] Bluetooth: hci0: command 0x0401 tx timeout
[  133.775811][ T8694] ipvlan2: entered promiscuous mode
[  133.872964][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  133.883444][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  133.892981][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  133.903141][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  133.915577][ T5830] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  133.923082][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  133.967654][ T8702] lo speed is unknown, defaulting to 1000
[  133.973037][ T8707] vxcan0: tx drop: invalid sa for name 0x0000000000000001
[  134.036333][   T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.262877][ T8722] netlink: 32 bytes leftover after parsing attributes in process `syz.3.726'.
[  134.290039][ T8722] netlink: 32 bytes leftover after parsing attributes in process `syz.3.726'.
[  134.292916][ T8702] chnl_net:caif_netlink_parms(): no params data found
[  134.382909][ T8726] netlink: 52 bytes leftover after parsing attributes in process `syz.3.727'.
[  134.438003][   T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.671589][   T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.776642][ T8702] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.788630][ T8702] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.801210][ T8702] bridge_slave_0: entered allmulticast mode
[  134.819957][ T8702] bridge_slave_0: entered promiscuous mode
[  134.846891][ T8702] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.867190][ T8702] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.882196][ T8702] bridge_slave_1: entered allmulticast mode
[  134.892596][ T8702] bridge_slave_1: entered promiscuous mode
[  134.989896][   T11] bridge_slave_1: left allmulticast mode
[  134.996072][   T11] bridge_slave_1: left promiscuous mode
[  135.003148][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.015786][   T11] bridge_slave_0: left allmulticast mode
[  135.022132][   T11] bridge_slave_0: left promiscuous mode
[  135.037843][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.671506][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  135.684667][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  135.697063][   T11] bond0 (unregistering): Released all slaves
[  135.721185][ T8702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.752618][ T8702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.857797][ T8761] lo speed is unknown, defaulting to 1000
[  135.965262][ T5830] Bluetooth: hci1: command tx timeout
[  135.976063][ T8771] netlink: 20 bytes leftover after parsing attributes in process `syz.4.738'.
[  136.002465][ T8770] netlink: 'syz.4.738': attribute type 4 has an invalid length.
[  136.046715][ T8702] team0: Port device team_slave_0 added
[  136.088631][ T8702] team0: Port device team_slave_1 added
[  136.103271][ T8770] netlink: 'syz.4.738': attribute type 1 has an invalid length.
[  136.113164][ T8770] netlink: 224 bytes leftover after parsing attributes in process `syz.4.738'.
[  136.228239][ T8702] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.250414][ T8702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.276839][ T8702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.321595][ T8702] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.338877][ T8702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.370471][ T8702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.403387][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.741'.
[  136.554336][ T8784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.742'.
[  136.580374][ T8702] hsr_slave_0: entered promiscuous mode
[  136.587068][ T8702] hsr_slave_1: entered promiscuous mode
[  136.593160][ T8702] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  136.604280][ T8702] Cannot create hsr debugfs directory
[  136.617410][   T11] hsr_slave_0: left promiscuous mode
[  136.623291][   T11] hsr_slave_1: left promiscuous mode
[  136.630343][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.638164][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  136.646196][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.653785][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.673321][   T11] veth1_macvtap: left promiscuous mode
[  136.679323][   T11] veth0_macvtap: left promiscuous mode
[  136.693395][   T11] veth1_vlan: left promiscuous mode
[  136.698950][   T11] veth0_vlan: left promiscuous mode
[  137.093889][   T11] team0 (unregistering): Port device team_slave_1 removed
[  137.146323][   T11] team0 (unregistering): Port device team_slave_0 removed
[  137.333322][ T5906] IPVS: starting estimator thread 0...
[  137.407293][ T8800] netlink: 36 bytes leftover after parsing attributes in process `syz.4.745'.
[  137.433721][ T8798] IPVS: using max 24 ests per chain, 57600 per kthread
[  138.044202][ T5830] Bluetooth: hci1: command tx timeout
[  138.253929][ T8816] netlink: 'syz.3.750': attribute type 39 has an invalid length.
[  138.347168][ T8702] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  138.372038][ T8702] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  138.385731][ T8702] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  138.399504][ T8702] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  138.548105][ T8702] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.584366][ T8702] 8021q: adding VLAN 0 to HW filter on device team0
[  138.599395][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.606607][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.661267][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.668496][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.849670][ T8702] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  139.188950][ T8702] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.293468][ T8702] veth0_vlan: entered promiscuous mode
[  139.333030][ T8702] veth1_vlan: entered promiscuous mode
[  139.431861][ T8702] veth0_macvtap: entered promiscuous mode
[  139.458483][ T8702] veth1_macvtap: entered promiscuous mode
[  139.492874][ T8702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.514474][ T8702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.524849][ T8702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.536612][ T8702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.548401][ T8702] batman_adv: batadv0: Interface activated: batadv_slave_0
[  139.581063][ T8702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.611148][ T8851] netlink: 'syz.3.761': attribute type 1 has an invalid length.
[  139.611898][ T8702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.626878][ T8851] netlink: 'syz.3.761': attribute type 1 has an invalid length.
[  139.640334][ T8702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.660906][ T8702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.672431][ T8702] batman_adv: batadv0: Interface activated: batadv_slave_1
[  139.694761][ T8702] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.703888][ T8702] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.712620][ T8702] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.735063][ T8702] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.806835][ T8855] No such timeout policy "syz0"
[  139.855951][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.878602][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.926908][ T7737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.942543][ T7737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.158430][ T8862] netlink: 'syz.3.765': attribute type 10 has an invalid length.
[  140.170646][ T8862] netlink: 2 bytes leftover after parsing attributes in process `syz.3.765'.
[  140.191458][ T8862] team0: entered promiscuous mode
[  140.197037][ T8862] team_slave_0: entered promiscuous mode
[  140.203149][ T8862] team_slave_1: entered promiscuous mode
[  140.213345][ T8862] 8021q: adding VLAN 0 to HW filter on device team0
[  140.467357][ T8881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  140.477526][ T8881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  140.496440][ T8881] bond0 (unregistering): (slave team0): Releasing backup interface
[  140.512789][ T8881] bond0 (unregistering): Released all slaves
[  140.530012][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.770'.
[  140.936030][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.780'.
[  141.298823][ T8917] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  141.401444][ T7731] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.451077][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  142.466031][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  142.483191][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  142.490586][ T7731] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.502949][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  142.512606][ T5832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  142.520075][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  142.569157][ T8929] lo speed is unknown, defaulting to 1000
[  142.677268][ T7731] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.709074][ T8937] netlink: 32 bytes leftover after parsing attributes in process `syz.2.791'.
[  142.724144][ T8938] netlink: 32 bytes leftover after parsing attributes in process `syz.2.791'.
[  142.789604][ T7731] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.031995][ T7731] bridge_slave_1: left allmulticast mode
[  143.054385][ T7731] bridge_slave_1: left promiscuous mode
[  143.060141][ T7731] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.087757][ T7731] bridge_slave_0: left allmulticast mode
[  143.093460][ T7731] bridge_slave_0: left promiscuous mode
[  143.099519][ T7731] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.437447][ T7731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.448331][ T7731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.458562][ T7731] bond0 (unregistering): Released all slaves
[  143.487648][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.792'.
[  143.496710][ T8949] netlink: 'syz.2.792': attribute type 1 has an invalid length.
[  143.511375][ T8949] netlink: 72 bytes leftover after parsing attributes in process `syz.2.792'.
[  143.692566][ T8929] chnl_net:caif_netlink_parms(): no params data found
[  144.080211][ T8929] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.090999][ T8929] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.098352][ T8929] bridge_slave_0: entered allmulticast mode
[  144.105476][ T8929] bridge_slave_0: entered promiscuous mode
[  144.113044][ T8929] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.120217][ T8929] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.127638][ T8929] bridge_slave_1: entered allmulticast mode
[  144.134666][ T8929] bridge_slave_1: entered promiscuous mode
[  144.170168][ T7731] hsr_slave_0: left promiscuous mode
[  144.186415][ T7731] hsr_slave_1: left promiscuous mode
[  144.200159][ T7731] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.210188][ T7731] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.225849][ T7731] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.233291][ T7731] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.269990][ T7731] veth1_macvtap: left promiscuous mode
[  144.276105][ T7731] veth0_macvtap: left promiscuous mode
[  144.287329][ T7731] veth1_vlan: left promiscuous mode
[  144.295892][ T7731] veth0_vlan: left promiscuous mode
[  144.605992][ T5832] Bluetooth: hci1: command tx timeout
[  144.693725][ T7731] team0 (unregistering): Port device team_slave_1 removed
[  144.730685][ T7731] team0 (unregistering): Port device team_slave_0 removed
[  145.114804][ T8929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.134776][ T8993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.803'.
[  145.350101][ T8929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.406315][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  145.428462][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  145.438542][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  145.447110][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  145.454817][   T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  145.462224][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  145.540545][ T8929] team0: Port device team_slave_0 added
[  145.551235][ T8929] team0: Port device team_slave_1 added
[  145.623274][ T8929] batman_adv: batadv0: Adding interface: batadv_slave_0
[  145.633622][ T8929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.661517][ T8929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.675146][ T8929] batman_adv: batadv0: Adding interface: batadv_slave_1
[  145.682782][ T8929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.728943][ T8929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  145.763302][ T9015] lo speed is unknown, defaulting to 1000
[  145.930923][ T9027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.811'.
[  145.946825][ T9027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.811'.
[  145.960510][ T9026] bond0: (slave wlan1): Releasing backup interface
[  145.988871][ T8929] hsr_slave_0: entered promiscuous mode
[  145.996839][ T8929] hsr_slave_1: entered promiscuous mode
[  146.005111][ T8929] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  146.012779][ T8929] Cannot create hsr debugfs directory
[  146.310156][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.815'.
[  146.320083][ T9040] netlink: 32 bytes leftover after parsing attributes in process `syz.3.815'.
[  146.340849][ T9040] gtp1: entered promiscuous mode
[  146.346021][ T9040] gtp1: entered allmulticast mode
[  146.462491][ T9044] syzkaller1: entered promiscuous mode
[  146.475406][ T9044] syzkaller1: entered allmulticast mode
[  146.675361][ T9038] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.682661][ T9038] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.690704][   T54] Bluetooth: hci1: command 0x041b tx timeout
[  146.874970][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.817'.
[  147.439366][ T9038] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.451774][ T9038] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.483738][ T5830] Bluetooth: hci5: command tx timeout
[  147.512957][ T9038] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.522621][ T9038] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.531853][ T9038] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.541362][ T9038] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.611916][ T9062] nlmon0: Master is either lo or non-ether device
[  147.695254][ T9015] chnl_net:caif_netlink_parms(): no params data found
[  147.799981][ T9079] netlink: 'syz.3.823': attribute type 1 has an invalid length.
[  147.862730][ T9079] 8021q: adding VLAN 0 to HW filter on device bond3
[  147.945783][ T9015] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.956128][ T9015] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.963467][ T9015] bridge_slave_0: entered allmulticast mode
[  147.970941][ T9015] bridge_slave_0: entered promiscuous mode
[  147.991790][ T9086] __nla_validate_parse: 1 callbacks suppressed
[  147.991809][ T9086] netlink: 10 bytes leftover after parsing attributes in process `syz.4.825'.
[  148.009323][ T9015] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.029246][ T9015] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.044603][ T9015] bridge_slave_1: entered allmulticast mode
[  148.055297][ T9015] bridge_slave_1: entered promiscuous mode
[  148.128914][ T9015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  148.168777][ T9015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.180514][ T8929] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  148.228375][ T8929] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  148.255300][ T8929] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  148.269586][ T9015] team0: Port device team_slave_0 added
[  148.283190][ T8929] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  148.302441][ T9015] team0: Port device team_slave_1 added
[  148.358927][ T9015] batman_adv: batadv0: Adding interface: batadv_slave_0
[  148.360855][ T9097] netlink: 'syz.4.830': attribute type 10 has an invalid length.
[  148.373547][ T9015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.407018][ T9015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  148.435766][ T9097] batman_adv: batadv0: Adding interface: team0
[  148.442226][ T9097] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.470823][ T9097] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  148.482752][ T9015] batman_adv: batadv0: Adding interface: batadv_slave_1
[  148.492069][ T9015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.533285][ T9015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.677485][ T9015] hsr_slave_0: entered promiscuous mode
[  148.719694][ T9015] hsr_slave_1: entered promiscuous mode
[  148.733825][ T9015] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  148.741441][ T9015] Cannot create hsr debugfs directory
[  148.763917][ T5830] Bluetooth: hci1: command 0x041b tx timeout
[  148.885780][ T8929] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.938182][ T8929] 8021q: adding VLAN 0 to HW filter on device team0
[  148.992245][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.999605][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.057512][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.064754][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.099222][ T9124] netlink: 16 bytes leftover after parsing attributes in process `syz.3.837'.
[  149.122461][ T9124] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (11)
[  149.133894][ T9015] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  149.143477][ T9015] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  149.170868][ T9015] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  149.188231][ T9015] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  149.371969][ T9015] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.409207][ T9015] 8021q: adding VLAN 0 to HW filter on device team0
[  149.451447][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.458657][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.510222][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.517426][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.552165][ T8929] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.564134][ T5830] Bluetooth: hci5: command tx timeout
[  149.680458][ T9015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  149.777881][ T8929] veth0_vlan: entered promiscuous mode
[  149.800968][ T8929] veth1_vlan: entered promiscuous mode
[  149.833056][ T9147] netlink: 'syz.3.843': attribute type 13 has an invalid length.
[  149.864431][ T9147] macvtap0: entered promiscuous mode
[  149.875002][ T9147] macvtap0: refused to change device tx_queue_len
[  149.906402][ T9150] netlink: 28 bytes leftover after parsing attributes in process `syz.4.844'.
[  149.968031][ T8929] veth0_macvtap: entered promiscuous mode
[  149.993005][ T8929] veth1_macvtap: entered promiscuous mode
[  150.010575][ T9015] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.050952][ T8929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.070416][ T8929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.082742][ T8929] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.103991][ T8929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.115048][ T8929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.127934][ T8929] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.144126][ T8929] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.152869][ T8929] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.162252][ T8929] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.179854][ T8929] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.294448][ T1051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.302303][ T1051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.337594][ T7731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.346278][ T7731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.457454][ T9015] veth0_vlan: entered promiscuous mode
[  150.478462][ T9015] veth1_vlan: entered promiscuous mode
[  150.508225][ T9015] veth0_macvtap: entered promiscuous mode
[  150.519172][ T9015] veth1_macvtap: entered promiscuous mode
[  150.536450][ T9015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.548181][ T9015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.558242][ T9015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.569492][ T9015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.580685][ T9015] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.594598][ T9015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.605884][ T9015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.615904][ T9015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.626685][ T9015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.637867][ T9015] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.648555][ T9015] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.658098][ T9015] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.667110][ T9015] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.676382][ T9015] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.749173][ T7732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.760519][ T7732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.787645][ T7732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.797646][ T7732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.856068][ T9163] lo speed is unknown, defaulting to 1000
[  150.861884][ T9163] lo speed is unknown, defaulting to 1000
[  150.868626][ T9163] lo speed is unknown, defaulting to 1000
[  150.877192][ T9163] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  150.890468][ T9163] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  150.910747][ T9163] lo speed is unknown, defaulting to 1000
[  150.939476][ T9163] lo speed is unknown, defaulting to 1000
[  150.949055][ T9163] lo speed is unknown, defaulting to 1000
[  150.956624][ T9163] lo speed is unknown, defaulting to 1000
[  150.963023][ T9163] lo speed is unknown, defaulting to 1000
[  150.971066][ T9163] lo speed is unknown, defaulting to 1000
[  150.977707][ T9163] lo speed is unknown, defaulting to 1000
[  151.164973][ T7737] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.643942][ T5830] Bluetooth: hci5: command tx timeout
[  151.778965][ T7737] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.052048][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  152.063148][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  152.071125][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  152.079295][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  152.090053][   T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  152.097587][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  152.124197][   T35] wlan1: Trigger new scan to find an IBSS to join
[  152.130808][ T9166] lo speed is unknown, defaulting to 1000
[  152.197131][ T9166] lo speed is unknown, defaulting to 1000
[  152.280573][ T9166] chnl_net:caif_netlink_parms(): no params data found
[  152.339905][ T9166] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.347940][ T9166] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.355940][ T9166] bridge_slave_0: entered allmulticast mode
[  152.362976][ T9166] bridge_slave_0: entered promiscuous mode
[  152.371989][ T9166] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.379325][ T9166] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.386710][ T9166] bridge_slave_1: entered allmulticast mode
[  152.393380][ T9166] bridge_slave_1: entered promiscuous mode
[  152.427590][ T7737] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.456626][ T9166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  152.469805][ T9166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  152.499857][ T9166] team0: Port device team_slave_0 added
[  152.510408][ T9166] team0: Port device team_slave_1 added
[  152.531734][ T9166] batman_adv: batadv0: Adding interface: batadv_slave_0
[  152.540537][ T9166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.567119][ T9166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  152.579941][ T9166] batman_adv: batadv0: Adding interface: batadv_slave_1
[  152.587106][ T9166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.614072][ T9166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.654977][ T7737] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.677882][ T9166] hsr_slave_0: entered promiscuous mode
[  152.687135][ T9166] hsr_slave_1: entered promiscuous mode
[  152.693460][ T9166] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  152.701409][ T9166] Cannot create hsr debugfs directory
[  152.780393][ T7737] bridge_slave_1: left allmulticast mode
[  152.786420][ T7737] bridge_slave_1: left promiscuous mode
[  152.792152][ T7737] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.802769][ T7737] bridge_slave_0: left allmulticast mode
[  152.808963][ T7737] bridge_slave_0: left promiscuous mode
[  152.814957][ T7737] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.162062][ T7737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.173875][ T7737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.184752][ T7737] bond0 (unregistering): Released all slaves
[  153.557345][ T7737] hsr_slave_0: left promiscuous mode
[  153.565489][ T7737] hsr_slave_1: left promiscuous mode
[  153.572127][ T7737] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.579770][ T7737] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.588893][ T7737] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.596813][ T7737] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.618907][ T7737] veth1_macvtap: left promiscuous mode
[  153.625464][ T7737] veth0_macvtap: left promiscuous mode
[  153.631012][ T7737] veth1_vlan: left promiscuous mode
[  153.636558][ T7737] veth0_vlan: left promiscuous mode
[  153.727978][ T5830] Bluetooth: hci5: command tx timeout
[  154.049872][ T7737] team0 (unregistering): Port device team_slave_1 removed
[  154.092222][ T7737] team0 (unregistering): Port device team_slave_0 removed
[  154.139570][ T5830] Bluetooth: hci1: command tx timeout
[  154.569388][ T9166] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  154.581601][ T9166] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  154.592397][ T9166] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  154.601625][ T9166] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  154.682045][ T9166] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.730031][ T9166] 8021q: adding VLAN 0 to HW filter on device team0
[  154.740946][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.748090][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.767513][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.774689][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.930916][ T9166] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.966707][ T9166] veth0_vlan: entered promiscuous mode
[  154.978204][ T9166] veth1_vlan: entered promiscuous mode
[  154.999354][ T9166] veth0_macvtap: entered promiscuous mode
[  155.009088][ T9166] veth1_macvtap: entered promiscuous mode
[  155.023920][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.034586][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.045484][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.056116][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.067312][ T9166] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.078163][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.091892][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.102361][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.112838][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.123847][ T9166] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.136838][ T9166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.145893][ T9166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.155270][ T9166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.164231][ T9166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.183074][ T1051] wlan1: Trigger new scan to find an IBSS to join
[  155.231171][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.247411][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.269582][ T7731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.278135][ T7731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.065001][ T7731] wlan1: Creating new IBSS network, BSSID 4a:30:39:06:35:d1
[  157.064736][   T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.993840][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  158.003014][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  158.011511][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  158.021221][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  158.028951][   T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  158.037340][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  158.068024][ T9179] lo speed is unknown, defaulting to 1000
[  158.132500][ T9179] lo speed is unknown, defaulting to 1000
[  158.221713][ T9179] chnl_net:caif_netlink_parms(): no params data found
[  158.288455][ T9179] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.296327][ T9179] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.304279][ T9179] bridge_slave_0: entered allmulticast mode
[  158.311398][ T9179] bridge_slave_0: entered promiscuous mode
[  158.319669][ T9179] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.327151][ T9179] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.334541][ T9179] bridge_slave_1: entered allmulticast mode
[  158.341172][ T9179] bridge_slave_1: entered promiscuous mode
[  158.369333][ T9179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  158.381251][ T9179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  158.410115][ T9179] team0: Port device team_slave_0 added
[  158.421105][ T9179] team0: Port device team_slave_1 added
[  158.441858][ T9179] batman_adv: batadv0: Adding interface: batadv_slave_0
[  158.449991][ T9179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.477548][ T9179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  158.489827][ T9179] batman_adv: batadv0: Adding interface: batadv_slave_1
[  158.497086][ T9179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.523438][ T9179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  158.559809][ T9179] hsr_slave_0: entered promiscuous mode
[  158.570070][ T9179] hsr_slave_1: entered promiscuous mode
[  158.576201][ T9179] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  158.585036][ T9179] Cannot create hsr debugfs directory
[  158.842055][   T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.920384][   T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.007603][   T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.099315][   T11] bridge_slave_1: left allmulticast mode
[  159.105593][   T11] bridge_slave_1: left promiscuous mode
[  159.112657][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.123333][   T11] bridge_slave_0: left allmulticast mode
[  159.129146][   T11] bridge_slave_0: left promiscuous mode
[  159.135405][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.431955][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  159.446652][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  159.457491][   T11] bond0 (unregistering): Released all slaves
[  159.789257][   T11] hsr_slave_0: left promiscuous mode
[  159.805694][   T11] hsr_slave_1: left promiscuous mode
[  159.812765][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.822476][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.831458][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.839046][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.860401][   T11] veth1_macvtap: left promiscuous mode
[  159.866080][   T11] veth0_macvtap: left promiscuous mode
[  159.871622][   T11] veth1_vlan: left promiscuous mode
[  159.877046][   T11] veth0_vlan: left promiscuous mode
[  160.127084][ T5832] Bluetooth: hci1: command tx timeout
[  160.273975][   T11] team0 (unregistering): Port device team_slave_1 removed
[  160.315532][   T11] team0 (unregistering): Port device team_slave_0 removed
[  160.736137][ T9179] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  160.746734][ T9179] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  160.762100][ T9179] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  160.780918][ T9179] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  160.876476][ T9179] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.891971][ T9179] 8021q: adding VLAN 0 to HW filter on device team0
[  160.907014][ T7737] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.914170][ T7737] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.928267][ T7737] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.935445][ T7737] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.115136][ T9179] 8021q: adding VLAN 0 to HW filter on device batadv0
[  161.150178][ T9179] veth0_vlan: entered promiscuous mode
[  161.166271][ T9179] veth1_vlan: entered promiscuous mode
[  161.191987][ T9179] veth0_macvtap: entered promiscuous mode
[  161.201227][ T9179] veth1_macvtap: entered promiscuous mode
[  161.215290][ T9179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.226247][ T9179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.236284][ T9179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.247917][ T9179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.259274][ T9179] batman_adv: batadv0: Interface activated: batadv_slave_0
[  161.272242][ T9179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.284400][ T9179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.294769][ T9179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.306021][ T9179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.316986][ T9179] batman_adv: batadv0: Interface activated: batadv_slave_1
[  161.328382][ T9179] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.337793][ T9179] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.347527][ T9179] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.356327][ T9179] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.412041][ T1051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.423952][ T1051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.444601][ T1051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.454930][ T1051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.375068][ T1051] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.436172][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  164.448432][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  164.457814][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  164.465907][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  164.473871][ T5830] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  164.481224][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  164.509019][ T9192] lo speed is unknown, defaulting to 1000
[  164.578121][ T9192] lo speed is unknown, defaulting to 1000
[  164.665061][ T9192] chnl_net:caif_netlink_parms(): no params data found
[  164.717382][ T9192] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.725651][ T9192] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.732848][ T9192] bridge_slave_0: entered allmulticast mode
[  164.739595][ T9192] bridge_slave_0: entered promiscuous mode
[  164.749084][ T9192] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.756279][ T9192] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.763426][ T9192] bridge_slave_1: entered allmulticast mode
[  164.776724][ T9192] bridge_slave_1: entered promiscuous mode
[  164.802512][ T9192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  164.814078][ T9192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.843259][ T9192] team0: Port device team_slave_0 added
[  164.851541][ T9192] team0: Port device team_slave_1 added
[  164.871758][ T9192] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.879198][ T9192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.905231][ T9192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.918147][ T9192] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.926472][ T9192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.953258][ T9192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.995061][ T1051] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.021712][ T9192] hsr_slave_0: entered promiscuous mode
[  165.034205][ T9192] hsr_slave_1: entered promiscuous mode
[  165.040320][ T9192] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  165.048472][ T9192] Cannot create hsr debugfs directory
[  165.081325][ T1051] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.147317][ T1051] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.226073][ T1051] bridge_slave_1: left allmulticast mode
[  165.231780][ T1051] bridge_slave_1: left promiscuous mode
[  165.240140][ T1051] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.250618][ T1051] bridge_slave_0: left allmulticast mode
[  165.256522][ T1051] bridge_slave_0: left promiscuous mode
[  165.262162][ T1051] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.584037][ T1051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  165.595129][ T1051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  165.606297][ T1051] bond0 (unregistering): Released all slaves
[  165.917134][ T1051] hsr_slave_0: left promiscuous mode
[  165.923319][ T1051] hsr_slave_1: left promiscuous mode
[  165.933125][ T1051] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  165.941246][ T1051] batman_adv: batadv0: Removing interface: batadv_slave_0
[  165.949279][ T1051] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  165.960129][ T1051] batman_adv: batadv0: Removing interface: batadv_slave_1
[  165.990522][ T1051] veth1_macvtap: left promiscuous mode
[  165.996207][ T1051] veth0_macvtap: left promiscuous mode
[  166.002726][ T1051] veth1_vlan: left promiscuous mode
[  166.008456][ T1051] veth0_vlan: left promiscuous mode
[  166.392555][ T1051] team0 (unregistering): Port device team_slave_1 removed
[  166.432403][ T1051] team0 (unregistering): Port device team_slave_0 removed
[  166.530061][ T5830] Bluetooth: hci1: command tx timeout
[  166.852039][ T9192] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  166.864413][ T9192] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  166.881345][ T9192] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  166.899280][ T9192] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  166.977670][ T9192] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.992876][ T9192] 8021q: adding VLAN 0 to HW filter on device team0
[  167.011515][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.018665][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.047205][ T7731] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.054359][ T7731] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.203693][ T9192] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.238045][ T9192] veth0_vlan: entered promiscuous mode
[  167.249945][ T9192] veth1_vlan: entered promiscuous mode
[  167.277222][ T9192] veth0_macvtap: entered promiscuous mode
[  167.288835][ T9192] veth1_macvtap: entered promiscuous mode
[  167.301990][ T9192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.313246][ T9192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.323671][ T9192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.334305][ T9192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.345073][ T9192] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.359624][ T9192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.370604][ T9192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.380760][ T9192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.393125][ T9192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.407504][ T9192] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.419445][ T9192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.428380][ T9192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.437240][ T9192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.446035][ T9192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.506325][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.514671][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.536744][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.545030][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.952367][ T9205] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  168.959631][ T9205] IPv6: NLM_F_CREATE should be set when creating new route
[  169.050429][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.848'.
[  169.073915][ T9207] netlink: 'syz.5.846': attribute type 10 has an invalid length.
[  169.088864][ T9207] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.096385][ T9207] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.119483][ T9207] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.126718][ T9207] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.134179][ T9207] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.141318][ T9207] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.170759][ T9207] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  169.788745][ T9214] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.796159][ T9214] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.972919][ T9214] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  170.014459][ T9228] netlink: 120 bytes leftover after parsing attributes in process `syz.5.851'.
[  170.030495][ T9228] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  170.092271][   T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.874069][   T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.076608][   T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.278938][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  171.289178][   T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.293850][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  171.309227][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  171.319421][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  171.328750][ T5832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  171.336187][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  171.429857][ T9275] lo speed is unknown, defaulting to 1000
[  171.459798][ T9273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.864'.
[  171.611894][ T9281] lo speed is unknown, defaulting to 1000
[  171.626758][ T9275] lo speed is unknown, defaulting to 1000
[  171.642877][ T9287] netlink: 36 bytes leftover after parsing attributes in process `syz.5.867'.
[  171.683766][   T11] bridge_slave_1: left allmulticast mode
[  171.690275][   T11] bridge_slave_1: left promiscuous mode
[  171.696480][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.715070][   T11] bridge_slave_0: left allmulticast mode
[  171.721776][   T11] bridge_slave_0: left promiscuous mode
[  171.739727][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.311957][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.324186][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  172.334815][   T11] bond0 (unregistering): Released all slaves
[  172.350042][ T9281] lo speed is unknown, defaulting to 1000
[  172.359212][ T9303] macsec0: entered promiscuous mode
[  172.372484][ T9303] macsec1: entered allmulticast mode
[  172.378350][ T9303] macsec0: entered allmulticast mode
[  172.398533][ T9303] veth1_macvtap: entered allmulticast mode
[  172.571344][ T9310] sctp: [Deprecated]: syz.3.871 (pid 9310) Use of struct sctp_assoc_value in delayed_ack socket option.
[  172.571344][ T9310] Use struct sctp_sack_info instead
[  172.652835][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.874'.
[  172.692654][ T9314] netlink: 32 bytes leftover after parsing attributes in process `syz.2.874'.
[  172.979443][ T9275] chnl_net:caif_netlink_parms(): no params data found
[  173.267907][   T11] hsr_slave_0: left promiscuous mode
[  173.274882][   T11] hsr_slave_1: left promiscuous mode
[  173.281278][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.293962][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  173.302205][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.304737][ T9339] netlink: 4 bytes leftover after parsing attributes in process `syz.5.878'.
[  173.311385][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.346295][   T11] veth1_macvtap: left promiscuous mode
[  173.352099][   T11] veth0_macvtap: left promiscuous mode
[  173.357981][   T11] veth1_vlan: left promiscuous mode
[  173.363414][   T11] veth0_vlan: left promiscuous mode
[  173.404418][ T5832] Bluetooth: hci1: command tx timeout
[  173.907135][   T11] team0 (unregistering): Port device team_slave_1 removed
[  173.966094][   T11] team0 (unregistering): Port device team_slave_0 removed
[  174.580614][ T9350] netlink: 32 bytes leftover after parsing attributes in process `syz.2.881'.
[  174.695201][ T9355] netlink: 40 bytes leftover after parsing attributes in process `syz.2.881'.
[  174.710384][ T9355] netlink: 24 bytes leftover after parsing attributes in process `syz.2.881'.
[  174.736359][ T9350] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  174.761535][ T9275] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.772285][ T9275] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.782426][ T9275] bridge_slave_0: entered allmulticast mode
[  174.794320][ T9275] bridge_slave_0: entered promiscuous mode
[  174.863403][ T9275] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.894111][ T9275] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.912638][ T9365] netlink: 20 bytes leftover after parsing attributes in process `syz.5.883'.
[  174.922354][ T9275] bridge_slave_1: entered allmulticast mode
[  174.933078][ T9367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.882'.
[  174.940197][ T9275] bridge_slave_1: entered promiscuous mode
[  175.042207][ T9275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  175.065904][ T9275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  175.140253][ T9275] team0: Port device team_slave_0 added
[  175.155878][ T9275] team0: Port device team_slave_1 added
[  175.268034][ T9275] batman_adv: batadv0: Adding interface: batadv_slave_0
[  175.293795][ T9275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.325311][ T9275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  175.343117][ T9275] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.350962][ T9275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.378875][ T9275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  175.489325][ T5832] Bluetooth: hci1: command tx timeout
[  175.529208][ T9380] syzkaller1: entered promiscuous mode
[  175.534845][ T9380] syzkaller1: entered allmulticast mode
[  175.558513][ T9275] hsr_slave_0: entered promiscuous mode
[  175.566563][ T9275] hsr_slave_1: entered promiscuous mode
[  175.573301][ T9275] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  175.581948][ T9275] Cannot create hsr debugfs directory
[  175.589301][ T9387] netlink: zone id is out of range
[  175.612767][ T9387] netlink: zone id is out of range
[  175.632052][ T9387] netlink: zone id is out of range
[  175.684216][ T9387] netlink: zone id is out of range
[  175.689388][ T9387] netlink: zone id is out of range
[  175.694897][ T9385] netlink: 10 bytes leftover after parsing attributes in process `syz.4.888'.
[  175.722801][ T9385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.888'.
[  175.738919][ T9389] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  175.797266][ T9387] netlink: zone id is out of range
[  175.818157][ T9387] netlink: zone id is out of range
[  175.833905][ T9387] netlink: zone id is out of range
[  175.839437][ T9387] netlink: zone id is out of range
[  175.867218][ T9387] netlink: zone id is out of range
[  175.932832][ T9396] netlink: 4 bytes leftover after parsing attributes in process `syz.5.890'.
[  176.271609][ T9275] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  176.286488][ T9275] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  176.299383][ T9275] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  176.321946][ T9275] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  176.484553][ T9275] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.517801][ T9275] 8021q: adding VLAN 0 to HW filter on device team0
[  176.547290][ T7731] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.554483][ T7731] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.562992][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.895'.
[  176.581066][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.588232][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.992969][ T9437] sit0: entered promiscuous mode
[  177.005306][ T9437] netlink: 'syz.5.899': attribute type 1 has an invalid length.
[  177.022097][ T9437] netlink: 1 bytes leftover after parsing attributes in process `syz.5.899'.
[  177.070688][ T9436] pimreg: entered allmulticast mode
[  177.082979][ T9436] pimreg: left allmulticast mode
[  177.128671][ T9275] 8021q: adding VLAN 0 to HW filter on device batadv0
[  177.159606][ T9436] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  177.275616][ T9275] veth0_vlan: entered promiscuous mode
[  177.327083][ T9275] veth1_vlan: entered promiscuous mode
[  177.405065][ T9275] veth0_macvtap: entered promiscuous mode
[  177.445280][ T9275] veth1_macvtap: entered promiscuous mode
[  177.470693][ T9275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.493605][ T9275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.503616][ T9275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.514130][ T9275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.527560][ T9275] batman_adv: batadv0: Interface activated: batadv_slave_0
[  177.537256][ T9275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.547798][ T9275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.557932][ T9275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.568733][ T9275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.579866][ T9275] batman_adv: batadv0: Interface activated: batadv_slave_1
[  177.584072][ T5832] Bluetooth: hci1: command tx timeout
[  177.590404][ T9275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.601395][ T9275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.610242][ T9275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.618973][ T9275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.858491][ T7732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.922969][ T7732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.942571][ T9479] ieee802154 phy0 wpan0: encryption failed: -22
[  177.999624][ T9481] netlink: 'syz.3.912': attribute type 1 has an invalid length.
[  178.016736][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.048157][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.332378][ T9494] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  179.502062][ T9542] gretap1: entered allmulticast mode
[  179.526342][ T9542] bridge0: port 3(gretap1) entered blocking state
[  179.541104][ T9542] bridge0: port 3(gretap1) entered disabled state
[  179.550019][ T9542] gretap1: entered promiscuous mode
[  179.564426][ T9542] bridge0: port 3(gretap1) entered blocking state
[  179.571005][ T9542] bridge0: port 3(gretap1) entered forwarding state
[  179.742383][ T9552] __nla_validate_parse: 8 callbacks suppressed
[  179.742404][ T9552] netlink: 32 bytes leftover after parsing attributes in process `syz.4.937'.
[  179.888082][   T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.363817][ T5830] Bluetooth: hci5: command 0x0405 tx timeout
[  180.760858][   T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.828533][   T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.871654][   T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.924656][    C1] net_ratelimit: 5 callbacks suppressed
[  180.924679][    C1] bridge0: received packet on gretap1 with own address as source address (addr:46:38:ac:91:27:70, vlan:0)
[  180.944247][    C1] bridge0: received packet on gretap1 with own address as source address (addr:46:38:ac:91:27:70, vlan:0)
[  180.985777][   T35] bridge_slave_1: left allmulticast mode
[  180.991435][   T35] bridge_slave_1: left promiscuous mode
[  180.997635][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.008845][   T35] bridge_slave_0: left allmulticast mode
[  181.016109][   T35] bridge_slave_0: left promiscuous mode
[  181.021914][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.186148][ T9568] atomic_op ffff8880250aa998 conn xmit_atomic 0000000000000000
[  181.200822][ T9566] dccp_v4_rcv: dropped packet with invalid checksum
[  181.325959][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  181.335769][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  181.346323][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  181.359126][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  181.367575][ T5830] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  181.374885][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  181.528179][    C1] bridge0: received packet on gretap1 with own address as source address (addr:46:38:ac:91:27:70, vlan:0)
[  181.950331][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  181.967371][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  181.979572][   T35] bond0 (unregistering): Released all slaves
[  182.007834][ T9588] tipc: MTU too low for tipc bearer
[  182.228556][ T9575] lo speed is unknown, defaulting to 1000
[  182.404699][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz.5.952'.
[  182.466455][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz.5.952'.
[  182.607460][ T9575] lo speed is unknown, defaulting to 1000
[  182.765521][ T9630] x_tables: duplicate underflow at hook 3
[  182.850247][   T35] hsr_slave_0: left promiscuous mode
[  182.887624][   T35] hsr_slave_1: left promiscuous mode
[  182.901963][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  182.913265][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  182.926252][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  182.932179][ T9637] netlink: 'syz.3.957': attribute type 10 has an invalid length.
[  182.940423][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  183.006975][   T35] veth1_macvtap: left promiscuous mode
[  183.036176][   T35] veth0_macvtap: left promiscuous mode
[  183.045749][   T35] veth1_vlan: left promiscuous mode
[  183.051079][   T35] veth0_vlan: left promiscuous mode
[  183.409012][ T5830] Bluetooth: hci1: command tx timeout
[  183.636973][   T35] team0 (unregistering): Port device team_slave_1 removed
[  183.696400][   T35] team0 (unregistering): Port device team_slave_0 removed
[  184.164966][ T9636] netlink: 8 bytes leftover after parsing attributes in process `syz.5.958'.
[  184.187960][ T9637] infiniband syz0: set down
[  184.192522][ T9637] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  184.339925][ T5906] lo speed is unknown, defaulting to 1000
[  184.347664][ T5906] lo speed is unknown, defaulting to 1000
[  184.531614][ T9669] netlink: 80 bytes leftover after parsing attributes in process `syz.2.965'.
[  184.582146][ T9671] netlink: 20 bytes leftover after parsing attributes in process `syz.3.964'.
[  184.668780][ T9575] chnl_net:caif_netlink_parms(): no params data found
[  184.914697][ T9683] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  184.924283][ T9575] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.944122][ T9575] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.951381][ T9575] bridge_slave_0: entered allmulticast mode
[  184.990703][ T9575] bridge_slave_0: entered promiscuous mode
[  185.006145][ T9575] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.013267][ T9575] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.021197][ T9575] bridge_slave_1: entered allmulticast mode
[  185.028802][ T9575] bridge_slave_1: entered promiscuous mode
[  185.045678][ T9699] netlink: 36 bytes leftover after parsing attributes in process `syz.5.974'.
[  185.084558][    C1] bridge0: received packet on gretap1 with own address as source address (addr:46:38:ac:91:27:70, vlan:0)
[  185.160370][ T9683] xt_recent: Unsupported userspace flags (00000042)
[  185.161602][ T9703] netlink: 332 bytes leftover after parsing attributes in process `syz.5.976'.
[  185.222916][ T9575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.288690][ T9575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  185.389829][ T9575] team0: Port device team_slave_0 added
[  185.399444][ T9575] team0: Port device team_slave_1 added
[  185.483811][ T5837] Bluetooth: hci1: command tx timeout
[  185.512453][ T9575] batman_adv: batadv0: Adding interface: batadv_slave_0
[  185.530076][ T9575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.587604][ T9575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  185.638833][ T9575] batman_adv: batadv0: Adding interface: batadv_slave_1
[  185.647586][ T9575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.687050][ T9575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  185.842638][ T9575] hsr_slave_0: entered promiscuous mode
[  185.874228][ T9575] hsr_slave_1: entered promiscuous mode
[  185.888400][ T9575] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  185.905153][ T9575] Cannot create hsr debugfs directory
[  186.022311][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.987'.
[  186.127138][   T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  186.321731][ T9757] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6
[  186.376211][ T5837] Bluetooth: hci2: command 0x0406 tx timeout
[  186.378644][ T5838] Bluetooth: hci3: command 0x0406 tx timeout
[  186.382425][ T5837] Bluetooth: hci0: command 0x0401 tx timeout
[  186.671039][ T9766] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  186.749822][ T9575] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  186.775983][ T9575] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  186.812818][ T9575] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  186.842626][ T9575] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  186.891822][ T9779] netlink: 20 bytes leftover after parsing attributes in process `syz.4.997'.
[  187.081219][ T9575] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.125282][ T9575] 8021q: adding VLAN 0 to HW filter on device team0
[  187.187926][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.195095][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.257076][ T7731] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.264285][ T7731] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.365581][ T9575] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  187.398159][ T9575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  187.564553][ T5830] Bluetooth: hci1: command tx timeout
[  187.791862][ T9575] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.889113][ T9575] veth0_vlan: entered promiscuous mode
[  187.900335][ T9575] veth1_vlan: entered promiscuous mode
[  187.929020][ T9575] veth0_macvtap: entered promiscuous mode
[  187.939112][ T9575] veth1_macvtap: entered promiscuous mode
[  187.955905][ T9575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.966715][ T9575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.976995][ T9575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.987757][ T9575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.999397][ T9575] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.009716][ T9575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  188.020876][ T9575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.030974][ T9575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  188.042084][ T9575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.054134][ T9575] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.090412][ T9575] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.100219][ T9575] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.109424][ T9575] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.128950][ T9575] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.350676][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.389629][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.445790][ T9826] dvmrp0: entered allmulticast mode
[  188.467713][ T9822] dvmrp0: left allmulticast mode
[  188.547207][ T9830] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1013'.
[  188.568930][ T9828] syzkaller0: entered allmulticast mode
[  188.606110][ T9828] syzkaller0 (unregistering): left allmulticast mode
[  188.710861][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.732985][ T9835] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  188.734432][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.746363][ T9835] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  188.975527][ T9843] openvswitch: netlink: Message has 12 unknown bytes.
[  189.004734][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1016'.
[  189.178767][ T9849] batman_adv: batadv0: Adding interface: dummy0
[  189.186159][ T9849] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.214829][ T9849] batman_adv: batadv0: Interface activated: dummy0
[  189.224280][ T9851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1019'.
[  189.251677][ T9849] batadv0: mtu less than device minimum
[  189.263315][ T9849] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  189.276296][ T9849] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  189.288867][ T9849] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  189.301400][ T9849] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  189.314020][ T9849] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  189.326598][ T9849] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  189.338887][ T9849] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  189.605703][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1021'.
[  189.613074][ T9859] netlink: 'syz.4.1022': attribute type 7 has an invalid length.
[  189.631388][ T9859] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1022'.
[  189.634134][ T9862] netlink: 'syz.4.1022': attribute type 7 has an invalid length.
[  189.649795][ T9861] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1023'.
[  190.334509][ T9882] __nla_validate_parse: 3 callbacks suppressed
[  190.334529][ T9882] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1027'.
[  190.527559][ T9889] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1032'.
[  190.821449][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1034'.
[  190.830900][ T9900] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1034'.
[  190.841104][ T9900] netlink: 'syz.5.1034': attribute type 18 has an invalid length.
[  190.997067][ T9908] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1037'.
[  191.006844][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1037'.
[  191.135991][ T9915] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1038'.
[  191.283205][ T7729] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.764461][ T9928] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  192.936341][ T7729] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.039225][ T9942] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  193.138271][ T7729] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.244237][    C1] net_ratelimit: 12 callbacks suppressed
[  193.244258][    C1] bridge0: received packet on gretap1 with own address as source address (addr:46:38:ac:91:27:70, vlan:0)
[  193.319580][ T7729] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.461206][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  193.476546][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  193.480533][ T9948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1046'.
[  193.494424][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  193.518157][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  193.582768][ T5832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  193.609713][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  193.626121][ T7729] bridge_slave_1: left allmulticast mode
[  193.645897][ T7729] bridge_slave_1: left promiscuous mode
[  193.662079][ T7729] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.680202][ T7729] bridge_slave_0: left allmulticast mode
[  193.687605][ T7729] bridge_slave_0: left promiscuous mode
[  193.693416][ T7729] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.439896][ T7729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  194.456889][ T7729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  194.475654][ T7729] bond0 (unregistering): Released all slaves
[  194.528234][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  194.590054][ T9964] lo speed is unknown, defaulting to 1000
[  194.679448][ T9995] set match dimension is over the limit!
[  194.700256][ T9997] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1056'.
[  194.884825][ T9964] lo speed is unknown, defaulting to 1000
[  194.904066][T10007] netlink: 'syz.5.1058': attribute type 1 has an invalid length.
[  194.925142][T10007] netlink: 'syz.5.1058': attribute type 2 has an invalid length.
[  195.051571][T10002] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.295409][T10002] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.381289][ T7729] hsr_slave_0: left promiscuous mode
[  195.409470][ T7729] hsr_slave_1: left promiscuous mode
[  195.416808][ T7729] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  195.417531][T10032] netlink: 'syz.2.1065': attribute type 1 has an invalid length.
[  195.439136][ T7729] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.448940][ T7729] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  195.457722][ T7729] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.480562][ T7729] veth1_macvtap: left promiscuous mode
[  195.488556][ T7729] veth0_macvtap: left promiscuous mode
[  195.494643][ T7729] veth1_vlan: left promiscuous mode
[  195.501730][ T7729] veth0_vlan: left promiscuous mode
[  195.506566][T10033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1067'.
[  195.735916][ T5832] Bluetooth: hci1: command tx timeout
[  195.928433][ T7729] team0 (unregistering): Port device team_slave_1 removed
[  195.981064][ T7729] team0 (unregistering): Port device team_slave_0 removed
[  196.410923][T10002] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.439974][T10032] 8021q: adding VLAN 0 to HW filter on device bond1
[  196.459362][T10036] bond1: (slave gretap1): making interface the new active one
[  196.469397][T10036] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  196.547460][T10044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1068'.
[  196.563306][T10044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1068'.
[  196.599914][T10002] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.645864][T10048] netlink: 'syz.3.1070': attribute type 4 has an invalid length.
[  196.674185][T10048] netlink: 'syz.3.1070': attribute type 4 has an invalid length.
[  196.705153][T10048] infiniband syz0: set active
[  196.712239][ T5877] lo speed is unknown, defaulting to 1000
[  196.806771][ T5877] lo speed is unknown, defaulting to 1000
[  196.811789][T10053] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1071'.
[  196.838961][T10058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1069'.
[  196.942926][T10002] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.960767][T10054] lo speed is unknown, defaulting to 1000
[  196.968513][ T9964] chnl_net:caif_netlink_parms(): no params data found
[  197.007253][T10002] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.033316][T10002] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.087489][T10002] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  197.117873][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1073'.
[  197.201647][T10062] netlink: 'syz.3.1073': attribute type 11 has an invalid length.
[  197.314916][ T9964] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.322530][ T9964] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.330102][ T9964] bridge_slave_0: entered allmulticast mode
[  197.337450][ T9964] bridge_slave_0: entered promiscuous mode
[  197.339413][T10071] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7
[  197.344793][T10054] lo speed is unknown, defaulting to 1000
[  197.365516][ T9964] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.373437][ T9964] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.382522][ T9964] bridge_slave_1: entered allmulticast mode
[  197.398689][ T9964] bridge_slave_1: entered promiscuous mode
[  197.467929][T10071] syzkaller1: entered promiscuous mode
[  197.487487][T10071] syzkaller1: entered allmulticast mode
[  197.498315][ T9964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.566491][ T9964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.803634][ T5832] Bluetooth: hci1: command tx timeout
[  197.824729][ T9964] team0: Port device team_slave_0 added
[  197.840635][ T9964] team0: Port device team_slave_1 added
[  197.896521][T10092] netlink: 'syz.3.1080': attribute type 4 has an invalid length.
[  197.912293][ T9964] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.951711][ T9964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.018527][ T9964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.040573][T10094] lo speed is unknown, defaulting to 1000
[  198.041716][ T9964] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.091778][ T9964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.130750][ T9964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.157907][T10090] infiniband syz0: set down
[  198.184940][T10092] infiniband syz0: set active
[  198.189949][T10092] infiniband syz0: set active
[  198.212240][T10099] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1083'.
[  198.228873][T10099] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1083'.
[  198.242184][   T25] lo speed is unknown, defaulting to 1000
[  198.249401][ T5877] lo speed is unknown, defaulting to 1000
[  198.286747][ T5869] lo speed is unknown, defaulting to 1000
[  198.346932][   T25] lo speed is unknown, defaulting to 1000
[  198.346988][T10094] lo speed is unknown, defaulting to 1000
[  198.367501][ T9964] hsr_slave_0: entered promiscuous mode
[  198.378491][ T9964] hsr_slave_1: entered promiscuous mode
[  198.394698][ T9964] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.412500][ T9964] Cannot create hsr debugfs directory
[  198.651494][T10111] netlink: 'syz.5.1087': attribute type 10 has an invalid length.
[  198.703117][T10116] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1087'.
[  198.719907][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1088'.
[  198.739616][T10111] team0: Device ipvlan1 failed to register rx_handler
[  198.896434][T10120] batman_adv: batadv0: Removing interface: team0
[  198.922757][T10120] team0 (unregistering): Port device team_slave_0 removed
[  198.941948][T10120] team0 (unregistering): Port device team_slave_1 removed
[  199.179338][T10131] netlink: 'syz.5.1092': attribute type 1 has an invalid length.
[  199.280560][ T9964] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  199.318562][ T9964] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  199.386647][T10136] netlink: 'syz.2.1093': attribute type 10 has an invalid length.
[  199.412783][ T9964] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  199.440896][ T9964] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  199.614319][T10157] netlink: 'syz.5.1097': attribute type 10 has an invalid length.
[  199.627427][T10157] bond0: (slave wlan1): Opening slave failed
[  199.710060][ T9964] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.761138][ T9964] 8021q: adding VLAN 0 to HW filter on device team0
[  199.796438][ T1051] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.803623][ T1051] bridge0: port 1(bridge_slave_0) entered forwarding state
[  199.836020][T10166] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  199.868537][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.875751][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.903653][ T5832] Bluetooth: hci1: command tx timeout
[  200.027224][ T9964] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  200.082028][ T9964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  200.147219][T10172] validate_nla: 1 callbacks suppressed
[  200.147237][T10172] netlink: 'syz.3.1100': attribute type 1 has an invalid length.
[  200.479469][ T9964] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.571194][T10193] __nla_validate_parse: 6 callbacks suppressed
[  200.571214][T10193] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1106'.
[  200.636645][ T9964] veth0_vlan: entered promiscuous mode
[  200.653126][ T9964] veth1_vlan: entered promiscuous mode
[  200.678138][T10196] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1106'.
[  200.738127][ T9964] veth0_macvtap: entered promiscuous mode
[  200.749261][T10199] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1107'.
[  200.772857][ T9964] veth1_macvtap: entered promiscuous mode
[  200.825210][ T9964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.843645][ T9964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.854389][ T9964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.865601][ T9964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.877193][ T9964] batman_adv: batadv0: Interface activated: batadv_slave_0
[  200.935202][ T9964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  200.946409][ T9964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.966750][ T9964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  200.979277][ T9964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.010530][ T9964] batman_adv: batadv0: Interface activated: batadv_slave_1
[  201.035232][T10213] sctp: [Deprecated]: syz.3.1112 (pid 10213) Use of struct sctp_assoc_value in delayed_ack socket option.
[  201.035232][T10213] Use struct sctp_sack_info instead
[  201.072849][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1113'.
[  201.084044][T10208] tc_dump_action: action bad kind
[  201.096936][ T9964] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.118798][ T9964] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.133751][ T9964] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.142593][ T9964] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.161063][T10216] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1112'.
[  201.484524][T10230] netlink: 'syz.4.1114': attribute type 39 has an invalid length.
[  201.716325][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.741236][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.787068][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.815639][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.963750][ T5832] Bluetooth: hci1: command tx timeout
[  202.018165][T10260] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1122'.
[  202.055771][T10260] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  202.074904][T10260] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  202.145363][T10260] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  202.253731][T10260] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  202.369179][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1122'.
[  202.407142][T10260] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1122'.
[  202.415922][T10290] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1127'.
[  202.439390][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1122'.
[  203.070117][ T7737] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.376817][ T7737] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.461674][ T7737] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.538945][ T7737] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.614193][ T7737] bridge_slave_1: left allmulticast mode
[  203.620222][ T7737] bridge_slave_1: left promiscuous mode
[  203.626683][ T7737] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.636448][ T7737] bridge_slave_0: left allmulticast mode
[  203.642090][ T7737] bridge_slave_0: left promiscuous mode
[  203.648318][ T7737] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.995839][ T7737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  204.007380][ T7737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  204.017558][ T7737] bond0 (unregistering): Released all slaves
[  204.310057][ T7737] hsr_slave_0: left promiscuous mode
[  204.316952][ T7737] hsr_slave_1: left promiscuous mode
[  204.322795][ T7737] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  204.331670][ T7737] batman_adv: batadv0: Removing interface: batadv_slave_0
[  204.363048][ T7737] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  204.370908][ T7737] batman_adv: batadv0: Removing interface: batadv_slave_1
[  204.393360][ T7737] veth1_macvtap: left promiscuous mode
[  204.399371][ T7737] veth0_macvtap: left promiscuous mode
[  204.409149][ T7737] veth1_vlan: left promiscuous mode
[  204.414568][ T7737] veth0_vlan: left promiscuous mode
[  204.745304][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  204.793840][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  204.820803][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  204.873633][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  204.887824][ T5830] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  204.904526][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  205.361730][ T7737] team0 (unregistering): Port device team_slave_1 removed
[  205.413187][ T7737] team0 (unregistering): Port device team_slave_0 removed
[  205.868115][T10327] lo speed is unknown, defaulting to 1000
[  206.158304][T10327] lo speed is unknown, defaulting to 1000
[  206.214776][T10362] __nla_validate_parse: 5 callbacks suppressed
[  206.214796][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1144'.
[  206.240619][T10368] infiniband syz0: set active
[  206.394340][T10368] bond0: (slave bond_slave_0): Releasing backup interface
[  206.418631][T10368] bond0: (slave bond_slave_1): Releasing backup interface
[  206.434612][T10368] team_slave_0: left promiscuous mode
[  206.457705][T10368] team0: Port device team_slave_0 removed
[  206.467860][T10368] team_slave_1: left promiscuous mode
[  206.489097][T10368] team0: Port device team_slave_1 removed
[  206.504257][T10368] bond1: (slave batadv1): Releasing active interface
[  206.521845][ T5906] lo speed is unknown, defaulting to 1000
[  206.738446][T10382] lo speed is unknown, defaulting to 1000
[  206.849525][T10327] chnl_net:caif_netlink_parms(): no params data found
[  207.010399][T10327] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.019642][ T5830] Bluetooth: hci1: command tx timeout
[  207.052633][T10327] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.086929][T10327] bridge_slave_0: entered allmulticast mode
[  207.094328][T10327] bridge_slave_0: entered promiscuous mode
[  207.102776][T10382] lo speed is unknown, defaulting to 1000
[  207.109467][T10327] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.118645][T10327] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.126156][T10327] bridge_slave_1: entered allmulticast mode
[  207.133468][T10327] bridge_slave_1: entered promiscuous mode
[  207.189077][T10387] netlink: 'syz.3.1152': attribute type 12 has an invalid length.
[  207.225314][T10327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  207.260301][T10399] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  207.285540][T10327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.350423][T10403] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1158'.
[  207.378683][T10327] team0: Port device team_slave_0 added
[  207.400459][T10327] team0: Port device team_slave_1 added
[  207.649903][T10327] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.674962][T10327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.744190][T10327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.757760][T10416] netlink: 'syz.2.1162': attribute type 11 has an invalid length.
[  207.863394][T10327] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.880039][T10415] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1159'.
[  207.883580][T10327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.899850][T10415] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1159'.
[  207.943763][T10327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.228574][T10327] hsr_slave_0: entered promiscuous mode
[  208.245417][T10327] hsr_slave_1: entered promiscuous mode
[  208.251819][T10327] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  208.271545][T10327] Cannot create hsr debugfs directory
[  208.288394][T10437] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1168'.
[  208.402452][T10439] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1169'.
[  208.522158][T10439] bridge0: entered allmulticast mode
[  208.841068][T10454] netlink: 'syz.2.1174': attribute type 12 has an invalid length.
[  208.862071][T10452] syzkaller1: entered promiscuous mode
[  208.871959][T10452] syzkaller1: entered allmulticast mode
[  208.921667][T10457] batadv_slave_0: entered promiscuous mode
[  208.934363][T10457] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  208.999254][T10456] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20000
[  209.072186][T10461] xt_TCPMSS: Only works on TCP SYN packets
[  209.083973][ T5830] Bluetooth: hci1: command tx timeout
[  209.128354][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1177'.
[  209.141916][T10463] dvmrp0: entered allmulticast mode
[  209.151659][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1177'.
[  209.211082][T10327] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  209.221499][T10327] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  209.237462][T10327] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  209.249227][T10327] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  209.256146][    C1] bridge0: received packet on gretap1 with own address as source address (addr:46:38:ac:91:27:70, vlan:0)
[  209.348743][T10327] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.368065][T10327] 8021q: adding VLAN 0 to HW filter on device team0
[  209.380442][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.387664][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.427612][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.434803][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.604564][T10475] netlink: 'syz.4.1180': attribute type 4 has an invalid length.
[  209.875165][T10327] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.905784][T10489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1183'.
[  209.932977][T10491] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  209.978931][T10327] veth0_vlan: entered promiscuous mode
[  210.039592][T10327] veth1_vlan: entered promiscuous mode
[  210.116462][T10327] veth0_macvtap: entered promiscuous mode
[  210.144094][T10327] veth1_macvtap: entered promiscuous mode
[  210.202610][T10327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.233553][T10327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.253869][T10327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.274664][T10327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.305933][T10327] batman_adv: batadv0: Interface activated: batadv_slave_0
[  210.326780][T10327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.358450][T10327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.380038][T10327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.401641][T10327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.422737][T10327] batman_adv: batadv0: Interface activated: batadv_slave_1
[  210.480824][T10327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  210.503582][T10327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  210.512335][T10327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  210.563657][T10327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  210.579280][T10508] xt_time: unknown flags 0x4
[  210.603367][T10508] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  210.668425][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1188'.
[  210.716189][ T7729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.743111][ T7729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.819511][ T7729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.839315][ T7729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.945514][T10522] netlink: 'syz.2.1191': attribute type 12 has an invalid length.
[  211.228178][T10525] __nla_validate_parse: 2 callbacks suppressed
[  211.228200][T10525] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1192'.
[  211.337066][T10532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1193'.
[  211.374874][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1193'.
[  211.391059][T10532] netlink: 'syz.5.1193': attribute type 14 has an invalid length.
[  211.401320][T10532] netlink: 'syz.5.1193': attribute type 12 has an invalid length.
[  211.498503][T10525] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.533914][T10525] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  211.693367][T10525] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.710529][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1196'.
[  211.725363][T10525] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  211.856369][T10525] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.868873][T10525] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  211.987355][T10525] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.998483][T10525] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  212.139404][T10525] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  212.157346][T10525] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  212.179745][T10525] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  212.189625][T10525] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  212.211364][T10525] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  212.220612][T10525] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  212.290300][T10525] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  212.312523][T10525] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  212.422646][   T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.112169][   T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.159294][   T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.234793][   T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.318061][   T52] bridge_slave_1: left allmulticast mode
[  213.324317][   T52] bridge_slave_1: left promiscuous mode
[  213.330060][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.340246][   T52] bridge_slave_0: left allmulticast mode
[  213.346461][   T52] bridge_slave_0: left promiscuous mode
[  213.352193][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.701381][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  213.712149][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  213.722528][   T52] bond0 (unregistering): Released all slaves
[  214.091181][T10572] sch_fq: defrate 511 ignored.
[  214.433941][T10598] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1208'.
[  214.512802][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  214.525401][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  214.533809][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  214.542273][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  214.551752][ T5832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  214.559668][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  214.654808][T10586] netlink: 'syz.5.1208': attribute type 4 has an invalid length.
[  214.789224][T10600] lo speed is unknown, defaulting to 1000
[  214.799492][T10606] netlink: 'syz.4.1211': attribute type 15 has an invalid length.
[  214.815135][T10606] netlink: 'syz.4.1211': attribute type 1 has an invalid length.
[  214.823174][T10606] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.1211'.
[  214.969290][T10608] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1212'.
[  215.101199][   T52] hsr_slave_0: left promiscuous mode
[  215.108552][   T52] hsr_slave_1: left promiscuous mode
[  215.124892][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  215.152837][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  215.177597][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  215.202813][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  215.282434][   T52] veth1_macvtap: left promiscuous mode
[  215.293722][   T52] veth0_macvtap: left promiscuous mode
[  215.301663][   T52] veth1_vlan: left promiscuous mode
[  215.313707][   T52] veth0_vlan: left promiscuous mode
[  216.113216][   T52] team0 (unregistering): Port device team_slave_1 removed
[  216.194919][   T52] team0 (unregistering): Port device team_slave_0 removed
[  216.696056][ T5832] Bluetooth: hci1: command tx timeout
[  216.952064][T10613] netlink: 'syz.2.1213': attribute type 66 has an invalid length.
[  216.981224][T10600] lo speed is unknown, defaulting to 1000
[  216.992168][T10621] bridge0: port 3(batadv1) entered blocking state
[  216.999378][T10621] bridge0: port 3(batadv1) entered disabled state
[  217.033964][T10621] batadv1: entered allmulticast mode
[  217.040490][T10621] batadv1: entered promiscuous mode
[  217.060646][T10620] bridge0: port 4(batadv2) entered blocking state
[  217.117297][T10624] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8
[  217.123893][T10620] bridge0: port 4(batadv2) entered disabled state
[  217.134416][T10620] batadv2: entered allmulticast mode
[  217.145605][T10620] batadv2: entered promiscuous mode
[  217.152110][ T1051] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  217.182423][T10625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1217'.
[  217.448082][T10642] lo speed is unknown, defaulting to 1000
[  217.451334][T10644] netlink: 'syz.2.1220': attribute type 4 has an invalid length.
[  217.514065][T10644] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1220'.
[  217.535616][T10600] chnl_net:caif_netlink_parms(): no params data found
[  217.552260][   T35] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  217.562324][   T35] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  217.702934][   T35] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  217.712588][   T35] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  217.887312][T10600] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.937423][T10600] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.959547][T10600] bridge_slave_0: entered allmulticast mode
[  217.985205][T10600] bridge_slave_0: entered promiscuous mode
[  218.015208][T10600] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.043907][T10600] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.051181][T10600] bridge_slave_1: entered allmulticast mode
[  218.070712][T10600] bridge_slave_1: entered promiscuous mode
[  218.087473][T10642] lo speed is unknown, defaulting to 1000
[  218.094063][T10659] tap0: tun_chr_ioctl cmd 1074025673
[  218.284730][T10600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  218.324994][T10600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  218.509550][T10600] team0: Port device team_slave_0 added
[  218.535343][T10600] team0: Port device team_slave_1 added
[  218.764445][ T5832] Bluetooth: hci1: command tx timeout
[  218.786833][T10600] batman_adv: batadv0: Adding interface: batadv_slave_0
[  218.884332][T10600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.918217][T10600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  218.931782][T10600] batman_adv: batadv0: Adding interface: batadv_slave_1
[  218.939414][T10600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.966743][T10600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  219.148318][T10600] hsr_slave_0: entered promiscuous mode
[  219.179341][T10600] hsr_slave_1: entered promiscuous mode
[  219.216206][T10600] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  219.234147][T10600] Cannot create hsr debugfs directory
[  219.736601][T10709] xt_l2tp: invalid flags combination: 4
[  219.775926][T10706] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  219.815349][T10706] macsec1: entered promiscuous mode
[  219.826117][T10706] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  220.144952][T10725] ebt_limit: overflow, try lower: 570423552/2483027968
[  220.415616][T10735] lo speed is unknown, defaulting to 1000
[  220.703398][T10600] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  220.703691][T10741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1247'.
[  220.775969][T10600] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  220.835177][T10735] lo speed is unknown, defaulting to 1000
[  220.841810][T10600] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  220.848951][ T5832] Bluetooth: hci1: command tx timeout
[  220.896519][T10600] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  221.168195][T10761] vlan2: entered allmulticast mode
[  221.194354][T10759] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  221.232505][T10600] 8021q: adding VLAN 0 to HW filter on device bond0
[  221.238890][T10761] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  221.264656][T10600] 8021q: adding VLAN 0 to HW filter on device team0
[  221.275338][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.282440][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  221.323152][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.330320][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  221.854092][T10600] 8021q: adding VLAN 0 to HW filter on device batadv0
[  221.915237][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1257'.
[  221.933658][T10789] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1257'.
[  221.949730][T10600] veth0_vlan: entered promiscuous mode
[  221.955555][T10789] netlink: 'syz.5.1257': attribute type 1 has an invalid length.
[  221.970301][T10600] veth1_vlan: entered promiscuous mode
[  221.985006][T10791] vcan0: tx address claim with dlc 1
[  221.995194][T10600] veth0_macvtap: entered promiscuous mode
[  222.004026][T10600] veth1_macvtap: entered promiscuous mode
[  222.020283][T10600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.030805][T10600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.040719][T10600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.051421][T10600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.062520][T10600] batman_adv: batadv0: Interface activated: batadv_slave_0
[  222.094896][T10789] netlink: 'syz.5.1257': attribute type 9 has an invalid length.
[  222.156657][T10600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  222.167911][T10600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.193970][T10600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  222.224262][T10600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.261300][T10600] batman_adv: batadv0: Interface activated: batadv_slave_1
[  222.320227][T10600] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  222.353406][T10600] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  222.375017][T10600] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  222.395495][T10600] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  222.679783][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.724714][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.772135][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.788543][T10821] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1266'.
[  222.799397][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'.
[  222.804812][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.829459][T10818] xt_time: invalid argument - start or stop time greater than 23:59:59
[  222.923799][ T5832] Bluetooth: hci1: command tx timeout
[  222.925410][T10823] netlink: 'syz.3.1267': attribute type 3 has an invalid length.
[  222.963668][T10823] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1267'.
[  223.146300][T10630] ==================================================================
[  223.154411][T10630] BUG: KASAN: slab-use-after-free in __mutex_lock+0x7fb/0xee0
[  223.161898][T10630] Read of size 8 at addr ffff888053c9c060 by task khidpd_04000003/10630
[  223.170244][T10630] 
[  223.172592][T10630] CPU: 1 UID: 0 PID: 10630 Comm: khidpd_04000003 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0
[  223.183801][T10630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  223.193874][T10630] Call Trace:
[  223.197180][T10630]  <TASK>
[  223.200117][T10630]  dump_stack_lvl+0x241/0x360
[  223.204827][T10630]  ? __pfx_dump_stack_lvl+0x10/0x10
[  223.210047][T10630]  ? __pfx__printk+0x10/0x10
[  223.214662][T10630]  ? _printk+0xd5/0x120
[  223.218844][T10630]  ? __virt_addr_valid+0x183/0x530
[  223.223978][T10630]  ? __virt_addr_valid+0x183/0x530
[  223.229112][T10630]  print_report+0x169/0x550
[  223.233637][T10630]  ? __virt_addr_valid+0x183/0x530
[  223.238762][T10630]  ? __virt_addr_valid+0x183/0x530
[  223.243892][T10630]  ? __virt_addr_valid+0x45f/0x530
[  223.249033][T10630]  ? __phys_addr+0xba/0x170
[  223.253554][T10630]  ? __mutex_lock+0x7fb/0xee0
[  223.258255][T10630]  kasan_report+0x143/0x180
[  223.262778][T10630]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  223.268696][T10630]  ? __mutex_lock+0x7fb/0xee0
[  223.273406][T10630]  __mutex_lock+0x7fb/0xee0
[  223.277930][T10630]  ? __mutex_lock+0x5ef/0xee0
[  223.282630][T10630]  ? l2cap_unregister_user+0x6a/0x1c0
[  223.289501][T10630]  ? __pfx___mutex_lock+0x10/0x10
[  223.294551][T10630]  ? __pfx___timer_delete_sync+0x10/0x10
[  223.300205][T10630]  l2cap_unregister_user+0x6a/0x1c0
[  223.305431][T10630]  hidp_session_thread+0x450/0x490
[  223.310559][T10630]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  223.316467][T10630]  ? __pfx_hidp_session_thread+0x10/0x10
[  223.322126][T10630]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  223.328040][T10630]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  223.334309][T10630]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  223.340573][T10630]  ? __kthread_parkme+0x169/0x1d0
[  223.345624][T10630]  ? __pfx_hidp_session_thread+0x10/0x10
[  223.351288][T10630]  kthread+0x2f0/0x390
[  223.355396][T10630]  ? __pfx_hidp_session_thread+0x10/0x10
[  223.361056][T10630]  ? __pfx_kthread+0x10/0x10
[  223.365673][T10630]  ret_from_fork+0x4b/0x80
[  223.370107][T10630]  ? __pfx_kthread+0x10/0x10
[  223.374715][T10630]  ret_from_fork_asm+0x1a/0x30
[  223.379500][T10630]  </TASK>
[  223.382532][T10630] 
[  223.384865][T10630] Allocated by task 10600:
[  223.389285][T10630]  kasan_save_track+0x3f/0x80
[  223.393995][T10630]  __kasan_kmalloc+0x98/0xb0
[  223.398603][T10630]  __kmalloc_noprof+0x285/0x4c0
[  223.402357][T10846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1273'.
[  223.403495][T10630]  hci_alloc_dev_priv+0x27/0x2030
[  223.403521][T10630]  vhci_create_device+0x116/0x6a0
[  223.403543][T10630]  vhci_write+0x3cf/0x490
[  223.403562][T10630]  vfs_write+0xaeb/0xd30
[  223.403577][T10630]  ksys_write+0x18f/0x2b0
[  223.403590][T10630]  do_syscall_64+0xf3/0x230
[  223.403608][T10630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.403628][T10630] 
[  223.403633][T10630] Freed by task 10600:
[  223.403642][T10630]  kasan_save_track+0x3f/0x80
[  223.403659][T10630]  kasan_save_free_info+0x40/0x50
[  223.403680][T10630]  __kasan_slab_free+0x59/0x70
[  223.403697][T10630]  kfree+0x196/0x430
[  223.403715][T10630]  hci_release_dev+0x1525/0x16b0
[  223.403733][T10630]  bt_host_release+0x83/0x90
[  223.403755][T10630]  device_release+0x99/0x1c0
[  223.403774][T10630]  kobject_put+0x22f/0x480
[  223.403793][T10630]  vhci_release+0x88/0xd0
[  223.403814][T10630]  __fput+0x23c/0xa50
[  223.403837][T10630]  task_work_run+0x24f/0x310
[  223.403857][T10630]  do_exit+0xa2f/0x28e0
[  223.506229][T10630]  do_group_exit+0x207/0x2c0
[  223.510858][T10630]  __x64_sys_exit_group+0x3f/0x40
[  223.515900][T10630]  x64_sys_call+0x26a8/0x26b0
[  223.520592][T10630]  do_syscall_64+0xf3/0x230
[  223.525111][T10630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.531021][T10630] 
[  223.533351][T10630] Last potentially related work creation:
[  223.539079][T10630]  kasan_save_stack+0x3f/0x60
[  223.543779][T10630]  __kasan_record_aux_stack+0xac/0xc0
[  223.549183][T10630]  insert_work+0x3e/0x330
[  223.553523][T10630]  __queue_work+0xb66/0xf50
[  223.558128][T10630]  queue_work_on+0x1c2/0x380
[  223.562732][T10630]  process_scheduled_works+0xa66/0x1840
[  223.568307][T10630]  worker_thread+0x870/0xd30
[  223.572919][T10630]  kthread+0x2f0/0x390
[  223.577002][T10630]  ret_from_fork+0x4b/0x80
[  223.581432][T10630]  ret_from_fork_asm+0x1a/0x30
[  223.586208][T10630] 
[  223.588538][T10630] Second to last potentially related work creation:
[  223.595127][T10630]  kasan_save_stack+0x3f/0x60
[  223.599820][T10630]  __kasan_record_aux_stack+0xac/0xc0
[  223.605214][T10630]  insert_work+0x3e/0x330
[  223.609554][T10630]  __queue_work+0xc8b/0xf50
[  223.614070][T10630]  call_timer_fn+0x187/0x650
[  223.618677][T10630]  __run_timer_base+0x695/0x8e0
[  223.623539][T10630]  run_timer_softirq+0xb7/0x170
[  223.628404][T10630]  handle_softirqs+0x2d4/0x9b0
[  223.633188][T10630]  __irq_exit_rcu+0xf7/0x220
[  223.637795][T10630]  irq_exit_rcu+0x9/0x30
[  223.642064][T10630]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  223.647711][T10630]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  223.653709][T10630] 
[  223.656039][T10630] The buggy address belongs to the object at ffff888053c9c000
[  223.656039][T10630]  which belongs to the cache kmalloc-8k of size 8192
[  223.670105][T10630] The buggy address is located 96 bytes inside of
[  223.670105][T10630]  freed 8192-byte region [ffff888053c9c000, ffff888053c9e000)
[  223.683897][T10630] 
[  223.686214][T10630] The buggy address belongs to the physical page:
[  223.692607][T10630] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x53c98
[  223.701357][T10630] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  223.709856][T10630] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  223.717402][T10630] page_type: f5(slab)
[  223.721375][T10630] raw: 00fff00000000040 ffff88801ac42280 dead000000000122 0000000000000000
[  223.729952][T10630] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000
[  223.738522][T10630] head: 00fff00000000040 ffff88801ac42280 dead000000000122 0000000000000000
[  223.747180][T10630] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000
[  223.755837][T10630] head: 00fff00000000003 ffffea00014f2601 ffffffffffffffff 0000000000000000
[  223.764493][T10630] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  223.773145][T10630] page dumped because: kasan: bad access detected
[  223.779575][T10630] page_owner tracks the page as allocated
[  223.785274][T10630] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10572, tgid 10565 (syz.2.1203), ts 214115357919, free_ts 214113309529
[  223.808542][T10630]  post_alloc_hook+0x1f3/0x230
[  223.813305][T10630]  get_page_from_freelist+0x365c/0x37a0
[  223.818846][T10630]  __alloc_pages_noprof+0x292/0x710
[  223.824035][T10630]  alloc_pages_mpol_noprof+0x3e8/0x680
[  223.829484][T10630]  alloc_slab_page+0x6a/0x110
[  223.834152][T10630]  allocate_slab+0x5a/0x2b0
[  223.838644][T10630]  ___slab_alloc+0xc27/0x14a0
[  223.843318][T10630]  __slab_alloc+0x58/0xa0
[  223.847658][T10630]  __kmalloc_node_noprof+0x2ee/0x4d0
[  223.852937][T10630]  __kvmalloc_node_noprof+0x72/0x190
[  223.858212][T10630]  fq_resize+0x12f/0x8a0
[  223.862448][T10630]  fq_change+0xb7f/0x2180
[  223.866769][T10630]  fq_init+0x877/0xd00
[  223.870829][T10630]  qdisc_create+0x9d4/0x11a0
[  223.875406][T10630]  tc_modify_qdisc+0xa26/0x1e40
[  223.880255][T10630]  rtnetlink_rcv_msg+0x73f/0xcf0
[  223.885186][T10630] page last free pid 5839 tgid 5839 stack trace:
[  223.891498][T10630]  free_unref_page+0xd3f/0x1010
[  223.896345][T10630]  __put_partials+0x160/0x1c0
[  223.901127][T10630]  put_cpu_partial+0x17c/0x250
[  223.905884][T10630]  __slab_free+0x290/0x380
[  223.910287][T10630]  qlist_free_all+0x9a/0x140
[  223.914870][T10630]  kasan_quarantine_reduce+0x14f/0x170
[  223.920403][T10630]  __kasan_slab_alloc+0x23/0x80
[  223.925246][T10630]  kmem_cache_alloc_noprof+0x1d9/0x380
[  223.930696][T10630]  ptlock_alloc+0x20/0x70
[  223.935011][T10630]  pte_alloc_one+0xd3/0x510
[  223.939503][T10630]  __pte_alloc+0x79/0x3c0
[  223.943824][T10630]  copy_pmd_range+0x6fb4/0x77a0
[  223.948665][T10630]  copy_page_range+0x99f/0xe90
[  223.953416][T10630]  copy_mm+0x11c7/0x1f90
[  223.957644][T10630]  copy_process+0x1845/0x3d50
[  223.962483][T10630]  kernel_clone+0x226/0x8e0
[  223.966974][T10630] 
[  223.969286][T10630] Memory state around the buggy address:
[  223.974901][T10630]  ffff888053c9bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  223.982948][T10630]  ffff888053c9bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  223.990991][T10630] >ffff888053c9c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  223.999055][T10630]                                                        ^
[  224.006231][T10630]  ffff888053c9c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  224.014279][T10630]  ffff888053c9c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  224.022325][T10630] ==================================================================
[  224.035187][T10630] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  224.042412][T10630] CPU: 1 UID: 0 PID: 10630 Comm: khidpd_04000003 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0
[  224.053710][T10630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  224.063785][T10630] Call Trace:
[  224.067071][T10630]  <TASK>
[  224.070010][T10630]  dump_stack_lvl+0x241/0x360
[  224.074703][T10630]  ? __pfx_dump_stack_lvl+0x10/0x10
[  224.079901][T10630]  ? __pfx__printk+0x10/0x10
[  224.084484][T10630]  ? vscnprintf+0x5d/0x90
[  224.088808][T10630]  panic+0x349/0x880
[  224.092692][T10630]  ? check_panic_on_warn+0x21/0xb0
[  224.097797][T10630]  ? __pfx_panic+0x10/0x10
[  224.102206][T10630]  ? mark_lock+0x9a/0x360
[  224.106529][T10630]  ? _raw_spin_unlock_irqrestore+0xd8/0x140
[  224.112409][T10630]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  224.118294][T10630]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  224.124619][T10630]  ? print_report+0x502/0x550
[  224.129292][T10630]  check_panic_on_warn+0x86/0xb0
[  224.134227][T10630]  ? __mutex_lock+0x7fb/0xee0
[  224.138894][T10630]  end_report+0x77/0x160
[  224.143128][T10630]  kasan_report+0x154/0x180
[  224.147621][T10630]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  224.153507][T10630]  ? __mutex_lock+0x7fb/0xee0
[  224.158179][T10630]  __mutex_lock+0x7fb/0xee0
[  224.162674][T10630]  ? __mutex_lock+0x5ef/0xee0
[  224.167691][T10630]  ? l2cap_unregister_user+0x6a/0x1c0
[  224.173054][T10630]  ? __pfx___mutex_lock+0x10/0x10
[  224.178071][T10630]  ? __pfx___timer_delete_sync+0x10/0x10
[  224.183696][T10630]  l2cap_unregister_user+0x6a/0x1c0
[  224.188883][T10630]  hidp_session_thread+0x450/0x490
[  224.193984][T10630]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  224.199867][T10630]  ? __pfx_hidp_session_thread+0x10/0x10
[  224.205497][T10630]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  224.211376][T10630]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  224.217608][T10630]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  224.223846][T10630]  ? __kthread_parkme+0x169/0x1d0
[  224.228860][T10630]  ? __pfx_hidp_session_thread+0x10/0x10
[  224.234486][T10630]  kthread+0x2f0/0x390
[  224.238546][T10630]  ? __pfx_hidp_session_thread+0x10/0x10
[  224.244171][T10630]  ? __pfx_kthread+0x10/0x10
[  224.248749][T10630]  ret_from_fork+0x4b/0x80
[  224.253156][T10630]  ? __pfx_kthread+0x10/0x10
[  224.258259][T10630]  ret_from_fork_asm+0x1a/0x30
[  224.263016][T10630]  </TASK>
[  224.266276][T10630] Kernel Offset: disabled
[  224.270594][T10630] Rebooting in 86400 seconds..