last executing test programs:

1m28.755816986s ago: executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r2=>r1, @ANYBLOB="0000000000000000b70800000000e0ff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000780), 0x20000000}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x39596cc5be47277d}}}}]}, 0x40}}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r10}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'})
socket$netlink(0x10, 0x3, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
r12 = socket(0x10, 0x803, 0x0)
write$binfmt_script(r12, 0x0, 0xfffffe5d)
getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r13, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64"], 0x3c}}, 0x0)
getsockname$packet(r12, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)
socket(0x10, 0x80002, 0x0)

1m13.450282849s ago: executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r2=>r1, @ANYBLOB="0000000000000000b70800000000e0ff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000780), 0x20000000}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x39596cc5be47277d}}}}]}, 0x40}}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r10}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'})
socket$netlink(0x10, 0x3, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
r12 = socket(0x10, 0x803, 0x0)
write$binfmt_script(r12, 0x0, 0xfffffe5d)
getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r13, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64"], 0x3c}}, 0x0)
getsockname$packet(r12, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)
socket(0x10, 0x80002, 0x0)

1m0.722507292s ago: executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r2=>r1, @ANYBLOB="0000000000000000b70800000000e0ff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000780), 0x20000000}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x39596cc5be47277d}}}}]}, 0x40}}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r10}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'})
socket$netlink(0x10, 0x3, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
r12 = socket(0x10, 0x803, 0x0)
write$binfmt_script(r12, 0x0, 0xfffffe5d)
getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r13, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64"], 0x3c}}, 0x0)
getsockname$packet(r12, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)
socket(0x10, 0x80002, 0x0)

32.857194947s ago: executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r2=>r1, @ANYBLOB="0000000000000000b70800000000e0ff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000780), 0x20000000}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x39596cc5be47277d}}}}]}, 0x40}}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r10}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'})
socket$netlink(0x10, 0x3, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
r12 = socket(0x10, 0x803, 0x0)
write$binfmt_script(r12, 0x0, 0xfffffe5d)
getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r13, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64"], 0x3c}}, 0x0)
getsockname$packet(r12, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)
socket(0x10, 0x80002, 0x0)

15.691189413s ago: executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r2=>r1, @ANYBLOB="0000000000000000b70800000000e0ff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000780), 0x20000000}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x39596cc5be47277d}}}}]}, 0x40}}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r10}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'})
socket$netlink(0x10, 0x3, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
r12 = socket(0x10, 0x803, 0x0)
write$binfmt_script(r12, 0x0, 0xfffffe5d)
getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r13, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64"], 0x3c}}, 0x0)
getsockname$packet(r12, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)
socket(0x10, 0x80002, 0x0)

2.912684663s ago: executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r2=>r1, @ANYBLOB="0000000000000000b70800000000e0ff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000780), 0x20000000}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x39596cc5be47277d}}}}]}, 0x40}}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r10}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'})
socket$netlink(0x10, 0x3, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
r12 = socket(0x10, 0x803, 0x0)
write$binfmt_script(r12, 0x0, 0xfffffe5d)
getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r13, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64"], 0x3c}}, 0x0)
getsockname$packet(r12, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)
socket(0x10, 0x80002, 0x0)

2.38717973s ago: executing program 4:
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000380)={0x9, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x47})

2.030830565s ago: executing program 0:
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6000, &(0x7f0000000100)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWSET={0x14}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x68}}, 0x0)

1.906519958s ago: executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
r3 = socket$inet6(0xa, 0x0, 0x87f) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async)
socket$packet(0x11, 0x3, 0x300) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xc5594286d776c8c5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) (async, rerun: 64)
r5 = socket$packet(0x11, 0x3, 0x300) (rerun: 64)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
syz_emit_ethernet(0x78, &(0x7f0000000480)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a45d", 0x42, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @remote, @private1, [@hopopts, @routing], "3c15"}}}}}}}, 0x0) (async)
openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
bind$bt_l2cap(r6, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async, rerun: 32)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x9c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x67, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x9c}}, 0x0) (async, rerun: 64)
r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) (async)
ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f0000000140))

1.612165317s ago: executing program 3:
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x18, 0x2, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x4}]}, 0x18}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d00000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
recvmmsg(r2, &(0x7f0000005c80), 0x400030f, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r3=>0x0, 0x0})
close(r3)
socket$kcm(0x10, 0x2, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
unshare(0x20000400)
setsockopt$sock_attach_bpf(r3, 0x10e, 0x2, &(0x7f0000000000)=r4, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f000000c140), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x480d0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007910530000000000070000000000000095000000000000004583b4edbf0d22a8fedb7d214261a7327520275ac0d7e15e29ae267e89bffa4ea712dc29a0b1db48b3484a67039abf5abf46d771f03978610629b1b6b93f7c57cb96787879b9675378baf4efcb89a68d91dc41462c2776a68ae4cde922cb84ee422a2e484bfc9692829fb8abe3198f5e8761adcd3017c055ec0fb64a3711a059afeed322deddc0a5702555b58b2fd35c8fda0176e240e74282a48310f18fbf4e31"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)

1.479843246s ago: executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002"], 0x0, 0x4e}, 0x20)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1}, 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff})
sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x2, 0x6, 0x7f, 0x6, 0x222, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_spirange={0x2, 0x10, 0x4d5, 0x4d3}, @sadb_address={0x5, 0x7, 0x33, 0x110, 0x0, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffd}}, @sadb_x_sec_ctx={0xa, 0x18, 0x5, 0x1f, 0x44, "3ab7e20634820e6770d8888ee2fe431a731f1edf54bd48d6391f92b47718f0c8b045cde19e10671ba24001b9d874e664db6364c3e5708ff8ce8e30ab4ba6b2ede7f53bb5"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6aaa}, @in={0x2, 0x4e24, @remote}}, @sadb_x_filter={0x5, 0x1a, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf, 0x0, 0x4}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}, @sadb_key={0x201, 0x8, 0x8000, 0x0, "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"}, @sadb_x_nat_t_type={0x1, 0x14, 0x3f}]}, 0x1110}}, 0x20000014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8)
write$binfmt_elf64(r0, &(0x7f0000001600)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7f, 0xff, 0x7f, 0x6, 0x2, 0x6, 0x1f, 0x16c, 0x40, 0x9f, 0x7, 0x8, 0x38, 0x2, 0x8, 0x81, 0x4}, [{0x4, 0x400, 0xff, 0x7, 0x3, 0x6, 0x2, 0x7c51}], "333b8e4dc1976009c41d875f8e38bb8056511e8fd93194e6370a90082814ebc802abc6d4e4e90dedcd3b300a327a3fbc9f351c29725da015bc2257b2c1ea6c68aac9cb6264bb0bdad88e84fa02dfae6a0685ba3f28d8e13cf653e670272a43bc28daae5403eca7b1966995abce7f09a4f78d030ad19563a2cccee3c17251767c133f2910f857aac1e714a8ea0949383af56e62", ['\x00', '\x00']}, 0x30b)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)

1.29036724s ago: executing program 0:
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, 0x0, 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x7c, 0x30, 0xb, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x28}, @TCA_CT_NAT_PORT_MAX={0x6}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_MARK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)
sendfile(r3, r4, 0x0, 0x7ffff000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = accept$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106}, 0x18)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r9}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
ppoll(&(0x7f00000001c0)=[{r4, 0x8000}, {r3, 0x2000}, {r5, 0x802c}, {r7, 0x90}, {r2, 0x4}, {r2, 0x4464}, {r2, 0x8400}, {r9}, {r3, 0x24}, {0xffffffffffffffff, 0x2048}], 0xa, &(0x7f0000000240), &(0x7f0000000280)={[0x7]}, 0x8)
setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r6, &(0x7f0000000580)="03", 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000208500000050000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={0x0, r10}, 0x10)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0x22, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000140)='<', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @rand_addr=0x64010100}, 0x10)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000280), 0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}, 0x2, 0x8000, 0x800, 0x80000000, 0x79, 0x7, 0x5}, 0x9c)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r11, 0x84, 0xa, &(0x7f0000000400)={0x3f, 0x100, 0x2, 0x2, 0x6, 0xd79, 0x9, 0x1f}, 0x20)

1.200473484s ago: executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800)
getpeername$packet(0xffffffffffffffff, &(0x7f0000002480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002840)={'gretap0\x00', &(0x7f0000002740)={'erspan0\x00', 0x0, 0x1, 0x80, 0x7, 0x4f, {{0x21, 0x4, 0x0, 0x33, 0x84, 0x0, 0x0, 0xff, 0x29, 0x0, @broadcast, @multicast1, {[@ssrr={0x89, 0x3, 0xa1}, @timestamp_prespec={0x44, 0x3c, 0xe, 0x3, 0x0, [{@local, 0x2}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x73}, {@loopback, 0x6}, {@broadcast, 0xffffcd7d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @rr={0x7, 0x3, 0x4c}, @rr={0x7, 0xf, 0x9c, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @timestamp_prespec={0x44, 0xc, 0x47, 0x3, 0x6, [{@multicast1, 0x7}]}, @ssrr={0x89, 0x13, 0x75, [@broadcast, @broadcast, @loopback, @multicast1]}]}}}}})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000e00)={'batadv0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c80)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0x0, {@in6_addr=@loopback, 0x800}}}]}, 0x38}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x0, 0x10}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x90)
socket$inet6(0xa, 0x2, 0x0)
r6 = socket$packet(0x11, 0x0, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r7=>0x0})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x2, 0x6}, 0xfffffffffffffdd9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff44}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r8}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r10, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}}, 0x0)
socket$kcm(0x2, 0xa, 0x2)
recvmsg(0xffffffffffffffff, 0x0, 0x0)

1.058660985s ago: executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0x1, 0x4)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="2801"], 0x128}, 0x0)
unshare(0x20000400)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r5, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$802154_dgram(r1, &(0x7f00000008c0)={&(0x7f0000000740)={0x24, @short={0x3}}, 0x8, &(0x7f0000000780)={&(0x7f0000000840)="1d922e4543d1eb9f5e8faf498be2e53ab430f816f0840aab51b2f853c95ffb24e04eb462fa89a8d07ba2b290c340f5b0ea7333c956edd9091196165eee3aa0b9b4f8f88f9ba406e9336ea1e8ef1c4a48e1e8c4fcfddbf2f42235bacfc28ee4161f90ebc44eb83fd2af15478631", 0x6d}}, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000001086ab0c78dbdc368291f44745107eb19278b72c976a606"], 0x10)

909.943713ms ago: executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x1, &(0x7f0000000280)=@raw=[@generic={0xc6}], &(0x7f0000000040)='GPL\x00', 0x41, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

854.592875ms ago: executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3888a80055002f03020000000000000007000000", @ANYRES32, @ANYBLOB="200002"], 0x38}}, 0x0)

797.012495ms ago: executing program 4:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0x62, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

784.211348ms ago: executing program 1:
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e8, &(0x7f0000000340)="1db553cd26c064059da704a57ad356366c3abdc927221325d2b0058c673bb1ab77cedbb884b4")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0xa, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000080000000001a000c7095004343fc6695a6fd954b4a1b4268df8e80139d26c7447b797c35dba70dea13312631e338975b10b39adc8be1c7a58825a5814c157fddd1a5c59fdf699cc2dc6ce5b500a480bdef17a6bc44400e28b8d74ffbcd7c65fc9c3bc3dccc34546639735243fe78947c17b3ea6587d70ceed4f41e31d70d14b187241c17832df1b956f10ad2e3d6aaf25d3ef0e29f0392bf81d90c33"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket(0x15, 0x5, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x2}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)="e9bed67a875f9754d56a2007b21b77a4a930e0ebf25947b8834fa96f66693cc57c08c85c2eca2e6d29c3c431ac6e5ad1f904fc87c1b089599113ae63b157e7a81c5fe1422a96002f4c696f2051f87a9e55ee41c15fd4225f50f5a09d0c5cf58a6b9ed5172ef2aae1299dc12a9e042546f35b00bf3de64ec63ace660000008a23c8cb4d092c2d2911755d20dd1f1105802750485e195e42a7f4220800c3bacc1041446b83e9a64b853f0061e8430c6fc80e5ad96f1e0781339b947a6de461a5161c6b62889d6d84dd166de6e93abb2a1c4d81", 0xd2}}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
close(r4)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x9, 0x7})
close(r4)
unshare(0x400)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%-5lx  \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000de6ca51021c1ab7bae0c52362f9a0000000000000000000095000000"], &(0x7f0000000400)='syzkaller\x00'}, 0x90)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={0xffffffffffffffff, r7}, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0xfffffffffffffffe}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}}}, 0xe8)
close(0xffffffffffffffff)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000800)={{{@in=@initdev, @in=@remote}}, {{@in=@initdev}, 0x0, @in=@private}}, &(0x7f00000002c0)=0xfffffffffffffe10)
write$cgroup_pid(r9, &(0x7f0000000140), 0x12)
write$cgroup_pid(r5, &(0x7f00000000c0), 0x12)

718.528452ms ago: executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$inet_sctp(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="0cc4c53e52cd4f1e2787e1cd1e55684e749d3b21ae068680fadc5cc648c79186f3d98ccd3a5b1732936dcf74538ffc97a9f82112023f2567972515712c7ec4e0ed2220f5425ba6ed76928e28b07ec50b135954b94c32030210aa0e2f4645f46be81d746c6b", 0x65}, {&(0x7f0000000340)="9c89ca312f027074ae7d79f183f678fc695c50a34d0e4133881f084b6d440ab6868186a9eabf0b8e5760adbc5a349da9d1620af787745bee2d6d2e6a84ee1fe7132e692fed0e0fe948d775263f5b67a91c4bd74ceeb68e733b2389262377b79861ddf5d86ca1a6388ab7257d5f1271a35a8c79a96e3e28f094fdfa96736ef41516bd3fbec3fd955247007a18dd527d224592b6fc09a05d5628e73b", 0x7fffef9b}], 0x2}, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000004080)={@ifindex, 0xffffffffffffffff, 0x7, 0x10}, 0x20)
write$cgroup_int(r0, &(0x7f0000000040), 0xfea0)
openat$cgroup_ro(r0, &(0x7f0000000500)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}}, 0x8000)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000b72a8d83163a987bf83d03e68c385580960fa4d02657a21990a6f47610ff7fd0adf60d40e1da910edf93c52d5f8467d6bcb3d458b957dd7cf3fda63cf9000000000000090000000000250a47b1090f74851c9fc12f91fb95a5e18371246f44bf38601af76aeda80d5dc0abd4a700440aa716de6d24fe81316811d9fc7bc08c29dcb3d8e450e6b65962be5087ea22e971400376989ed36192e3fc1a3b032566826f24c25b3c0dc4233c62ba1f89ce8ae6cb72f6b974fdbd4c13b765aa78df00ed3dc6bd0846e81579c87c3fd703fa1356ffc517810a1c556cfe43bb5e21f00f6a9dcefc6c8277679d47cfbabde470571858d055f06af1a7a71be3bec5cf5f2bf9", @ANYRES32, @ANYRESOCT=0x0], 0x38}}, 0xc820)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0x0, 0x7ff80000000000, 0x2, 0x80000000})
r4 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60122d9222363a0000000000000000000000ffffac14"], 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
epoll_create(0x9)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c0000080a05000000000000000000020000000900020073797a32000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0x54}}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%ps    \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000280), &(0x7f00000002c0)='%pi6   \x00'}, 0x20)
r7 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000680)={0x42, 0x4, 0x3}, 0x10)
socket$tipc(0x1e, 0x2, 0x0)

654.615346ms ago: executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000900", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x24}}, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4005003}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004800)

614.289649ms ago: executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000008c0)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="94000500", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r2, @ANYBLOB], 0x94}}, 0x0)

581.135799ms ago: executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x12)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001080)={0x0, 0x3000000, &(0x7f0000001040)={&(0x7f0000000fc0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x2000000}, 0x0)

537.435278ms ago: executing program 1:
unshare(0x22020600)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002200)={<r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0xb0000014})
epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
r3 = socket$kcm(0x10, 0x2, 0x4)
recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r5, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)}, 0x0)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @broadcast}, 0x10)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000080), 0x4)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv4_newaddr={0x3c, 0x14, 0x509, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0xb, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x800, 0x9}}]}, 0x3c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26000000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f00000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x26}, 0x48)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000200)=0x41c16f48c89e823e, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x4bc}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

462.854718ms ago: executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0xfffffffe, 0x17, &(0x7f0000000580)=""/23, 0x41100, 0x6, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xe57a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2}, 0x48)
setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
socket$kcm(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r4=>0x0})
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x29}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000001c0)=ANY=[], 0x0}, 0x90)
socket$kcm(0x10, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000110001586500"/20, @ANYRES32=r4], 0x20}}, 0x0)

388.868336ms ago: executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r0, 0x34, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0]}, 0x40)
r3 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000001c0), 0x12)
readv(r1, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
write$binfmt_elf64(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xe1, 0xdd, 0x4, 0x7, 0x3, 0x3, 0x8000000, 0x24, 0x40, 0x81, 0x1, 0x9, 0x38, 0x2, 0x0, 0x401}, [{0x6474e551, 0x22ad, 0xff, 0x9, 0x8, 0x263, 0x4, 0x2000000000000}], '~/1', ['\x00', '\x00']}, 0x27b)
socket(0x10, 0x80002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b40000000000000073114b000000000016000000000001009500740000000000ba56e23690a87d00935e6c02bdc1aa666714e5893645da93e92b81970ec7"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x21)
socket$netlink(0x10, 0x3, 0xa)
r4 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'gretap0\x00', <r5=>0x0, 0x1, 0x1, 0x10000, 0x0, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x0, 0x0, 0x9, 0x4, 0x0, @broadcast, @empty}}}})
ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000000c0)={@local, 0xc, r5})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10)
socket(0xa, 0x2, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wg2\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r5}, 0x90)
close(r7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380))

210.303197ms ago: executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000102085000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000d9850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff7ff0}, {}, {0x7, 0x0, 0x0, 0x7}, {}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x4, 0x1, 0xb, 0x1, 0x9, 0x10}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) (async)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='geneve1\x00', 0x10) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xb}, 0x90) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r1) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fddbdf250a00000008000200080000000400018048000180060001000a000000050002000100000008000700", @ANYRES8=r0, @ANYBLOB="140004100000000000c41e2ba40200000000000000060008000000060001000200000008000400ff0f000008000400ff00000005000500060000000800040003000000542105a0d6f924ed4620f26b71a34e97521507ea07adaffee6c8de5f52ef1434a7330362a9a81378badcd41c20d8283817d7c7d9ef416b1bf07fa13cca247ab6d10309c1def7668c0d5d59879722b6e9ed86aa0dbddd8b2a868fdca2d6cb3e0055c91e6fbc42652ae23282a91061de927400"/198], 0x88}, 0x1, 0x0, 0x0, 0x41141}, 0x48001) (async)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0xb00, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000b060101000000000000000000000000100007800c00018008000140e000000205000100070000000900020073797a31"], 0x38}}, 0x0)

205.375226ms ago: executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000005200)={'erspan0\x00', &(0x7f00000051c0)=@ethtool_stats})
bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x2, 0x80001, 0x100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
r7 = accept4(r0, 0x0, 0x0, 0x0)
recvmsg$kcm(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/233, 0xe9}, {&(0x7f0000000540)=""/161, 0xa1}], 0x2}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='&\x00\x00\x00\a', @ANYRES16=r8], 0xd)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001f80)={<r9=>0x0, <r10=>0x0}, &(0x7f0000001fc0)=0xc)
r11 = getgid()
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000002000))
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002040)={<r12=>0x0, 0x0, <r13=>0x0}, &(0x7f0000002080)=0xc)
getpid()
r14 = getgid()
sendmmsg$unix(r4, &(0x7f0000002740)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000000240)="a76af7593f572a3dfe02ec5b8786e77d7fcdb3bc225130610011e70bd3d600d14f00cd7007a4d531bec90cdc326bffd9988940243e0f8bcf7a16ed6020ebf79a6f82f0267a615dc7858eba7e5794fa01327e831e66ad078336810994cf255a3e8ea21eab038ac7c569cff81980b28754dcbed068d673296d6e7777a7d680705f562b1cb343012e79f62936a630a20193fc0083c56b8b7075e7fab1b631899f5179c0dfd39f58d6601410b7d9d217ee02410c2b15fda19edf79d7386f65dad7a2de980a6e23f2d5734a405aef3430d0dd2a5fabb71edb4ee5391e53412c527980d6749d484d6fcdcb", 0xe8}], 0x2, &(0x7f0000000340)=[@cred={{0x1c}}], 0x20, 0x8040}}, {{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000400), 0x0, &(0x7f0000002840)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32, @ANYRES32=r7, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r6, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32, @ANYRES32=r7, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r6], 0x120, 0x4}}, {{&(0x7f0000001d80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001f40)=[{&(0x7f0000001e00)="f1e13df2cec871a57ca1cf98ce10335ea883177bab149353e51ca25a6230bdd6510f48c9e136b58bd18c02f0a8178ae58cf95a2fab36b314d7bd7d", 0x3b}, {&(0x7f0000001e40)="dbd7787c1e92cb4ce0473fa56f9cc23cd3609c4f0686e3d83fcc", 0x1a}, {&(0x7f0000001e80)="7b1e88f1ebee00482fed007a119427cc2463ebe13eadf4bee8e7e0f32d2283608d1cc432069a380756ffa990574b78210d0069b3f461d438cf9ba8f11adc0f47671ac96c92c3030e48d5a339d6da18b0c2d4edc7bfa19b38e3c1d27b855f782df6cfd37e771ea32503a882e33fb6869c30a2e3efc1431806f366da3e3cdf695bbda060366be74e563a06ab5ba79b63bbac", 0x91}], 0x3, &(0x7f0000001a40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r6, @ANYRES16=r12, @ANYRESOCT=r6, @ANYRES32=r5, @ANYRES32=r4, @ANYRESDEC=r13, @ANYRES32, @ANYRES32, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000000000000000800000100000002000000e902dd2b6c60ee98a58f3852b95e3297e9684513a391b6065131770189878282903e489527b3234b271434ad28b6bcd8476ba12009c1b5403eb49ccd9d74153aedc3dc21d3bb63aab7dadbf56ff78d9a9c674d0b325122218af694dddcf73a1ceadf24ead992514b0d54ef340fdad957f7e03f25b3070034e50fdc92d23c29595cb8662ef88449632c2f81fb8c57565530a1b16ccdd584389f3d749bd5930e", @ANYRES64=r7, @ANYRESHEX=r9, @ANYRES32=r13, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=r14, @ANYBLOB="000000002a33c2bc665f7f90060ac35a5a2bbc838f12baaa5655694b6feab2d98de742e89238d0b731bd9f623ea226233a65229bdb96409faea3cd5ae6a0a8c2e63582d21cdb98b6c44c2365c8eb1fe756bf4c5e343c65f5325f44deef125e434dfc37ff47c40c8d27"], 0xd0, 0x4000}}, {{&(0x7f00000021c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000002240)="0c428738598c66433a04acefa6fd254e1f039beec8fd5e9a5fc23d3f7a2357b433d66961bcb875c345b57cc74965c09e126e2d51c8a65eafe0072ff00ab25ed1903618d1a3bbb9b24c108ea64ee24e41f40eb7aa9a2a2587d8fd274590b75290b6d8c9980377cecc13205bf3f26685fbbae8eba2eaec8ac3da22fed9fddb15259be539f06abfa822cc9c5408353e6483c5f9d8939b7d09cf5ef296e93168231f156b838f450691be5b617151feb3ec27d142e37b832a91db4f5f9af769ae6b7bcd489c07f31551d9ff8cbf8d3e4e3a81a103221c20361ec6032481ae2290921bdfaeac93fb5660fae3332fbc8181f0426bc03e028e89", 0xf6}, {&(0x7f0000002340)="a1a8cee9d2466a0ff2", 0x9}, {&(0x7f0000002380)="0b9d2dd8d440c7e4a9238617471cd84d65bdffa97c82349091ba6b9bb774f398b40dbb736b3fc6c81bb3f9ab1bfe5f9a2f5d2ae5ed18a747930973424806c349b30436319e70b0cb2766c4772fde267715e658e4cac11d14a2a82299f84596200050cabfbb68d7876ea1173147f245a5816f297dc810a31b2ed82657e2e1f58589261452a20ace02755c42d59601f73b2e842e847a0960427c14e1064702a53aeb2e5668917ff7ccdcbfa88e82cba4c869384351fab27e820e650e560f2e7efd2d3ce1188b32fa166c26c17912c350df78f747e715a1", 0xd6}, {&(0x7f0000002480)="0df5da1b", 0x4}, {&(0x7f00000024c0)="356f7c0aef810f850bc6fc6f91b9073e943ca2167d235f060ba61120178ce12233d792b51a3d5e8033d6afeb60ff94867bac877ca3713f9c41b896e7056e368502c9bd1982ac8466e58624e6cad7ba0821f0cb92c7686cda7975ecfcc51dc326f96e7144be37473eb86ae7e2b38e88000956a9b481ea7ad8651e7306fe6737b3de58205c91b9681b39f1c72634e60d937f9bb08cfdfae3fbdf22d5ed9ba8aefe1a45b5dffa905909dccdea948433a99be438071b819214806146ec79ee67a4b3f5e0d13f1221574290be08", 0xcb}, {&(0x7f00000025c0)="9ccf5f7306548fd710af1f6d7681581bcf1c96354b63aceda5e5070a1ff741b2186a87f0170417642fd62b92c1a6b3032d0f879bc4e43b1dd7427288d3eeb2ae16afd404ce6fa0d8b378a92adb67f321ff0dd052970387cf2212f23378540393100bb40e27f15011a70decafa3f88868f2aad854ab133c31af8ed7c2599909228e6ca4c9cce29a31cf15f90066d3925ed210691cd4ffc183eaedcbbce0ad3ac7ac4c58237813ec8c2019842379d9c37065939e362e7ef448ce23fceb36ba22d7b59d70de029ddfc54afad6a58c7f9a287fc1a03b0e1bccc4c3ffaed8cef0ebfa42dd5b452ba2f7a1d7ec124f0f339a487d", 0xf1}], 0x6, 0x0, 0x0, 0x1}}], 0x4, 0x20040001)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r7, 0x0, 0x20048015)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r16 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r16, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x1c0, 0x43, 0xa0, 0x1c0, 0x98, 0x358, 0x178, 0x10a, 0x358, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x198, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1}}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x450)

120.34374ms ago: executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0, 0x6}, 0x1c)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040), 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x100, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xec, 0x1, [@m_tunnel_key={0xe8, 0x16, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00'}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}]}, {0x82, 0x6, "48037eb56f2c9ae11a04d0cfd074c8c339c9dc7599a1967196d0c04e59221d162679eefa24107808d4b663182cd017bdc0c1fa91739fa74fabad7f6fd1515d3d543deb338c97fd1ee124120ee6b7af375a43d69a5b18ad22c6c7dc25ea258f23686550bd9624ccfc8de276f965365c72e27017e4b0df03300f621688b9db"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x100}}, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="0000000000000000b7020000e94c1fbdb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095", @ANYRES32=r5, @ANYBLOB="180000000000dd6b64750000000000009293c643df04469e9faf0bd2a6eff3598107a31aa9e2bf275b0b55e28f688ebc60c38138d6773b51d773aecccdeeff7f3f2af14930f1f84d8d2a332af5d19b4763221d310e2fe79d74b3ac79b41c61d80cfb3512620e2b0dbfc0084a9452a8777940e38341739745095ecb35dfb3a23056c976bb4377fc855c31a2442d"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x14a80, 0x10, 0x38, &(0x7f00000002c0)="24006f20a01c2500", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "0400", "0d00000000004f7edfff00000080ffff", "cf0d00", "8657e2b7e43b34e4"}, 0x28)
sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x18}}], 0x1, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280)={<r8=>0x0, 0x6}, &(0x7f00000002c0)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000300)={r8, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x6, 0x4, 0x9, 0xfffffffffffffff7, 0x4a88, 0x4, 0xe663, 0x8000, 0x1000, 0xfff, 0x10001, 0x64df80000, 0x8, 0x4, 0xda]}, &(0x7f0000000400)=0x100)
connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x4, @remote}}, 0x1e)
socket$inet6(0xa, 0x3, 0x8000000003c)
r9 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x80000, 0x7}, 0x10)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012002102000000000000000007000000", @ANYRESOCT], 0x28}}, 0x0)
openat$cgroup_ro(r5, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x12, r0, 0x0)

64.044308ms ago: executing program 3:
syz_emit_ethernet(0x78, &(0x7f0000000480)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a45d", 0x42, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @remote, @private1, [@hopopts, @routing], "3c15"}}}}}}}, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x9c, r2, 0x5, 0x0, 0x0, {{0xf, 0x0, 0x300}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x67, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x9c}}, 0x0)

0s ago: executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "cabee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x4c}}, 0x0) (async)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) (async)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) (async)
write(0xffffffffffffffff, 0x0, 0x0) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macsec0\x00', <r4=>0x0}) (async)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000d80)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x2a812}, [@IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x2c}, 0x1, 0xf303000000000000}, 0x40000d0)

kernel console output (not intermixed with test programs):

lloc_node_noprof+0x71/0x320
[  123.717356][ T7499]  __alloc_skb+0x1c3/0x440
[  123.721799][ T7499]  ? __pfx___alloc_skb+0x10/0x10
[  123.726750][ T7499]  ? netlink_autobind+0xd6/0x2f0
[  123.731685][ T7499]  ? netlink_autobind+0x2b0/0x2f0
[  123.736704][ T7499]  netlink_sendmsg+0x638/0xcb0
[  123.741467][ T7499]  ? __pfx_netlink_sendmsg+0x10/0x10
[  123.746744][ T7499]  ? __import_iovec+0x536/0x820
[  123.751597][ T7499]  ? aa_sock_msg_perm+0x91/0x160
[  123.756540][ T7499]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  123.761812][ T7499]  ? security_socket_sendmsg+0x87/0xb0
[  123.767264][ T7499]  ? __pfx_netlink_sendmsg+0x10/0x10
[  123.772537][ T7499]  __sock_sendmsg+0x221/0x270
[  123.777207][ T7499]  ____sys_sendmsg+0x525/0x7d0
[  123.781981][ T7499]  ? __pfx_____sys_sendmsg+0x10/0x10
[  123.787284][ T7499]  __sys_sendmsg+0x2b0/0x3a0
[  123.791869][ T7499]  ? __pfx___sys_sendmsg+0x10/0x10
[  123.796973][ T7499]  ? vfs_write+0x7c4/0xc90
[  123.801413][ T7499]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  123.807739][ T7499]  ? do_syscall_64+0x100/0x230
[  123.812540][ T7499]  ? do_syscall_64+0xb6/0x230
[  123.817220][ T7499]  do_syscall_64+0xf3/0x230
[  123.821726][ T7499]  ? clear_bhb_loop+0x35/0x90
[  123.826402][ T7499]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.832317][ T7499] RIP: 0033:0x7f71b747d0a9
[  123.836749][ T7499] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  123.856354][ T7499] RSP: 002b:00007f71b823b0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  123.864758][ T7499] RAX: ffffffffffffffda RBX: 00007f71b75b3f80 RCX: 00007f71b747d0a9
[  123.872716][ T7499] RDX: 0000000000000000 RSI: 0000000020000d40 RDI: 0000000000000004
[  123.880678][ T7499] RBP: 00007f71b823b120 R08: 0000000000000000 R09: 0000000000000000
[  123.888640][ T7499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  123.896609][ T7499] R13: 000000000000000b R14: 00007f71b75b3f80 R15: 00007ffd6a40aad8
[  123.904596][ T7499]  </TASK>
[  123.921974][ T7274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  123.961933][ T7274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  124.032605][ T7505] hsr0: entered promiscuous mode
[  124.172453][ T7511] 8021q: adding VLAN 0 to HW filter on device batadv2
[  124.356741][ T7274] 8021q: adding VLAN 0 to HW filter on device batadv0
[  124.474274][ T7274] veth0_vlan: entered promiscuous mode
[  124.518826][ T7274] veth1_vlan: entered promiscuous mode
[  124.526086][ T5126] Bluetooth: hci1: command tx timeout
[  124.593230][ T7274] veth0_macvtap: entered promiscuous mode
[  124.606857][ T7274] veth1_macvtap: entered promiscuous mode
[  124.628847][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.650013][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.661880][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.672910][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.693257][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.710271][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.731162][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.753182][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.777304][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.788449][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.800502][ T7274] batman_adv: batadv0: Interface activated: batadv_slave_0
[  124.812524][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.829821][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.878007][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.908242][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.929379][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.951263][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.971794][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.991695][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.001770][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.013514][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.026842][ T7274] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.043684][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  125.074907][ T7555] xt_NFQUEUE: number of total queues is 0
[  125.197196][ T7546] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  125.235438][ T7274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.248361][ T7274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.258515][ T7274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.267596][ T7274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.407606][ T7562] netlink: 468 bytes leftover after parsing attributes in process `syz-executor.4'.
[  125.452207][ T7562] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'.
[  125.471629][ T2852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.492790][ T2852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.571631][ T7577] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  125.590302][ T2484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.618862][ T2484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.841873][ T7603] x_tables: duplicate underflow at hook 2
[  125.869368][ T7602] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  125.994866][ T7611] Bluetooth: MGMT ver 1.22
[  126.058796][ T7615] xt_connbytes: Forcing CT accounting to be enabled
[  126.072028][ T7615] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  126.090820][ T7615] xt_bpf: check failed: parse error
[  126.309507][ T7624] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'.
[  126.599722][ T7641] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'.
[  126.636669][ T7641] openvswitch: netlink: Multiple metadata blocks provided
[  126.755700][ T7644] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  126.901434][ T7658] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'.
[  126.953566][ T7658] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes.
[  127.486398][ T7675] pim6reg0: tun_chr_ioctl cmd 1074025681
[  127.511029][ T7675] netlink: 'syz-executor.3': attribute type 12 has an invalid length.
[  127.893978][ T7691] netlink: 'syz-executor.1': attribute type 9 has an invalid length.
[  127.923585][ T7691] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.1'.
[  127.995742][ T7695] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  128.286649][ T7701] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  128.365533][ T5131] Bluetooth: hci1: command 0x0405 tx timeout
[  128.483548][ T7671] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'.
[  128.493891][ T7709] tipc: Started in network mode
[  128.504609][ T7709] tipc: Node identity 1, cluster identity 4711
[  128.539690][ T7709] tipc: Node number set to 1
[  128.575069][ T7709] tipc: Cannot configure node identity twice
[  128.704073][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  129.755157][ T7737] netlink: 'syz-executor.2': attribute type 9 has an invalid length.
[  130.502058][ T7753] ɶƣ0GCTw
�: entered promiscuous mode
[  130.590783][ T7753] ɶƣ0GC¦: entered promiscuous mode
[  130.650363][ T7753] __nla_validate_parse: 4 callbacks suppressed
[  130.650380][ T7753] netlink: 144316 bytes leftover after parsing attributes in process `syz-executor.2'.
[  132.608054][ T7834] tipc: Started in network mode
[  132.623229][ T7834] tipc: Node identity 20010000000000000000000000000002, cluster identity 4711
[  132.643800][ T7834] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  132.974866][ T7850] netlink: 'syz-executor.3': attribute type 25 has an invalid length.
[  133.005811][ T7850] netlink: 'syz-executor.3': attribute type 7 has an invalid length.
[  133.048502][ T7852] tipc: Started in network mode
[  133.054047][ T7852] tipc: Node identity aaaaaaaaaa41, cluster identity 4711
[  133.061755][ T7852] tipc: Enabled bearer <eth:geneve1>, priority 0
[  133.097545][ T7852] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[  133.283792][ T7860] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  133.406316][ T7864] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  133.602956][ T7868] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'.
[  133.640074][   T29] audit: type=1800 audit(1719121221.208:9): pid=7879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1967 res=0 errno=0
[  133.752830][ T7887] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
[  133.765307][ T7884] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'.
[  133.786453][ T7887] netlink: 284 bytes leftover after parsing attributes in process `syz-executor.3'.
[  133.852112][ T7891] nft_compat: unsupported protocol 0
[  133.933753][ T7896] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'.
[  133.988175][ T7899] bond0: left promiscuous mode
[  134.016241][ T7899] netlink: 204 bytes leftover after parsing attributes in process `syz-executor.1'.
[  134.184503][ T5195] tipc: Node number set to 15444650
[  134.295267][ T7918] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  134.343622][ T7918] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'.
[  134.365909][ T7921] xt_CT: You must specify a L4 protocol and not use inversions on it
[  134.446811][ T7920] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  134.516364][ T7918] syzkaller1: entered promiscuous mode
[  134.536415][ T7918] syzkaller1: entered allmulticast mode
[  134.925660][ T7957] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  134.949839][ T7957] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  135.087273][ T7961] EXT4-fs warning (device sda1): ext4_block_to_path:107: block 2147483647 > max in inode 1967
[  135.650793][ T5131] Bluetooth: hci1: command 0x0405 tx timeout
[  135.823694][ T5119] IPVS: starting estimator thread 0...
[  135.831485][ T7975] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20004
[  135.925468][ T7979] IPVS: using max 17 ests per chain, 40800 per kthread
[  136.761942][ T7966] __nla_validate_parse: 2 callbacks suppressed
[  136.761959][ T7966] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  136.782302][ T7966] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  136.792339][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  137.104944][ T7453] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.391970][ T7453] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.611788][ T7453] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.726066][ T8018] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  137.845780][ T7453] bond0: (slave netdevsim0): Releasing backup interface
[  137.868148][ T5131] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  137.877493][ T5131] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  137.887453][ T5131] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  137.905056][ T5131] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  137.921157][ T5131] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  137.935162][ T5131] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  137.966318][ T7453] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.261113][ T7453] bridge_slave_1: left allmulticast mode
[  138.284085][ T7453] bridge_slave_1: left promiscuous mode
[  138.289848][ T7453] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.354725][ T7453] bridge_slave_0: left allmulticast mode
[  138.360401][ T7453] bridge_slave_0: left promiscuous mode
[  138.383643][ T7453] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.304314][ T7453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  139.329073][ T7453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  139.361977][ T7453] bond0 (unregistering): Released all slaves
[  139.392122][ T8041] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'.
[  139.633366][ T7453] ɶƣ0GCTw
�: left promiscuous mode
[  139.754878][ T7453] ɶƣ0GC¦: left promiscuous mode
[  139.815844][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  139.847074][ T8059] netlink: 'syz-executor.0': attribute type 19 has an invalid length.
[  139.883792][ T8065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.905603][ T8065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.938224][ T7453] tipc: Left network mode
[  139.963720][ T8065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.038142][ T8065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.053507][ T5131] Bluetooth: hci4: command tx timeout
[  140.579354][ T8085] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  140.642292][ T8028] chnl_net:caif_netlink_parms(): no params data found
[  140.892747][ T7453] hsr_slave_0: left promiscuous mode
[  140.902031][ T7453] hsr_slave_1: left promiscuous mode
[  140.921110][ T7453] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.929600][ T7453] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.938092][ T7453] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.954625][ T7453] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.009761][ T7453] veth1_macvtap: left promiscuous mode
[  141.018461][ T7453] veth0_macvtap: left promiscuous mode
[  141.025702][ T7453] veth1_vlan: left promiscuous mode
[  141.086094][ T8100] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
[  141.353184][ T8109] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  141.805873][ T7453] team0 (unregistering): Port device team_slave_1 removed
[  141.852234][ T7453] team0 (unregistering): Port device team_slave_0 removed
[  142.123852][ T5131] Bluetooth: hci4: command tx timeout
[  142.302959][ T8028] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.320651][ T8028] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.333184][ T8028] bridge_slave_0: entered allmulticast mode
[  142.354170][ T8028] bridge_slave_0: entered promiscuous mode
[  142.378320][ T8115] syzkaller1: entered promiscuous mode
[  142.385037][ T8115] syzkaller1: entered allmulticast mode
[  142.435471][ T8028] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.442692][ T8028] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.451054][ T8028] bridge_slave_1: entered allmulticast mode
[  142.461575][ T8028] bridge_slave_1: entered promiscuous mode
[  142.551957][ T8028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.612702][ T8028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.939316][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  143.034354][ T8028] team0: Port device team_slave_0 added
[  143.055408][ T8028] team0: Port device team_slave_1 added
[  143.067708][ T8148] x_tables: duplicate underflow at hook 2
[  143.249713][ T8153] nft_compat: unsupported protocol 0
[  143.258001][ T8028] batman_adv: batadv0: Adding interface: batadv_slave_0
[  143.274916][ T8153] xt_l2tp: v2 sid > 0xffff: 16777216
[  143.296743][ T8028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.337636][ T8028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  143.384958][ T8028] batman_adv: batadv0: Adding interface: batadv_slave_1
[  143.395726][ T8028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.423296][ T8028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.435219][ T8155] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  143.442461][ T8155] IPv6: NLM_F_CREATE should be set when creating new route
[  143.566514][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  143.620834][ T8028] hsr_slave_0: entered promiscuous mode
[  143.627787][ T8028] hsr_slave_1: entered promiscuous mode
[  143.635258][ T8028] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  143.642918][ T8028] Cannot create hsr debugfs directory
[  143.656596][ T8163] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[  143.769836][ T8158] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  143.906636][ T8172] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.1'.
[  143.943894][ T8172] bridge_slave_1: left allmulticast mode
[  143.964446][ T8172] bridge_slave_1: left promiscuous mode
[  143.970283][ T8172] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.010284][ T8172] bridge_slave_0: left allmulticast mode
[  144.019218][ T8172] bridge_slave_0: left promiscuous mode
[  144.030921][ T8172] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.088260][ T8186] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'.
[  144.158456][ T8170] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.1'.
[  144.189401][ T8186] bond_slave_0: entered promiscuous mode
[  144.195137][ T8186] bond_slave_1: entered promiscuous mode
[  144.214377][ T5131] Bluetooth: hci4: command tx timeout
[  144.269339][ T8192] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'.
[  144.451123][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  144.461551][ T8203] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511)
[  144.470801][ T8203] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  144.562114][ T8207] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'.
[  144.562799][ T8209] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'.
[  144.583439][ T8207] 0ªX¹¦D: renamed from gretap0 (while UP)
[  144.591431][ T8207] 0ªX¹¦D: entered allmulticast mode
[  144.600913][ T8207] A link change request failed with some changes committed already. Interface 
10ªX¹¦D may have been left with an inconsistent configuration, please check.
[  144.680799][ T8028] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  144.708788][ T8028] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  144.807416][ T8212] unsupported nlmsg_type 40
[  144.815083][ T8028] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  144.829584][ T8028] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  144.857717][ T8180] bond_slave_0: left promiscuous mode
[  144.863167][ T8180] bond_slave_1: left promiscuous mode
[  145.092004][ T8028] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.168791][ T8028] 8021q: adding VLAN 0 to HW filter on device team0
[  145.207797][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.215001][ T5118] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.242039][ T8236] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  145.276491][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.283680][ T5118] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.398787][ T8028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  145.472470][ T8249] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[  145.955569][ T8028] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.134610][ T8028] veth0_vlan: entered promiscuous mode
[  146.167485][ T8028] veth1_vlan: entered promiscuous mode
[  146.283977][ T5131] Bluetooth: hci4: command tx timeout
[  146.324657][ T8028] veth0_macvtap: entered promiscuous mode
[  146.362643][ T8028] veth1_macvtap: entered promiscuous mode
[  146.440217][ T8028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.465832][ T8028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.480738][ T8304] syz-executor.3[8304] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  146.480875][ T8304] syz-executor.3[8304] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  146.481232][ T8028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.518290][ T8028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.528582][ T8028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.560143][ T8028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.570215][ T8028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.580790][ T8028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.590716][ T8028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.601380][ T8028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.615500][ T8028] batman_adv: batadv0: Interface activated: batadv_slave_0
[  146.645844][ T8302] batadv_slave_0: entered promiscuous mode
[  146.670786][ T8028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.696939][ T8028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.713072][ T8028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.723950][ T8028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.758523][ T8028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.787016][ T8028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.812841][ T8028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.827912][ T8318] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  146.832580][ T8028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.861461][ T8028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.872347][ T8028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.885275][ T8326] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  146.887246][ T8028] batman_adv: batadv0: Interface activated: batadv_slave_1
[  146.911377][ T8315] syzkaller1: entered promiscuous mode
[  146.917275][ T8315] syzkaller1: entered allmulticast mode
[  146.929090][ T8326] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  146.940418][ T8322] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  146.960209][ T8028] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.969535][ T8028] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.979483][ T8028] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.989766][ T8028] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.026217][ T8330] hsr0: VLAN not yet supported
[  147.169448][ T7451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.186612][ T7451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.246481][ T7453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.264430][ T7453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.297411][ T8301] batadv_slave_0: left promiscuous mode
[  147.517442][ T8349] syzkaller1: entered promiscuous mode
[  147.523019][ T8349] syzkaller1: entered allmulticast mode
[  147.692237][ T8357] 8021q: adding VLAN 0 to HW filter on device batadv2
[  147.702710][ T8357] FAULT_INJECTION: forcing a failure.
[  147.702710][ T8357] name failslab, interval 1, probability 0, space 0, times 0
[  147.716731][ T8357] CPU: 1 PID: 8357 Comm: syz-executor.1 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0
[  147.727162][ T8357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  147.737217][ T8357] Call Trace:
[  147.740480][ T8357]  <TASK>
[  147.743407][ T8357]  dump_stack_lvl+0x241/0x360
[  147.748094][ T8357]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.753314][ T8357]  ? __pfx__printk+0x10/0x10
[  147.757931][ T8357]  should_fail_ex+0x3b0/0x4e0
[  147.762621][ T8357]  ? rtnl_newlink+0xf2/0x20a0
[  147.767322][ T8357]  should_failslab+0x9/0x20
[  147.771833][ T8357]  kmalloc_trace_noprof+0x6c/0x2c0
[  147.776944][ T8357]  ? __pfx_rtnl_newlink+0x10/0x10
[  147.781961][ T8357]  rtnl_newlink+0xf2/0x20a0
[  147.786454][ T8357]  ? __kernel_text_address+0xd/0x40
[  147.791662][ T8357]  ? __mutex_trylock_common+0x183/0x2e0
[  147.797207][ T8357]  ? __pfx___might_resched+0x10/0x10
[  147.802528][ T8357]  ? __pfx_rtnl_newlink+0x10/0x10
[  147.807583][ T8357]  ? __pfx___mutex_trylock_common+0x10/0x10
[  147.813495][ T8357]  ? rcu_is_watching+0x15/0xb0
[  147.818250][ T8357]  ? trace_contention_end+0x3c/0x120
[  147.823540][ T8357]  ? __mutex_lock+0x2ef/0xd70
[  147.828226][ T8357]  ? rcu_read_unlock+0x87/0xa0
[  147.832990][ T8357]  ? rtnetlink_rcv_msg+0x842/0x1180
[  147.838174][ T8357]  ? __pfx_lock_release+0x10/0x10
[  147.843196][ T8357]  ? __pfx___mutex_lock+0x10/0x10
[  147.848236][ T8357]  ? __pfx_rtnl_newlink+0x10/0x10
[  147.853261][ T8357]  rtnetlink_rcv_msg+0x89b/0x1180
[  147.858289][ T8357]  ? rtnetlink_rcv_msg+0x208/0x1180
[  147.863485][ T8357]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  147.868946][ T8357]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  147.874919][ T8357]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  147.881244][ T8357]  ? __local_bh_enable_ip+0x168/0x200
[  147.886604][ T8357]  ? lockdep_hardirqs_on+0x99/0x150
[  147.891791][ T8357]  ? __local_bh_enable_ip+0x168/0x200
[  147.897149][ T8357]  ? dev_hard_start_xmit+0x773/0x7e0
[  147.902423][ T8357]  ? __dev_queue_xmit+0x2d2/0x3d30
[  147.907539][ T8357]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  147.913265][ T8357]  ? __dev_queue_xmit+0x2d2/0x3d30
[  147.918369][ T8357]  ? __dev_queue_xmit+0x16c9/0x3d30
[  147.923578][ T8357]  ? __dev_queue_xmit+0x2d2/0x3d30
[  147.928720][ T8357]  ? ref_tracker_free+0x643/0x7e0
[  147.933759][ T8357]  netlink_rcv_skb+0x1e3/0x430
[  147.938520][ T8357]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  147.943983][ T8357]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  147.949272][ T8357]  ? netlink_deliver_tap+0x2e/0x1b0
[  147.954494][ T8357]  netlink_unicast+0x7f0/0x990
[  147.959267][ T8357]  ? __pfx_netlink_unicast+0x10/0x10
[  147.964549][ T8357]  ? __virt_addr_valid+0x183/0x520
[  147.969655][ T8357]  ? __check_object_size+0x49c/0x900
[  147.974943][ T8357]  ? bpf_lsm_netlink_send+0x9/0x10
[  147.980097][ T8357]  netlink_sendmsg+0x8e4/0xcb0
[  147.984866][ T8357]  ? __pfx_netlink_sendmsg+0x10/0x10
[  147.990142][ T8357]  ? __import_iovec+0x536/0x820
[  147.994980][ T8357]  ? aa_sock_msg_perm+0x91/0x160
[  147.999920][ T8357]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  148.005203][ T8357]  ? security_socket_sendmsg+0x87/0xb0
[  148.010653][ T8357]  ? __pfx_netlink_sendmsg+0x10/0x10
[  148.015926][ T8357]  __sock_sendmsg+0x221/0x270
[  148.020595][ T8357]  ____sys_sendmsg+0x525/0x7d0
[  148.025357][ T8357]  ? __pfx_____sys_sendmsg+0x10/0x10
[  148.030643][ T8357]  __sys_sendmsg+0x2b0/0x3a0
[  148.035226][ T8357]  ? __pfx___sys_sendmsg+0x10/0x10
[  148.040323][ T8357]  ? vfs_write+0x7c4/0xc90
[  148.044779][ T8357]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  148.051109][ T8357]  ? do_syscall_64+0x100/0x230
[  148.055871][ T8357]  ? do_syscall_64+0xb6/0x230
[  148.060543][ T8357]  do_syscall_64+0xf3/0x230
[  148.065040][ T8357]  ? clear_bhb_loop+0x35/0x90
[  148.069720][ T8357]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.075604][ T8357] RIP: 0033:0x7fa17587d0a9
[  148.080019][ T8357] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  148.099629][ T8357] RSP: 002b:00007fa1766030c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  148.108041][ T8357] RAX: ffffffffffffffda RBX: 00007fa1759b3f80 RCX: 00007fa17587d0a9
[  148.116006][ T8357] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005
[  148.123972][ T8357] RBP: 00007fa176603120 R08: 0000000000000000 R09: 0000000000000000
[  148.131945][ T8357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  148.139915][ T8357] R13: 000000000000000b R14: 00007fa1759b3f80 R15: 00007ffe2ac8d578
[  148.147890][ T8357]  </TASK>
[  148.539053][ T8377] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  148.557007][ T8377] __nla_validate_parse: 8 callbacks suppressed
[  148.557023][ T8377] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'.
[  148.783639][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  149.020981][ T8405] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  149.342756][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  149.468411][ T8434] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  149.704447][ T8445] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  149.782227][ T8450] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[  149.891526][ T8454] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'.
[  150.005393][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888078041800: rx timeout, send abort
[  150.110368][ T8466] FAULT_INJECTION: forcing a failure.
[  150.110368][ T8466] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  150.143300][ T8466] CPU: 0 PID: 8466 Comm: syz-executor.1 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0
[  150.153755][ T8466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  150.163825][ T8466] Call Trace:
[  150.167118][ T8466]  <TASK>
[  150.170071][ T8466]  dump_stack_lvl+0x241/0x360
[  150.174767][ T8466]  ? __pfx_dump_stack_lvl+0x10/0x10
[  150.179958][ T8466]  ? __pfx__printk+0x10/0x10
[  150.184549][ T8466]  ? __pfx_lock_release+0x10/0x10
[  150.189574][ T8466]  should_fail_ex+0x3b0/0x4e0
[  150.194283][ T8466]  _copy_from_iter+0x1f6/0x1960
[  150.199139][ T8466]  ? __virt_addr_valid+0x183/0x520
[  150.204283][ T8466]  ? __pfx_lock_release+0x10/0x10
[  150.209312][ T8466]  ? __alloc_skb+0x28f/0x440
[  150.213894][ T8466]  ? __pfx__copy_from_iter+0x10/0x10
[  150.219178][ T8466]  ? __virt_addr_valid+0x183/0x520
[  150.224301][ T8466]  ? __virt_addr_valid+0x183/0x520
[  150.229436][ T8466]  ? __virt_addr_valid+0x44e/0x520
[  150.234547][ T8466]  ? __check_object_size+0x49c/0x900
[  150.239855][ T8466]  netlink_sendmsg+0x73d/0xcb0
[  150.244665][ T8466]  ? __pfx_netlink_sendmsg+0x10/0x10
[  150.249945][ T8466]  ? __import_iovec+0x536/0x820
[  150.254789][ T8466]  ? aa_sock_msg_perm+0x91/0x160
[  150.259736][ T8466]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  150.265010][ T8466]  ? security_socket_sendmsg+0x87/0xb0
[  150.270464][ T8466]  ? __pfx_netlink_sendmsg+0x10/0x10
[  150.275737][ T8466]  __sock_sendmsg+0x221/0x270
[  150.280407][ T8466]  ____sys_sendmsg+0x525/0x7d0
[  150.285170][ T8466]  ? __pfx_____sys_sendmsg+0x10/0x10
[  150.290459][ T8466]  __sys_sendmsg+0x2b0/0x3a0
[  150.295059][ T8466]  ? __pfx___sys_sendmsg+0x10/0x10
[  150.300206][ T8466]  ? vfs_write+0x7c4/0xc90
[  150.304648][ T8466]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  150.310967][ T8466]  ? do_syscall_64+0x100/0x230
[  150.315728][ T8466]  ? do_syscall_64+0xb6/0x230
[  150.320411][ T8466]  do_syscall_64+0xf3/0x230
[  150.324906][ T8466]  ? clear_bhb_loop+0x35/0x90
[  150.329603][ T8466]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.335503][ T8466] RIP: 0033:0x7fa17587d0a9
[  150.339909][ T8466] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  150.359505][ T8466] RSP: 002b:00007fa1765e20c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  150.367912][ T8466] RAX: ffffffffffffffda RBX: 00007fa1759b4050 RCX: 00007fa17587d0a9
[  150.375872][ T8466] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006
[  150.383839][ T8466] RBP: 00007fa1765e2120 R08: 0000000000000000 R09: 0000000000000000
[  150.391800][ T8466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  150.399794][ T8466] R13: 000000000000006e R14: 00007fa1759b4050 R15: 00007ffe2ac8d578
[  150.407785][ T8466]  </TASK>
[  150.513788][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888078041800: abort rx timeout. Force session deactivation
[  150.596222][ T7451] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.710141][ T8472] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[  150.958798][ T7451] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.178468][ T7451] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.407566][ T8507] xt_CT: You must specify a L4 protocol and not use inversions on it
[  151.415230][ T7451] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.520052][ T8509] syzkaller1: entered promiscuous mode
[  151.540911][ T8509] syzkaller1: entered allmulticast mode
[  151.611679][ T5131] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  151.630015][ T5131] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  151.639724][ T5131] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  151.651322][ T5131] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  151.659349][ T5131] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  151.668300][ T5131] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  151.732301][ T7451] bridge_slave_1: left allmulticast mode
[  151.749378][ T7451] bridge_slave_1: left promiscuous mode
[  151.755782][ T7451] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.774524][ T7451] bridge_slave_0: left allmulticast mode
[  151.786140][ T7451] bridge_slave_0: left promiscuous mode
[  151.807756][ T7451] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.881410][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88805cd3e800: rx timeout, send abort
[  151.881616][ T8527] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'.
[  152.208244][ T7451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.219559][ T7451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.230887][ T7451] bond0 (unregistering): Released all slaves
[  152.257321][ T8527] Êü: entered promiscuous mode
[  152.273155][ T8522] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  152.298574][ T8522] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  152.389817][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88805cd3e800: abort rx timeout. Force session deactivation
[  152.437369][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  152.615148][ T8533] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  152.994552][ T8547] bond_slave_0: entered promiscuous mode
[  153.000332][ T8547] bond_slave_1: entered promiscuous mode
[  153.035726][ T8547] vlan3: entered promiscuous mode
[  153.076406][ T8547] bond0: entered promiscuous mode
[  153.113004][ T8547] vlan3: entered allmulticast mode
[  153.130544][ T8547] bond0: entered allmulticast mode
[  153.154008][ T8547] bond_slave_0: entered allmulticast mode
[  153.171809][ T8547] bond_slave_1: entered allmulticast mode
[  153.202012][ T8547] bond0: left allmulticast mode
[  153.221770][ T8547] bond_slave_0: left allmulticast mode
[  153.241223][ T8547] bond_slave_1: left allmulticast mode
[  153.259095][ T8547] bond0: left promiscuous mode
[  153.269841][ T8547] bond_slave_0: left promiscuous mode
[  153.275422][ T8547] bond_slave_1: left promiscuous mode
[  153.376718][ T8556] trusted_key: syz-executor.1 sent an empty control message without MSG_MORE.
[  153.389573][ T7451] hsr_slave_0: left promiscuous mode
[  153.423494][ T7451] hsr_slave_1: left promiscuous mode
[  153.433872][ T7451] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.451596][ T7451] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.462511][ T7451] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.480414][ T7451] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.537620][ T7451] veth1_macvtap: left promiscuous mode
[  153.559654][ T7451] veth0_macvtap: left promiscuous mode
[  153.573599][ T7451] veth1_vlan: left promiscuous mode
[  153.585644][ T7451] veth0_vlan: left promiscuous mode
[  153.723761][ T5126] Bluetooth: hci4: command tx timeout
[  153.804630][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888061f22800: rx timeout, send abort
[  154.084442][ T7451] team0 (unregistering): Port device team_slave_1 removed
[  154.120865][ T7451] team0 (unregistering): Port device team_slave_0 removed
[  154.483586][ T8571] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[  154.897198][ T8586] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.0'.
[  155.148848][ T8514] chnl_net:caif_netlink_parms(): no params data found
[  155.431814][ T8608] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma?
[  155.512814][ T8514] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.531026][ T8514] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.549458][ T8514] bridge_slave_0: entered allmulticast mode
[  155.576786][ T8514] bridge_slave_0: entered promiscuous mode
[  155.598354][ T8615] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  155.642783][ T8514] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.667978][ T8514] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.670391][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  155.692804][ T8514] bridge_slave_1: entered allmulticast mode
[  155.719378][ T8514] bridge_slave_1: entered promiscuous mode
[  155.803882][ T5126] Bluetooth: hci4: command tx timeout
[  155.878411][ T8622] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  155.896582][ T8514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.942034][ T8514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  156.204456][ T8630] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[  156.299714][ T8514] team0: Port device team_slave_0 added
[  156.314063][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  156.487549][ T8514] team0: Port device team_slave_1 added
[  156.581469][ T8646] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  156.597590][ T8641] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  156.601999][ T8646] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'.
[  156.617263][   T29] audit: type=1804 audit(1719121244.168:10): pid=8648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4058392155/syzkaller.XH0Fut/74/memory.events" dev="sda1" ino=1954 res=1 errno=0
[  156.649917][ T8645] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  156.662530][   T29] audit: type=1804 audit(1719121244.198:11): pid=8648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir4058392155/syzkaller.XH0Fut/74/memory.events" dev="sda1" ino=1954 res=1 errno=0
[  156.670249][ T8514] batman_adv: batadv0: Adding interface: batadv_slave_0
[  156.723745][   T29] audit: type=1804 audit(1719121244.198:12): pid=8648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir4058392155/syzkaller.XH0Fut/74/memory.events" dev="sda1" ino=1954 res=1 errno=0
[  156.737052][ T8514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.822841][ T8514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  156.866197][ T8514] batman_adv: batadv0: Adding interface: batadv_slave_1
[  156.882625][ T8514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.910423][ T8514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  156.958391][ T8661] netlink: 'syz-executor.4': attribute type 64 has an invalid length.
[  157.098586][ T8668] netlink: 'syz-executor.0': attribute type 6 has an invalid length.
[  157.161623][ T8514] hsr_slave_0: entered promiscuous mode
[  157.194802][ T8514] hsr_slave_1: entered promiscuous mode
[  157.211834][ T8514] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  157.220932][ T8514] Cannot create hsr debugfs directory
[  157.462541][ T8671] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  157.480721][ T8671] batman_adv: batadv0: Removing interface: batadv_slave_0
[  157.664845][ T8671] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  157.673025][ T8671] batman_adv: batadv0: Removing interface: batadv_slave_1
[  157.739062][ T8692] pim6reg1: entered promiscuous mode
[  157.744895][ T8692] pim6reg1: entered allmulticast mode
[  157.884672][ T5126] Bluetooth: hci4: command tx timeout
[  157.923906][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  157.937388][ T8701] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[  158.236686][ T8514] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  158.271207][ T8514] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  158.298434][ T8514] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  158.343267][ T8514] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  158.598302][ T8514] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.654651][ T8514] 8021q: adding VLAN 0 to HW filter on device team0
[  158.680466][ T8741] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[  158.956902][ T8741] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  158.991680][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.998881][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.032251][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.039450][ T5119] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.308210][ T8771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  159.521861][ T8514] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.665216][ T8514] veth0_vlan: entered promiscuous mode
[  159.700120][ T8514] veth1_vlan: entered promiscuous mode
[  159.723628][ T5126] Bluetooth: hci2: command 0x0401 tx timeout
[  159.813101][ T8790] syzkaller0: entered promiscuous mode
[  159.819009][ T8790] syzkaller0: entered allmulticast mode
[  159.836460][ T8514] veth0_macvtap: entered promiscuous mode
[  159.965802][ T5126] Bluetooth: hci4: command tx timeout
[  160.178808][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807aa59400: rx timeout, send abort
[  160.687123][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807aa59400: abort rx timeout. Force session deactivation
[  161.332181][ T8514] veth1_macvtap: entered promiscuous mode
[  161.426244][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.438545][ T8814] syz-executor.1[8814] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  161.441187][ T8814] syz-executor.1[8814] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  161.445741][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.480284][ T8817] __nla_validate_parse: 3 callbacks suppressed
[  161.480299][ T8817] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'.
[  161.487354][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.518544][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.529653][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.540374][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.550268][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.561229][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.575883][ T8514] batman_adv: batadv0: Interface activated: batadv_slave_0
[  161.588253][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.602379][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.622056][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.656053][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.666033][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.676769][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.691317][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.722414][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.745595][ T8514] batman_adv: batadv0: Interface activated: batadv_slave_1
[  161.800827][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  161.811999][ T8842] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0
[  161.875964][ T8514] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.895291][ T8514] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.905663][ T8514] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.914804][ T8514] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.080542][ T1281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.098128][ T8846] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  162.098879][ T1281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.182057][ T2484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.190856][ T2484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.315789][ T8852] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[  162.338962][ T8851] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  162.624732][ T8866] netlink: 'syz-executor.3': attribute type 12 has an invalid length.
[  162.662855][ T8858] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.1'.
[  162.702271][ T8871] wireguard1: entered promiscuous mode
[  162.707906][ T8871] wireguard1: entered allmulticast mode
[  162.998333][ T8877] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'.
[  163.052212][ T8879] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  163.633443][ T7453] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.939608][ T8900] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  164.022951][ T5131] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  164.041127][ T5131] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  164.050596][ T5131] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  164.061689][ T5131] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  164.073588][ T5131] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  164.083807][ T5131] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  164.261919][ T7453] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.340896][ T8912] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  164.353674][ T8912] netlink: 'syz-executor.0': attribute type 7 has an invalid length.
[  164.531606][ T8917] syzkaller0: entered promiscuous mode
[  164.543389][ T8917] syzkaller0: entered allmulticast mode
[  164.708316][ T2852] syzkaller0: tun_net_xmit 48
[  164.757099][ T7453] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.787693][ T8921] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[  164.804715][ T8921] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[  164.855323][ T7453] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.599794][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  166.125483][ T5131] Bluetooth: hci4: command tx timeout
[  167.355011][ T8933] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  167.375619][ T8933] macvlan2: entered promiscuous mode
[  167.396169][ T8933] mac80211_hwsim hwsim8 wlan0: left promiscuous mode
[  167.812623][ T8902] chnl_net:caif_netlink_parms(): no params data found
[  167.855866][ T7453] bridge_slave_1: left allmulticast mode
[  167.861540][ T7453] bridge_slave_1: left promiscuous mode
[  167.893675][ T7453] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.970433][ T7453] bridge_slave_0: left allmulticast mode
[  167.976951][ T7453] bridge_slave_0: left promiscuous mode
[  167.982699][ T7453] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.203793][ T5131] Bluetooth: hci4: command tx timeout
[  168.227588][   T29] audit: type=1800 audit(1719121255.798:13): pid=8966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1953 res=0 errno=0
[  168.521527][ T8967] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'.
[  168.538138][   T29] audit: type=1804 audit(1719121256.098:14): pid=8966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1008129542/syzkaller.ATmNcN/264/memory.events" dev="sda1" ino=1953 res=1 errno=0
[  168.647350][   T29] audit: type=1804 audit(1719121256.108:15): pid=8966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1008129542/syzkaller.ATmNcN/264/memory.events" dev="sda1" ino=1953 res=1 errno=0
[  168.730922][ T5126] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  168.739752][ T5126] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  168.748088][ T5126] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  168.757505][ T5126] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  168.767172][ T5126] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  168.774758][ T5126] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  169.242928][ T7453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  169.270017][ T7453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  169.292851][ T7453] bond0 (unregistering): Released all slaves
[  169.317373][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  169.591930][ T8978] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'.
[  169.664365][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.734102][ T5126] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  169.744828][ T5126] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  169.752834][ T5126] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  169.761884][ T5126] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  169.776748][ T5126] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  169.784233][ T5126] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  169.917916][ T8902] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.925559][ T8902] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.932782][ T8902] bridge_slave_0: entered allmulticast mode
[  169.941058][ T8902] bridge_slave_0: entered promiscuous mode
[  170.007870][ T8990] syzkaller0: entered promiscuous mode
[  170.020413][ T8990] syzkaller0: entered allmulticast mode
[  170.044461][ T8999] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
[  170.065153][ T8902] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.074720][ T8902] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.087795][ T8902] bridge_slave_1: entered allmulticast mode
[  170.107267][ T8902] bridge_slave_1: entered promiscuous mode
[  170.229939][ T7451] syzkaller0: tun_net_xmit 48
[  170.293731][ T5126] Bluetooth: hci4: command tx timeout
[  170.538963][ T8996] syzkaller0: entered promiscuous mode
[  170.559666][ T8996] syzkaller0: entered allmulticast mode
[  170.995691][    C0] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  171.752530][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888062d79c00: rx timeout, send abort
[  171.896204][ T5126] Bluetooth: hci2: command tx timeout
[  172.216150][ T9007] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  172.260878][    C0] vxcan0 (unregistering): j1939_tp_rxtimer: 0xffff888062d79c00: abort rx timeout. Force session deactivation
[  172.284298][ T7453] hsr_slave_0: left promiscuous mode
[  172.291793][ T7453] hsr_slave_1: left promiscuous mode
[  172.301648][ T7453] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.313119][ T7453] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.322451][ T7453] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.342254][ T7453] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.363477][ T5126] Bluetooth: hci4: command tx timeout
[  172.386043][ T7453] veth1_macvtap: left promiscuous mode
[  172.392397][ T7453] veth0_macvtap: left promiscuous mode
[  172.399547][ T7453] veth1_vlan: left promiscuous mode
[  172.405997][ T7453] veth0_vlan: left promiscuous mode
[  173.247002][ T7453] team0 (unregistering): Port device team_slave_1 removed
[  173.320065][ T7453] team0 (unregistering): Port device team_slave_0 removed
[  173.973735][ T5126] Bluetooth: hci2: command tx timeout
[  173.998158][ T9011] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'.
[  174.016318][ T9015] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  174.025603][ T9015] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  174.034438][ T9015] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  174.043140][ T9015] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  174.066912][ T9015] vxlan0: entered promiscuous mode
[  174.072068][ T9015] vxlan0: entered allmulticast mode
[  174.094255][ T9016] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.1'.
[  174.134281][ T8902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  176.043682][ T5126] Bluetooth: hci2: command tx timeout
[  176.279200][ T8902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  176.412803][ T8902] team0: Port device team_slave_0 added
[  176.455957][ T8902] team0: Port device team_slave_1 added
[  176.553138][ T8902] batman_adv: batadv0: Adding interface: batadv_slave_0
[  176.583437][ T8902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.622556][ T8902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  176.677673][ T8902] batman_adv: batadv0: Adding interface: batadv_slave_1
[  176.693369][ T8902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.722164][ T8902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  176.798024][ T9042] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  176.821782][ T9044] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  176.823583][ T9038] netlink: 'syz-executor.3': attribute type 12 has an invalid length.
[  176.830004][ T9044] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  176.847385][ T9042] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'.
[  176.954494][ T9042] syzkaller1: entered promiscuous mode
[  176.961162][ T9042] syzkaller1: entered allmulticast mode
[  176.981491][ T8902] hsr_slave_0: entered promiscuous mode
[  176.989823][ T8902] hsr_slave_1: entered promiscuous mode
[  177.005673][ T8902] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  177.023436][ T8902] Cannot create hsr debugfs directory
[  177.117210][ T7453] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.162170][ T9049] ip6tnl0: entered promiscuous mode
[  177.244456][ T7453] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.298588][ T9048] ip6tnl0: left promiscuous mode
[  177.345080][ T9057] syzkaller0: entered promiscuous mode
[  177.350587][ T9057] syzkaller0: entered allmulticast mode
[  177.447276][ T7453] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.531298][ T7453] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.125582][ T5126] Bluetooth: hci2: command tx timeout
[  179.201927][ T8985] chnl_net:caif_netlink_parms(): no params data found
[  179.641587][ T7453] bridge_slave_1: left allmulticast mode
[  179.656820][ T7453] bridge_slave_1: left promiscuous mode
[  179.689706][ T7453] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.710186][ T7453] bridge_slave_0: left allmulticast mode
[  179.733451][ T7453] bridge_slave_0: left promiscuous mode
[  179.739995][ T7453] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.500442][ T7453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  180.513591][ T7453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  180.525931][ T7453] bond0 (unregistering): Released all slaves
[  180.561761][ T8985] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.569196][ T8985] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.576560][ T8985] bridge_slave_0: entered allmulticast mode
[  180.585083][ T8985] bridge_slave_0: entered promiscuous mode
[  180.593851][ T8985] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.606762][ T8985] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.614333][ T8985] bridge_slave_1: entered allmulticast mode
[  180.621980][ T8985] bridge_slave_1: entered promiscuous mode
[  180.651731][ T9092] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.1'.
[  180.753034][ T7453] tipc: Left network mode
[  180.819950][ T8985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  180.885372][ T8985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  180.933841][ T9122] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0
[  181.100868][ T8985] team0: Port device team_slave_0 added
[  181.117732][ T8985] team0: Port device team_slave_1 added
[  181.321906][ T8985] batman_adv: batadv0: Adding interface: batadv_slave_0
[  181.338871][ T8985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.413458][ T8985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.435398][ T8985] batman_adv: batadv0: Adding interface: batadv_slave_1
[  181.442957][ T8985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.470955][ T8985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  181.720081][ T9135] syzkaller0: entered promiscuous mode
[  181.738365][ T9135] syzkaller0: entered allmulticast mode
[  181.828188][ T8902] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  181.854910][ T8902] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  181.948252][ T1281] syzkaller0: tun_net_xmit 48
[  181.958051][ T8985] hsr_slave_0: entered promiscuous mode
[  181.974604][ T8985] hsr_slave_1: entered promiscuous mode
[  181.983627][ T8985] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  181.991206][ T8985] Cannot create hsr debugfs directory
[  182.035288][ T8902] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  184.339299][ T9143] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'.
[  184.348999][ T9143] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  184.356273][ T9143] IPv6: NLM_F_CREATE should be set when creating new route
[  184.390128][ T7453] hsr_slave_0: left promiscuous mode
[  184.426389][ T7453] hsr_slave_1: left promiscuous mode
[  184.450281][ T7453] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.465669][ T7453] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.478852][ T7453] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.493502][ T7453] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.530197][ T7453] veth1_macvtap: left promiscuous mode
[  184.540104][ T7453] veth0_macvtap: left promiscuous mode
[  184.548951][ T7453] veth1_vlan: left promiscuous mode
[  184.554490][ T7453] veth0_vlan: left promiscuous mode
[  184.592324][ T7453] infiniband syz0: set down
[  184.814985][ T7456] smc: removing ib device syz0
[  185.007453][ T7453] team0 (unregistering): Port device team_slave_1 removed
[  185.050308][ T7453] team0 (unregistering): Port device team_slave_0 removed
[  185.330012][ T9156] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  185.355092][ T9156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.488573][ T8902] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  185.503159][   T57] infiniband syz0: ib_query_port failed (-19)
[  185.649150][ T9160] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  186.265636][ T9181] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'.
[  186.587543][ T9187] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  186.596588][ T9190] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  186.800465][ T8902] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.949759][ T8902] 8021q: adding VLAN 0 to HW filter on device team0
[  186.972554][ T9198] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[  187.014887][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.022035][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.033591][ T9198] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'.
[  187.085353][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.092515][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.210414][ T8902] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  187.255410][ T8902] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  187.346974][ T9203] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  187.420154][ T9203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  187.686341][ T8985] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  187.717941][ T9212] netlink: 542 bytes leftover after parsing attributes in process `syz-executor.1'.
[  187.738176][ T8985] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  187.786038][ T8985] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  187.788369][ T7453] IPVS: stop unused estimator thread 0...
[  187.834642][ T8985] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  187.925536][ T8902] 8021q: adding VLAN 0 to HW filter on device batadv0
[  188.035490][ T8902] veth0_vlan: entered promiscuous mode
[  188.160571][ T8902] veth1_vlan: entered promiscuous mode
[  188.214254][ T9221] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  188.252954][ T8985] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.337033][ T8902] veth0_macvtap: entered promiscuous mode
[  188.352913][ T9226] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.4'.
[  188.391684][ T9226] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  188.405915][ T8902] veth1_macvtap: entered promiscuous mode
[  188.440864][ T8985] 8021q: adding VLAN 0 to HW filter on device team0
[  188.453701][ T9229] netlink: 'syz-executor.1': attribute type 8 has an invalid length.
[  188.537741][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.544929][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.586365][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.593569][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.666111][ T8902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.699728][ T8902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.735164][ T8902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.755726][ T8902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.779397][ T8902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.822766][ T8902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.848531][ T8902] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.901191][ T8902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  188.957047][ T8902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.996949][ T8902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.041352][ T8902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.062421][ T8902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.083062][ T8902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.126044][ T8902] batman_adv: batadv0: Interface activated: batadv_slave_1
[  189.147866][ T8902] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.173541][ T8902] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.182269][ T8902] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.207422][ T8902] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.229042][ T9238] lo speed is unknown, defaulting to 1000
[  189.243146][ T9238] lo speed is unknown, defaulting to 1000
[  189.305012][ T9244] hsr0: left promiscuous mode
[  189.360638][ T9238] lo speed is unknown, defaulting to 1000
[  189.422477][ T9251] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  189.653129][ T2852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.696417][ T2852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.815115][ T1281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.837842][ T1281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.969332][ T9238] infiniband syz0: set active
[  189.981316][   T56] lo speed is unknown, defaulting to 1000
[  189.995645][ T9238] infiniband syz0: added lo
[  190.001090][ T9238] syz0: rxe_create_cq: returned err = -12
[  190.027854][ T9238] infiniband syz0: Couldn't create ib_mad CQ
[  190.034468][ T9238] infiniband syz0: Couldn't open port 1
[  190.086650][ T9238] RDS/IB: syz0: added
[  190.095237][ T9238] smc: adding ib device syz0 with port count 1
[  190.108634][ T9238] smc:    ib device syz0 port 1 has pnetid 
[  190.150733][   T56] lo speed is unknown, defaulting to 1000
[  190.161690][ T9238] lo speed is unknown, defaulting to 1000
[  190.192611][ T8985] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.321426][ T8985] veth0_vlan: entered promiscuous mode
[  190.349985][ T8985] veth1_vlan: entered promiscuous mode
[  190.443179][ T8985] veth0_macvtap: entered promiscuous mode
[  190.472706][ T8985] veth1_macvtap: entered promiscuous mode
[  190.518324][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.531380][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.541942][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.553826][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.563861][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.577167][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.591400][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.614620][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.638242][ T8985] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.670528][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.673483][ T9238] lo speed is unknown, defaulting to 1000
[  190.682724][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.700700][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.711166][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.721096][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.743340][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.764034][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.775952][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.805016][ T8985] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.836048][ T8985] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.865182][ T8985] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.881490][ T8985] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.890695][ T8985] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.916045][ T9287] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'.
[  191.050541][ T9238] lo speed is unknown, defaulting to 1000
[  191.126590][ T7453] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.211531][ T2852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.229821][ T2852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.383070][ T2852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.423611][ T2852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.430700][ T9238] lo speed is unknown, defaulting to 1000
[  191.654933][ T7453] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.815751][ T7453] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.996090][ T7453] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.080269][ T9238] lo speed is unknown, defaulting to 1000
[  192.121085][ T5131] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  192.133099][ T5131] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  192.141508][ T5131] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  192.158797][ T5131] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  192.168279][ T5131] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  192.178174][ T5131] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  192.375665][ T7453] bridge_slave_1: left allmulticast mode
[  192.381393][ T7453] bridge_slave_1: left promiscuous mode
[  192.406196][ T7453] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.406965][ T9338] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'.
[  192.432923][ T7453] bridge_slave_0: left allmulticast mode
[  192.435104][ T9338] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes.
[  192.456546][ T7453] bridge_slave_0: left promiscuous mode
[  192.462310][ T7453] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.480591][ T9339] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  192.874071][ T7453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  192.887893][ T7453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  192.899733][ T7453] bond0 (unregistering): Released all slaves
[  192.917355][ T9238] lo speed is unknown, defaulting to 1000
[  193.511015][ T9366] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'.
[  194.203954][ T5126] Bluetooth: hci4: command tx timeout
[  194.452747][ T9329] lo speed is unknown, defaulting to 1000
[  194.606166][ T9369] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  194.728602][ T9369] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  194.767847][ T9372] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
[  195.194007][ T9382] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.201655][ T9382] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.243160][ T9386] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.250726][ T9386] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.258274][ T9386] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.265477][ T9386] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.288558][ T9386] bridge0: entered promiscuous mode
[  195.303282][ T9386] bridge0: entered allmulticast mode
[  195.457130][ T7453] hsr_slave_0: left promiscuous mode
[  195.466421][ T7453] hsr_slave_1: left promiscuous mode
[  195.504835][ T7453] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  195.529815][ T7453] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.553240][ T7453] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  195.568296][ T7453] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.626292][ T7453] veth1_macvtap: left promiscuous mode
[  195.632242][ T7453] veth0_macvtap: left promiscuous mode
[  195.646702][ T7453] veth1_vlan: left promiscuous mode
[  195.652230][ T7453] veth0_vlan: left promiscuous mode
[  196.182503][ T7453] team0 (unregistering): Port device team_slave_1 removed
[  196.221985][ T7453] team0 (unregistering): Port device team_slave_0 removed
[  196.283608][ T5126] Bluetooth: hci4: command tx timeout
[  196.611148][ T9386] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'.
[  196.632386][ T9412] netlink: 'syz-executor.1': attribute type 21 has an invalid length.
[  196.653799][ T9412] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'.
[  196.768088][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  197.117838][ T9329] chnl_net:caif_netlink_parms(): no params data found
[  198.161480][   T29] audit: type=1804 audit(1719121285.718:16): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1008129542/syzkaller.ATmNcN/298/cgroup.controllers" dev="sda1" ino=1939 res=1 errno=0
[  198.162679][ T9455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  198.223197][ T9459] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'.
[  198.235594][ T9329] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.242826][ T9329] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.250163][ T9329] bridge_slave_0: entered allmulticast mode
[  198.257552][   T29] audit: type=1804 audit(1719121285.828:17): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1008129542/syzkaller.ATmNcN/298/cgroup.controllers" dev="sda1" ino=1939 res=1 errno=0
[  198.262174][ T9329] bridge_slave_0: entered promiscuous mode
[  198.334987][ T9329] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.352759][ T9329] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.361566][ T9329] bridge_slave_1: entered allmulticast mode
[  198.374708][ T9329] bridge_slave_1: entered promiscuous mode
[  198.376084][ T5126] Bluetooth: hci4: command tx timeout
[  198.425566][ T9329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.468619][ T9329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.625547][ T9329] team0: Port device team_slave_0 added
[  198.650809][ T9329] team0: Port device team_slave_1 added
[  198.673096][ T9475] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  198.789570][ T9474] syzkaller0: entered promiscuous mode
[  198.801759][ T9474] syzkaller0: entered allmulticast mode
[  200.320551][ T9481] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  200.343007][ T9329] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.364648][ T9329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.414036][ T9329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.445805][ T9329] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.452762][ T9329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.481259][ T5126] Bluetooth: hci4: command tx timeout
[  200.500751][ T9329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  200.517658][ T9485] bridge0: entered promiscuous mode
[  200.526269][ T9485] bridge0: entered allmulticast mode
[  200.666870][ T9497] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  200.700456][ T9329] hsr_slave_0: entered promiscuous mode
[  200.719754][ T9329] hsr_slave_1: entered promiscuous mode
[  200.730940][ T9329] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  200.750436][ T9329] Cannot create hsr debugfs directory
[  200.973953][   T29] audit: type=1804 audit(1719121288.528:18): pid=9516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1008129542/syzkaller.ATmNcN/302/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0
[  201.147300][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  201.241975][ T9532] xt_hashlimit: overflow, rate too high: 0
[  201.291757][ T9532] ip6gretap0: entered promiscuous mode
[  201.334318][ T9532] batadv_slave_0: entered promiscuous mode
[  201.352442][ T9534] team0: entered promiscuous mode
[  201.367958][ T9534] team_slave_0: entered promiscuous mode
[  201.374037][ T9534] team_slave_1: entered promiscuous mode
[  201.450653][ T9539] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  201.457727][ T9539] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  201.588402][ T9549] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'.
[  201.596166][ T9551] FAULT_INJECTION: forcing a failure.
[  201.596166][ T9551] name failslab, interval 1, probability 0, space 0, times 0
[  201.607183][ T9549] syzkaller0: entered promiscuous mode
[  201.612575][ T9551] CPU: 0 PID: 9551 Comm: syz-executor.4 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0
[  201.623660][ T9549] syzkaller0: entered allmulticast mode
[  201.626151][ T9551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  201.626166][ T9551] Call Trace:
[  201.626175][ T9551]  <TASK>
[  201.626183][ T9551]  dump_stack_lvl+0x241/0x360
[  201.652704][ T9551]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.657926][ T9551]  ? __pfx__printk+0x10/0x10
[  201.662539][ T9551]  ? __pfx___might_resched+0x10/0x10
[  201.667851][ T9551]  ? __lock_acquire+0x1346/0x1fd0
[  201.672876][ T9551]  should_fail_ex+0x3b0/0x4e0
[  201.677556][ T9551]  ? bpf_test_init+0xe1/0x180
[  201.682231][ T9551]  should_failslab+0x9/0x20
[  201.686728][ T9551]  __kmalloc_noprof+0xd8/0x400
[  201.691523][ T9551]  bpf_test_init+0xe1/0x180
[  201.696029][ T9551]  bpf_prog_test_run_xdp+0x48e/0x11b0
[  201.701402][ T9551]  ? __pfx_lock_acquire+0x10/0x10
[  201.706419][ T9551]  ? __pfx_lock_release+0x10/0x10
[  201.711441][ T9551]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  201.717237][ T9551]  ? __fget_files+0x29/0x470
[  201.721849][ T9551]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  201.727647][ T9551]  bpf_prog_test_run+0x33a/0x3b0
[  201.732578][ T9551]  __sys_bpf+0x48d/0x810
[  201.736820][ T9551]  ? __pfx___sys_bpf+0x10/0x10
[  201.741590][ T9551]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  201.747591][ T9551]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  201.753922][ T9551]  ? do_syscall_64+0x100/0x230
[  201.758690][ T9551]  __x64_sys_bpf+0x7c/0x90
[  201.763102][ T9551]  do_syscall_64+0xf3/0x230
[  201.767601][ T9551]  ? clear_bhb_loop+0x35/0x90
[  201.772286][ T9551]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.778176][ T9551] RIP: 0033:0x7f778687d0a9
[  201.782587][ T9551] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  201.802209][ T9551] RSP: 002b:00007f778751d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  201.810615][ T9551] RAX: ffffffffffffffda RBX: 00007f77869b3f80 RCX: 00007f778687d0a9
[  201.818577][ T9551] RDX: 0000000000000050 RSI: 0000000020000040 RDI: 000000000000000a
[  201.826539][ T9551] RBP: 00007f778751d120 R08: 0000000000000000 R09: 0000000000000000
[  201.834503][ T9551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  201.842466][ T9551] R13: 000000000000000b R14: 00007f77869b3f80 R15: 00007ffe02a10888
[  201.850454][ T9551]  </TASK>
[  201.912944][ T9555] FAULT_INJECTION: forcing a failure.
[  201.912944][ T9555] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  201.926920][ T9555] CPU: 1 PID: 9555 Comm: syz-executor.4 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0
[  201.937356][ T9555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  201.947424][ T9555] Call Trace:
[  201.950716][ T9555]  <TASK>
[  201.953670][ T9555]  dump_stack_lvl+0x241/0x360
[  201.958383][ T9555]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.963605][ T9555]  ? __pfx__printk+0x10/0x10
[  201.968223][ T9555]  ? __pfx_lock_release+0x10/0x10
[  201.973291][ T9555]  should_fail_ex+0x3b0/0x4e0
[  201.978005][ T9555]  _copy_from_user+0x2f/0xe0
[  201.982622][ T9555]  copy_msghdr_from_user+0xae/0x680
[  201.987838][ T9555]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  201.993698][ T9555]  __sys_sendmsg+0x23d/0x3a0
[  201.998286][ T9555]  ? __pfx___sys_sendmsg+0x10/0x10
[  202.003399][ T9555]  ? vfs_write+0x7c4/0xc90
[  202.007848][ T9555]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  202.014169][ T9555]  ? do_syscall_64+0x100/0x230
[  202.018954][ T9555]  ? do_syscall_64+0xb6/0x230
[  202.023628][ T9555]  do_syscall_64+0xf3/0x230
[  202.028125][ T9555]  ? clear_bhb_loop+0x35/0x90
[  202.032814][ T9555]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.038709][ T9555] RIP: 0033:0x7f778687d0a9
[  202.043128][ T9555] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  202.062734][ T9555] RSP: 002b:00007f778751d0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  202.071158][ T9555] RAX: ffffffffffffffda RBX: 00007f77869b3f80 RCX: 00007f778687d0a9
[  202.079139][ T9555] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000003
[  202.087101][ T9555] RBP: 00007f778751d120 R08: 0000000000000000 R09: 0000000000000000
[  202.095086][ T9555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  202.103048][ T9555] R13: 000000000000000b R14: 00007f77869b3f80 R15: 00007ffe02a10888
[  202.111155][ T9555]  </TASK>
[  202.167059][ T9533] team0: left promiscuous mode
[  202.171989][ T9533] team_slave_0: left promiscuous mode
[  202.201484][ T9533] team_slave_1: left promiscuous mode
[  202.272060][ T9565] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1025 (only 8 groups)
[  202.292995][ T9566] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  202.373008][ T9329] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  202.399124][ T9329] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  202.423227][ T9329] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  202.435926][ T9329] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  202.522785][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88805d9a7800: rx timeout, send abort
[  202.567838][ T9329] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.625810][ T9329] 8021q: adding VLAN 0 to HW filter on device team0
[  202.648188][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.655352][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.674254][  T784] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.681449][  T784] bridge0: port 2(bridge_slave_1) entered forwarding state
[  202.986145][ T9593] FAULT_INJECTION: forcing a failure.
[  202.986145][ T9593] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  203.012376][ T9593] CPU: 0 PID: 9593 Comm: syz-executor.0 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0
[  203.022822][ T9593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  203.032915][ T9593] Call Trace:
[  203.036207][ T9593]  <TASK>
[  203.039183][ T9593]  dump_stack_lvl+0x241/0x360
[  203.043892][ T9593]  ? __pfx_dump_stack_lvl+0x10/0x10
[  203.049111][ T9593]  ? __pfx__printk+0x10/0x10
[  203.053729][ T9593]  ? validate_chain+0x11e/0x5900
[  203.058693][ T9593]  should_fail_ex+0x3b0/0x4e0
[  203.063408][ T9593]  prepare_alloc_pages+0x1da/0x5d0
[  203.068569][ T9593]  __alloc_pages_noprof+0x166/0x6c0
[  203.073778][ T9593]  ? __pfx___alloc_pages_noprof+0x10/0x10
[  203.079547][ T9593]  ? __lock_acquire+0x1346/0x1fd0
[  203.084588][ T9593]  alloc_pages_mpol_noprof+0x3e8/0x680
[  203.090079][ T9593]  ? __pfx_alloc_pages_mpol_noprof+0x10/0x10
[  203.096066][ T9593]  vma_alloc_folio_noprof+0xf3/0x1f0
[  203.101352][ T9593]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  203.107252][ T9593]  ? do_raw_spin_unlock+0x13c/0x8b0
[  203.112446][ T9593]  folio_prealloc+0x31/0x170
[  203.117039][ T9593]  do_wp_page+0x11cc/0x52f0
[  203.121554][ T9593]  ? __pfx_do_wp_page+0x10/0x10
[  203.126417][ T9593]  ? __pfx_lock_acquire+0x10/0x10
[  203.131439][ T9593]  ? do_raw_spin_lock+0x14f/0x370
[  203.136471][ T9593]  ? __pfx_validate_chain+0x10/0x10
[  203.141668][ T9593]  handle_pte_fault+0x117e/0x7090
[  203.146693][ T9593]  ? count_memcg_event_mm+0x94/0x420
[  203.151973][ T9593]  ? __pfx_validate_chain+0x10/0x10
[  203.157170][ T9593]  ? __pfx_validate_chain+0x10/0x10
[  203.162359][ T9593]  ? mark_lock+0x9a/0x350
[  203.166686][ T9593]  ? __lock_acquire+0x1346/0x1fd0
[  203.171727][ T9593]  ? __pfx_handle_pte_fault+0x10/0x10
[  203.177099][ T9593]  ? __lock_acquire+0x1346/0x1fd0
[  203.182146][ T9593]  ? __pfx_lock_release+0x10/0x10
[  203.187199][ T9593]  handle_mm_fault+0x10df/0x1ba0
[  203.192204][ T9593]  ? __pfx_handle_mm_fault+0x10/0x10
[  203.197501][ T9593]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  203.203828][ T9593]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  203.209123][ T9593]  exc_page_fault+0x2b9/0x8c0
[  203.213804][ T9593]  asm_exc_page_fault+0x26/0x30
[  203.218654][ T9593] RIP: 0010:__put_user_4+0x11/0x20
[  203.223794][ T9593] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90
[  203.243400][ T9593] RSP: 0018:ffffc90002fe79d8 EFLAGS: 00050202
[  203.249461][ T9593] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000020001038
[  203.257422][ T9593] RDX: 0000000020001000 RSI: ffffffff8bcacd00 RDI: ffffffff8c1fe900
[  203.265406][ T9593] RBP: ffffc90002fe7ed0 R08: ffffffff8fad9faf R09: 1ffffffff1f5b3f5
[  203.273375][ T9593] R10: dffffc0000000000 R11: fffffbfff1f5b3f6 R12: 1ffff920005fcf48
[  203.281349][ T9593] R13: dffffc0000000000 R14: 0000000000000400 R15: ffffc90002fe7d20
[  203.289328][ T9593]  __sys_sendmmsg+0x515/0x740
[  203.294014][ T9593]  ? __pfx___sys_sendmmsg+0x10/0x10
[  203.299264][ T9593]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  203.305150][ T9593]  ? ksys_write+0x23e/0x2c0
[  203.309685][ T9593]  ? __pfx_lock_release+0x10/0x10
[  203.314709][ T9593]  ? vfs_write+0x7c4/0xc90
[  203.319126][ T9593]  ? __mutex_unlock_slowpath+0x21d/0x750
[  203.324751][ T9593]  ? __pfx_vfs_write+0x10/0x10
[  203.329558][ T9593]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  203.335539][ T9593]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  203.341890][ T9593]  ? do_syscall_64+0x100/0x230
[  203.346648][ T9593]  __x64_sys_sendmmsg+0xa0/0xb0
[  203.351497][ T9593]  do_syscall_64+0xf3/0x230
[  203.355996][ T9593]  ? clear_bhb_loop+0x35/0x90
[  203.360671][ T9593]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.366567][ T9593] RIP: 0033:0x7f5f8f27d0a9
[  203.370976][ T9593] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  203.390580][ T9593] RSP: 002b:00007f5f900350c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  203.398985][ T9593] RAX: ffffffffffffffda RBX: 00007f5f8f3b3f80 RCX: 00007f5f8f27d0a9
[  203.406951][ T9593] RDX: 000000007fffefff RSI: 0000000020000cc0 RDI: 0000000000000004
[  203.414914][ T9593] RBP: 00007f5f90035120 R08: 0000000000000000 R09: 0000000000000000
[  203.422874][ T9593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  203.430832][ T9593] R13: 000000000000000b R14: 00007f5f8f3b3f80 R15: 00007fff60b34e48
[  203.438828][ T9593]  </TASK>
[  203.443228][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88805d9a7800: abort rx timeout. Force session deactivation
[  203.469299][ T9329] 8021q: adding VLAN 0 to HW filter on device batadv0
[  203.605546][ T9329] veth0_vlan: entered promiscuous mode
[  203.641747][ T9329] veth1_vlan: entered promiscuous mode
[  203.820040][ T9329] veth0_macvtap: entered promiscuous mode
[  203.864867][ T9329] veth1_macvtap: entered promiscuous mode
[  203.916497][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.939791][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.950575][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.961206][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.979875][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.011511][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.026079][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.036664][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.051711][ T9329] batman_adv: batadv0: Interface activated: batadv_slave_0
[  204.079016][ T9620] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  204.094933][ T9620] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  204.109954][ T9620] netlink: 16074 bytes leftover after parsing attributes in process `syz-executor.1'.
[  204.123037][ T9617] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  204.163891][ T9623] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  204.226444][ T9623] bond0: entered allmulticast mode
[  204.237257][ T9632] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[  204.248666][ T9623] bond_slave_0: entered allmulticast mode
[  204.255145][ T9623] bond_slave_1: entered allmulticast mode
[  204.276397][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  204.305225][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.318930][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  204.331793][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.351673][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  204.362837][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.373554][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  204.384647][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.398726][ T9329] batman_adv: batadv0: Interface activated: batadv_slave_1
[  204.430176][ T9329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  204.461597][ T9329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  204.477698][ T9329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  204.487101][ T9329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  204.501370][ T9641] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  204.527500][ T9622] lo speed is unknown, defaulting to 1000
[  204.692387][ T2864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.712195][ T2864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.800785][ T2484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.824180][ T2484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.709919][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88802c139000: rx timeout, send abort
[  206.218308][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88802c139000: abort rx timeout. Force session deactivation
[  206.429564][ T9696] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[  206.502965][ T9700] FAULT_INJECTION: forcing a failure.
[  206.502965][ T9700] name failslab, interval 1, probability 0, space 0, times 0
[  206.517589][ T9700] CPU: 0 PID: 9700 Comm: syz-executor.4 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0
[  206.528036][ T9700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  206.535785][ T9702] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.0'.
[  206.538086][ T9700] Call Trace:
[  206.538098][ T9700]  <TASK>
[  206.538106][ T9700]  dump_stack_lvl+0x241/0x360
[  206.538140][ T9700]  ? __pfx_dump_stack_lvl+0x10/0x10
[  206.563573][ T9700]  ? __pfx__printk+0x10/0x10
[  206.568177][ T9700]  ? __pfx___might_resched+0x10/0x10
[  206.573466][ T9700]  should_fail_ex+0x3b0/0x4e0
[  206.578152][ T9700]  should_failslab+0x9/0x20
[  206.582653][ T9700]  __kmalloc_node_noprof+0xdf/0x440
[  206.587844][ T9700]  ? alloc_slab_obj_exts+0x3a/0xa0
[  206.592957][ T9700]  alloc_slab_obj_exts+0x3a/0xa0
[  206.597894][ T9700]  __memcg_slab_post_alloc_hook+0x31c/0x7e0
[  206.603815][ T9700]  ? __alloc_skb+0x1c3/0x440
[  206.608400][ T9700]  kmem_cache_alloc_node_noprof+0x222/0x320
[  206.614297][ T9700]  __alloc_skb+0x1c3/0x440
[  206.618713][ T9700]  ? __pfx_register_lock_class+0x10/0x10
[  206.624345][ T9700]  ? __pfx___alloc_skb+0x10/0x10
[  206.629287][ T9700]  alloc_skb_with_frags+0xc3/0x770
[  206.634408][ T9700]  sock_alloc_send_pskb+0x91a/0xa60
[  206.639634][ T9700]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  206.645355][ T9700]  ? do_raw_spin_unlock+0x13c/0x8b0
[  206.650562][ T9700]  unix_dgram_sendmsg+0x6d3/0x1f80
[  206.655686][ T9700]  ? aa_sk_perm+0x967/0xab0
[  206.660192][ T9700]  ? aa_file_perm+0x3ef/0xf60
[  206.664870][ T9700]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  206.670422][ T9700]  ? __pfx_lock_acquire+0x10/0x10
[  206.675443][ T9700]  ? aa_sock_msg_perm+0x91/0x160
[  206.680382][ T9700]  ? unix_seqpacket_sendmsg+0x110/0x1e0
[  206.685947][ T9700]  ? __pfx_unix_seqpacket_sendmsg+0x10/0x10
[  206.691860][ T9700]  __sock_sendmsg+0x221/0x270
[  206.696549][ T9700]  sock_write_iter+0x2dd/0x400
[  206.701316][ T9700]  ? __pfx_sock_write_iter+0x10/0x10
[  206.706611][ T9700]  ? bpf_lsm_file_permission+0x9/0x10
[  206.711979][ T9700]  ? security_file_permission+0x7f/0xa0
[  206.717534][ T9700]  vfs_write+0xa72/0xc90
[  206.721780][ T9700]  ? __pfx_sock_write_iter+0x10/0x10
[  206.727068][ T9700]  ? __pfx_vfs_write+0x10/0x10
[  206.731842][ T9700]  ksys_write+0x1a0/0x2c0
[  206.736172][ T9700]  ? __pfx_ksys_write+0x10/0x10
[  206.741086][ T9700]  ? do_syscall_64+0x100/0x230
[  206.745851][ T9700]  ? do_syscall_64+0xb6/0x230
[  206.750527][ T9700]  do_syscall_64+0xf3/0x230
[  206.755033][ T9700]  ? clear_bhb_loop+0x35/0x90
[  206.759714][ T9700]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.765610][ T9700] RIP: 0033:0x7f778687d0a9
[  206.770022][ T9700] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  206.789637][ T9700] RSP: 002b:00007f778751d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  206.798048][ T9700] RAX: ffffffffffffffda RBX: 00007f77869b3f80 RCX: 00007f778687d0a9
[  206.806014][ T9700] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  206.813994][ T9700] RBP: 00007f778751d120 R08: 0000000000000000 R09: 0000000000000000
[  206.821960][ T9700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  206.829925][ T9700] R13: 000000000000000b R14: 00007f77869b3f80 R15: 00007ffe02a10888
[  206.837905][ T9700]  </TASK>
[  207.211344][ T9713] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.1'.
[  207.263069][ T9715] bridge0: port 3(team0) entered blocking state
[  207.292916][ T9715] bridge0: port 3(team0) entered disabled state
[  207.302238][ T9715] team0: entered allmulticast mode
[  207.308318][ T9715] team_slave_0: entered allmulticast mode
[  207.314502][ T9715] team_slave_1: entered allmulticast mode
[  207.323200][ T9715] team0: entered promiscuous mode
[  207.329270][ T9715] team_slave_0: entered promiscuous mode
[  207.352078][ T9715] team_slave_1: entered promiscuous mode
[  207.369698][ T9715] bridge0: port 3(team0) entered blocking state
[  207.376595][ T9715] bridge0: port 3(team0) entered forwarding state
[  207.430196][ T9719] syz_tun: entered promiscuous mode
[  207.470338][ T9719] syz_tun: entered allmulticast mode
[  207.479419][   T29] audit: type=1800 audit(1719121295.048:19): pid=9720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1960 res=0 errno=0
[  207.511900][   T29] audit: type=1804 audit(1719121295.078:20): pid=9720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir4058392155/syzkaller.XH0Fut/156/memory.events" dev="sda1" ino=1960 res=1 errno=0
[  207.515184][ T9719] team0: Port device syz_tun added
[  207.543521][   T29] audit: type=1804 audit(1719121295.078:21): pid=9720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir4058392155/syzkaller.XH0Fut/156/memory.events" dev="sda1" ino=1960 res=1 errno=0
[  207.744562][ T9731] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  207.904548][ T9740] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'.
[  208.318883][ T2852] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.503845][ T9777] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  208.804174][   T29] audit: type=1804 audit(1719121296.368:22): pid=9785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1008129542/syzkaller.ATmNcN/317/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0
[  208.916749][ T9788] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  208.973363][ T9788] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  209.025555][   T29] audit: type=1804 audit(1719121296.598:23): pid=9788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1008129542/syzkaller.ATmNcN/317/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0
[  209.159300][ T9802] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'.
[  209.365357][ T2852] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.384236][ T5131] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  209.394204][ T5131] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  209.402015][ T5131] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  209.412777][ T5131] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  209.422765][ T5131] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  209.431349][ T5131] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  209.491501][ T2852] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.614990][ T2852] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.652069][ T9818] lo speed is unknown, defaulting to 1000
[  209.811572][ T2852] bridge_slave_1: left allmulticast mode
[  209.823430][ T2852] bridge_slave_1: left promiscuous mode
[  209.840672][ T2852] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.863093][ T2852] bridge_slave_0: left allmulticast mode
[  209.883826][ T2852] bridge_slave_0: left promiscuous mode
[  209.894354][ T2852] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.391359][ T2852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  210.407692][ T2852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  210.422477][ T2852] bond0 (unregistering): Released all slaves
[  210.628039][ T9847] FAULT_INJECTION: forcing a failure.
[  210.628039][ T9847] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  210.643234][ T9847] CPU: 0 PID: 9847 Comm: syz-executor.1 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0
[  210.653683][ T9847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  210.663786][ T9847] Call Trace:
[  210.667079][ T9847]  <TASK>
[  210.670030][ T9847]  dump_stack_lvl+0x241/0x360
[  210.674743][ T9847]  ? __pfx_dump_stack_lvl+0x10/0x10
[  210.679969][ T9847]  ? __pfx__printk+0x10/0x10
[  210.684593][ T9847]  ? snprintf+0xda/0x120
[  210.688867][ T9847]  should_fail_ex+0x3b0/0x4e0
[  210.693583][ T9847]  _copy_to_user+0x2f/0xb0
[  210.698028][ T9847]  simple_read_from_buffer+0xca/0x150
[  210.703429][ T9847]  proc_fail_nth_read+0x1e9/0x250
[  210.708486][ T9847]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  210.714055][ T9847]  ? rw_verify_area+0x514/0x6b0
[  210.718926][ T9847]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  210.724510][ T9847]  vfs_read+0x204/0xbd0
[  210.728688][ T9847]  ? __pfx_lock_release+0x10/0x10
[  210.733737][ T9847]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  210.739311][ T9847]  ? __pfx_vfs_read+0x10/0x10
[  210.744017][ T9847]  ? __fget_files+0x29/0x470
[  210.748659][ T9847]  ? __fget_files+0x3f6/0x470
[  210.753370][ T9847]  ksys_read+0x1a0/0x2c0
[  210.757667][ T9847]  ? __pfx_ksys_read+0x10/0x10
[  210.762453][ T9847]  ? do_syscall_64+0x100/0x230
[  210.767220][ T9847]  ? do_syscall_64+0xb6/0x230
[  210.771909][ T9847]  do_syscall_64+0xf3/0x230
[  210.776427][ T9847]  ? clear_bhb_loop+0x35/0x90
[  210.781143][ T9847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.787059][ T9847] RIP: 0033:0x7fa17587bd4c
[  210.791500][ T9847] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48
[  210.811123][ T9847] RSP: 002b:00007fa1766030c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  210.819578][ T9847] RAX: ffffffffffffffda RBX: 00007fa1759b3f80 RCX: 00007fa17587bd4c
[  210.827570][ T9847] RDX: 000000000000000f RSI: 00007fa176603130 RDI: 0000000000000003
[  210.835592][ T9847] RBP: 00007fa176603120 R08: 0000000000000000 R09: 0000000000000000
[  210.843584][ T9847] R10: 0000000000000082 R11: 0000000000000246 R12: 0000000000000001
[  210.851567][ T9847] R13: 000000000000004d R14: 00007fa1759b3f80 R15: 00007ffe2ac8d578
[  210.859554][ T9847]  </TASK>
[  210.918371][ T9853] tipc: Started in network mode
[  210.924124][ T9853] tipc: Node identity 5f1414aa, cluster identity 4711
[  210.933522][ T9853] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  211.076200][ T9863] nftables ruleset with unbound chain
[  211.094473][ T9864] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  211.128449][ T9855] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[  211.163711][ T9855] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.1'.
[  211.483513][ T5131] Bluetooth: hci4: command tx timeout
[  211.696954][ T9818] chnl_net:caif_netlink_parms(): no params data found
[  211.792634][ T2852] hsr_slave_0: left promiscuous mode
[  211.828528][ T2852] hsr_slave_1: left promiscuous mode
[  211.933546][ T2852] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  211.941005][ T2852] batman_adv: batadv0: Removing interface: batadv_slave_0
[  211.991080][ T2852] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.005792][ T2852] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.014002][   T29] audit: type=1800 audit(1719121299.578:24): pid=9898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1959 res=0 errno=0
[  212.083584][   T29] audit: type=1804 audit(1719121299.588:25): pid=9898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1008129542/syzkaller.ATmNcN/324/memory.events" dev="sda1" ino=1959 res=1 errno=0
[  212.113975][ T2852] veth1_macvtap: left promiscuous mode
[  212.120688][ T2852] veth0_macvtap: left promiscuous mode
[  212.129900][ T2852] veth1_vlan: left promiscuous mode
[  212.136992][ T2852] veth0_vlan: left promiscuous mode
[  212.143542][   T29] audit: type=1804 audit(1719121299.708:26): pid=9905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1008129542/syzkaller.ATmNcN/324/memory.events" dev="sda1" ino=1959 res=1 errno=0
[  212.169891][   T29] audit: type=1804 audit(1719121299.718:27): pid=9905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1008129542/syzkaller.ATmNcN/324/memory.events" dev="sda1" ino=1959 res=1 errno=0
[  212.198776][ T9898] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'.
[  212.313690][ T9909] syz-executor.0[9909] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  212.313922][ T9909] syz-executor.0[9909] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  213.083272][ T2852] team0 (unregistering): Port device team_slave_1 removed
[  213.185286][ T2852] team0 (unregistering): Port device team_slave_0 removed
[  213.570560][ T5131] Bluetooth: hci4: command tx timeout
[  213.786014][ T9902] debugfs: Directory 'netdev:nicvf0' with parent 'phy22' already present!
[  213.812786][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  214.014522][ T9923] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'.
[  214.157359][ T9818] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.174797][ T9818] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.192343][ T9818] bridge_slave_0: entered allmulticast mode
[  214.203271][ T9818] bridge_slave_0: entered promiscuous mode
[  214.230282][ T9818] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.237762][ T9818] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.245225][ T9818] bridge_slave_1: entered allmulticast mode
[  214.252688][ T9818] bridge_slave_1: entered promiscuous mode
[  214.380178][ T9818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  214.413507][ T9938] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  214.458797][ T9938] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  214.476712][ T9818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  214.591100][ T9818] team0: Port device team_slave_0 added
[  214.617388][ T9946] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  214.683992][ T9818] team0: Port device team_slave_1 added
[  214.696996][ T9952] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  214.711169][ T9956] netem: change failed
[  214.812739][ T9818] batman_adv: batadv0: Adding interface: batadv_slave_0
[  214.837081][ T9818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.864742][ T9818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  214.884120][ T9818] batman_adv: batadv0: Adding interface: batadv_slave_1
[  214.891211][ T9818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.924476][ T9818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.059714][ T9818] hsr_slave_0: entered promiscuous mode
[  215.075225][ T9818] hsr_slave_1: entered promiscuous mode
[  215.086652][ T9818] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  215.098969][ T9818] Cannot create hsr debugfs directory
[  215.219218][ T9974] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  215.643783][ T5131] Bluetooth: hci4: command tx timeout
[  215.772571][T10002] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  216.044798][T10016] vlan3: entered allmulticast mode
[  216.050964][T10016] bond0: (slave vlan3): Opening slave failed
[  216.069459][ T9818] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  216.161648][ T9818] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  216.178293][ T9818] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  216.241937][ T9818] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  216.346890][T10026] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  216.451504][ T9818] 8021q: adding VLAN 0 to HW filter on device bond0
[  216.526342][ T9818] 8021q: adding VLAN 0 to HW filter on device team0
[  216.555631][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.562790][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state
[  216.591760][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.598973][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state
[  216.616421][T10035] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  216.707163][T10038] netlink: 'syz-executor.1': attribute type 21 has an invalid length.
[  216.723452][T10038] netlink: 'syz-executor.1': attribute type 20 has an invalid length.
[  216.732821][T10038] IPv6: NLM_F_CREATE should be specified when creating new route
[  216.789013][ T9818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  216.817988][T10042] sctp: [Deprecated]: syz-executor.4 (pid 10042) Use of struct sctp_assoc_value in delayed_ack socket option.
[  216.817988][T10042] Use struct sctp_sack_info instead
[  216.946249][T10049] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  216.959637][T10049] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  217.011589][T10055] netlink: 'syz-executor.0': attribute type 8 has an invalid length.
[  217.065632][T10053] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  217.222183][ T9818] 8021q: adding VLAN 0 to HW filter on device batadv0
[  217.310930][ T9818] veth0_vlan: entered promiscuous mode
[  217.325466][ T9818] veth1_vlan: entered promiscuous mode
[  217.396349][ T9818] veth0_macvtap: entered promiscuous mode
[  217.419899][ T9818] veth1_macvtap: entered promiscuous mode
[  217.495994][ T9818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.519944][ T9818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.533166][ T9818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.553228][ T9818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.577492][ T9818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.588520][ T9818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.598481][ T9818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.610345][T10078] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  217.620623][ T9818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.630637][T10078] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  217.653553][ T9818] batman_adv: batadv0: Interface activated: batadv_slave_0
[  217.660995][T10078] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  217.677178][ T9818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.688821][T10078] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  217.702882][ T9818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.713424][T10078] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  217.723396][ T5131] Bluetooth: hci4: command tx timeout
[  217.726746][ T9818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.745408][ T9818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.755779][T10078] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  217.763204][ T9818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.777096][ T9818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.787208][ T9818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.799732][ T9818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.801446][T10084] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  217.810479][T10085] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  217.831065][ T9818] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.847800][ T9818] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.861039][T10085] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.3'.
[  217.873049][T10084] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'.
[  217.874344][ T9818] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.898496][ T9818] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.908475][ T9818] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.094654][ T7451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.102506][ T7451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.142381][T10092] x_tables: ip_tables: ah match: only valid for protocol 51
[  218.182752][ T7451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.192764][ T7451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.831150][T10127] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  218.876408][T10129] veth0_vlan: left promiscuous mode
[  219.071445][T10121] delete_channel: no stack
[  219.268094][T10148] veth1_vlan: entered allmulticast mode
[  219.367869][T10154] lo speed is unknown, defaulting to 1000
[  219.820234][T10162] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  219.942465][T10162] __nla_validate_parse: 14 callbacks suppressed
[  219.942485][T10162] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'.
[  220.249511][T10180] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'.
[  220.395610][T10196] tipc: Failed to remove unknown binding: 66,1,1/0:1797311336/1797311338
[  220.604759][T10196] 8021q: adding VLAN 0 to HW filter on device bond0
[  220.662958][T10196] team0: Port device bond0 added
[  220.722329][T10206] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  220.817070][T10213] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'.
[  221.079893][ T7451] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.106322][T10227] sctp: [Deprecated]: syz-executor.3 (pid 10227) Use of struct sctp_assoc_value in delayed_ack socket option.
[  221.106322][T10227] Use struct sctp_sack_info instead
[  221.140151][T10227] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'.
[  221.372475][T10234] ebt_among: dst integrity fail: 102
[  221.616886][T10241] lo speed is unknown, defaulting to 1000
[  221.651003][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  221.969170][ T5126] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  221.979016][ T5126] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  221.988225][ T5126] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  221.998699][ T5126] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  222.007004][ T5126] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  222.023550][ T5126] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  222.114535][T10259] validate_nla: 3 callbacks suppressed
[  222.114552][T10259] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[  222.137386][T10262] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  222.245487][T10259] ebt_among: dst integrity fail: 102
[  222.267676][T10253] lo speed is unknown, defaulting to 1000
[  222.422251][T10270] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  222.447408][T10270] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  222.477831][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  222.851873][ T7451] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.994625][T10290] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  223.131520][T10301] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  223.134768][ T7451] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.278874][ T7451] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.474449][T10316] netlink: 'syz-executor.1': attribute type 11 has an invalid length.
[  223.722531][ T7451] bridge_slave_1: left allmulticast mode
[  223.748806][ T7451] bridge_slave_1: left promiscuous mode
[  223.776045][ T7451] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.822456][ T7451] bridge_slave_0: left allmulticast mode
[  223.833225][ T7451] bridge_slave_0: left promiscuous mode
[  223.849379][ T7451] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.887385][T10338] 
[  223.889770][T10338] ======================================================
[  223.896789][T10338] WARNING: possible circular locking dependency detected
[  223.903798][T10338] 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 Not tainted
[  223.910922][T10338] ------------------------------------------------------
[  223.917918][T10338] syz-executor.4/10338 is trying to acquire lock:
[  223.924324][T10338] ffff88801fb90a50 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_switch_to_fallback+0x35/0xd00
[  223.935013][T10338] 
[  223.935013][T10338] but task is already holding lock:
[  223.942377][T10338] ffff88801fb90258 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_sendmsg+0x55/0x530
[  223.951198][T10338] 
[  223.951198][T10338] which lock already depends on the new lock.
[  223.951198][T10338] 
[  223.961603][T10338] 
[  223.961603][T10338] the existing dependency chain (in reverse order) is:
[  223.970617][T10338] 
[  223.970617][T10338] -> #2 (sk_lock-AF_INET){+.+.}-{0:0}:
[  223.978279][T10338]        lock_acquire+0x1ed/0x550
[  223.983320][T10338]        lock_sock_nested+0x48/0x100
[  223.988618][T10338]        do_ip_getsockopt+0x14ab/0x2940
[  223.994185][T10338]        ip_getsockopt+0xed/0x2e0
[  223.999221][T10338]        tcp_getsockopt+0x163/0x1c0
[  224.004431][T10338]        do_sock_getsockopt+0x373/0x850
[  224.010001][T10338]        __sys_getsockopt+0x271/0x330
[  224.015386][T10338]        __x64_sys_getsockopt+0xb5/0xd0
[  224.020945][T10338]        do_syscall_64+0xf3/0x230
[  224.025990][T10338]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.032450][T10338] 
[  224.032450][T10338] -> #1 (rtnl_mutex){+.+.}-{3:3}:
[  224.039665][T10338]        lock_acquire+0x1ed/0x550
[  224.044691][T10338]        __mutex_lock+0x136/0xd70
[  224.049716][T10338]        do_ip_setsockopt+0x127d/0x3cd0
[  224.055273][T10338]        ip_setsockopt+0x63/0x100
[  224.060349][T10338]        smc_setsockopt+0x275/0xe50
[  224.065552][T10338]        do_sock_setsockopt+0x3af/0x720
[  224.071089][T10338]        __sys_setsockopt+0x1ae/0x250
[  224.076461][T10338]        __x64_sys_setsockopt+0xb5/0xd0
[  224.081992][T10338]        do_syscall_64+0xf3/0x230
[  224.087005][T10338]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.093414][T10338] 
[  224.093414][T10338] -> #0 (&smc->clcsock_release_lock){+.+.}-{3:3}:
[  224.102019][T10338]        validate_chain+0x18e0/0x5900
[  224.107380][T10338]        __lock_acquire+0x1346/0x1fd0
[  224.112762][T10338]        lock_acquire+0x1ed/0x550
[  224.117782][T10338]        __mutex_lock+0x136/0xd70
[  224.122808][T10338]        smc_switch_to_fallback+0x35/0xd00
[  224.128607][T10338]        smc_sendmsg+0x11f/0x530
[  224.133557][T10338]        __sock_sendmsg+0x221/0x270
[  224.138758][T10338]        ____sys_sendmsg+0x525/0x7d0
[  224.144048][T10338]        __sys_sendmmsg+0x3b2/0x740
[  224.149238][T10338]        __x64_sys_sendmmsg+0xa0/0xb0
[  224.154610][T10338]        do_syscall_64+0xf3/0x230
[  224.159629][T10338]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.166040][T10338] 
[  224.166040][T10338] other info that might help us debug this:
[  224.166040][T10338] 
[  224.176251][T10338] Chain exists of:
[  224.176251][T10338]   &smc->clcsock_release_lock --> rtnl_mutex --> sk_lock-AF_INET
[  224.176251][T10338] 
[  224.189797][T10338]  Possible unsafe locking scenario:
[  224.189797][T10338] 
[  224.197238][T10338]        CPU0                    CPU1
[  224.202584][T10338]        ----                    ----
[  224.207932][T10338]   lock(sk_lock-AF_INET);
[  224.212345][T10338]                                lock(rtnl_mutex);
[  224.218874][T10338]                                lock(sk_lock-AF_INET);
[  224.225800][T10338]   lock(&smc->clcsock_release_lock);
[  224.231188][T10338] 
[  224.231188][T10338]  *** DEADLOCK ***
[  224.231188][T10338] 
[  224.239323][T10338] 1 lock held by syz-executor.4/10338:
[  224.244773][T10338]  #0: ffff88801fb90258 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_sendmsg+0x55/0x530
[  224.253995][T10338] 
[  224.253995][T10338] stack backtrace:
[  224.259875][T10338] CPU: 0 PID: 10338 Comm: syz-executor.4 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0
[  224.270370][T10338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  224.280420][T10338] Call Trace:
[  224.283697][T10338]  <TASK>
[  224.286614][T10338]  dump_stack_lvl+0x241/0x360
[  224.291296][T10338]  ? __pfx_dump_stack_lvl+0x10/0x10
[  224.296490][T10338]  ? print_circular_bug+0x130/0x1a0
[  224.301687][T10338]  check_noncircular+0x36a/0x4a0
[  224.306620][T10338]  ? __pfx_check_noncircular+0x10/0x10
[  224.312069][T10338]  ? lockdep_lock+0x123/0x2b0
[  224.316744][T10338]  ? _find_first_zero_bit+0xd3/0x100
[  224.322019][T10338]  validate_chain+0x18e0/0x5900
[  224.326868][T10338]  ? validate_chain+0x11e/0x5900
[  224.331797][T10338]  ? __pfx_validate_chain+0x10/0x10
[  224.336996][T10338]  ? validate_chain+0x11e/0x5900
[  224.341951][T10338]  ? validate_chain+0x11e/0x5900
[  224.346879][T10338]  ? __pfx_validate_chain+0x10/0x10
[  224.352069][T10338]  ? look_up_lock_class+0x77/0x160
[  224.357179][T10338]  ? register_lock_class+0x102/0x980
[  224.362452][T10338]  ? __pfx_register_lock_class+0x10/0x10
[  224.368082][T10338]  ? __pfx_validate_chain+0x10/0x10
[  224.373283][T10338]  ? mark_lock+0x9a/0x350
[  224.377611][T10338]  __lock_acquire+0x1346/0x1fd0
[  224.382459][T10338]  lock_acquire+0x1ed/0x550
[  224.386955][T10338]  ? smc_switch_to_fallback+0x35/0xd00
[  224.392417][T10338]  ? __pfx_lock_acquire+0x10/0x10
[  224.397436][T10338]  ? __pfx___might_resched+0x10/0x10
[  224.402722][T10338]  __mutex_lock+0x136/0xd70
[  224.407217][T10338]  ? smc_switch_to_fallback+0x35/0xd00
[  224.412672][T10338]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  224.418649][T10338]  ? smc_switch_to_fallback+0x35/0xd00
[  224.424100][T10338]  ? __pfx___mutex_lock+0x10/0x10
[  224.429115][T10338]  ? __local_bh_enable_ip+0x168/0x200
[  224.434471][T10338]  ? lockdep_hardirqs_on+0x99/0x150
[  224.439672][T10338]  ? __local_bh_enable_ip+0x168/0x200
[  224.445032][T10338]  smc_switch_to_fallback+0x35/0xd00
[  224.450321][T10338]  ? do_raw_spin_unlock+0x13c/0x8b0
[  224.455517][T10338]  smc_sendmsg+0x11f/0x530
[  224.459928][T10338]  ? __pfx_smc_sendmsg+0x10/0x10
[  224.464855][T10338]  __sock_sendmsg+0x221/0x270
[  224.469526][T10338]  ____sys_sendmsg+0x525/0x7d0
[  224.474338][T10338]  ? __pfx_____sys_sendmsg+0x10/0x10
[  224.479620][T10338]  __sys_sendmmsg+0x3b2/0x740
[  224.484301][T10338]  ? __pfx___sys_sendmmsg+0x10/0x10
[  224.489515][T10338]  ? __pfx___might_resched+0x10/0x10
[  224.494794][T10338]  ? __might_fault+0xaa/0x120
[  224.499466][T10338]  ? __pfx_lock_release+0x10/0x10
[  224.504490][T10338]  ? do_futex+0x33b/0x560
[  224.508813][T10338]  ? __rseq_handle_notify_resume+0x353/0x14e0
[  224.514912][T10338]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  224.520881][T10338]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  224.527198][T10338]  ? do_syscall_64+0x100/0x230
[  224.531952][T10338]  __x64_sys_sendmmsg+0xa0/0xb0
[  224.536795][T10338]  do_syscall_64+0xf3/0x230
[  224.541292][T10338]  ? clear_bhb_loop+0x35/0x90
[  224.545972][T10338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.551858][T10338] RIP: 0033:0x7f778687d0a9
[  224.556271][T10338] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  224.575868][T10338] RSP: 002b:00007f77863de0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
2024/06/23 05:41:51 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  224.584273][T10338] RAX: ffffffffffffffda RBX: 00007f77869b4120 RCX: 00007f778687d0a9
[  224.592248][T10338] RDX: 0000000000000004 RSI: 0000000020002740 RDI: 0000000000000007
[  224.600215][T10338] RBP: 00007f77868ec074 R08: 0000000000000000 R09: 0000000000000000
[  224.608174][T10338] R10: 0000000020040001 R11: 0000000000000246 R12: 0000000000000000
[  224.616132][T10338] R13: 000000000000006e R14: 00007f77869b4120 R15: 00007ffe02a10888
[  224.624099][T10338]  </TASK>
[  224.630077][ T5126] Bluetooth: hci4: command tx timeout
[  224.646499][T10341] xt_connbytes: Forcing CT accounting to be enabled