last executing test programs:

1m12.1533402s ago: executing program 1:
unshare(0x400)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r3, 0x1)
r4 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000140)=0x2, 0x4)
setsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, 0xd1)
sendto$inet6(r4, &(0x7f0000000000)="800037bbfa9ba1ce", 0x5dc, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x56)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x6, 0x8}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a"], 0x7c}}, 0x0)

1m11.959464663s ago: executing program 1:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10)
socketpair(0xa, 0x6, 0x2, &(0x7f0000002d00))

1m11.61187233s ago: executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x20000080) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64)
unshare(0x22020400) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) (async)
ppoll(&(0x7f00000003c0)=[{r3, 0x218}], 0x1, 0x0, 0x0, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000080)) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64)
ioctl$PPPIOCSACTIVE(r6, 0x40107446, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001400) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000000, 0x0, 0x0)

59.778278981s ago: executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x20000080) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64)
unshare(0x22020400) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) (async)
ppoll(&(0x7f00000003c0)=[{r3, 0x218}], 0x1, 0x0, 0x0, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000080)) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64)
ioctl$PPPIOCSACTIVE(r6, 0x40107446, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001400) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000000, 0x0, 0x0)

48.048208114s ago: executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x20000080) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64)
unshare(0x22020400) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) (async)
ppoll(&(0x7f00000003c0)=[{r3, 0x218}], 0x1, 0x0, 0x0, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000080)) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64)
ioctl$PPPIOCSACTIVE(r6, 0x40107446, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001400) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000000, 0x0, 0x0)

36.889702876s ago: executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x20000080) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64)
unshare(0x22020400) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) (async)
ppoll(&(0x7f00000003c0)=[{r3, 0x218}], 0x1, 0x0, 0x0, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000080)) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64)
ioctl$PPPIOCSACTIVE(r6, 0x40107446, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001400) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000000, 0x0, 0x0)

32.265110039s ago: executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x8100, 0x0}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

32.114707285s ago: executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000a00)={&(0x7f0000000580)=@in={0x2, 0x0, @loopback=0x7f000021}, 0x10, &(0x7f0000000940)=[{&(0x7f00000005c0)="bd", 0x1}], 0x1, &(0x7f0000000980)=[@init={0x18, 0x84, 0x0, {0x0, 0x5}}], 0x18}, 0x0)

31.702298329s ago: executing program 3:
r0 = socket$kcm(0x10, 0x0, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90824fc60", 0x14}], 0x1}, 0x0)

31.648981719s ago: executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000600)='ext4_da_reserve_space\x00'}, 0x10)
bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20)
syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0)
bind$inet6(r1, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x34, r4, 0xf1aad47e89fb43b5, 0x0, 0x0, {0x3d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="100000f88fd73f7720ac87509087005e1000"/27], 0x10}], 0x1}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x1}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000200), 0x4)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14399029d798a60000001900010000000000000000001d020014"], 0x14}}, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r6, &(0x7f0000000200), 0x43451)
write$binfmt_script(r6, &(0x7f0000000240), 0xfecc)
write$cgroup_type(r5, &(0x7f0000000000), 0x182200)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$AUDIT_TRIM(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x3f6, 0x0, 0x70bd2c, 0x25dfdbfc, "", ["", ""]}, 0x10}}, 0x80)
sendmsg$kcm(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180011000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400)

31.475763183s ago: executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00", @ANYRES32=r4, @ANYBLOB="14000500fe800099"], 0x3c}}, 0x0)

31.329334346s ago: executing program 3:
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0xfffffffffffffce7, 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x8, [@var={0xf, 0x0, 0x0, 0xe, 0x1}, @restrict={0x2, 0x0, 0x0, 0xb, 0x1}, @enum={0x6, 0x4, 0x0, 0x6, 0x4, [{0x1, 0xa0}, {0x7, 0x7}, {0x0, 0x5c}, {0x5, 0x6}]}, @volatile={0x3, 0x0, 0x0, 0x9, 0x5}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x47, 0x0, 0x7, 0x6}, @const={0xd, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x61, 0x5f, 0x30, 0x5f, 0x0, 0x41]}}, &(0x7f0000000400)=""/205, 0x90, 0xcd, 0x1, 0x4}, 0x20)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00', <r1=>0x0})
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={r1, 0x1, 0x6, @random="3cb38179c83f"}, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000600)='./file0\x00', 0x0, 0x4008}, 0x18)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r3, 0x12, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], <r4=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@map=r2, 0xffffffffffffffff, 0x2f, 0x20, 0x0, @link_id, r4}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl1\x00', <r5=>r1, 0x2f, 0x20, 0x0, 0x1db8, 0x0, @loopback, @private0, 0x7, 0x8, 0x493, 0x378f}})
bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x7, 0x81, 0x1, 0x200, r2, 0xfffffff9, '\x00', r5, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0xb}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000800000000000000000008500000061000000180020000000000000000000220800009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0)
ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000040)={'team0\x00'})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

31.216633754s ago: executing program 3:
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="699e261c097dc3", 0x7}], 0x1, 0x0, 0xe0}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'veth0_macvtap\x00', @link_local})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000033c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000003400)={0x30, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x4}, {0x14}}}, 0x30}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(0x0, r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000a40)=ANY=[@ANYBLOB="04020000", @ANYRES16=r5, @ANYBLOB="00010000000000000000c700030000a4e200", @ANYRES32=r6, @ANYBLOB="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"], 0x204}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1d, 0x4, 0x5, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000020240), 0x10010)
r8 = socket(0xa, 0x1, 0x0)
close(r8)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={<r10=>0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000003c00)=0x90)
sendmsg$TIPC_CMD_GET_NETID(r8, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r3, 0x8, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xd43234fd8afad098}, 0x5)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r7, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f00000000c0)={<r11=>r10, @in6={{0xa, 0x4e24, 0xe5b, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}}, &(0x7f0000000180)=0x84)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f00000001c0)={r11, 0x64, "45f6e5db910cb2612a75e179d43c340087cc029681c0946c54182f352cb72c3acb0d7812a5451af678f0a94281bea1dbc2142c4cf4f478c536aa2e3afb9362cecb38a381541bb2539c37f75a5db5deb9178f0923d7738d21e006f53823bbbd5e4ae5b803"}, &(0x7f0000000240)=0x6c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

31.186965292s ago: executing program 0:
syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="b376a55ca4e20000000000008100000086dd601d040000482f00fc000000000000000000000000000000ff02000000000000000000000000000124208100000000000003000000000800000086dd080088be000000001000000001ecffffff000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYBLOB="0000000000000000c3eb77b45966ee127b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001100000095", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x90)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{}, &(0x7f0000000500), &(0x7f0000000680)='%pK    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100), 0x48)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020700001f0000000000000000000000020018"], 0xf8}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x4}, 0x48)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000030000000000000000000000850000008700000085000000050000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x2c, 0x3e, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x7c, 0x0, 0x0, @pid}, @typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000700000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0x4, 0x2003, 0x2}, 0x48)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r3, 0x0, r7, 0x0, 0xf3a, 0x0)
write(r1, &(0x7f0000001100)="94", 0x1)
tee(r0, r7, 0x81, 0x0)
vmsplice(r7, &(0x7f0000000340)=[{&(0x7f00000000c0)="03", 0x1}], 0x1, 0x0)
close(r2)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='ext4_ext_remove_space_done\x00', r8}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0xfffffffffffffea3)

31.151027352s ago: executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket(0x11, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x6558, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}}, 0x0)

31.002523595s ago: executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0xfffffffa}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='ip_vti0\x00', 0x10)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
socket$inet_sctp(0x2, 0x0, 0x84)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002f80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000000000000cfc1"], 0x28, 0x40000}, {&(0x7f0000000340)=@in={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000640)=[{&(0x7f00000005c0)="4f0a6fb3eaec25fd4ff761210c9ee37e50354d46d32a58375f174620f0300046e006e4ec7ee32fc5b5ec8e1be37c2fe8049c9ecd7685d18f8029973298259b297074897d65c7929d03f6f0d270c7569fa1fb3730383eb0e2f971bc526df82b75d4f168d33bb021df75f97d362c67ae463788ff00", 0x74}], 0x1, 0x0, 0x0, 0x10000040}, {&(0x7f0000000680)=@in6={0xa, 0x4e20, 0x7, @mcast2, 0x877e}, 0x1c, &(0x7f00000008c0)=[{&(0x7f00000006c0)="82ce9a671f7aa7e5564b025466a802e27273d9cfa6d6082c383ee53896831a8de72e6f6f9f48", 0x26}, {&(0x7f0000000700)="242502d12adc13bf77e76e833cbe6be6072c90810a267fe9934bab6fbfbf68f33d04eff5c267c49d32f745e3025c7a36fa233e7459648b2ecae367d0a47c050e55083ecb15953cf119799147176a80fb7f2dd96c4165129152700377795ff8a0681425366dc1f90172288dcdfb410875db29791e2d28d03f77213b7919788807ffdd5564edd23573c284fd1f6ff9b901af9439fbbd316cff93ffb85bdd4cb2c710b77508f86757eb833cebc9be60c3a9bf33055105aafa4f34368d4bd78a7923fc3f7b8ba67087b2", 0xc8}, {&(0x7f0000000800)="10969a44e1996bb5f4ab7e5ab981ede381f50e6e787d396b34c7f5228daafebd9c6d84d476082e54d97abee2b0322ab09eae1020919c6259d08b01afd97b4791ee2d3cbea72e3e69ab5a65ee27c0fa390cf42442b7cf1d7fd31b4d92081446aee592544be5ede2f4cf416738aa7d148c420150c6259ed50892958a6ee890d9d2926f2373b4735868771f054a592ee065c2a59d755987fb0ba82d2177c6f9c5058ec14c5c9ad56d3a7c8b3d356c10d3bf42", 0xb1}], 0x3, &(0x7f0000000900)=[@authinfo={0x18, 0x84, 0x6, {0x80}}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0x7, 0x200, 0x3, 0x3f, 0x7, 0x4, 0x100}}, @init={0x18, 0x84, 0x0, {0x401, 0x7, 0x1, 0x4}}], 0x60, 0x8010}, {&(0x7f0000000980)=@in={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000b40)=[{&(0x7f00000009c0)="252dfb0ab970d26a83f609bdb2485a20f0ab322e70c171d4b11f7b990c138b395fc5de6a433542473620a3ec5350eb7327ccb0cbe6e39501a8c9613bece61174bc04418bcb12e2a0c422c3db7c64c528a5d1ddac41d6fc1776b017f2f60b6f7d40da0fdb539ed27f674f65bb9959342224586731117ec8d182c04934c38e54ce32294f7c4d6b4c302398c34cec68ac280e3998b87d017c3580b3dc8b130f56da87b92e5ec6afffb6ea5906ab6ec429b63766ebac89e5dd913bd6", 0xba}, {&(0x7f0000000a80)="514da4c57a09c33f1b3e4ff29ea9b08be532cc67c5f70195358a6ac37d89b8a04860a8907859e9beb4eb3cd90372fec17a", 0x31}, {&(0x7f0000000ac0)="9b08fd9ded4d1c4729bed193893ebf29a2ce79d176deae5a76ba677cfe274bd46bab1465e650fd09562da77af7dc028af936cb0a98d9b49f22e4437cd7152bdbaa69743932370419125e4c429ad12aed574349c0fd62e3c278b1415ddaea", 0x5e}, {&(0x7f0000000f40)="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", 0x1000}], 0x4, &(0x7f0000000c00)=[@authinfo={0x18, 0x84, 0x6, {0xae15}}, @sndinfo={0x20, 0x84, 0x2, {0xfffd, 0x0, 0x800, 0x3}}, @authinfo={0x18, 0x84, 0x6, {0xd47}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x7}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xa497}}, @init={0x18, 0x84, 0x0, {0x9e7b, 0xc000, 0x9, 0x3}}, @init={0x18, 0x84, 0x0, {0x3, 0x8, 0x7, 0x8000}}, @sndinfo={0x20, 0x84, 0x2, {0x8001, 0x0, 0x5, 0x2}}], 0xd0, 0x4001}, {&(0x7f0000000d00)=@in6={0xa, 0x4e24, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c, &(0x7f0000000ec0)=[{&(0x7f0000000d40)="bf8420bbd59d58c6cd2eb267a32e87cd3a8e06383b0151ad32707eff764ba4a2a31db5b3f49b13597fa9589d6a337e24563db590d4db46be2b98d63e0b1cc06292f62ee1940557dc91c29de6b77f2407a7ddc6ac125e61806a5835c587af2e6a6cf74276b3ea632bd7cb55ae04a60095826edf04c9701a869d948c3aef23a89e0cba783bdb90863e3aaaa71fb5f6ee3372", 0x91}, {&(0x7f0000001f40)="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", 0x1000}, {&(0x7f0000000e00)="0d306d4256a74ad8ad98883a7f2f29727bda2b68b627894c2a0e96a37fd9a5ece7d7cb32ecc976bbfe94a20cac88df9b60163721baca692c8c7baf42aa2206f4e596b3c786a1778044076ba803ce6ad40118d92955d3a119d05009708f94ca7a9924fb3bf41ce7b96204d682922a483953bb02f45bfa911d53f77025ab5865d661543639a9ce06e9982b634f2fce1c8ca4edf0c0366999b5b0e58270d1241ae1036fa5cf3b5596435963", 0xaa}], 0x3, &(0x7f0000002f40), 0x0, 0x4000}], 0x5, 0x10)
r2 = socket(0x2, 0x80805, 0x0)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={0x0}}, 0x0)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={r4, 0x6}, 0x8)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71006000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x4}, 0x10}, 0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x40}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r6}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000b80)="25732f8d0ea3", 0xffffffffffffffff, 0x5, r6}, 0x38)
r7 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_HANDLE(r7, 0x113, 0x3, &(0x7f0000000000)=0x7ff, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="5d67c44da3cd33863183902d92a7f8221787df8780b031f8211aa9fc0fdc55f74e2f772e664620dc9cf5f9b3910fcc2f812d013afeb917fc6e45ae4813934f8c3f61113c6c176dc2c2bf8659c1b82295cda2f4f0c4410b0eead33bd0bb9ec66cb523120d905a29c6492d779ecdcaa3bfcfc2c930bc508d0d60fc5405052b57be09819742fc2b341e203f62b9f09c1070cebd8536826ca6a9ed56a4d6570bec2a57c4f9cb145e0f33dc693ce6c9b009c4f24c1b", 0xb3}, {&(0x7f0000000440)="6011489540b46ff26db16f46d21ff82829aa5994eacdfe0ea9b3e082f88d861a3a24895c454959773c422394a40b9015dbea39885784d46ca99d402a5e62f5fedd000000000000003a7c2c223861bc3b507b97d879c425fef69a991644bf53ea6e5bd58382e3718fb17c1999436c07cedf04a0027922a10d6d2b721f9bc51daded4d1632a576090c79da002be500c4adce457302b70b276f72029e0f9066283023354d092c90b2e251851315e0cebfb7d7ce0839176463247497f47e954c9418227e8df3694266", 0xc7}], 0x2}, 0x8800)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x80000001, 0x3ff, 0x1, 0x0, r6, 0x9ba, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x9}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r8, 0x0)
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r9, 0x104, 0x0, &(0x7f0000000040), 0x4)
socket$alg(0x26, 0x5, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r10, &(0x7f0000000040), 0x29)

30.953790582s ago: executing program 2:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000600)='ext4_da_reserve_space\x00'}, 0x10)
bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20)
syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0)
bind$inet6(r1, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x34, r4, 0xf1aad47e89fb43b5, 0x0, 0x0, {0x3d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="100000f88fd73f7720ac87509087005e1000"/27], 0x10}], 0x1}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x1}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000200), 0x4)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14399029d798a60000001900010000000000000000001d020014"], 0x14}}, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r6, &(0x7f0000000200), 0x43451)
write$binfmt_script(r6, &(0x7f0000000240), 0xfecc)
write$cgroup_type(r5, &(0x7f0000000000), 0x182200)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$AUDIT_TRIM(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x3f6, 0x0, 0x70bd2c, 0x25dfdbfc, "", ["", ""]}, 0x10}}, 0x80)
sendmsg$kcm(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180011000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400)

30.832347379s ago: executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x60084}, 0x8000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0)
getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r5}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x0, 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x400, '\x00', r5, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x48)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0xfff0)
listen(r9, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='ext4_es_find_extent_range_enter\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00'})

30.768046048s ago: executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00", @ANYRES32=r4, @ANYBLOB="14000500fe800099"], 0x3c}}, 0x0)

30.575037202s ago: executing program 4:
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001e00000008000300", @ANYRES32=r3, @ANYBLOB="28002f800c0002000000000000000000180003"], 0x44}}, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async)
connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r4, &(0x7f0000000100)=[{&(0x7f0000000080)='?', 0x1}, {&(0x7f00000000c0)="a18a03efc855e6df440c154a2ebecae62bae42f661ddc281c5b91673", 0x1c}], 0x100003a7) (async)
writev(r4, &(0x7f0000000100)=[{&(0x7f0000000080)='?', 0x1}, {&(0x7f00000000c0)="a18a03efc855e6df440c154a2ebecae62bae42f661ddc281c5b91673", 0x1c}], 0x100003a7)

30.55026272s ago: executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001f0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000100003"], 0xc0}}, 0x0) (async)
ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e21, @rand_addr=0x64010102}, {0x2, 0x4e21, @private=0xa010102}, 0xb, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0xfffffffffffffffa, 0x5})
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3d, &(0x7f00000002c0), 0x8) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8844)
pipe(0x0) (async)
socket$inet6_sctp(0xa, 0x0, 0x84) (async)
socket$packet(0x11, 0x0, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}]}, 0x38}}, 0x0) (async)
syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffff00000000119078ac1414bbe000000100004e20001090780200000000000000"], 0x0)

30.498330683s ago: executing program 2:
close(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x12)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c000000140087bd00000000000000000000000000000000000000000006000000010000000000000000000000000000000000000000000000000009000e0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b\x00\b\x00\b\x00\x00\x00\x00\x00'], 0x5c}}, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000071122a000000000018120000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00|\x00\x00\x00\x00'], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90)
socket$tipc(0x1e, 0x5, 0x0)
socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x0, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c)
socket$key(0xf, 0x3, 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = accept4$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x80000)
getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r7], 0x4c}}, 0x0)

30.380210055s ago: executing program 4:
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c710016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa73d897e3896d863081b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbd744e517e65ddab19e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f200004304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188541c300f5c1bf56705ba12d198e897186b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710f7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47cbb0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9ea410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be0a33c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06a6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c6062368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c5bed4b0d73dffb17a88aaad5921aee7dae6a2f3009d9cb434898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a64d903b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e7ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00000000000000000000000000006a728258ca3d846a000e80d5f43109a48ddc54cec5d7f78c80e010ed02ffc0846577cafcd9e0ad83149bfb08ba7b5b431311041deb5e5d65610ad6e8d6ed55e900071b4d37d9fadb17a0407e7251866b63faccfe936980f59ceaa9d6b6863024b482023799a4f30a225b560f320e89ed44130e78f8cf000ac3c743b08d4256f282fc36162ac4b59527a3b67560313914ff6ac4ac43cd0e79d6372da631de3fde6c29de3b43d3046df23019ecadd57f175a2443928b1bcb9be16f54936796c3b928dc07c70771622cef2fafeb239a3ca4"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x4, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0)

30.223956869s ago: executing program 2:
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x10, 0xf}, 0x14, &(0x7f0000000500)=[{&(0x7f0000000040)="27031000590400000508002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000819b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33311e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfeb9}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4)

30.108012478s ago: executing program 2:
r0 = socket$kcm(0x10, 0x0, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90824fc60", 0x14}], 0x1}, 0x0)

30.026698208s ago: executing program 2:
unshare(0x6020400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096}, 0x70)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='ext4_es_lookup_extent_exit\x00', r4}, 0x10)
write$cgroup_type(r2, &(0x7f0000000180), 0x40010)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
socket$inet_sctp(0x2, 0x0, 0x84)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff})
recvmsg(r5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(0x0)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f00000006c0)={0x148, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x10000, 0x0, 0x100, 0x0, 0x0]}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x139}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x0, 0x0]}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}]}, @NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x0, 0x0, 0x0, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x401}]}, @NL80211_ATTR_CQM={0x4}]}, 0x148}}, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000780)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @private}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x806}}}}}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000000)={0x0, 0xffffffff})

1.190533032s ago: executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10)
r1 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async)
write$bt_hci(r3, &(0x7f0000002b80)={0x1, @le_create_cis={{0x2064, 0x5}, {0x1, [{}]}}}, 0x9)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
listen(r2, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async)
r5 = accept$inet6(r2, 0x0, 0x0)
setsockopt$inet6_buf(r5, 0x29, 0x0, &(0x7f0000000000), 0x0)
r6 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000080))
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000000)=@req3={0x401, 0x8000, 0xf2d, 0x3, 0x6, 0x3, 0x10000}, 0x1c) (async)
bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e24, 0x6, @remote, 0x6}, 0x1c)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x30, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x18}]}]}, 0x30}}, 0x0) (async)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) (async)
sendto$inet(r1, 0x0, 0x0, 0x1c000, 0x0, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$team(&(0x7f0000000500), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', <r10=>0x0})
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r11, &(0x7f00000005c0)=[{&(0x7f0000000100)=@in={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000140)="0ab276dc5fabf631dcae00a482e0d4f0238c6c5cdde05447e341b763871e1f6eb6b620dce7f5e6ea37c360897232a064d3690b755a488761f08ddac37fc67ba2ec2dc19460ce82c33641a223c3a6b3ce87994f60d5d871a79df544d0550242013237e484eebc4c60114b80cb684258624ef6bb29ef35c5d083ed50b4ce7ed90e3ce5eb7ea8c69e4368f88fd76741c761b71a413844342b941edc093fe3bceb958ba4320ab7f63032456112d106233679f74d0d2f566897d8cddb976b3954eb064f", 0xc1}, {&(0x7f0000000240)="fb873221846e8a3d621b75586139c82fc16fb8c710d24a25fc7da39f57f8582c186a2c43c2758a81b1347c911c2c76e486d260a599e7fc2fe41ab4c2c01b0138cae90b2e3449f82abdae07d451ff7a795ed1662d4329bdd70f2c6f7e5b0f30c5fffc882e83cef0f9c176ea9377f1683bfb38fd3259ce06", 0x77}, {&(0x7f0000000900)="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", 0x3ad}], 0x3, &(0x7f0000000580)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xa}}], 0x30}], 0x1, 0x4000044) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)={0x60, r9, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r10}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5, 0x3, 0x8}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0)
sendto$inet(r1, &(0x7f0000000180)="8216e1e3686500000000000000", 0xd, 0x0, 0x0, 0x0)

529.354473ms ago: executing program 0:
syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="b376a55ca4e20000000000008100000086dd601d040000482f00fc000000000000000000000000000000ff02000000000000000000000000000124208100000000000003000000000800000086dd080088be000000001000000001ecffffff000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYBLOB="0000000000000000c3eb77b45966ee127b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001100000095", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x90)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{}, &(0x7f0000000500), &(0x7f0000000680)='%pK    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100), 0x48)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020700001f0000000000000000000000020018"], 0xf8}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x4}, 0x48)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000030000000000000000000000850000008700000085000000050000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x2c, 0x3e, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x7c, 0x0, 0x0, @pid}, @typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000700000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0x4, 0x2003, 0x2}, 0x48)
pipe(&(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r2, 0x0, r7, 0x0, 0xf3a, 0x0)
read$alg(r6, &(0x7f0000000140)=""/116, 0x74)
tee(r0, r7, 0x81, 0x0)
vmsplice(r7, &(0x7f0000000340)=[{&(0x7f00000000c0)="03", 0x1}], 0x1, 0x0)
close(r1)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='ext4_ext_remove_space_done\x00', r8}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0xfffffffffffffea3)

351.888028ms ago: executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000010000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000015f8"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$unix(0x1, 0x0, 0x0)
accept4$unix(r2, 0x0, &(0x7f00000001c0), 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@ipv4_getnexthop={0x28, 0x6a, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040080}, 0x80)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x18)
r5 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r5, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x0, 0x0, 0x2}}}], 0x18}}], 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r4, 0x0, 0x15, 0xf, &(0x7f00000006c0)="aeb01f00008f6b8d898740c8b393849acbe2000000", &(0x7f0000000700)=""/15, 0xcfa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xe, 0x8, 0x8, &(0x7f0000000500)}}, 0x10)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001a000100000400000000000002000000080000001c5d"], 0x1c}}, 0x0)

0s ago: executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00", @ANYRES32=r4, @ANYBLOB="14000500fe800099"], 0x3c}}, 0x0)

kernel console output (not intermixed with test programs):

ating new route
[  160.411373][ T8371] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  160.418723][ T8371] IPv6: NLM_F_CREATE should be set when creating new route
[  160.454203][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  160.498426][ T8371] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  160.664816][ T8385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  160.672273][ T8385] IPv6: NLM_F_CREATE should be set when creating new route
[  160.803987][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  160.855467][ T8396] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  160.920944][ T8400] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[  160.934276][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  161.062664][ T8403] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  161.117903][ T8407] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  161.137485][ T8407] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  161.417235][ T8416] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  161.424541][ T8416] IPv6: NLM_F_CREATE should be set when creating new route
[  161.469814][ T8416] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  161.477272][ T8416] IPv6: NLM_F_CREATE should be set when creating new route
[  162.417769][ T8454] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  162.425183][ T8454] IPv6: NLM_F_CREATE should be set when creating new route
[  162.449600][ T8454] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  162.457516][ T8454] IPv6: NLM_F_CREATE should be set when creating new route
[  162.481727][ T8456] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  162.489082][ T8456] IPv6: NLM_F_CREATE should be set when creating new route
[  163.565905][ T8498] vlan3: entered promiscuous mode
[  163.572492][ T8498] batadv0: entered promiscuous mode
[  163.640616][ T8505] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  163.647962][ T8505] IPv6: NLM_F_CREATE should be set when creating new route
[  163.751685][ T8511] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  163.758992][ T8511] IPv6: NLM_F_CREATE should be set when creating new route
[  163.782856][ T8511] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  163.790183][ T8511] IPv6: NLM_F_CREATE should be set when creating new route
[  164.824625][ T8562] __nla_validate_parse: 18 callbacks suppressed
[  164.824647][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  164.886602][ T8562] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  164.893952][ T8562] IPv6: NLM_F_CREATE should be set when creating new route
[  165.028760][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  165.071750][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  165.124390][ T8573] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  165.131751][ T8573] IPv6: NLM_F_CREATE should be set when creating new route
[  165.144103][ T8574] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  165.151448][ T8574] IPv6: NLM_F_CREATE should be set when creating new route
[  165.212280][ T8569] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  165.219562][ T8569] IPv6: NLM_F_CREATE should be set when creating new route
[  165.231076][ T8576] netlink: 'syz-executor.0': attribute type 6 has an invalid length.
[  165.253297][ T8573] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  165.497171][ T8570] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  165.504497][ T8570] IPv6: NLM_F_CREATE should be set when creating new route
[  165.522007][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  165.633549][ T8587] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  165.827440][ T8601] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  165.891903][ T8605] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  165.899212][ T8605] IPv6: NLM_F_CREATE should be set when creating new route
[  166.001425][ T8611] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  166.343579][ T8621] syz-executor.3 uses old SIOCAX25GETINFO
[  166.346712][ T8620] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  166.439894][ T8623] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  166.447402][ T8623] IPv6: NLM_F_CREATE should be set when creating new route
[  166.512962][ T8620] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  166.520535][ T8620] IPv6: NLM_F_CREATE should be set when creating new route
[  166.606597][ T8620] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  166.944875][ T8640] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  166.952214][ T8640] IPv6: NLM_F_CREATE should be set when creating new route
[  167.019728][ T8643] vlan3: entered promiscuous mode
[  167.024816][ T8643] bond0: entered promiscuous mode
[  167.058680][ T8643] bond_slave_0: entered promiscuous mode
[  167.076621][ T8643] bond_slave_1: entered promiscuous mode
[  167.099658][ T8643] bond0: left promiscuous mode
[  167.104484][ T8643] bond_slave_0: left promiscuous mode
[  167.116366][ T8643] bond_slave_1: left promiscuous mode
[  167.159314][ T8640] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  167.166669][ T8640] IPv6: NLM_F_CREATE should be set when creating new route
[  167.605754][ T8673] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  167.613096][ T8673] IPv6: NLM_F_CREATE should be set when creating new route
[  167.674291][ T8676] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  167.743387][ T8673] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  167.750726][ T8673] IPv6: NLM_F_CREATE should be set when creating new route
[  169.103284][ T8717] x_tables: duplicate underflow at hook 1
[  169.207286][ T8714] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  169.214564][ T8714] IPv6: NLM_F_CREATE should be set when creating new route
[  169.252723][ T8714] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  169.260072][ T8714] IPv6: NLM_F_CREATE should be set when creating new route
[  169.527313][ T8739] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  169.534678][ T8739] IPv6: NLM_F_CREATE should be set when creating new route
[  169.560046][ T8742] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  169.567913][ T8742] IPv6: NLM_F_CREATE should be set when creating new route
[  169.873601][ T8767] __nla_validate_parse: 10 callbacks suppressed
[  169.873621][ T8767] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'.
[  169.998567][ T8771] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  170.319537][ T8790] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  170.349677][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  170.387122][ T8799] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  170.394381][ T8799] IPv6: NLM_F_CREATE should be set when creating new route
[  170.430717][ T8799] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  170.438484][ T8799] IPv6: NLM_F_CREATE should be set when creating new route
[  170.487120][ T8802] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  170.513521][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  170.537371][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  170.705526][ T8798] : entered promiscuous mode
[  171.056365][ T8829] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.072726][ T8832] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.2'.
[  171.228231][ T8844] macvlan0: entered allmulticast mode
[  171.244853][ T8844] veth1_vlan: entered allmulticast mode
[  171.308937][ T8845] pim6reg: entered allmulticast mode
[  171.363879][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  171.442655][ T8854] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode
[  171.505123][ T8854] macsec1: entered promiscuous mode
[  171.513775][ T8854] macsec1: entered allmulticast mode
[  171.523983][ T8854] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode
[  171.542461][ T8854] mac80211_hwsim hwsim16 wlan0: left allmulticast mode
[  171.566128][ T8854] mac80211_hwsim hwsim16 wlan0: left promiscuous mode
[  171.663649][ T8855] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  171.671172][ T8855] IPv6: NLM_F_CREATE should be set when creating new route
[  171.698297][ T8851] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  171.705661][ T8851] IPv6: NLM_F_CREATE should be set when creating new route
[  171.733458][ T8862] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  172.036236][ T8890] IPVS: Unknown mcast interface: veth1_ώό_team
[  172.539142][ T8911] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  172.546510][ T8911] IPv6: NLM_F_CREATE should be set when creating new route
[  172.576627][ T8911] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  172.583923][ T8911] IPv6: NLM_F_CREATE should be set when creating new route
[  172.908861][ T8928] netlink: zone id is out of range
[  172.928840][ T8928] netlink: zone id is out of range
[  172.934173][ T8928] netlink: zone id is out of range
[  172.972036][ T8928] netlink: zone id is out of range
[  172.983549][ T8928] netlink: zone id is out of range
[  172.997564][ T8928] netlink: zone id is out of range
[  173.013480][ T8928] netlink: zone id is out of range
[  173.026122][ T8928] netlink: zone id is out of range
[  173.054029][ T8928] netlink: zone id is out of range
[  173.063928][ T8928] netlink: zone id is out of range
[  173.383959][ T8964] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  173.391312][ T8964] IPv6: NLM_F_CREATE should be set when creating new route
[  173.429497][ T8964] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  173.436835][ T8964] IPv6: NLM_F_CREATE should be set when creating new route
[  173.649790][ T8971] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  173.657178][ T8971] IPv6: NLM_F_CREATE should be set when creating new route
[  173.680194][ T8976] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  173.687551][ T8976] IPv6: NLM_F_CREATE should be set when creating new route
[  173.698873][ T8977] bridge0: port 3(bond0) entered blocking state
[  173.707248][ T8977] bridge0: port 3(bond0) entered disabled state
[  173.729524][ T8977] bond0: entered allmulticast mode
[  173.734660][ T8977] bond_slave_0: entered allmulticast mode
[  173.741023][ T8977] bond_slave_1: entered allmulticast mode
[  173.753759][ T8977] bond0: entered promiscuous mode
[  173.761978][ T8977] bond_slave_0: entered promiscuous mode
[  173.769044][ T8977] bond_slave_1: entered promiscuous mode
[  173.784848][ T8977] bridge0: port 3(bond0) entered blocking state
[  173.791600][ T8977] bridge0: port 3(bond0) entered forwarding state
[  173.804658][ T8988] x_tables: duplicate underflow at hook 3
[  174.571479][ T9032] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  174.578778][ T9032] IPv6: NLM_F_CREATE should be set when creating new route
[  174.648030][ T9032] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  174.655332][ T9032] IPv6: NLM_F_CREATE should be set when creating new route
[  174.856375][ T9034] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  174.863732][ T9034] IPv6: NLM_F_CREATE should be set when creating new route
[  174.878160][ T9040] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  174.885451][ T9040] IPv6: NLM_F_CREATE should be set when creating new route
[  174.912671][ T9042] __nla_validate_parse: 22 callbacks suppressed
[  174.912692][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  174.953871][ T9043] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  175.201934][ T9044] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  175.209380][ T9044] IPv6: NLM_F_CREATE should be set when creating new route
[  175.219630][ T9045] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  175.226928][ T9045] IPv6: NLM_F_CREATE should be set when creating new route
[  175.248739][ T9047] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.2'.
[  175.268565][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  175.413212][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  175.444314][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  175.575574][ T9070] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'.
[  175.709757][ T9077] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  175.761601][ T9081] sch_fq: defrate 0 ignored.
[  175.772670][ T9077] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  175.780442][ T9077] IPv6: NLM_F_CREATE should be set when creating new route
[  175.796488][ T9077] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  175.803789][ T9077] IPv6: NLM_F_CREATE should be set when creating new route
[  175.822886][ T9077] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  175.842185][ T9088] syz-executor.1[9088] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  175.842343][ T9088] syz-executor.1[9088] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  175.959856][ T9091] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.2'.
[  176.089083][ T9096] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  176.096432][ T9096] IPv6: NLM_F_CREATE should be set when creating new route
[  176.133717][ T9096] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  176.141050][ T9096] IPv6: NLM_F_CREATE should be set when creating new route
[  176.398897][ T9105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  176.406261][ T9105] IPv6: NLM_F_CREATE should be set when creating new route
[  176.430591][ T9111] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  176.438133][ T9111] IPv6: NLM_F_CREATE should be set when creating new route
[  177.178698][ T9167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.186029][ T9167] IPv6: NLM_F_CREATE should be set when creating new route
[  177.218206][ T9167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.225522][ T9167] IPv6: NLM_F_CREATE should be set when creating new route
[  177.318300][ T9173] sctp: [Deprecated]: syz-executor.1 (pid 9173) Use of struct sctp_assoc_value in delayed_ack socket option.
[  177.318300][ T9173] Use struct sctp_sack_info instead
[  177.662108][ T9192] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  177.759255][ T9200] bridge0: port 2(gretap0) entered blocking state
[  177.770734][ T9200] bridge0: port 2(gretap0) entered disabled state
[  177.779311][ T9200] gretap0: entered allmulticast mode
[  177.790992][ T9200] gretap0: entered promiscuous mode
[  177.814400][ T9200] bridge0: port 2(gretap0) entered blocking state
[  177.821139][ T9200] bridge0: port 2(gretap0) entered forwarding state
[  177.853577][ T9201] gretap0: left allmulticast mode
[  177.867159][ T9201] gretap0: left promiscuous mode
[  177.874882][ T9201] bridge0: port 2(gretap0) entered disabled state
[  178.206864][ T9225] "syz-executor.0" (9225) uses obsolete ecb(arc4) skcipher
[  179.421402][ T9315] trusted_key: syz-executor.4 sent an empty control message without MSG_MORE.
[  179.956266][ T4490] Bluetooth: hci0: command 0x0c20 tx timeout
[  179.963711][ T9352] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  179.974045][ T9352] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  179.982635][ T9352] __nla_validate_parse: 29 callbacks suppressed
[  179.982650][ T9352] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'.
[  180.001661][ T9351] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  180.342029][ T9376] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  180.645927][ T9397] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'.
[  181.182084][ T9429] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  181.194819][ T9429] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  181.209286][ T9429] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.4'.
[  181.261134][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  181.444368][ T9448] netlink: 'syz-executor.2': attribute type 15 has an invalid length.
[  181.516794][ T9451] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'.
[  181.539625][ T9451] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'.
[  181.837486][ T9485] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  181.992460][ T9492] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  183.117254][ T9553] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  184.035709][ T9595] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  185.452295][ T9667] __nla_validate_parse: 5 callbacks suppressed
[  185.452314][ T9667] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  185.530794][ T5127] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  185.540394][ T5127] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  185.541044][   T71] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.553456][ T5127] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  185.568484][ T5127] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  185.582110][ T5127] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  185.587626][ T9672] x_tables: ip_tables: icmp match: only valid for protocol 1
[  185.597951][ T5127] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  185.693170][   T71] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.798824][   T71] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.978851][   T71] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.179312][ T9701] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  186.217876][ T9669] chnl_net:caif_netlink_parms(): no params data found
[  186.381256][   T29] audit: type=1804 audit(1718597332.248:2): pid=9708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir213806153/syzkaller.GQFXb2/124/cgroup.controllers" dev="sda1" ino=1935 res=1 errno=0
[  186.430599][   T29] audit: type=1804 audit(1718597332.278:3): pid=9707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir213806153/syzkaller.GQFXb2/124/cgroup.controllers" dev="sda1" ino=1935 res=1 errno=0
[  186.520436][ T5127] Bluetooth: hci2: command 0x0406 tx timeout
[  186.520446][ T5122] Bluetooth: hci0: command 0x0c20 tx timeout
[  186.541127][   T71] bridge_slave_1: left allmulticast mode
[  186.552784][   T71] bridge_slave_1: left promiscuous mode
[  186.559190][   T71] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.592056][   T71] bridge_slave_0: left allmulticast mode
[  186.598867][   T71] bridge_slave_0: left promiscuous mode
[  186.605851][   T71] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.779705][ T9735] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  187.292635][   T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  187.303944][   T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  187.322761][   T71] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  187.334777][   T71] bond0 (unregistering): Released all slaves
[  187.353715][   T71] bond1 (unregistering): Released all slaves
[  187.432088][   T71] : left promiscuous mode
[  187.477797][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  187.558451][ T9669] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.576987][ T9669] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.596589][ T9669] bridge_slave_0: entered allmulticast mode
[  187.605390][ T9669] bridge_slave_0: entered promiscuous mode
[  187.635823][   T53] Bluetooth: hci1: command tx timeout
[  187.641561][ T9753] x_tables: duplicate underflow at hook 1
[  187.708817][ T9752] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  187.731835][ T9669] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.759033][ T9669] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.769116][ T9669] bridge_slave_1: entered allmulticast mode
[  187.790818][ T9669] bridge_slave_1: entered promiscuous mode
[  187.832904][ T9772] sctp: [Deprecated]: syz-executor.2 (pid 9772) Use of struct sctp_assoc_value in delayed_ack socket option.
[  187.832904][ T9772] Use struct sctp_sack_info instead
[  188.063901][ T9669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.086042][ T9772] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.2'.
[  188.133314][ T9669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.279062][   T71] hsr_slave_0: left promiscuous mode
[  188.297684][   T71] hsr_slave_1: left promiscuous mode
[  188.314006][   T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  188.335046][   T71] batman_adv: batadv0: Removing interface: batadv_slave_0
[  188.344564][   T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  188.355386][   T71] batman_adv: batadv0: Removing interface: batadv_slave_1
[  188.386600][   T71] veth1_macvtap: left promiscuous mode
[  188.401723][   T71] veth0_macvtap: left promiscuous mode
[  188.413077][   T71] veth1_vlan: left promiscuous mode
[  188.425763][   T71] veth0_vlan: left promiscuous mode
[  189.025236][   T71] team0 (unregistering): Port device team_slave_1 removed
[  189.054784][   T71] team0 (unregistering): Port device team_slave_0 removed
[  189.329892][ T9669] team0: Port device team_slave_0 added
[  189.339374][ T9669] team0: Port device team_slave_1 added
[  189.385671][ T9807] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  189.403992][ T9826] xt_l2tp: missing protocol rule (udp|l2tpip)
[  189.488515][ T9826] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'.
[  189.492063][ T9669] batman_adv: batadv0: Adding interface: batadv_slave_0
[  189.531771][ T9669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.577034][ T9669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  189.618606][ T9669] batman_adv: batadv0: Adding interface: batadv_slave_1
[  189.628687][ T9834] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'.
[  189.639156][ T9669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.667153][ T9834] net_ratelimit: 7 callbacks suppressed
[  189.667171][ T9834] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes.
[  189.686102][ T9669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  189.715538][   T53] Bluetooth: hci1: command tx timeout
[  189.739237][   T29] audit: type=1804 audit(1718597335.598:4): pid=9833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir834440146/syzkaller.tWPshm/234/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0
[  189.881899][ T9669] hsr_slave_0: entered promiscuous mode
[  189.916457][ T9669] hsr_slave_1: entered promiscuous mode
[  189.924034][ T9669] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  189.927374][ T9850] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  189.950717][ T9669] Cannot create hsr debugfs directory
[  189.966924][ T9847] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  190.143690][ T9857] bridge_slave_0: default FDB implementation only supports local addresses
[  190.325532][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  190.910237][ T9888] netlink: 'syz-executor.4': attribute type 7 has an invalid length.
[  190.922922][ T9888] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'.
[  190.959505][ T9888] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  190.978616][ T9888] netlink: 204188 bytes leftover after parsing attributes in process `syz-executor.4'.
[  191.206792][ T9896] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  191.222228][ T9669] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  191.250849][ T9669] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  191.276399][ T9669] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  191.302096][ T9669] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  191.377605][ T9915] af_packet: tpacket_rcv: packet too big, clamped from 32840 to 3952. macoff=96
[  191.542016][ T9669] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.581089][ T9669] 8021q: adding VLAN 0 to HW filter on device team0
[  191.616963][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.624136][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.661905][  T786] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.669118][  T786] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.706149][ T9930] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  191.805338][   T53] Bluetooth: hci1: command tx timeout
[  191.813184][ T9934] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  191.927977][ T9944] xt_hashlimit: overflow, rate too high: 0
[  192.085529][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  192.242100][ T9669] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.418109][ T9669] veth0_vlan: entered promiscuous mode
[  192.448482][ T9669] veth1_vlan: entered promiscuous mode
[  192.541883][ T9972] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  192.550492][ T9669] veth0_macvtap: entered promiscuous mode
[  192.586746][ T9669] veth1_macvtap: entered promiscuous mode
[  192.614833][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.631290][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.661675][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.673488][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.693483][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.704841][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.726551][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.745306][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.768271][ T9669] batman_adv: batadv0: Interface activated: batadv_slave_0
[  192.809270][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.820743][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.833482][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.844915][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.857563][ T9984] dccp_invalid_packet: P.Data Offset(172) too large
[  192.868173][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.884218][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.885672][ T9995] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'.
[  192.903424][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.919753][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.935624][ T9669] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.951602][ T9669] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.961352][ T9669] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.971693][ T9669] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.982531][ T9669] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.047926][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  193.119048][T10004] hsr0: entered promiscuous mode
[  193.204047][ T9765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.228466][ T9765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.264785][   T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.293388][   T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.491305][T10022] netlink: 'syz-executor.2': attribute type 23 has an invalid length.
[  193.507445][   T29] audit: type=1804 audit(1718597339.378:5): pid=10013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3348285498/syzkaller.3912sD/337/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0
[  193.547326][T10022] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  193.583538][T10022] bridge0: port 3(bond0) entered disabled state
[  193.590272][T10022] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.598890][T10022] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.657978][T10022] bridge0: entered promiscuous mode
[  193.875210][   T53] Bluetooth: hci1: command tx timeout
[  194.295641][T10075] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  194.418050][T10081] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  194.467400][T10083] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  194.684591][ T1245] ieee802154 phy0 wpan0: encryption failed: -22
[  194.692427][ T1245] ieee802154 phy1 wpan1: encryption failed: -22
[  194.967568][T10114] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
[  195.731870][T10167] netlink: 'syz-executor.1': attribute type 21 has an invalid length.
[  195.743538][T10165] bridge0: port 4(hsr0) entered blocking state
[  195.756246][T10165] bridge0: port 4(hsr0) entered disabled state
[  195.762622][T10165] hsr0: entered allmulticast mode
[  195.774291][T10165] hsr_slave_0: entered allmulticast mode
[  195.780505][T10165] hsr_slave_1: entered allmulticast mode
[  195.791910][T10165] hsr0: left promiscuous mode
[  195.801585][T10165] hsr0: entered promiscuous mode
[  195.929825][T10180] __nla_validate_parse: 11 callbacks suppressed
[  195.929838][T10180] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  195.952421][T10180] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  195.959784][T10180] IPv6: NLM_F_CREATE should be set when creating new route
[  196.094064][T10187] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  196.107715][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  196.115014][T10187] IPv6: NLM_F_CREATE should be set when creating new route
[  196.132400][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  196.139706][T10187] IPv6: NLM_F_CREATE should be set when creating new route
[  196.188176][T10191] netlink: 136 bytes leftover after parsing attributes in process `syz-executor.3'.
[  196.209673][T10187] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  196.351793][T10187] hsr_slave_1 (unregistering): left promiscuous mode
[  196.430606][T10203] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'.
[  196.607653][T10209] IPVS: Error connecting to the multicast addr
[  196.628990][T10211] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'.
[  196.644573][T10205] IPVS: Error connecting to the multicast addr
[  196.763843][T10218] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  196.783220][T10218] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  196.800222][T10218] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  196.810820][T10218] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  197.239602][   T53] Bluetooth: hci1: command tx timeout
[  197.473784][T10245] Bluetooth: MGMT ver 1.22
[  198.031401][T10282] netlink: 'syz-executor.1': attribute type 5 has an invalid length.
[  198.892155][T10338] IPVS: Error connecting to the multicast addr
[  198.921397][T10340] IPv6: sit1: Disabled Multicast RS
[  198.936325][T10340] sit1: entered allmulticast mode
[  199.597173][T10384] netlink: 'syz-executor.1': attribute type 14 has an invalid length.
[  199.635248][ T4490] Bluetooth: hci1: command 0x0405 tx timeout
[  199.788536][ T5161] IPVS: starting estimator thread 0...
[  199.886037][T10400] IPVS: using max 22 ests per chain, 52800 per kthread
[  200.948242][T10455] __nla_validate_parse: 81 callbacks suppressed
[  200.948260][T10455] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  200.980203][T10454] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.998125][T10454] team0: Port device bond0 added
[  201.125484][T10454] team0: Port device team_slave_0 removed
[  201.137079][T10454] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  201.249598][T10476] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  201.286648][T10476] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  201.486264][T10492] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'.
[  201.490646][T10490] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'.
[  201.602325][T10498] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  201.752760][T10506] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.1'.
[  201.861544][T10519] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'.
[  201.889709][T10519] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  201.947051][T10522] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  202.444656][T10560] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  202.947427][T10603] x_tables: duplicate underflow at hook 3
[  202.953302][T10603] x_tables: duplicate underflow at hook 3
[  202.964366][T10606] batman_adv: batadv0: Adding interface: macsec1
[  202.984328][T10606] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.016586][T10606] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active
[  203.080056][T10612] netlink: 'syz-executor.2': attribute type 7 has an invalid length.
[  203.140672][T10612] netlink: 'syz-executor.2': attribute type 8 has an invalid length.
[  203.166704][T10615] netlink: 'syz-executor.1': attribute type 58 has an invalid length.
[  203.194291][T10606] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.215312][T10606] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.233098][T10606] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.251784][T10606] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.261242][T10606] batman_adv: batadv0: Removing interface: macsec1
[  203.893563][T10663] netlink: 'syz-executor.1': attribute type 63 has an invalid length.
[  204.020612][T10672] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  204.027698][T10672] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  204.114567][T10677] syz-executor.3[10677] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  204.114709][T10677] syz-executor.3[10677] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  204.259088][T10679] netlink: zone id is out of range
[  204.310122][T10684] netlink: zone id is out of range
[  204.315657][T10679] netlink: get zone limit has 8 unknown bytes
[  204.325667][T10684] netlink: zone id is out of range
[  204.332678][T10684] netlink: zone id is out of range
[  204.346861][T10684] netlink: zone id is out of range
[  204.354350][T10684] netlink: zone id is out of range
[  204.632476][T10702] tipc: Started in network mode
[  204.636960][   T29] audit: type=1804 audit(1718597350.498:6): pid=10702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir834440146/syzkaller.tWPshm/297/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0
[  204.637753][T10702] tipc: Node identity 3a12f1279a8b, cluster identity 4711
[  204.717571][T10702] tipc: Enabled bearer <eth:hsr0>, priority 10
[  205.548596][T10771] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  205.835181][  T786] tipc: Node number set to 2694443303
[  205.978798][T10798] __nla_validate_parse: 29 callbacks suppressed
[  205.978819][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  206.004506][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  206.352398][T10837] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  206.392890][T10842] sit0: entered promiscuous mode
[  206.411666][T10842] sit0: entered allmulticast mode
[  206.495526][T10851] net_ratelimit: 7 callbacks suppressed
[  206.495544][T10851] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  206.507686][T10851] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  206.666436][T10863] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  206.689049][T10862] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  206.751529][T10874] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  206.785315][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  207.149962][T10891] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[  207.200403][T10893] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  207.303402][   T29] audit: type=1800 audit(1718597353.168:7): pid=10900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1951 res=0 errno=0
[  207.322134][T10902] Bluetooth: MGMT ver 1.22
[  207.348096][   T29] audit: type=1804 audit(1718597353.198:8): pid=10900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir834440146/syzkaller.tWPshm/311/memory.events" dev="sda1" ino=1951 res=1 errno=0
[  207.406244][T10903] No such timeout policy "syz0"
[  207.419047][T10905] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  207.425709][T10905] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  207.510554][T10909] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  207.562086][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  207.864602][T10928] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  207.893454][T10928] batman_adv: batadv0: Adding interface: team0
[  207.914694][T10928] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.941227][T10928] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  207.955467][T10932] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  207.997747][T10932] batman_adv: batadv0: Adding interface: team0
[  208.011908][T10932] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.044778][T10932] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  208.059758][T10933] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  208.080837][T10933] team0: entered promiscuous mode
[  208.095346][T10933] team_slave_0: entered promiscuous mode
[  208.101607][T10933] team_slave_1: entered promiscuous mode
[  208.122279][T10933] 8021q: adding VLAN 0 to HW filter on device team0
[  208.157361][T10933] batman_adv: batadv0: Interface activated: team0
[  208.163883][T10933] batman_adv: batadv0: Interface deactivated: team0
[  208.174162][T10933] batman_adv: batadv0: Removing interface: team0
[  208.183480][T10933] bridge0: port 3(team0) entered blocking state
[  208.192855][T10933] bridge0: port 3(team0) entered disabled state
[  208.202089][T10933] team0: entered allmulticast mode
[  208.210887][T10933] team_slave_0: entered allmulticast mode
[  208.227121][T10933] team_slave_1: entered allmulticast mode
[  208.233084][T10933] vlan2: entered allmulticast mode
[  208.238619][T10933] syz_tun: entered allmulticast mode
[  208.247284][T10933] bridge0: port 3(team0) entered blocking state
[  208.253697][T10933] bridge0: port 3(team0) entered forwarding state
[  208.367949][T10947] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  208.411608][   T29] audit: type=1804 audit(1718597354.278:9): pid=10955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir834440146/syzkaller.tWPshm/318/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0
[  208.702713][T10976] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  209.240842][T10989] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  210.214844][T11033] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  211.011842][T11085] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  211.041512][T11087] __nla_validate_parse: 19 callbacks suppressed
[  211.041531][T11087] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'.
[  211.062726][T11087] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes.
[  211.079564][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  211.092732][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  211.171312][T11093] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  211.699397][T11118] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  211.743646][T11120] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  211.811031][T11127] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  211.827666][T11127] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  211.947054][T11135] netlink: 'syz-executor.2': attribute type 33 has an invalid length.
[  212.031101][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  212.380455][T11160] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  212.730714][T11183] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  212.764596][T11185] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  212.783697][T11190] x_tables: duplicate underflow at hook 1
[  213.024814][T11206] bond2: entered promiscuous mode
[  213.061188][T11210] bond2 (unregistering): Released all slaves
[  213.211810][T11224] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  213.344684][T11235] x_tables: duplicate underflow at hook 1
[  213.458143][T11241] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  213.581675][T11241] tipc: Resetting bearer <eth:syzkaller0>
[  213.598152][T11238] tipc: Resetting bearer <eth:syzkaller0>
[  214.951472][T11238] tipc: Disabling bearer <eth:syzkaller0>
[  215.188309][T11271] x_tables: duplicate underflow at hook 1
[  215.523869][T11295] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  215.588025][ T2825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.600262][ T2825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.658293][T11306] x_tables: duplicate underflow at hook 1
[  216.067957][T11323] __nla_validate_parse: 16 callbacks suppressed
[  216.067976][T11323] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  216.347770][T11344] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  216.866992][T11376] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  217.052165][T11386] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.3'.
[  217.174808][T11396] Cannot find add_set index 0 as target
[  217.181279][T11398] Cannot find add_set index 0 as target
[  218.705427][T11410] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'.
[  218.777719][T11420] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  218.965746][   T29] audit: type=1804 audit(1718597364.828:10): pid=11437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D74657374646972343137313132323234392F73797A6B616C6C65722E7838634F32782F3130322F03 dev="sda1" ino=1940 res=1 errno=0
[  219.042979][   T29] audit: type=1804 audit(1718597364.848:11): pid=11437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D74657374646972343137313132323234392F73797A6B616C6C65722E7838634F32782F3130322F03 dev="sda1" ino=1940 res=1 errno=0
[  219.110581][T11453] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  219.124531][T11453] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  219.134797][T11453] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  219.146001][T11453] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  219.219872][T11456] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  219.432201][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  219.527956][T11478] dccp_invalid_packet: P.Data Offset(0) too small
[  220.215332][T11503] netlink: 'syz-executor.0': attribute type 8 has an invalid length.
[  220.317198][ T4490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  220.327299][ T4490] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  220.351331][ T4490] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  220.364331][ T4490] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  220.378194][ T4490] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  220.386778][ T4490] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  220.407751][   T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.491283][   T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.673968][   T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.833191][   T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.184664][   T29] audit: type=1804 audit(1718597367.048:12): pid=11545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3922762289/syzkaller.ZspsT5/440/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0
[  221.215469][T11509] chnl_net:caif_netlink_parms(): no params data found
[  221.244153][T11548] __nla_validate_parse: 4 callbacks suppressed
[  221.244172][T11548] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  221.249225][   T29] audit: type=1804 audit(1718597367.088:13): pid=11545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3922762289/syzkaller.ZspsT5/440/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0
[  221.272336][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  221.427901][   T62] bridge_slave_1: left allmulticast mode
[  221.435650][   T62] bridge_slave_1: left promiscuous mode
[  221.442265][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.459464][   T62] bridge_slave_0: left allmulticast mode
[  221.465274][   T62] bridge_slave_0: left promiscuous mode
[  221.471041][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.564512][T11560] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  222.155686][   T62] team0: Port device bond0 removed
[  222.177127][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  222.214505][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  222.249390][   T62] bond0 (unregistering): Released all slaves
[  222.415799][T11577] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  222.435186][ T4490] Bluetooth: hci1: command tx timeout
[  222.539990][T11586] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  222.570003][T11509] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.603344][T11509] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.623796][T11509] bridge_slave_0: entered allmulticast mode
[  222.637325][T11509] bridge_slave_0: entered promiscuous mode
[  222.759032][T11509] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.775443][T11509] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.784807][T11509] bridge_slave_1: entered allmulticast mode
[  222.801707][T11606] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  222.811133][T11509] bridge_slave_1: entered promiscuous mode
[  222.828527][T11603] syz-executor.4[11603] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  222.828678][T11603] syz-executor.4[11603] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  222.859183][T11610] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  222.886850][T11592] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  222.999662][T11509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  223.077721][T11509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.082543][T11622] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  223.121246][T11621] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  223.162858][T11509] team0: Port device team_slave_0 added
[  223.209954][T11509] team0: Port device team_slave_1 added
[  223.235521][   T62] hsr_slave_0: left promiscuous mode
[  223.246291][   T62] batman_adv: batadv0: Removing interface: team0
[  223.261901][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  223.272045][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[  223.292759][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  223.311233][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[  223.355796][   T62] veth1_macvtap: left promiscuous mode
[  223.361451][   T62] veth0_macvtap: left promiscuous mode
[  223.370002][   T62] veth1_vlan: left promiscuous mode
[  223.375684][   T62] veth0_vlan: left promiscuous mode
[  223.743067][   T62] team0 (unregistering): Port device team_slave_1 removed
[  224.304801][T11509] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.312195][T11509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.340995][T11509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  224.357724][T11650] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  224.365236][T11650] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  224.377411][T11650] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  224.409179][T11509] batman_adv: batadv0: Adding interface: batadv_slave_1
[  224.420750][T11509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.451162][T11509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.515094][ T4490] Bluetooth: hci1: command tx timeout
[  224.538282][T11662] syz-executor.0[11662] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  224.538415][T11662] syz-executor.0[11662] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  224.697555][T11509] hsr_slave_0: entered promiscuous mode
[  224.740290][T11509] hsr_slave_1: entered promiscuous mode
[  224.760506][T11509] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  224.768960][T11509] Cannot create hsr debugfs directory
[  225.500607][T11716] syz-executor.0[11716] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  225.500824][T11716] syz-executor.0[11716] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  225.536305][T11718] SET target dimension over the limit!
[  225.567979][T11509] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  225.586081][T11509] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  225.638239][T11509] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  225.649765][T11509] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  225.774658][T11509] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.806670][T11509] 8021q: adding VLAN 0 to HW filter on device team0
[  225.822961][  T786] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.830411][  T786] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.851429][  T786] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.858765][  T786] bridge0: port 2(bridge_slave_1) entered forwarding state
[  226.104649][   T29] audit: type=1804 audit(1718597371.968:14): pid=11734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3348285498/syzkaller.3912sD/451/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0
[  226.164634][T11509] 8021q: adding VLAN 0 to HW filter on device batadv0
[  226.248845][T11738] __nla_validate_parse: 7 callbacks suppressed
[  226.248865][T11738] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.2'.
[  226.427026][T11747] syz-executor.3[11747] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  226.427174][T11747] syz-executor.3[11747] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  226.607322][ T4490] Bluetooth: hci1: command tx timeout
[  227.721840][T11509] veth0_vlan: entered promiscuous mode
[  227.732216][T11748] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  227.746909][T11761] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  227.826888][T11765] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  227.840195][T11765] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  227.857303][T11509] veth1_vlan: entered promiscuous mode
[  227.982002][T11509] veth0_macvtap: entered promiscuous mode
[  227.991606][T11774] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  228.008728][T11509] veth1_macvtap: entered promiscuous mode
[  228.028464][   T29] audit: type=1804 audit(1718597373.898:15): pid=11769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir213806153/syzkaller.GQFXb2/249/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0
[  228.049077][T11509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.084944][T11509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.101104][T11509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.116874][T11509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.126894][T11509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.140358][T11509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.153320][T11509] batman_adv: batadv0: Interface activated: batadv_slave_0
[  228.172632][T11509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.198295][T11509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.222702][T11509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.249210][T11509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.270703][T11509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.293945][T11509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.329784][T11509] batman_adv: batadv0: Interface activated: batadv_slave_1
[  228.347980][T11509] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  228.388385][T11509] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  228.403099][T11509] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.403326][T11791] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  228.412539][T11509] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  228.432200][T11792] netlink: 210620 bytes leftover after parsing attributes in process `syz-executor.3'.
[  228.443509][T11792] openvswitch: netlink: ufid size 2296 bytes exceeds the range (1, 16)
[  228.556243][   T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.584991][   T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.604519][T11803] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  228.641963][T11806] syzkaller0: entered promiscuous mode
[  228.648724][T11806] syzkaller0: entered allmulticast mode
[  228.657253][T11803] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  228.675100][ T4490] Bluetooth: hci1: command tx timeout
[  228.693054][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.726556][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.090324][   T29] audit: type=1804 audit(1718597374.958:16): pid=11831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3348285498/syzkaller.3912sD/456/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0
[  229.525084][   T29] audit: type=1804 audit(1718597375.388:17): pid=11838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir213806153/syzkaller.GQFXb2/254/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0
[  229.983665][   T29] audit: type=1804 audit(1718597375.848:18): pid=11882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3922762289/syzkaller.ZspsT5/457/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0
[  230.547229][T11924] syz-executor.0[11924] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  230.547379][T11924] syz-executor.0[11924] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  231.803868][T11985] __nla_validate_parse: 13 callbacks suppressed
[  231.803889][T11985] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  231.850443][T11987] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  231.998837][T12000] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  232.142196][T12011] syz-executor.3[12011] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  232.142335][T12011] syz-executor.3[12011] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  232.155732][T12009] syz-executor.3[12009] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  232.174648][T12008] macvlan2: entered promiscuous mode
[  232.175084][T12009] syz-executor.3[12009] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  232.202327][T12008] vlan1: entered promiscuous mode
[  232.221121][T12008] macvlan2: entered allmulticast mode
[  232.231304][T12008] vlan1: entered allmulticast mode
[  232.243918][T12008] veth0_vlan: entered allmulticast mode
[  232.260380][T12008] team0: Port device macvlan2 added
[  232.288354][T12015] syz-executor.3[12015] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  232.288586][T12015] syz-executor.3[12015] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  232.293068][T12011] syz-executor.3[12011] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  232.421354][T12024] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  232.568525][T12035] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  232.606139][ T4490] Bluetooth: hci3: command 0x0405 tx timeout
[  232.608587][T12035] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  232.619551][T12035] IPv6: NLM_F_CREATE should be set when creating new route
[  232.679919][T12035] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  232.687272][T12035] IPv6: NLM_F_CREATE should be set when creating new route
[  232.699363][T12035] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  232.709373][T12035] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  232.800505][T12035] batman_adv: batadv0: Removing interface: batadv_slave_0
[  233.088050][T12060] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  233.221722][T12073] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  233.352050][T12082] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  233.370356][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  233.797930][T12116] xt_connbytes: Forcing CT accounting to be enabled
[  233.901640][T12119] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  234.061330][ T2400] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.129148][T12135] sctp: [Deprecated]: syz-executor.4 (pid 12135) Use of struct sctp_assoc_value in delayed_ack socket option.
[  234.129148][T12135] Use struct sctp_sack_info instead
[  234.151367][T12129] sctp: [Deprecated]: syz-executor.4 (pid 12129) Use of struct sctp_assoc_value in delayed_ack socket option.
[  234.151367][T12129] Use struct sctp_sack_info instead
[  234.219697][ T2400] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.349124][ T2400] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.369314][T12138] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  234.464310][ T2400] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.536752][T12144] Κό: entered promiscuous mode
[  234.575527][T12150] Κό: entered promiscuous mode
[  234.640110][ T4490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  234.650706][ T4490] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  234.659660][ T4490] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  234.671005][ T4490] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  234.685705][ T4490] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  234.712363][ T4490] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  234.782969][ T2400] bridge_slave_1: left allmulticast mode
[  234.804854][ T2400] bridge_slave_1: left promiscuous mode
[  234.811180][ T2400] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.862448][ T2400] bridge_slave_0: left allmulticast mode
[  234.873898][ T2400] bridge_slave_0: left promiscuous mode
[  234.888476][ T2400] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.295214][ T2400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  235.307315][ T2400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  235.320687][ T2400] bond0 (unregistering): Released all slaves
[  235.569705][T12180] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  235.577073][T12180] IPv6: NLM_F_CREATE should be set when creating new route
[  235.838338][ T2400] hsr_slave_0: left promiscuous mode
[  235.851534][ T2400] hsr_slave_1: left promiscuous mode
[  235.869151][ T2400] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  235.883716][ T2400] batman_adv: batadv0: Removing interface: batadv_slave_1
[  235.908936][ T2400] veth1_macvtap: left promiscuous mode
[  235.914487][ T2400] veth0_macvtap: left promiscuous mode
[  235.920292][ T2400] veth1_vlan: left promiscuous mode
[  235.925731][ T2400] veth0_vlan: left promiscuous mode
[  236.382451][T12209] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  236.481764][ T2400] team0 (unregistering): Port device team_slave_1 removed
[  236.566846][ T2400] team0 (unregistering): Port device team_slave_0 removed
[  236.760757][ T4490] Bluetooth: hci1: command tx timeout
[  237.036831][T12221] openvswitch: Κό: Dropping previously announced user features
[  237.172926][T12230] __nla_validate_parse: 12 callbacks suppressed
[  237.172947][T12230] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  237.247105][T12151] chnl_net:caif_netlink_parms(): no params data found
[  237.311259][T12234] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  237.421145][T12237] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  237.428537][T12237] IPv6: NLM_F_CREATE should be set when creating new route
[  237.464599][T12234] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  237.642346][T12247] pim6reg: entered allmulticast mode
[  237.681759][T12247] pim6reg: left allmulticast mode
[  237.705304][T12248] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  237.707689][T12249] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  237.803407][T12151] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.827760][T12151] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.854113][T12151] bridge_slave_0: entered allmulticast mode
[  237.864425][T12151] bridge_slave_0: entered promiscuous mode
[  237.880553][T12151] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.881417][T12263] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.3'.
[  237.903542][T12151] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.924388][T12151] bridge_slave_1: entered allmulticast mode
[  237.942676][T12151] bridge_slave_1: entered promiscuous mode
[  238.018452][T12151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  238.043779][T12151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  238.108214][T12151] team0: Port device team_slave_0 added
[  238.121443][T12151] team0: Port device team_slave_1 added
[  238.196535][T12151] batman_adv: batadv0: Adding interface: batadv_slave_0
[  238.203616][T12151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.230255][T12151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  238.248525][T12151] batman_adv: batadv0: Adding interface: batadv_slave_1
[  238.256045][T12151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.301726][T12151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  238.316770][T12278] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  238.413823][T12151] hsr_slave_0: entered promiscuous mode
[  238.427675][T12151] hsr_slave_1: entered promiscuous mode
[  238.447790][T12151] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  238.466513][T12151] Cannot create hsr debugfs directory
[  238.701267][T12297] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  238.740798][T12297] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  238.762577][T12299] netlink: zone id is out of range
[  238.768453][T12299] netlink: set zone limit has 4 unknown bytes
[  238.835077][   T53] Bluetooth: hci1: command tx timeout
[  239.130022][T12151] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  239.145544][T12151] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  239.156137][T12320] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  239.198694][T12151] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  239.219583][T12151] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  239.313259][T12330] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  239.351151][T12151] 8021q: adding VLAN 0 to HW filter on device bond0
[  239.383116][T12151] 8021q: adding VLAN 0 to HW filter on device team0
[  239.407623][T12330] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  239.416411][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.423632][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state
[  239.437935][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.443433][T12330] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  239.445129][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state
[  239.483192][T12330] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  239.502280][T12330] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  239.602699][T12341] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  239.774315][T12151] 8021q: adding VLAN 0 to HW filter on device batadv0
[  239.901378][T12151] veth0_vlan: entered promiscuous mode
[  239.932886][T12151] veth1_vlan: entered promiscuous mode
[  240.019591][T12151] veth0_macvtap: entered promiscuous mode
[  240.039569][T12151] veth1_macvtap: entered promiscuous mode
[  240.063113][T12362] netlink: zone id is out of range
[  240.075068][T12362] netlink: set zone limit has 4 unknown bytes
[  240.087956][T12151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.102582][T12151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.113126][T12151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.128596][T12151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.139641][T12151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.153123][T12151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.176869][T12151] batman_adv: batadv0: Interface activated: batadv_slave_0
[  240.212448][T12151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.239969][T12151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.275693][T12151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.291215][T12151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.330107][T12151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.346650][T12151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.380562][T12151] batman_adv: batadv0: Interface activated: batadv_slave_1
[  240.414685][T12379] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  240.424383][T12379] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  240.434092][T12379] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  240.443192][T12379] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  240.473886][T12151] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.485077][T12151] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.508165][T12151] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.519166][T12151] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.693327][T12393] bridge0: port 3(vlan3) entered blocking state
[  240.704527][T12393] bridge0: port 3(vlan3) entered disabled state
[  240.711461][T12393] vlan3: entered allmulticast mode
[  240.723394][T12393] vlan3: left allmulticast mode
[  240.890377][ T2400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.905520][ T2400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.915529][   T53] Bluetooth: hci1: command 0x040f tx timeout
[  240.993061][ T2400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.001668][ T2400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.123036][T12420] netlink: zone id is out of range
[  241.128511][T12420] netlink: set zone limit has 4 unknown bytes
[  242.602971][T12503] netlink: zone id is out of range
[  242.609956][T12503] netlink: set zone limit has 4 unknown bytes
[  242.873387][T12509] __nla_validate_parse: 13 callbacks suppressed
[  242.873411][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  242.904822][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  242.995161][   T53] Bluetooth: hci1: command 0x040f tx timeout
[  243.116175][T12520] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  243.141591][T12520] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  243.254730][T12527] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[  243.430298][T12541] netlink: zone id is out of range
[  243.464651][T12541] netlink: set zone limit has 4 unknown bytes
[  243.516335][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  243.539149][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  243.619240][T12552] sctp: [Deprecated]: syz-executor.0 (pid 12552) Use of int in max_burst socket option deprecated.
[  243.619240][T12552] Use struct sctp_assoc_value instead
[  243.791222][T12559] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  243.822683][T12559] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[  243.956514][T12573] syz-executor.4[12573] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  243.957702][T12573] syz-executor.4[12573] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  244.302338][T12590] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  244.341719][T12590] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  244.414324][T12593] netlink: zone id is out of range
[  244.420640][T12593] netlink: set zone limit has 4 unknown bytes
[  245.076020][   T53] Bluetooth: hci1: command 0x040f tx timeout
[  245.509823][T12151] syz-executor.1 (12151) used greatest stack depth: 17712 bytes left
[  245.735671][T12649] x_tables: duplicate underflow at hook 1
[  245.759835][T12649] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  245.843118][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.068962][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.133544][T12670] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  246.155472][T12674] netlink: zone id is out of range
[  246.160905][T12674] netlink: set zone limit has 4 unknown bytes
[  246.203792][T12670] 8021q: adding VLAN 0 to HW filter on device batadv0
[  246.210653][T12677] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20004
[  246.228324][T12670] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  246.278597][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  246.302022][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  246.312400][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  246.329002][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.342179][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  246.354231][   T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  246.363343][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  246.390482][T12675] netem: change failed
[  246.495811][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.049589][   T11] bridge_slave_1: left allmulticast mode
[  247.064446][   T11] bridge_slave_1: left promiscuous mode
[  247.072229][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.098660][   T11] bridge_slave_0: left allmulticast mode
[  247.110387][   T11] bridge_slave_0: left promiscuous mode
[  247.123309][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.711472][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  247.723020][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  247.741350][   T11] bond0 (unregistering): Released all slaves
[  247.923065][T12747] netlink: zone id is out of range
[  247.931487][T12747] netlink: set zone limit has 4 unknown bytes
[  247.985398][T12745] __nla_validate_parse: 21 callbacks suppressed
[  247.985419][T12745] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  248.010813][T12749] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  248.103549][T12681] chnl_net:caif_netlink_parms(): no params data found
[  248.363071][T12768] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  248.389820][T12773] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  248.435655][ T4490] Bluetooth: hci1: command tx timeout
[  248.483653][T12775] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  248.603518][   T11] hsr_slave_0: left promiscuous mode
[  248.613579][   T11] hsr_slave_1: left promiscuous mode
[  248.622188][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  248.638454][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  248.661710][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  248.670079][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  248.697733][   T11] veth1_macvtap: left promiscuous mode
[  248.703338][   T11] veth0_macvtap: left promiscuous mode
[  248.709086][   T11] veth1_vlan: left promiscuous mode
[  248.714382][   T11] veth0_vlan: left promiscuous mode
[  249.260064][   T11] team0 (unregistering): Port device team_slave_1 removed
[  249.308263][   T11] team0 (unregistering): Port device team_slave_0 removed
[  249.721894][T12681] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.733291][T12681] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.740804][T12681] bridge_slave_0: entered allmulticast mode
[  249.749169][T12681] bridge_slave_0: entered promiscuous mode
[  249.763711][T12681] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.772657][T12681] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.786416][T12681] bridge_slave_1: entered allmulticast mode
[  249.794003][T12681] bridge_slave_1: entered promiscuous mode
[  249.807699][T12784] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  249.839328][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  249.863296][T12791] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  250.034696][T12796] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  250.060517][T12797] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  250.157526][T12681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  250.236577][T12681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  250.437657][T12681] team0: Port device team_slave_0 added
[  250.450184][T12811] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  250.485799][T12681] team0: Port device team_slave_1 added
[  250.503476][T12817] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  250.517798][   T53] Bluetooth: hci1: command tx timeout
[  250.633997][T12681] batman_adv: batadv0: Adding interface: batadv_slave_0
[  250.645132][T12681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.669578][T12824] netlink: zone id is out of range
[  250.677835][T12681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  250.680730][T12824] netlink: set zone limit has 4 unknown bytes
[  250.711661][T12681] batman_adv: batadv0: Adding interface: batadv_slave_1
[  250.719828][T12681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.746560][T12681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  250.857566][T12681] hsr_slave_0: entered promiscuous mode
[  250.878535][T12681] hsr_slave_1: entered promiscuous mode
[  250.886592][T12681] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  250.907085][T12681] Cannot create hsr debugfs directory
[  251.131100][T12850] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes.
[  251.492745][T12862] hsr0: entered promiscuous mode
[  251.527892][T12857] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  251.639714][T12872] netlink: zone id is out of range
[  251.640172][T12870] pim6reg: entered allmulticast mode
[  251.649535][T12872] netlink: set zone limit has 4 unknown bytes
[  252.071467][T12681] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  252.093718][T12681] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  252.270901][T12896] syz_tun: left allmulticast mode
[  252.283957][T12896] syz_tun: left promiscuous mode
[  252.327729][T12681] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  252.355820][T12681] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  252.510663][T12908] ip6gretap2: entered promiscuous mode
[  252.530305][T12908] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  252.542360][T12906] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  252.597195][   T53] Bluetooth: hci1: command tx timeout
[  252.615452][T12911] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  252.622707][T12911] IPv6: NLM_F_CREATE should be set when creating new route
[  252.663014][T12913] netlink: zone id is out of range
[  252.739886][T12681] 8021q: adding VLAN 0 to HW filter on device bond0
[  252.792564][T12681] 8021q: adding VLAN 0 to HW filter on device team0
[  252.809176][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.816515][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state
[  252.832062][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.839313][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state
[  253.336215][T12681] 8021q: adding VLAN 0 to HW filter on device batadv0
[  253.564375][T12681] veth0_vlan: entered promiscuous mode
[  253.686359][T12681] veth1_vlan: entered promiscuous mode
[  253.768852][T12969] __nla_validate_parse: 17 callbacks suppressed
[  253.768872][T12969] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  253.822653][T12969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  253.830400][T12969] IPv6: NLM_F_CREATE should be set when creating new route
[  253.846015][T12967] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.0'.
[  253.889822][T12967] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  253.898718][T12681] veth0_macvtap: entered promiscuous mode
[  253.916818][T12681] veth1_macvtap: entered promiscuous mode
[  253.932699][T12967] netlink: 9352 bytes leftover after parsing attributes in process `syz-executor.0'.
[  253.982784][T12967] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'.
[  253.987534][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.030349][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.043289][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.056140][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.066506][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.081821][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.096179][T12681] batman_adv: batadv0: Interface activated: batadv_slave_0
[  254.107660][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.119411][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.129709][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.140751][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.155130][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.166524][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.178361][T12681] batman_adv: batadv0: Interface activated: batadv_slave_1
[  254.200203][T12982] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  254.275897][T12984] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  254.305401][T12992] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  254.360067][T12996] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'.
[  254.477251][T12681] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.500764][T12681] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  254.516773][T12681] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  254.532300][T12681] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  254.583613][T13004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  254.639516][T13004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  254.685899][   T53] Bluetooth: hci1: command tx timeout
[  254.845809][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.877508][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.924165][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.946006][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.172075][   T29] audit: type=1804 audit(1718597401.038:19): pid=13024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3922762289/syzkaller.ZspsT5/518/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0
[  255.209127][   T29] audit: type=1804 audit(1718597401.038:20): pid=13024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3922762289/syzkaller.ZspsT5/518/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0
[  255.209506][T13025] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  255.459430][T13039] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  255.479371][T13040] net_ratelimit: 8 callbacks suppressed
[  255.479388][T13040] netlink: zone id is out of range
[  255.495945][T13040] netlink: set zone limit has 4 unknown bytes
[  256.072417][T13076] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  256.079752][T13076] IPv6: NLM_F_CREATE should be set when creating new route
[  256.128597][ T1245] ieee802154 phy0 wpan0: encryption failed: -22
[  256.136196][ T1245] ieee802154 phy1 wpan1: encryption failed: -22
[  256.362357][T13095] netlink: zone id is out of range
[  256.370002][T13095] netlink: set zone limit has 4 unknown bytes
[  256.434307][T13099] netlink: zone id is out of range
[  256.451386][T13099] netlink: set zone limit has 4 unknown bytes
[  256.772469][T13116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  256.779831][T13116] IPv6: NLM_F_CREATE should be set when creating new route
[  257.274231][T13151] netlink: zone id is out of range
[  257.279959][T13151] netlink: set zone limit has 4 unknown bytes
[  257.280361][T13149] netlink: zone id is out of range
[  257.310166][T13149] netlink: set zone limit has 4 unknown bytes
[  257.419142][ T2400] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.741923][T13174] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  257.750895][T13174] IPv6: NLM_F_CREATE should be set when creating new route
[  257.969714][ T4490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  257.986600][ T4490] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  258.004375][ T4490] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  258.019545][ T4490] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  258.028092][ T4490] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  258.038022][ T4490] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  258.362613][T13189] chnl_net:caif_netlink_parms(): no params data found
[  258.453913][T13209] netlink: 'syz-executor.4': attribute type 7 has an invalid length.
[  258.494709][ T2400] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.652290][ T2400] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.689191][T13189] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.703075][T13189] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.712965][T13189] bridge_slave_0: entered allmulticast mode
[  258.748151][T13189] bridge_slave_0: entered promiscuous mode
[  258.777301][T13226] __nla_validate_parse: 12 callbacks suppressed
[  258.777323][T13226] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  258.904272][ T2400] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.920005][T13189] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.928307][T13189] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.941443][T13189] bridge_slave_1: entered allmulticast mode
[  258.949906][T13189] bridge_slave_1: entered promiscuous mode
[  258.958525][T13236] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  258.983833][T13240] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  259.060850][T13189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  259.112904][T13189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  259.262074][T13189] team0: Port device team_slave_0 added
[  259.289478][T13189] team0: Port device team_slave_1 added
[  259.308798][ T2400] bridge_slave_1: left allmulticast mode
[  259.314561][ T2400] bridge_slave_1: left promiscuous mode
[  259.355491][ T2400] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.375958][ T2400] bridge_slave_0: left allmulticast mode
[  259.395696][ T2400] bridge_slave_0: left promiscuous mode
[  259.402920][ T2400] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.918921][ T2400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  259.931999][ T2400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  259.948183][ T2400] bond0 (unregistering): Released all slaves
[  259.980614][T13257] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  259.991306][T13261] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  260.064501][T13265] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  260.095787][T13270] sch_tbf: burst 511 is lower than device veth3 mtu (1514) !
[  260.115375][ T4490] Bluetooth: hci1: command tx timeout
[  260.122428][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  260.398726][T13189] batman_adv: batadv0: Adding interface: batadv_slave_0
[  260.422655][T13189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.448117][T13292] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  260.492329][T13189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  260.517777][T13189] batman_adv: batadv0: Adding interface: batadv_slave_1
[  260.531963][T13189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.565454][T13189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  260.613779][T13291] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  260.650673][T13296] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  260.676155][T13284] netlink: 'syz-executor.0': attribute type 21 has an invalid length.
[  260.883744][T13189] hsr_slave_0: entered promiscuous mode
[  260.906854][T13189] hsr_slave_1: entered promiscuous mode
[  260.916487][T13189] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  260.953243][T13189] Cannot create hsr debugfs directory
[  261.013800][ T2400] hsr_slave_0: left promiscuous mode
[  261.034299][ T2400] hsr_slave_1: left promiscuous mode
[  261.040651][ T2400] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  261.050212][ T2400] batman_adv: batadv0: Removing interface: batadv_slave_0
[  261.067080][ T2400] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  261.075733][ T2400] batman_adv: batadv0: Removing interface: batadv_slave_1
[  261.108201][ T2400] veth1_macvtap: left promiscuous mode
[  261.115359][ T2400] veth0_macvtap: left promiscuous mode
[  261.121352][ T2400] veth1_vlan: left promiscuous mode
[  261.127246][ T2400] veth0_vlan: left promiscuous mode
[  261.881775][ T2400] team0 (unregistering): Port device team_slave_1 removed
[  261.921755][ T2400] team0 (unregistering): Port device team_slave_0 removed
[  262.197407][ T4490] Bluetooth: hci1: command tx timeout
[  262.456062][T13330] 8021q: VLANs not supported on bridge0
[  262.632932][T13340] net_ratelimit: 8 callbacks suppressed
[  262.632952][T13340] netlink: zone id is out of range
[  262.662233][T13340] netlink: set zone limit has 4 unknown bytes
[  262.733236][T13344] netlink: zone id is out of range
[  262.739686][T13344] netlink: set zone limit has 4 unknown bytes
[  263.167689][   T29] audit: type=1800 audit(1718597409.028:21): pid=13362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1953 res=0 errno=0
[  263.247839][   T29] audit: type=1804 audit(1718597409.058:22): pid=13362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3348285498/syzkaller.3912sD/558/memory.events" dev="sda1" ino=1953 res=1 errno=0
[  263.315303][ T4490] Bluetooth: hci4: command 0x0405 tx timeout
[  263.394405][T13189] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  263.469775][T13189] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  263.533995][T13189] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  263.551344][T13189] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  263.824670][T13394] netlink: zone id is out of range
[  263.830007][T13394] netlink: set zone limit has 4 unknown bytes
[  263.864569][T13189] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.872448][T13392] __nla_validate_parse: 11 callbacks suppressed
[  263.872466][T13392] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  263.939610][T13189] 8021q: adding VLAN 0 to HW filter on device team0
[  263.959859][  T786] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.967087][  T786] bridge0: port 1(bridge_slave_0) entered forwarding state
[  263.996842][  T786] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.004062][  T786] bridge0: port 2(bridge_slave_1) entered forwarding state
[  264.042767][T13401] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  264.146330][T13401] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  264.285053][   T53] Bluetooth: hci1: command tx timeout
[  264.499311][T13422] netlink: zone id is out of range
[  264.504568][T13422] netlink: set zone limit has 4 unknown bytes
[  264.669375][T13430] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'.
[  264.692498][T13189] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.871107][T13189] veth0_vlan: entered promiscuous mode
[  264.898448][T13189] veth1_vlan: entered promiscuous mode
[  264.968371][T13189] veth0_macvtap: entered promiscuous mode
[  264.993874][T13189] veth1_macvtap: entered promiscuous mode
[  265.126752][T13444] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'.
[  265.182172][T13189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.202892][T13189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.229399][T13189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.241065][T13189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.254388][T13189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.269112][T13189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.281472][T13189] batman_adv: batadv0: Interface activated: batadv_slave_0
[  265.299403][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  265.326186][T13189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.339352][T13189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.361914][T13189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.373441][T13189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.383932][T13189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.402688][T13189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.427407][T13189] batman_adv: batadv0: Interface activated: batadv_slave_1
[  265.467576][T13452] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  265.512759][T13189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  265.533780][T13189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  265.563651][T13189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  265.584937][T13189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  265.606910][T13458] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  265.640547][T13452] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  265.759439][T13458] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  266.111430][T13486] netlink: zone id is out of range
[  266.118861][T13486] netlink: set zone limit has 4 unknown bytes
[  266.134745][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.148598][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.236460][   T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.258601][   T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.345870][T13497] xt_recent: hitcount (134217728) is larger than allowed maximum (255)
[  266.361806][   T53] Bluetooth: hci1: command tx timeout
[  266.687336][   T71] tipc: Subscription rejected, illegal request
[  266.896083][T13520] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
[  266.904413][T13520] netlink: 'syz-executor.0': attribute type 7 has an invalid length.
[  267.633420][   T29] audit: type=1804 audit(1718597413.498:23): pid=13557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3922762289/syzkaller.ZspsT5/554/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0
[  267.671042][T13559] net_ratelimit: 1 callbacks suppressed
[  267.671065][T13559] netlink: zone id is out of range
[  267.704306][T13559] netlink: set zone limit has 4 unknown bytes
[  267.868087][T13575] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  267.907452][T13575] bond1: entered promiscuous mode
[  267.947076][T13577] xfrm1: entered promiscuous mode
[  267.975105][T13577] xfrm1: entered allmulticast mode
[  267.991063][   T29] audit: type=1800 audit(1718597413.858:24): pid=13577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1955 res=0 errno=0
[  268.028037][   T29] audit: type=1804 audit(1718597413.858:25): pid=13577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir213806153/syzkaller.GQFXb2/379/memory.events" dev="sda1" ino=1955 res=1 errno=0
[  268.060036][   T29] audit: type=1804 audit(1718597413.888:26): pid=13577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir213806153/syzkaller.GQFXb2/379/memory.events" dev="sda1" ino=1955 res=1 errno=0
[  268.229100][T13591] ebtables: ebtables: counters copy to user failed while replacing table
[  268.601360][   T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.623402][T13614] netlink: zone id is out of range
[  268.642922][T13614] netlink: set zone limit has 4 unknown bytes
[  268.805391][   T29] audit: type=1800 audit(1718597414.668:27): pid=13629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1955 res=0 errno=0
[  268.936509][   T29] audit: type=1804 audit(1718597414.668:28): pid=13629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir213806153/syzkaller.GQFXb2/383/memory.events" dev="sda1" ino=1955 res=1 errno=0
[  268.975552][T13640] __nla_validate_parse: 22 callbacks suppressed
[  268.975574][T13640] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  269.035008][   T29] audit: type=1804 audit(1718597414.678:29): pid=13629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir213806153/syzkaller.GQFXb2/383/memory.events" dev="sda1" ino=1955 res=1 errno=0
[  269.071686][T13640] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  269.271325][T13648] ebtables: ebtables: counters copy to user failed while replacing table
[  269.305731][ T4490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  269.324759][ T4490] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  269.340361][ T4490] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  269.352736][ T4490] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  269.362714][ T4490] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  269.371447][ T4490] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  269.430122][   T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.543036][T13667] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  269.622887][   T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.664656][T13670] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  269.714771][T13667] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  269.749736][T13675] netlink: zone id is out of range
[  269.774820][T13675] netlink: set zone limit has 4 unknown bytes
[  269.828900][   T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.030738][T13692] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  270.072986][T13692] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  270.080321][T13692] IPv6: NLM_F_CREATE should be set when creating new route
[  270.089982][T13694] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  270.105464][T13694] xfrm1: entered promiscuous mode
[  270.120813][T13694] xfrm1: entered allmulticast mode
[  270.147458][   T29] audit: type=1800 audit(1718597416.018:30): pid=13701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1960 res=0 errno=0
[  270.207699][   T29] audit: type=1804 audit(1718597416.038:31): pid=13694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3922762289/syzkaller.ZspsT5/564/memory.events" dev="sda1" ino=1960 res=1 errno=0
[  270.240100][T13702] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  270.266038][   T29] audit: type=1804 audit(1718597416.038:32): pid=13694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3922762289/syzkaller.ZspsT5/564/memory.events" dev="sda1" ino=1960 res=1 errno=0
[  270.371618][T13699] ebtables: ebtables: counters copy to user failed while replacing table
[  270.403670][   T35] bridge_slave_1: left allmulticast mode
[  270.410207][   T35] bridge_slave_1: left promiscuous mode
[  270.416932][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.445779][   T35] bridge_slave_0: left allmulticast mode
[  270.451493][   T35] bridge_slave_0: left promiscuous mode
[  270.473459][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.642797][T13719] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  270.961090][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  270.972724][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  270.983936][   T35] bond0 (unregistering): Released all slaves
[  271.002428][T13716] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  271.071784][T13655] chnl_net:caif_netlink_parms(): no params data found
[  271.402483][T13745] netlink: zone id is out of range
[  271.477040][   T53] Bluetooth: hci1: command tx timeout
[  271.497556][   T35] hsr_slave_0: left promiscuous mode
[  271.503811][   T35] hsr_slave_1: left promiscuous mode
[  271.511023][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  271.519561][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  271.531219][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  271.545100][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  271.572405][   T35] veth1_macvtap: left promiscuous mode
[  271.579523][   T35] veth0_macvtap: left promiscuous mode
[  271.585352][   T35] veth1_vlan: left promiscuous mode
[  271.590949][   T35] veth0_vlan: left promiscuous mode
[  272.098113][   T35] team0 (unregistering): Port device team_slave_1 removed
[  272.140495][   T35] team0 (unregistering): Port device team_slave_0 removed
[  272.514405][T13746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  272.521857][T13746] IPv6: NLM_F_CREATE should be set when creating new route
[  272.545157][T13655] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.552325][T13655] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.562726][T13655] bridge_slave_0: entered allmulticast mode
[  272.571730][T13655] bridge_slave_0: entered promiscuous mode
[  272.586417][T13655] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.593563][T13655] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.602275][T13655] bridge_slave_1: entered allmulticast mode
[  272.609876][T13655] bridge_slave_1: entered promiscuous mode
[  272.682159][T13762] xfrm1: entered promiscuous mode
[  272.691995][T13762] xfrm1: entered allmulticast mode
[  272.718722][   T29] audit: type=1800 audit(1718597418.578:33): pid=13761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1950 res=0 errno=0
[  272.785916][T13655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  272.795511][   T29] audit: type=1804 audit(1718597418.588:34): pid=13761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3348285498/syzkaller.3912sD/591/memory.events" dev="sda1" ino=1950 res=1 errno=0
[  272.802470][T13764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  272.823686][   T29] audit: type=1804 audit(1718597418.588:35): pid=13761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3348285498/syzkaller.3912sD/591/memory.events" dev="sda1" ino=1950 res=1 errno=0
[  272.890331][T13655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  273.016162][T13655] team0: Port device team_slave_0 added
[  273.049150][T13655] team0: Port device team_slave_1 added
[  273.111390][T13655] batman_adv: batadv0: Adding interface: batadv_slave_0
[  273.120516][T13655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.157383][T13655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  273.175409][T13655] batman_adv: batadv0: Adding interface: batadv_slave_1
[  273.184998][T13655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.212356][T13655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  273.337002][T13655] hsr_slave_0: entered promiscuous mode
[  273.349476][T13655] hsr_slave_1: entered promiscuous mode
[  273.357394][T13655] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  273.365283][T13655] Cannot create hsr debugfs directory
[  273.391068][T13789] net_ratelimit: 1 callbacks suppressed
[  273.391087][T13789] netlink: zone id is out of range
[  273.408303][T13789] netlink: set zone limit has 4 unknown bytes
[  273.533624][T13793] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  273.555748][   T53] Bluetooth: hci1: command tx timeout
[  273.596570][T13796] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  273.616444][T13796] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  273.790114][T13804] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  273.797428][T13804] IPv6: NLM_F_CREATE should be set when creating new route
[  273.982811][T13655] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  273.998124][T13655] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  274.026602][T13655] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  274.040047][T13655] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  274.205983][T13822] netlink: zone id is out of range
[  274.222131][T13822] netlink: set zone limit has 4 unknown bytes
[  274.289328][T13655] 8021q: adding VLAN 0 to HW filter on device bond0
[  274.330007][T13655] 8021q: adding VLAN 0 to HW filter on device team0
[  274.364761][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.371990][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state
[  274.410478][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.418311][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state
[  274.564081][T13842] __nla_validate_parse: 15 callbacks suppressed
[  274.564102][T13842] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  274.612279][T13842] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  274.619620][T13842] IPv6: NLM_F_CREATE should be set when creating new route
[  274.632969][T13845] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  274.652880][T13842] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  274.664159][T13845] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[  274.776499][T13850] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  274.822379][T13655] 8021q: adding VLAN 0 to HW filter on device batadv0
[  274.841283][T13852] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[  274.987097][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  275.241307][T13854] infiniband syz0: set active
[  275.248859][T13854] infiniband syz0: added veth0_vlan
[  275.258259][T13854] syz0: rxe_create_cq: returned err = -12
[  275.270604][T13854] infiniband syz0: Couldn't create ib_mad CQ
[  275.277226][T13854] infiniband syz0: Couldn't open port 1
[  275.339499][T13854] RDS/IB: syz0: added
[  275.344712][T13854] smc: adding ib device syz0 with port count 1
[  275.358028][T13854] smc:    ib device syz0 port 1 has pnetid 
[  275.484390][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  275.635392][   T53] Bluetooth: hci1: command tx timeout
[  277.715419][   T53] Bluetooth: hci1: command tx timeout
[  304.590886][ T4490] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  304.600726][ T4490] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  304.609746][ T4490] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  304.620295][ T4490] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  304.628349][ T4490] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  304.640735][ T4490] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  305.231895][   T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  305.247883][   T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  305.259024][   T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  305.271343][   T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  305.279328][   T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  305.292049][   T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  305.454772][ T4490] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  305.465575][ T4490] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  305.486383][ T4490] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  305.502782][ T4490] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  305.515604][ T4490] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  305.523695][ T4490] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  305.821780][ T4490] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  305.831897][ T4490] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  305.840674][ T4490] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  305.852043][ T4490] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  305.862966][ T4490] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  305.871233][ T4490] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  306.675268][ T4490] Bluetooth: hci5: command tx timeout
[  307.405225][ T4490] Bluetooth: hci6: command tx timeout
[  307.640782][ T4490] Bluetooth: hci7: command tx timeout
[  307.959705][ T4490] Bluetooth: hci8: command tx timeout
[  308.755152][ T4490] Bluetooth: hci5: command tx timeout
[  309.475175][ T4490] Bluetooth: hci6: command tx timeout
[  309.715633][ T4490] Bluetooth: hci7: command tx timeout
[  310.035377][ T4490] Bluetooth: hci8: command tx timeout
[  310.835079][ T4490] Bluetooth: hci5: command tx timeout
[  311.556460][ T4490] Bluetooth: hci6: command tx timeout
[  311.795837][ T4490] Bluetooth: hci7: command tx timeout
[  312.115196][ T4490] Bluetooth: hci8: command tx timeout
[  312.915322][ T4490] Bluetooth: hci5: command tx timeout
[  313.636570][ T4490] Bluetooth: hci6: command tx timeout
[  313.875555][ T4490] Bluetooth: hci7: command tx timeout
[  314.195327][ T4490] Bluetooth: hci8: command tx timeout
[  317.560953][ T1245] ieee802154 phy0 wpan0: encryption failed: -22
[  317.567460][ T1245] ieee802154 phy1 wpan1: encryption failed: -22
[  334.284296][   T53] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  334.303564][   T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  334.313850][   T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  334.329059][   T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  334.338432][   T53] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  334.350346][   T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  336.436235][ T4490] Bluetooth: hci9: command tx timeout
[  338.515334][ T4490] Bluetooth: hci9: command tx timeout
[  340.595674][ T4490] Bluetooth: hci9: command tx timeout
[  342.675298][ T4490] Bluetooth: hci9: command tx timeout
[  369.753189][   T53] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  369.765766][   T53] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  369.774508][   T53] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  369.786784][   T53] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  369.796998][   T53] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  369.804553][   T53] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  370.123164][ T4490] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  370.143484][ T4490] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  370.153270][ T4490] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  370.175412][ T4490] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  370.189963][ T4490] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  370.197936][ T4490] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  370.386883][ T4490] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  370.401709][ T4490] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  370.411622][ T4490] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  370.422272][ T4490] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  370.432219][ T4490] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  370.440855][ T4490] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  370.772724][ T4490] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  370.782881][ T4490] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  370.796075][ T4490] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  370.806145][ T4490] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  370.820347][ T4490] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  370.829650][ T4490] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  371.875070][   T53] Bluetooth: hci10: command tx timeout
[  372.275303][   T53] Bluetooth: hci11: command tx timeout
[  372.520152][   T53] Bluetooth: hci12: command tx timeout
[  372.925076][   T53] Bluetooth: hci13: command tx timeout
[  373.955305][   T53] Bluetooth: hci10: command tx timeout
[  374.355240][   T53] Bluetooth: hci11: command tx timeout
[  374.595631][   T53] Bluetooth: hci12: command tx timeout
[  374.996141][   T53] Bluetooth: hci13: command tx timeout
[  376.035284][   T53] Bluetooth: hci10: command tx timeout
[  376.435068][   T53] Bluetooth: hci11: command tx timeout
[  376.675022][   T53] Bluetooth: hci12: command tx timeout
[  377.075272][   T53] Bluetooth: hci13: command tx timeout
[  378.115166][   T53] Bluetooth: hci10: command tx timeout
[  378.515160][   T53] Bluetooth: hci11: command tx timeout
[  378.755106][   T53] Bluetooth: hci12: command tx timeout
[  379.004065][ T1245] ieee802154 phy0 wpan0: encryption failed: -22
[  379.010720][ T1245] ieee802154 phy1 wpan1: encryption failed: -22
[  379.155037][   T53] Bluetooth: hci13: command tx timeout
[  396.434998][ T4490] Bluetooth: hci1: command 0x0406 tx timeout
[  399.579380][ T4490] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  399.588824][ T4490] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  399.597693][ T4490] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  399.606834][ T4490] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  399.617199][ T4490] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  399.624660][ T4490] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  401.715288][ T4490] Bluetooth: hci14: command tx timeout
[  403.795289][ T4490] Bluetooth: hci14: command tx timeout
[  405.875498][ T4490] Bluetooth: hci14: command tx timeout
[  407.955541][ T4490] Bluetooth: hci14: command tx timeout
[  427.005161][   T30] INFO: task kworker/1:2:786 blocked for more than 143 seconds.
[  427.012880][   T30]       Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0
[  427.020765][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  427.029489][   T30] task:kworker/1:2     state:D stack:22416 pid:786   tgid:786   ppid:2      flags:0x00004000
[  427.040367][   T30] Workqueue: events smc_ib_port_event_work
[  427.046319][   T30] Call Trace:
[  427.049694][   T30]  <TASK>
2024/06/17 04:12:52 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  427.052635][   T30]  __schedule+0x17e8/0x4a20
[  427.065570][   T30]  ? __pfx___schedule+0x10/0x10
[  427.070641][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  427.094880][   T30]  ? __pfx_lock_release+0x10/0x10
[  427.099972][   T30]  ? kick_pool+0x45c/0x620
[  427.120583][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  427.134822][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  427.140752][   T30]  ? schedule+0x90/0x320
[  427.154847][   T30]  schedule+0x14b/0x320
[  427.159111][   T30]  schedule_preempt_disabled+0x13/0x30
[  427.164616][   T30]  __mutex_lock+0x6a4/0xd70
[  427.174861][   T53] Bluetooth: hci5: command 0x0406 tx timeout
[  427.184871][   T30]  ? mark_lock+0x2a4/0x350
[  427.189340][   T30]  ? __mutex_lock+0x527/0xd70
[  427.194039][   T30]  ? rxe_query_port+0x61/0x260
[  427.214882][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  427.223278][   T30]  ? rxe_query_port+0x4f/0x260
[  427.228174][   T30]  rxe_query_port+0x61/0x260
[  427.232800][   T30]  ib_query_port+0x166/0x7d0
[  427.237626][   T30]  smc_ib_port_event_work+0x14e/0xa50
[  427.243645][   T30]  ? process_scheduled_works+0x945/0x1830
[  427.249489][   T30]  process_scheduled_works+0xa2c/0x1830
[  427.255152][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  427.261155][   T30]  ? assign_work+0x364/0x3d0
[  427.265793][   T30]  worker_thread+0x86d/0xd70
[  427.270423][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  427.276385][   T30]  ? __kthread_parkme+0x169/0x1d0
[  427.281433][   T30]  ? __pfx_worker_thread+0x10/0x10
[  427.286678][   T30]  kthread+0x2f0/0x390
[  427.290769][   T30]  ? __pfx_worker_thread+0x10/0x10
[  427.295951][   T30]  ? __pfx_kthread+0x10/0x10
[  427.300561][   T30]  ret_from_fork+0x4b/0x80
[  427.305087][   T30]  ? __pfx_kthread+0x10/0x10
[  427.309697][   T30]  ret_from_fork_asm+0x1a/0x30
[  427.314528][   T30]  </TASK>
[  427.318187][   T30] INFO: task kworker/u8:6:2400 blocked for more than 143 seconds.
[  427.327236][   T30]       Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0
[  427.335026][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  427.343752][   T30] task:kworker/u8:6    state:D stack:22960 pid:2400  tgid:2400  ppid:2      flags:0x00004000
[  427.356107][   T30] Workqueue: ipv6_addrconf addrconf_dad_work
[  427.362134][   T30] Call Trace:
[  427.374832][   T30]  <TASK>
[  427.377811][   T30]  __schedule+0x17e8/0x4a20
[  427.382356][   T30]  ? __pfx___schedule+0x10/0x10
[  427.394849][   T30]  ? __pfx_lock_release+0x10/0x10
[  427.399920][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  427.414839][   T30]  ? kthread_data+0x52/0xd0
[  427.419387][   T30]  ? schedule+0x90/0x320
[  427.423639][   T30]  ? wq_worker_sleeping+0x66/0x240
[  427.444898][   T30]  ? schedule+0x90/0x320
[  427.454863][   T30]  schedule+0x14b/0x320
[  427.463449][   T30]  schedule_preempt_disabled+0x13/0x30
[  427.485068][   T30]  __mutex_lock+0x6a4/0xd70
[  427.489631][   T30]  ? mark_lock+0x9a/0x350
[  427.493979][   T30]  ? __mutex_lock+0x527/0xd70
[  427.515749][   T30]  ? addrconf_dad_work+0xd0/0x16f0
[  427.521111][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  427.534843][   T30]  addrconf_dad_work+0xd0/0x16f0
[  427.539933][   T30]  ? __pfx_addrconf_dad_work+0x10/0x10
[  427.555206][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  427.561600][   T30]  ? process_scheduled_works+0x945/0x1830
[  427.584881][   T30]  process_scheduled_works+0xa2c/0x1830
[  427.590512][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  427.604860][   T30]  ? assign_work+0x364/0x3d0
[  427.609595][   T30]  worker_thread+0x86d/0xd70
[  427.614207][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  427.635272][   T30]  ? __kthread_parkme+0x169/0x1d0
[  427.640384][   T30]  ? __pfx_worker_thread+0x10/0x10
[  427.664830][   T30]  kthread+0x2f0/0x390
[  427.668999][   T30]  ? __pfx_worker_thread+0x10/0x10
[  427.674134][   T30]  ? __pfx_kthread+0x10/0x10
[  427.684829][