last executing test programs:

3.408943031s ago: executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x44, 0x6, 0x438, 0x1d0, 0x300, 0x1d0, 0x268, 0x268, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x6, 0x0, {[{{@ip={@multicast1, @private, 0x0, 0x0, 'bond_slave_0\x00', 'veth0_to_bond\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x9}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'rose0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'pim6reg0\x00', 'dummy0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@remote, @local, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_hsr\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @private}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x10, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x0, 0x0, 0x1}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0}}}, 0x0}, 0x90)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
r2 = socket$igmp(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000380)}], 0x1, 0x8)
ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000990a00000000000063018e00000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000280)={0x7}, 0x1)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0x1, "4ef7289910e0843a8f13f2fe244b73fb24e0fe49951c925bca907f6a609d8f49"}, 0x3c)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f00000002c0), 0x4)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@remote, @empty, 0x0, "e798888beab3af341dbec4427a73b0fbda814c5f5cd6f92215f46e0b091038f9"}, 0x3c)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000080)=0x9, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', <r5=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
r8 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r8, &(0x7f0000000140)={'full'}, 0xfffffdef)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0xc, [@union={0x6, 0x6, 0x0, 0x5, 0x0, 0xfffff800, [{0x1, 0x5, 0xfff}, {0xd, 0x3, 0x15}, {0x9, 0x5, 0x5}, {0x5, 0x2, 0xbd}, {0x7, 0x0, 0x3}, {0x5, 0x0, 0x9}]}]}, {0x0, [0x30, 0x5f, 0x5f, 0x2e, 0x2e, 0x30, 0x61, 0x5c, 0x30, 0x0]}}, &(0x7f0000000100)=""/102, 0x78, 0x66, 0x0, 0x3}, 0x20)

2.757417292s ago: executing program 3:
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, 0x0, 0x0}, 0x90)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000000007910480000000000630a00ff0000000095dbcc427fb93c69291373c92f56e2d26a14be757e6d3bcec850f52f73"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x210, 0x5002004a, 0xa, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'macvtap0\x00'}, 0x60, 0xd8, 0x118, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'bridge0\x00', {}, 'batadv0\x00', {}, 0x0, 0x4}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "c7a6bc1f54b88fa2267673e9bdbd68ed89f86114fe5e4c4969e359fcb117"}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x34d)

2.65515022s ago: executing program 3:
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000040), 0x0}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@bloom_filter={0x1e, 0x3, 0x1, 0x6, 0x140, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3, 0x3}, 0x48)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x54583}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}]}}}]}, 0x44}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x18}}], 0x1, 0x80)

2.576744472s ago: executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x6, &(0x7f0000000100), 0x4)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="918c6394f90324fc60000000000000000000000027508787ddedcc9c60ae3314e188b7ad9cee3f6acc3261388f7f5ad185bf89a917f5c7af7854e1bc03ad8459384e9d48cc0a5b805ac5ae78d379657d2008b8c27b925e6976ff901a51e5ae5b1d1968660ec3eb94d9c05e4a55855fdb6345006f49c7", 0x76}], 0x1}, 0x20000040)
recvmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
recvmsg$kcm(r1, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001840)=""/234, 0xea}, {&(0x7f0000001940)=""/184, 0xb8}, {&(0x7f0000001a00)=""/4096, 0x1010}, {&(0x7f0000000600)=""/34, 0x22}, {&(0x7f00000007c0)=""/44, 0x2c}], 0x10}, 0x0)
unshare(0x480)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0xf, &(0x7f00000014c0)={@cgroup=r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x2000041}, 0x10)
bind$tipc(r5, 0x0, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88)
r6 = socket$unix(0x1, 0x5, 0x0)
setsockopt(r6, 0x1000, 0x5, &(0x7f0000000140)="7c70c415d1efe8eec31f0d035bdda812371ef4ac58ea63b4c05c7d659f6c03815014a63aa0f5f381c918772b4b1ad3774999bf71aecf32cc5d50ff9ef0ebe2f1b46a36d934c2b908aefad4a5512baffe3ed94ad247ef170de34097f1ce3dab9149d900503cf2b577c3a3", 0x6a)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000080)="a5", 0x1, 0x20008845, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c)

2.566089021s ago: executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x140, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0)

2.408026469s ago: executing program 2:
r0 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) (async)
sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0xeb}, {&(0x7f0000001440)="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", 0xb82}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0) (async)
getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) (async)
sendmmsg$inet(r1, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000740)="ceb9adac", 0xb9ce}], 0x1}}], 0x1, 0x0) (async)
r3 = socket$inet(0x2, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000100), 0xfecc) (async)
write$cgroup_type(r4, &(0x7f0000000000), 0x180a00)
setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f00000000c0), 0x4) (async)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @remote}, 0xc)
sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000043c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

1.835027817s ago: executing program 2:
r0 = socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000020c0)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000002100)=0x10)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90)
ioctl$TUNSETOFFLOAD(r2, 0x4010744d, 0x20000000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200002085000000820000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001a0001000000000000ffffff81"], 0x1c}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0)
r6 = socket(0xa, 0x6, 0x0)
getsockopt$inet6_mreq(r6, 0x10d, 0xe1, 0x0, &(0x7f0000000040))
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getnexthop={0x18, 0x6a, 0x7427dbec71f2f695, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x18}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r3}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)

1.655291812s ago: executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}}, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x26, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={<r5=>r1, 0x1, 0x640b977e, 0x100000001})
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x100a0, 0x4)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
recvmmsg(r6, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/180, 0xffb0}], 0x1}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001400)=""/94, 0x5e}], 0x1}}], 0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x8, &(0x7f00000000c0)=0xffffffff, 0x4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x800, 0x8070bd2b, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x8, 0x0, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendto(r6, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0)
socket(0x2, 0x1, 0x0)
socket(0xf, 0x1, 0x81)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9)
socket$inet6(0x10, 0x2, 0x4)
socket$inet6(0xa, 0x2, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)

1.56291376s ago: executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x7, 0x10001, 0x9, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x12, 0x22, 0x4, 0x6}, 0x48)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000100)=@udp=r3}, 0x20)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r2, &(0x7f00000001c0), &(0x7f0000000000)=@udp=r4, 0x1}, 0x20)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ec0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f80)=@bpf_ext={0x1c, 0x15, &(0x7f0000000c40)=ANY=[@ANYBLOB="180080000004000000000000fd00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185a00000f000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000e00)='syzkaller\x00', 0x1f, 0xee, &(0x7f0000000d00)=""/238, 0x41000, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000e80)={0x1, 0x8, 0xa2f}, 0x10, 0x12ea3, r1, 0x0, &(0x7f0000000f40)=[r2, r5], 0x0, 0x10, 0x4}, 0x90)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
getsockname(r7, &(0x7f00000000c0)=@xdp={0x2c, 0x0, <r8=>0x0}, &(0x7f0000000140)=0x80)
sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001000810500"/20, @ANYRES32=r8, @ANYBLOB="5989ffffffdf0000140012800a000100767863616e"], 0x34}}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="8ec1cc54649640be1983f79c5bfe88cd6a6afd5570ab59578db363f4892559f334d436138406b699de69db13fd73742880", 0x31}, {&(0x7f0000000440)="b0fef28adda655a00a8ce0bb7d504206000000000000001abe0a88f67472c3cd975c9884ae01084df2b7f556e2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e4088d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb28946223165c906e2bed23adce7939d37148e79c6b485db91083de9905e7de49fd8837cf3792d697bf8b29b9c6e8daee80e86778a4a2426e6459d4a30ad36b138b31570d8342f7094ca640633ba7e0793a6e21a816930cbc4749413f629ba4de97b84ed9acc06a3d29ef68cd6d32fc4398429c472891f8e244d27a4b6241083efd4ecd2c92d91399de6ddcafbcd07000000000000009d1b7d60c898340102268c474bf8b7db27c8787b34cae8a9c676907ec017733c1ece82e11b99a4bdc74c8d9d1871be6af0fef62b529af9ab1f37d60a2f967d715b301856b033a7e7dac74416447a090f7b6693bbd2deaf5eebbfc9adff299bafcf57774d0c993f5524409672b4f35409a8720dc2b78f83198096c60126f911fd42c29cd6fa311e2c8dae8aa07ccdc90436b2b6ee4c79ff80f6938e0560d9d8e925bdc4fffffffffffffff8d9b7977fff6c4293065de2ff26a041e67954f68871d010d377f9ba1ee447b5bfd5b9d3711b3ea5c6361a97d4d46b8b406091be9433f9506130aa53889c275a515297ecd02183805aa4ae31e3aef57eb8d299548df54dffb7c4af7f00a869c6bdbc6c2bd1a8326298164aae365b2611d2b50c5f", 0x21a}, {&(0x7f0000000740)="1b3b351333f3a3b13679144b7cd8a63309fceaf8a9e0b1dba3a1f60a912f6875841285b877fac97b183e950017761d4433127df4ffeab47d3545970ac2571b8775e05a2ec30dbc2154f17ddb1da5b2411d093471a30c77ca0d06d1576a43cbd422dd9fc5aeeef4a0a53a5d93a9b5b000bba7223848aa6b97abe164077f7737311f187ffdfefdae072f6c3d59bf3a7d", 0x8f}], 0x3}, 0x0)
recvmsg(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/62, 0x3e}], 0x1, &(0x7f0000001d00)=""/4057, 0xfd9}, 0x0)
close(r10)
recvmsg$can_raw(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000800)=""/242, 0xf2}, {&(0x7f0000000680)=""/188, 0xbc}, {&(0x7f00000003c0)=""/15, 0xf}, {&(0x7f0000000900)=""/163, 0xa3}, {&(0x7f0000000400)}, {&(0x7f00000009c0)=""/120, 0x78}, {&(0x7f0000000a40)=""/71, 0x47}], 0x7, &(0x7f0000000b40)=""/156, 0x9c}, 0x8000)
bind$can_raw(r6, &(0x7f00000002c0)={0x1d, r8}, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r12)
getsockname$packet(r12, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)

1.369502259s ago: executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
listen(r0, 0xc)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @local}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0xd4, &(0x7f0000000040), 0x0)

1.285159694s ago: executing program 4:
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, 0x0, 0x0}, 0x90)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x210, 0x5002004a, 0xa, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'macvtap0\x00'}, 0x60, 0xd8, 0x118, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'bridge0\x00', {}, 'batadv0\x00', {}, 0x0, 0x4}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "c7a6bc1f54b88fa2267673e9bdbd68ed89f86114fe5e4c4969e359fcb117"}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x34d)

1.228541298s ago: executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000003180)=[{0x0}, {0xfffffffffffffffc}], 0x2, 0x0, 0x1230, 0x7ffff000}}], 0x1, 0x0)

1.169368703s ago: executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000071118800000000008510000002000000850000002300000095000000000000009500a50500000000b175a4e9ffa04067648aaa4b6f16bebb7eb336a2be7ba8c3c2e25ec659b80c0a41c34e08"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018200000", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x6, 0xde, &(0x7f0000000cc0)=""/222}, 0x90)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r3, &(0x7f0000000180), 0x40001)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x200, 0x4)
sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0)
recvmsg$kcm(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000005c0)=""/130, 0x82}, {&(0x7f0000000780)=""/204, 0xcc}, {&(0x7f0000000880)=""/219, 0xdb}, {&(0x7f0000000680)=""/57, 0x39}, {&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000a40)=""/133, 0x85}], 0x6, &(0x7f0000000b80)=""/234, 0xea}, 0x12020)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0x80, 0x75, 0x81, 0x65, @loopback, @dev={0xfe, 0x80, '\x00', 0x31}, 0x700, 0x80, 0x7, 0x2}})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10)
r7 = gettid()
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x8002}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0)
r9 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r10 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r11=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x6d, &(0x7f0000000080)={r11}, &(0x7f00000000c0)=0x18)
connect$llc(r9, &(0x7f0000000280)={0x1a, 0x108, 0x84, 0x4, 0x5, 0xff, @link_local}, 0x10)
write$cgroup_pid(r5, &(0x7f00000001c0)=r7, 0x12)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0x8008662c, &(0x7f00000002c0)={0x2880008, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4})
socket$inet6(0xa, 0x5, 0x0)

835.474468ms ago: executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
listen(r0, 0xc)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @local}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0xd4, &(0x7f0000000040), 0x0)

743.572645ms ago: executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x7, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1d0, 0x2a8, 0x2a8, 0x1d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8)

702.755315ms ago: executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x5c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369304000100ff0200000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"})
r7 = socket$kcm(0xa, 0x1, 0x106)
socket$netlink(0x10, 0x3, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0)
sendmsg$kcm(r7, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x20040010)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, 0x0}, 0x20000000)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r5, &(0x7f0000000080), 0x0}, 0x20)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000078a6c7cdb0f76b4f50910000000000000000e7ff70120a009d00000095000f31e075975b1b000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, 0x2a, 0xb, 0x0, 0x0, {0x2}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x20}}, 0x0)

623.445967ms ago: executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x2, 0x8, 0x8}, 0x48)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x24}}, 0x0)

604.811811ms ago: executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000ec0)="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", 0xff}, {&(0x7f0000000900)="1eac4d20f8509e2139d2842c8faedef008bcac1025cbc63d2bfe0c7bbe51c5bf73985d5106bf5b5e7e5761716e35b468ea79633c916c4a8026f9408d056b8977df67c0e6fd0b1b3da5de5d003382ac95eade5dadad870ce3749452d2c1c3651ffff244be3078fdbfeb97d093bba60131e733d91c4ad38e7b52aa7afa9cb8e2351bd3f8a7a2a0425b071f6790992b8c2a51d944b0161c5c97fcdc19c2ef7c66ccc23c77a28a34b216c429444343ea056f171399dc03d56a1131ba74d31fc1012d3deff0e43309fc9e3b88bec90a7680aa74ccd581e02eb436a0009fa62097513d0c9533256d81978fae39288edcb833739d2988ccf5a564bc00edd1ab0853b873cbab3ef227f11325d72dbe2f435351610d01d0f74e180df6eaa94651336e7713414e499586edd5693e587a186fcb68a973e823e61a072aaa4fb9e3a03ff4c17c9e343684255efba0d1b149b22c2d81f1ac5eaccaab01ab108178e97eb8a45d5d6cdeca0d6b9af9f88cfee58935be6902ac7c6915d60548367d164990b142d472b9b5700191b1f978fb36bcde646385dcf5cb7adf1ec70baef4061d2da93d2f5eefae1081374d58ab54532755c1b8bf303584296145e9aad2e3ccef93f30da9c102db5cfe346baba2fd3f157cb6e825e607365ff8c6187e216dc4072e582874ce63166405e21644015f99d5713165a377bfdc3143928e8469b4e312ce1f9dff83fe7c8d9fca791af2b46f1650e3937c9ab589d5f93fb578503aa64042c66571649844d93257489c1b658140e4c194c329a1a2c0117d123a45b213a118dd608bd6bdb2e0a6782f785321ff48eac4158ad9efb3737a6cfbb21d0dba732558493aa09dfa7fa41b4922e4e205a4792c9694661a18eff0d932d824f6987aa3dafa7ddc9b0acd70d43263c78dde88b7c665abbeec1cf1016ddc321f713cc3c149eeda6443b5b278eb3a05b08d510650b055d3193c4d5bbe084431cc40a626e81827d8bf2379435ada42a99569b35faa3af53f90f4dcf7a7d1c2e6fe4d7739b135981d40ba00de019909748640d554a159e552c6a7a7c77b213fad40dd785cc4ee983266b3377fbc7845a44992f82656b8240c169697599074348a4bac29423612e4c0ba89a66d08033b54b4d8f8704ab9470fe6316dc6ba610b7f3c1b0428607b13d2cfbed5c82d9214a1e97edaa27ed011d42800467fd54cddec7841f2aa513e7c8956842ea69b6b80208a4acbe9b678a9ab48a26df1cebd283f0d8e2956d8e8a4", 0x37e}], 0x2, 0x0, 0x0, 0x94}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x0)

544.925263ms ago: executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b)
recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

437.943426ms ago: executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r0, 0x0, 0x6e)

402.260606ms ago: executing program 1:
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000ec0)="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", 0x101}, {&(0x7f0000000900)="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", 0x37e}], 0x2, 0x0, 0x0, 0x94}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x0)

329.805634ms ago: executing program 1:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
listen(r0, 0xc)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @local}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0xd4, &(0x7f0000000040), 0x0)

264.888122ms ago: executing program 0:
r0 = socket$inet6(0xa, 0x80000, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @mcast2, 0x400}, 0x1c)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000040)={0x2b, @multicast1, 0x4e20, 0x1, 'fo\x00', 0x24, 0x9, 0x1}, 0x2c)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000080)={0x1000, {{0xa, 0x4e24, 0x6131, @private2, 0x5}}, 0x0, 0x2, [{{0xa, 0x4e21, 0x800, @remote, 0x6}}, {{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7}}]}, 0x190)
r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10)
setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f00000002c0), 0x4)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000300)={<r4=>0x0, 0xffff, 0x3, 0x1}, &(0x7f0000000340)=0x10)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000380)={r4, 0x7fff}, &(0x7f00000003c0)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000400)={r4, 0x946}, &(0x7f0000000440)=0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f00000004c0)={'filter\x00', 0x4}, 0x68)
sendto$inet6(r0, &(0x7f0000000540), 0x0, 0x8040, &(0x7f0000000640)={0xa, 0x4e23, 0x80, @private0}, 0x1c)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000680)={r4, 0x3a, "1bfde6c10fb3544aaa0a53a8e514d5a371b17f39d21fc86c2023fe24b83b41e86af85d637097a36d23d4a5ef06ef680927e6038258848a0b2831"}, &(0x7f0000000700)=0x42)
r5 = accept$phonet_pipe(r2, &(0x7f0000000740), &(0x7f0000000780)=0x10)
ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f00000007c0))
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000880)={0x2c4, r6, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffff01d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "61b2e42a3f2bc6222db44cf2db1541dc92d2c94d"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7f}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "7a931e9231607cc5882a109e489f4c7bfde514cad2ff4b1065ea824598"}}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff801}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x68a}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x406}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2f5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8ab0}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfb4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6d926f7d}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x800}, 0x40004)
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTLQI(r7, 0x0, 0x3, &(0x7f0000000c00)=0x1, 0x4)
r8 = getpid()
ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000c40)=r8)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0)
socket$packet(0x11, 0x3, 0x300)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r9, 0xfffffffffffffffd, 0x8000)
socketpair(0x8, 0x6, 0x81, &(0x7f0000000c80)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
getsockopt$inet_tcp_buf(r10, 0x6, 0x1c, &(0x7f0000000cc0)=""/46, &(0x7f0000000d00)=0x2e)

256.847109ms ago: executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}}, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x26, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={<r5=>r1, 0x1, 0x640b977e, 0x100000001})
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x100a0, 0x4)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
recvmmsg(r6, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/180, 0xffb0}], 0x1}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001400)=""/94, 0x5e}], 0x1}}], 0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x8, &(0x7f00000000c0)=0xffffffff, 0x4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x800, 0x8070bd2b, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x8, 0x0, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendto(r6, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0)
socket(0x2, 0x1, 0x0)
socket(0xf, 0x1, 0x81)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9)
socket$inet6(0x10, 0x2, 0x4)
socket$inet6(0xa, 0x2, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)

243.764266ms ago: executing program 4:
unshare(0x20000000) (async, rerun: 64)
unshare(0x20000000) (rerun: 64)

112.980196ms ago: executing program 1:
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, 0x0, 0x0}, 0x90)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x210, 0x5002004a, 0xa, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'macvtap0\x00'}, 0x60, 0xd8, 0x118, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'bridge0\x00', {}, 'batadv0\x00', {}, 0x0, 0x4}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "c7a6bc1f54b88fa2267673e9bdbd68ed89f86114fe5e4c4969e359fcb117"}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x34d)

105.109144ms ago: executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x7, 0x10001, 0x9, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x12, 0x22, 0x4, 0x6}, 0x48)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000100)=@udp=r3}, 0x20)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r2, &(0x7f00000001c0), &(0x7f0000000000)=@udp=r4, 0x1}, 0x20)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ec0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f80)=@bpf_ext={0x1c, 0x15, &(0x7f0000000c40)=ANY=[@ANYBLOB="180080000004000000000000fd00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185a00000f000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000e00)='syzkaller\x00', 0x1f, 0xee, &(0x7f0000000d00)=""/238, 0x41000, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000e80)={0x1, 0x8, 0xa2f}, 0x10, 0x12ea3, r1, 0x0, &(0x7f0000000f40)=[r2, r5], 0x0, 0x10, 0x4}, 0x90)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
getsockname(r7, &(0x7f00000000c0)=@xdp={0x2c, 0x0, <r8=>0x0}, &(0x7f0000000140)=0x80)
sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001000810500"/20, @ANYRES32=r8, @ANYBLOB="5989ffffffdf0000140012800a000100767863616e"], 0x34}}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="8ec1cc54649640be1983f79c5bfe88cd6a6afd5570ab59578db363f4892559f334d436138406b699de69db13fd73742880", 0x31}, {&(0x7f0000000440)="b0fef28adda655a00a8ce0bb7d504206000000000000001abe0a88f67472c3cd975c9884ae01084df2b7f556e2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e4088d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb28946223165c906e2bed23adce7939d37148e79c6b485db91083de9905e7de49fd8837cf3792d697bf8b29b9c6e8daee80e86778a4a2426e6459d4a30ad36b138b31570d8342f7094ca640633ba7e0793a6e21a816930cbc4749413f629ba4de97b84ed9acc06a3d29ef68cd6d32fc4398429c472891f8e244d27a4b6241083efd4ecd2c92d91399de6ddcafbcd07000000000000009d1b7d60c898340102268c474bf8b7db27c8787b34cae8a9c676907ec017733c1ece82e11b99a4bdc74c8d9d1871be6af0fef62b529af9ab1f37d60a2f967d715b301856b033a7e7dac74416447a090f7b6693bbd2deaf5eebbfc9adff299bafcf57774d0c993f5524409672b4f35409a8720dc2b78f83198096c60126f911fd42c29cd6fa311e2c8dae8aa07ccdc90436b2b6ee4c79ff80f6938e0560d9d8e925bdc4fffffffffffffff8d9b7977fff6c4293065de2ff26a041e67954f68871d010d377f9ba1ee447b5bfd5b9d3711b3ea5c6361a97d4d46b8b406091be9433f9506130aa53889c275a515297ecd02183805aa4ae31e3aef57eb8d299548df54dffb7c4af7f00a869c6bdbc6c2bd1a8326298164aae365b2611d2b50c5f", 0x21a}, {&(0x7f0000000740)="1b3b351333f3a3b13679144b7cd8a63309fceaf8a9e0b1dba3a1f60a912f6875841285b877fac97b183e950017761d4433127df4ffeab47d3545970ac2571b8775e05a2ec30dbc2154f17ddb1da5b2411d093471a30c77ca0d06d1576a43cbd422dd9fc5aeeef4a0a53a5d93a9b5b000bba7223848aa6b97abe164077f7737311f187ffdfefdae072f6c3d59bf3a7d", 0x8f}], 0x3}, 0x0)
recvmsg(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/62, 0x3e}], 0x1, &(0x7f0000001d00)=""/4057, 0xfd9}, 0x0)
close(r10)
recvmsg$can_raw(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000800)=""/242, 0xf2}, {&(0x7f0000000680)=""/188, 0xbc}, {&(0x7f00000003c0)=""/15, 0xf}, {&(0x7f0000000900)=""/163, 0xa3}, {&(0x7f0000000400)}, {&(0x7f00000009c0)=""/120, 0x78}, {&(0x7f0000000a40)=""/71, 0x47}], 0x7, &(0x7f0000000b40)=""/156, 0x9c}, 0x8000)
bind$can_raw(r6, &(0x7f00000002c0)={0x1d, r8}, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r13)
sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1}, 0x24}}, 0x0)

55.442601ms ago: executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0xc4}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1d8}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000700000000feffff7a8af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe06000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd0c3906cdf410941eca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bda148a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a7979bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e07777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7e097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da4b43516dcc9fc910b57bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa115b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf551330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a3007fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654e2f29ee2f9486fe42cf2f676cdbb91f7582ab314bea4628e5107502b8d5111684cd479b2b7b29aac112e0d2b595a15c09f94b18d343670aad00f841149b3266cbc96e978660ad8622c8331ba3e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x0, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x8001}, 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x62}, 0x42)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r3, 0x4)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000840)={0x1, 0x0, 0x1000, 0x53, &(0x7f00000002c0)="f54b4584bca100e2f7f010cd70cde2fcf11a58769b0cb0e666b72770eb9490d67c2f39121997e11a30ed8ced080633865d5ddb6e79fe4615b0445c20fefefbe5901dd9f59b10ada8b763985018d12d7b3e9710", 0xf3, 0x0, &(0x7f0000000740)="fb4345ca2970fcef6e62c45d17f24039cd79ecb409fcff21b1e37038fcdc260349971ff8edc75c41b165e134990ed83ba0c9681b7e2ef83b3c0d831dc7b24860e1c6f803ad0cf7976b6f8f36c1abea6749d4e1d3d92b15446086187a74be2a10301da55d6e8a72c1ab16b4585497576a7090831850a922ec155132858cdf18a015cbfcf8f2635631df9cee4ca3bf6e86cdf0e36781ff5833967e79af967ab1eabb3bf4610f81dc7070873db58734280d4c6f03ca5207f6bfafff7a36aa8524101d6fb5624c34a707ce356242461c95e289064ec5b2b4125a26209504e4b6916c996dd45311fcfd67091376735be113dc8c971c"})
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0)
pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000140)="153e118fcea7b2c41488bbb0a86c4d08b05f4475e3dc86c7fdbd4551264723f8c79da8fd79509bdd8b8b4c1b465889c06603739901e54942a33cfbeb85e37bc84e752c451314d0", 0x47}, {&(0x7f0000000040)="8c8a4bc24a67e883b6e8fb01543f3f7ebb6cfafd8bb33af00f87669b3fca32c8f9e21bbb452b1abee445e0ec7a01fef2e76f6cfd093712", 0x37}, {&(0x7f0000000240)="621f95b3e2", 0x5}], 0x3, 0x8, 0x6)

47.205898ms ago: executing program 1:
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000040), 0x0}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@bloom_filter={0x1e, 0x3, 0x1, 0x6, 0x140, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3, 0x3}, 0x48)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x54583}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}]}}}]}, 0x44}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x18}}], 0x2, 0x80)

0s ago: executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x11, 0x800000003, 0x0)
socket(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

m netdevsim1 netdevsim0: renamed from eth0
[   76.400978][ T5118] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   76.412225][ T5118] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   76.443785][ T5118] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   76.507485][ T5130] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   76.540361][ T5130] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   76.551147][ T5130] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   76.564809][ T5130] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   76.688908][ T5117] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   76.731560][ T5117] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   76.743428][ T5117] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   76.775781][ T5131] Bluetooth: hci0: command tx timeout
[   76.799359][ T5117] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   76.823909][ T5129] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   76.854532][ T5131] Bluetooth: hci2: command tx timeout
[   76.870401][ T5129] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   76.883699][ T5129] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   76.919362][ T5129] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   76.934986][ T5137] Bluetooth: hci3: command tx timeout
[   76.936011][ T4493] Bluetooth: hci1: command tx timeout
[   76.940498][ T5131] Bluetooth: hci4: command tx timeout
[   76.964840][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.993568][ T5118] 8021q: adding VLAN 0 to HW filter on device team0
[   77.011405][ T5119] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.087451][ T5119] 8021q: adding VLAN 0 to HW filter on device team0
[   77.107177][ T5173] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.114618][ T5173] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.133439][ T5130] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.170749][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.178035][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.196116][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.203242][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.213004][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.220289][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.242769][ T5130] 8021q: adding VLAN 0 to HW filter on device team0
[   77.285561][ T5173] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.292834][ T5173] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.322606][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.329834][ T5172] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.444130][ T5118] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   77.456113][ T5118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   77.700739][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.726237][ T5129] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.792655][ T5117] 8021q: adding VLAN 0 to HW filter on device team0
[   77.846990][ T5129] 8021q: adding VLAN 0 to HW filter on device team0
[   77.878038][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.885296][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.907690][ T5119] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.930800][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.938052][ T5172] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.999410][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.006679][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.020990][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.028348][ T5172] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.117728][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.148942][ T5130] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.361463][ T5119] veth0_vlan: entered promiscuous mode
[   78.420564][ T5119] veth1_vlan: entered promiscuous mode
[   78.469767][ T5118] veth0_vlan: entered promiscuous mode
[   78.484035][ T5130] veth0_vlan: entered promiscuous mode
[   78.526438][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.546504][ T5118] veth1_vlan: entered promiscuous mode
[   78.576777][ T5130] veth1_vlan: entered promiscuous mode
[   78.665723][ T5119] veth0_macvtap: entered promiscuous mode
[   78.679966][ T5117] veth0_vlan: entered promiscuous mode
[   78.698637][ T5117] veth1_vlan: entered promiscuous mode
[   78.710237][ T5119] veth1_macvtap: entered promiscuous mode
[   78.738862][ T5118] veth0_macvtap: entered promiscuous mode
[   78.750203][ T5118] veth1_macvtap: entered promiscuous mode
[   78.772905][ T5129] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.825750][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.852558][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.855987][ T5131] Bluetooth: hci0: command tx timeout
[   78.902156][ T5130] veth0_macvtap: entered promiscuous mode
[   78.931734][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.935567][ T5131] Bluetooth: hci2: command tx timeout
[   78.952033][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.968343][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.987095][ T5118] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.006030][ T5118] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.014832][ T5131] Bluetooth: hci4: command tx timeout
[   79.014882][ T5131] Bluetooth: hci3: command tx timeout
[   79.015015][ T5131] Bluetooth: hci1: command tx timeout
[   79.038401][ T5118] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.048757][ T5118] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.079961][ T5130] veth1_macvtap: entered promiscuous mode
[   79.104083][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.120035][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.132462][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.164967][ T5119] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.173726][ T5119] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.183112][ T5119] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.192820][ T5119] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.216429][ T5117] veth0_macvtap: entered promiscuous mode
[   79.263751][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.275697][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.286270][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.297069][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.309379][ T5130] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.319809][ T5117] veth1_macvtap: entered promiscuous mode
[   79.347528][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.360903][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.377656][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.389511][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.401478][ T5130] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.417243][ T5130] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.426442][ T5130] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.437074][ T5130] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.446158][ T5130] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.476731][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.494132][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.506766][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.518152][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.528617][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.539175][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.551918][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.569073][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.580732][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.591138][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.603369][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.613819][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.625555][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.637368][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.684899][ T5117] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.693662][ T5117] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.703580][ T5117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.712661][ T5117] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.761909][ T2453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.777359][ T2453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.792889][ T5129] veth0_vlan: entered promiscuous mode
[   79.834006][ T5129] veth1_vlan: entered promiscuous mode
[   79.902903][ T1053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.916568][ T1053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.968472][ T1053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.984369][ T1053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.029146][ T2453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.037693][ T2453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.128069][ T5129] veth0_macvtap: entered promiscuous mode
[   80.141560][    T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.159117][ T5129] veth1_macvtap: entered promiscuous mode
[   80.168313][    T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.283634][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.311811][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.332211][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.352817][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.363102][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.384436][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.397607][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.410471][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.425634][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.437783][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.449699][ T5129] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.500122][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.515576][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.528287][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.540394][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.552406][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.576694][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.592530][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.607285][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.623401][ T5129] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.658718][ T5129] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.661746][ T5172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.669747][ T5129] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.685842][ T5129] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.690302][ T5172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.694866][ T5129] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.789515][ T1053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.811351][ T1053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.934676][ T4493] Bluetooth: hci0: command tx timeout
[   81.014561][ T4493] Bluetooth: hci2: command tx timeout
[   81.069045][ T5222] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   81.094634][ T4493] Bluetooth: hci1: command tx timeout
[   81.095915][ T5131] Bluetooth: hci3: command tx timeout
[   81.100268][ T4493] Bluetooth: hci4: command tx timeout
[   81.127136][ T5217] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[   81.149650][ T5223] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET)
[   81.260017][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.284347][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.329948][ T5227] Zero length message leads to an empty skb
[   81.622673][ T5240] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[   81.665905][ T5175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.673789][ T5175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.759335][ T5265] ip6gretap0: entered promiscuous mode
[   82.773045][ T5270] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   82.894215][ T5265] ip6gretap0: left promiscuous mode
[   83.598154][ T5283] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[   83.695494][ T5285] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[   83.766521][ T5288] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[   83.782070][ T5288] netlink: 'syz-executor.0': attribute type 20 has an invalid length.
[   84.003005][ T5295] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[   84.098760][ T5295] vlan2: entered promiscuous mode
[   84.112350][ T5295] bond0: entered promiscuous mode
[   84.127676][ T5295] bond_slave_0: entered promiscuous mode
[   84.143292][ T5295] bond_slave_1: entered promiscuous mode
[   84.175898][ T5295] bond0: left promiscuous mode
[   84.186754][ T5295] bond_slave_0: left promiscuous mode
[   84.200406][ T5295] bond_slave_1: left promiscuous mode
[   84.301499][ T5301] netlink: 'syz-executor.2': attribute type 7 has an invalid length.
[   84.520557][ T5315] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000
[   85.043895][ T5327] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[   85.155555][ T5329] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[   85.745926][ T5345] netlink: 'syz-executor.0': attribute type 21 has an invalid length.
[   85.776556][ T5345] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'.
[   85.801804][ T5345] xt_hashlimit: overflow, try lower: 1125899906842624/8
[   86.118470][ T5353] tipc: Failed to remove unknown binding: 66,1,1/0:3577456837/3577456839
[   86.174582][ T5351] tipc: Failed to remove unknown binding: 66,1,1/0:3577456837/3577456839
[   86.213649][ T5351] tipc: Failed to remove unknown binding: 66,1,1/0:3577456837/3577456839
[   86.423866][ T5357] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[   87.113886][  T785] cfg80211: failed to load regulatory.db
[   87.347620][ T5395] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[   87.423057][ T5395] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   87.432664][ T5395] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   87.441721][ T5395] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   87.450569][ T5395] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   87.535220][ T5400] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[   87.559175][ T5401] tipc: Failed to remove unknown binding: 66,1,1/0:2181833987/2181833989
[   87.562032][ T5395] vxlan1: entered promiscuous mode
[   87.594227][   T29] audit: type=1804 audit(1717184189.927:2): pid=5403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1035490559/syzkaller.dmSS19/15/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0
[   87.646283][ T5399] tipc: Failed to remove unknown binding: 66,1,1/0:2181833987/2181833989
[   87.667788][ T5399] tipc: Failed to remove unknown binding: 66,1,1/0:2181833987/2181833989
[   88.415568][ T5422] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[   88.546267][ T5428] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[   88.686012][ T5430] Illegal XDP return value 2108645840 on prog  (id 27) dev N/A, expect packet loss!
[   88.859050][ T5431] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[   89.699699][ T5448] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[   90.044932][ T5462] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[   90.311956][ T5471] tipc: Failed to remove unknown binding: 66,1,1/0:402283989/402283991
[   90.341756][ T5469] tipc: Failed to remove unknown binding: 66,1,1/0:402283989/402283991
[   90.365792][ T5469] tipc: Failed to remove unknown binding: 66,1,1/0:402283989/402283991
[   90.516273][ T5478] bridge_slave_0: mtu greater than device maximum
[   90.823610][ T5483] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[   91.212700][ T5491] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[   91.318295][ T5496] xt_ecn: cannot match TCP bits for non-tcp packets
[   91.976799][ T5526] bond_slave_0: entered promiscuous mode
[   91.982764][ T5526] bond_slave_1: entered promiscuous mode
[   92.021071][ T5526] macvlan2: entered promiscuous mode
[   92.038051][ T5526] bond0: entered promiscuous mode
[   92.046455][ T5526] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   92.445152][ T5541] bridge_slave_0: mtu greater than device maximum
[   92.677497][ T5545] netlink: 'syz-executor.4': attribute type 32 has an invalid length.
[   92.928776][ T5553] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[   94.939704][ T5599] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[   94.973137][ T5599] netlink: 'syz-executor.0': attribute type 20 has an invalid length.
[   96.618339][ T5673] ipip0: entered promiscuous mode
[   96.913435][ T5681] netlink: 'syz-executor.0': attribute type 17 has an invalid length.
[   97.033245][ T5684] netlink: 'syz-executor.3': attribute type 8 has an invalid length.
[   97.053950][ T5684] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[   97.056983][ T5681] bridge_slave_0: left allmulticast mode
[   97.078192][ T5684] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.3'.
[   97.118316][ T5681] bridge_slave_0: left promiscuous mode
[   97.125151][ T5681] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.235052][ T5681] bridge_slave_1: left allmulticast mode
[   97.240878][ T5681] bridge_slave_1: left promiscuous mode
[   97.325100][ T5681] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.369380][ T5681] bond0: (slave bond_slave_0): Releasing backup interface
[   97.410664][ T5681] bond_slave_0: left promiscuous mode
[   97.453347][ T5681] bond0: (slave bond_slave_1): Releasing backup interface
[   97.493613][ T5681] bond_slave_1: left promiscuous mode
[   97.603184][ T5681] team0: Port device team_slave_0 removed
[   97.677019][ T5681] team0: Port device team_slave_1 removed
[   97.701490][ T5681] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.721598][ T5681] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.763498][ T5681] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.784572][ T5681] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.275663][ T5698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.318341][ T5698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.592174][ T5710] Bluetooth: MGMT ver 1.22
[   98.620149][ T5710] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[   98.669468][ T5710] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[   99.208576][ T5733] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[   99.968333][ T5756] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  100.024714][ T5756] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  100.789275][ T5779] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'.
[  100.819561][ T5779] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'.
[  100.844028][ T5770] syzkaller0: entered promiscuous mode
[  100.870412][ T5770] syzkaller0: entered allmulticast mode
[  100.918120][ T5781] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  101.022014][ T5783] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  101.059333][ T5786] trusted_key: syz-executor.2 sent an empty control message without MSG_MORE.
[  101.197118][ T5785] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  102.607048][ T5805] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000
[  104.887779][ T5835] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  105.569985][ T5859] ieee802154 phy0 wpan0: encryption failed: -22
[  105.884790][ T5867] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  106.369374][ T5881] EXT4-fs warning (device sda1): verify_group_input:162: Bad blocks count 0
[  106.722561][ T5898] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  106.788535][ T5902] ieee802154 phy0 wpan0: encryption failed: -22
[  107.029337][ T5913] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'.
[  107.091664][ T5913] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes.
[  107.551443][ T5934] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'.
[  107.670652][ T5176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.694728][ T5176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.889668][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  108.649791][ T5977] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  108.685797][ T5979] Bluetooth: MGMT ver 1.22
[  109.046948][ T5985] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'.
[  109.591889][ T6001] tun0: tun_chr_ioctl cmd 2148553947
[  109.911485][ T6017] xt_socket: unknown flags 0x8
[  110.562955][ T6044] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  110.785187][ T4493] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  110.787257][ T5137] Bluetooth: hci0: command 0x0401 tx timeout
[  111.182850][ T6068] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  111.650775][ T6074] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  112.255388][ T6098] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  112.263549][ T6098] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'.
[  112.469925][ T6098] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  112.561020][ T6098] batman_adv: batadv0: Adding interface: wlan0
[  112.605161][ T6098] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.643911][ T6098] batman_adv: batadv0: Interface activated: wlan0
[  113.117345][ T6124] netlink: 340 bytes leftover after parsing attributes in process `syz-executor.4'.
[  113.678429][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  113.710467][ T6137] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  114.017578][ T6155] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  114.082464][ T6155] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'.
[  114.262153][ T6155] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  114.273583][ T6155] batman_adv: batadv0: Adding interface: wlan0
[  114.280506][ T6155] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.306568][ T6155] batman_adv: batadv0: Interface activated: wlan0
[  115.274202][ T6196] xt_CT: You must specify a L4 protocol and not use inversions on it
[  115.385251][ T6199] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  115.412546][ T6199] IPv6: NLM_F_REPLACE set, but no existing node found!
[  117.302053][ T6241] xt_CT: You must specify a L4 protocol and not use inversions on it
[  118.244364][ T6279] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  118.248053][ T6283] xt_CT: You must specify a L4 protocol and not use inversions on it
[  119.218623][ T2886] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.426970][ T2886] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.582270][ T2886] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.623171][ T6326] warning: `syz-executor.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  119.681504][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  119.966146][ T4493] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  119.975647][ T4493] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  119.995970][ T4493] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  120.022596][ T4493] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  120.032253][ T4493] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  120.040264][ T4493] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  120.155595][ T2886] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.480478][ T6354] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it!
[  120.551061][ T2886] bridge_slave_1: left allmulticast mode
[  120.577009][ T2886] bridge_slave_1: left promiscuous mode
[  120.593385][ T2886] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.628111][ T2886] bridge_slave_0: left allmulticast mode
[  120.633827][ T2886] bridge_slave_0: left promiscuous mode
[  120.640831][ T2886] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.318287][ T2886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  121.332668][ T2886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  121.348576][ T2886] bond0 (unregistering): Released all slaves
[  121.385363][ T6338] chnl_net:caif_netlink_parms(): no params data found
[  121.961081][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  122.000752][ T6338] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.017074][ T6338] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.084582][ T6338] bridge_slave_0: entered allmulticast mode
[  122.104720][ T6338] bridge_slave_0: entered promiscuous mode
[  122.135440][ T4493] Bluetooth: hci0: command tx timeout
[  122.141692][ T6338] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.153867][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.171071][ T6338] bridge_slave_1: entered allmulticast mode
[  122.182210][ T6338] bridge_slave_1: entered promiscuous mode
[  122.376478][ T6338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.448995][ T6338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  122.711907][ T6338] team0: Port device team_slave_0 added
[  122.756028][ T2886] hsr_slave_0: left promiscuous mode
[  122.773585][ T2886] hsr_slave_1: left promiscuous mode
[  122.798201][ T2886] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.809602][ T2886] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.825092][ T2886] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.854892][ T2886] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.887921][ T2886] veth1_macvtap: left promiscuous mode
[  122.893929][ T2886] veth0_macvtap: left promiscuous mode
[  122.914837][ T2886] veth1_vlan: left promiscuous mode
[  122.920655][ T2886] veth0_vlan: left promiscuous mode
[  123.702067][ T2886] team0 (unregistering): Port device team_slave_1 removed
[  123.773214][ T2886] team0 (unregistering): Port device team_slave_0 removed
[  124.215094][ T4493] Bluetooth: hci0: command tx timeout
[  124.277168][ T6338] team0: Port device team_slave_1 added
[  124.436605][ T6413] syzkaller0: entered promiscuous mode
[  124.459728][ T6413] syzkaller0: entered allmulticast mode
[  124.688442][ T6338] batman_adv: batadv0: Adding interface: batadv_slave_0
[  124.701787][ T6338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.740255][ T6338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.161397][ T6338] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.169291][ T6338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.196198][ T6338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  126.294676][ T4493] Bluetooth: hci0: command tx timeout
[  126.306950][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  126.398971][ T6338] hsr_slave_0: entered promiscuous mode
[  126.412458][ T6338] hsr_slave_1: entered promiscuous mode
[  126.423511][ T6338] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  126.440431][ T6338] Cannot create hsr debugfs directory
[  127.499966][ T6338] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  127.543119][ T6338] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  127.569492][ T6338] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  127.599750][ T6338] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  127.872068][ T6338] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.933845][ T6338] 8021q: adding VLAN 0 to HW filter on device team0
[  127.981993][ T5176] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.990051][ T5176] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.040901][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.048141][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.142575][ T6517] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  128.173600][ T6338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  128.374645][ T4493] Bluetooth: hci0: command tx timeout
[  128.670317][ T6538] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  128.803967][ T6538] team0: Port device wlan1 added
[  128.829263][ T6543] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  128.866717][ T6338] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.943927][ T6546] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[  129.002221][ T6546] 8021q: adding VLAN 0 to HW filter on device team0
[  129.047841][ T6546] bond0: (slave team0): Enslaving as an active interface with an up link
[  129.200336][ T6338] veth0_vlan: entered promiscuous mode
[  129.230158][ T6338] veth1_vlan: entered promiscuous mode
[  129.263618][ T6553] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  129.482704][ T6338] veth0_macvtap: entered promiscuous mode
[  129.528388][ T6338] veth1_macvtap: entered promiscuous mode
[  129.637965][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.664466][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.685706][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.698662][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.725668][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.757346][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.786771][ T6338] batman_adv: batadv0: Interface activated: batadv_slave_0
[  129.855316][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.874328][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.893527][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.911477][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.921957][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.941599][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.964204][ T6338] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.012531][ T6338] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.021627][ T6338] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.036392][ T6338] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.045514][ T6338] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.220819][ T6338] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0
[  130.240021][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.252489][ T6338] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0
[  130.280924][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.359013][ T5172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.389716][ T5172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.508537][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.538566][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.579754][ T6588] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  131.264681][ T6604] syzkaller0: entered promiscuous mode
[  131.270226][ T6604] syzkaller0: entered allmulticast mode
[  131.375015][ T6621] Bluetooth: MGMT ver 1.22
[  131.392756][ T6621] Bluetooth: hci0: load_link_keys: too big key_count value 17408
[  133.179524][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[  133.186415][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[  133.395791][ T6645] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  133.796957][ T6663] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  134.173373][ T2453] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.395140][ T2453] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.611548][ T2453] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.752563][ T2453] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.064689][ T2453] bridge_slave_1: left allmulticast mode
[  135.077564][ T2453] bridge_slave_1: left promiscuous mode
[  135.092185][ T2453] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.139786][ T2453] bridge_slave_0: left allmulticast mode
[  135.148336][ T2453] bridge_slave_0: left promiscuous mode
[  135.149090][ T5137] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  135.163903][ T2453] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.164227][ T5137] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  135.181837][ T5137] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  135.192054][ T5137] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  135.206597][ T5137] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  135.215227][ T5137] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  135.672728][ T2453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  135.686222][ T2453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  135.698098][ T2453] bond0 (unregistering): Released all slaves
[  135.719652][ T2453] bond1 (unregistering): Released all slaves
[  135.737657][ T2453] bond2 (unregistering): Released all slaves
[  135.759997][ T2453] bond3 (unregistering): Released all slaves
[  136.310820][ T6743] vlan1: entered promiscuous mode
[  136.489611][ T6743] vlan1 (unregistering): left promiscuous mode
[  136.529120][ T2453] batman_adv: batadv0: Interface deactivated: wlan0
[  136.626111][ T2453] batman_adv: batadv0: Removing interface: wlan0
[  136.753669][ T6750] syzkaller0: entered promiscuous mode
[  136.759497][ T6750] syzkaller0: entered allmulticast mode
[  136.786887][ T6772] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  136.867850][ T2453] hsr_slave_0: left promiscuous mode
[  136.915399][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  136.933416][ T2453] hsr_slave_1: left promiscuous mode
[  136.955452][ T2453] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.965154][ T2453] batman_adv: batadv0: Removing interface: batadv_slave_0
[  136.975844][ T2453] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.983563][ T2453] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.042417][ T2453] veth1_macvtap: left promiscuous mode
[  137.053156][ T2453] veth0_macvtap: left promiscuous mode
[  137.062153][ T2453] veth1_vlan: left promiscuous mode
[  137.079039][ T2453] veth0_vlan: left promiscuous mode
[  137.257113][ T5137] Bluetooth: hci2: command tx timeout
[  137.479668][ T6796] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  137.822276][ T6802] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  137.870116][ T2453] team0 (unregistering): Port device team_slave_1 removed
[  137.914835][ T2453] team0 (unregistering): Port device team_slave_0 removed
[  138.384830][ T6715] chnl_net:caif_netlink_parms(): no params data found
[  138.589480][ T6813] syz-executor.2[6813] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  138.590005][ T6813] syz-executor.2[6813] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  139.344656][ T5137] Bluetooth: hci2: command tx timeout
[  139.904815][ T6819] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  139.912940][ T6819] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.2'.
[  139.989362][ T6715] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.997183][ T6715] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.004828][ T6715] bridge_slave_0: entered allmulticast mode
[  140.012097][ T6715] bridge_slave_0: entered promiscuous mode
[  140.022511][ T6715] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.030798][ T6715] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.044516][ T6715] bridge_slave_1: entered allmulticast mode
[  140.052172][ T6715] bridge_slave_1: entered promiscuous mode
[  140.108961][ T6826] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  140.171332][ T6715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.186872][ T6715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  140.271673][ T6715] team0: Port device team_slave_0 added
[  140.289067][ T6715] team0: Port device team_slave_1 added
[  140.369674][ T6715] batman_adv: batadv0: Adding interface: batadv_slave_0
[  140.393234][ T6715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.444027][ T6715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  140.475811][ T6715] batman_adv: batadv0: Adding interface: batadv_slave_1
[  140.497051][ T6715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.527950][ T6715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  140.549007][ T6840] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'.
[  140.689293][ T6847] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  140.740988][ T6715] hsr_slave_0: entered promiscuous mode
[  140.756910][ T6715] hsr_slave_1: entered promiscuous mode
[  140.763854][ T6715] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  140.772940][ T6715] Cannot create hsr debugfs directory
[  141.417678][ T5137] Bluetooth: hci2: command tx timeout
[  141.672651][ T6715] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  141.710944][ T6715] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  141.729502][ T6715] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  141.748890][ T6715] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  141.837174][ T6896] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'.
[  142.039421][ T6715] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.097438][ T6906] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  142.102555][ T6902] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  142.128493][ T6902] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  142.152137][ T6902] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  142.216848][ T6715] 8021q: adding VLAN 0 to HW filter on device team0
[  142.257068][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.264331][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.316958][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.324325][ T5172] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.753426][ T6715] 8021q: adding VLAN 0 to HW filter on device batadv0
[  142.873264][ T6715] veth0_vlan: entered promiscuous mode
[  142.895958][ T6715] veth1_vlan: entered promiscuous mode
[  142.976535][ T6715] veth0_macvtap: entered promiscuous mode
[  143.012157][ T6715] veth1_macvtap: entered promiscuous mode
[  143.064022][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.079328][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.091321][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.102483][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.135959][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.158977][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.199435][ T6715] batman_adv: batadv0: Interface activated: batadv_slave_0
[  143.236515][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.268284][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.278712][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.291085][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.304571][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.318777][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.331221][ T6715] batman_adv: batadv0: Interface activated: batadv_slave_1
[  143.350864][ T6715] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.374648][ T6715] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.386087][ T6715] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.396133][ T6715] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.498676][ T5137] Bluetooth: hci2: command tx timeout
[  143.583673][ T6938] ipip0: entered promiscuous mode
[  143.666704][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  143.712440][ T6715] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0
[  143.754296][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.793311][ T5172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.817844][ T5172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.881012][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.910530][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.577200][   T29] audit: type=1804 audit(1717184246.937:3): pid=6958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1035490559/syzkaller.dmSS19/129/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0
[  144.636261][ T6958] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[  146.351329][   T29] audit: type=1804 audit(1717184248.707:4): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2174834578/syzkaller.bx668S/137/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0
[  146.412010][ T7024] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[  146.773016][ T7037] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  147.875483][ T7073] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  148.177627][ T7088] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  148.597726][ T7101] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'.
[  149.667375][ T7148] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.791196][ T7148] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.840575][ T7153] ipip0: entered promiscuous mode
[  149.939853][ T7148] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.079435][ T7148] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.347756][ T7148] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.413429][ T7148] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.468002][ T7148] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.552112][ T7148] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.746479][ T7193] SET target dimension over the limit!
[  150.850554][ T7197] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  150.958891][ T7202] ipip0: entered promiscuous mode
[  151.419435][ T7222] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'.
[  151.447815][ T7222] openvswitch: netlink: VXLAN extension message has 13 unknown bytes.
[  151.571612][ T7217] syzkaller0: entered promiscuous mode
[  151.589462][ T7217] syzkaller0: entered allmulticast mode
[  151.908304][ T7244] ipip0: entered promiscuous mode
[  153.327747][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  153.510839][ T7271] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  153.703287][ T7277] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  153.762474][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  154.652500][ T7294] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  154.706643][ T7294] CPU: 0 PID: 7294 Comm: syz-executor.0 Not tainted 6.9.0-syzkaller-12171-gccf23c916ca3 #0
[  154.716705][ T7294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  154.726889][ T7294] Call Trace:
[  154.730222][ T7294]  <TASK>
[  154.733180][ T7294]  dump_stack_lvl+0x241/0x360
[  154.737940][ T7294]  ? __pfx_dump_stack_lvl+0x10/0x10
[  154.743173][ T7294]  ? __pfx__printk+0x10/0x10
[  154.747811][ T7294]  ? sysfs_warn_dup+0x51/0xa0
[  154.752552][ T7294]  ? kmalloc_trace_noprof+0x19c/0x2c0
[  154.757985][ T7294]  sysfs_warn_dup+0x8e/0xa0
[  154.762523][ T7294]  sysfs_do_create_link_sd+0xbe/0x110
[  154.767943][ T7294]  device_add_class_symlinks+0x1c5/0x250
[  154.773628][ T7294]  device_add+0x553/0xbf0
[  154.778000][ T7294]  wiphy_register+0x1d3f/0x2b30
[  154.782907][ T7294]  ? __pfx_wiphy_register+0x10/0x10
[  154.788172][ T7294]  ? minstrel_ht_alloc+0x72b/0x860
[  154.793344][ T7294]  ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620
[  154.799469][ T7294]  ieee80211_register_hw+0x3098/0x3d80
[  154.804990][ T7294]  ? ieee80211_register_hw+0x10c1/0x3d80
[  154.810675][ T7294]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  154.816551][ T7294]  ? __asan_memset+0x23/0x50
[  154.821179][ T7294]  ? __hrtimer_init+0x170/0x250
[  154.826075][ T7294]  mac80211_hwsim_new_radio+0x2597/0x44c0
[  154.831857][ T7294]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  154.837965][ T7294]  ? kmalloc_node_track_caller_noprof+0x242/0x440
[  154.844418][ T7294]  ? kstrndup+0x5c/0xb0
[  154.848622][ T7294]  ? __asan_memcpy+0x40/0x70
[  154.853253][ T7294]  hwsim_new_radio_nl+0xe4c/0x21d0
[  154.858411][ T7294]  ? __pfx___nla_validate_parse+0x10/0x10
[  154.864174][ T7294]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  154.869804][ T7294]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  154.876195][ T7294]  genl_rcv_msg+0xb14/0xec0
[  154.880743][ T7294]  ? mark_lock+0x9a/0x350
[  154.885130][ T7294]  ? __pfx_genl_rcv_msg+0x10/0x10
[  154.890239][ T7294]  ? __pfx_lock_acquire+0x10/0x10
[  154.895311][ T7294]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  154.900909][ T7294]  ? __pfx___might_resched+0x10/0x10
[  154.906260][ T7294]  netlink_rcv_skb+0x1e3/0x430
[  154.911059][ T7294]  ? __pfx_genl_rcv_msg+0x10/0x10
[  154.916128][ T7294]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  154.921503][ T7294]  ? __netlink_deliver_tap+0x77e/0x7c0
[  154.927014][ T7294]  genl_rcv+0x28/0x40
[  154.931027][ T7294]  netlink_unicast+0x7ea/0x980
[  154.935845][ T7294]  ? __pfx_netlink_unicast+0x10/0x10
[  154.941172][ T7294]  ? __virt_addr_valid+0x183/0x520
[  154.946329][ T7294]  ? __check_object_size+0x49c/0x900
[  154.951652][ T7294]  ? bpf_lsm_netlink_send+0x9/0x10
[  154.956811][ T7294]  netlink_sendmsg+0x8db/0xcb0
[  154.961629][ T7294]  ? __pfx_netlink_sendmsg+0x10/0x10
[  154.966950][ T7294]  ? __import_iovec+0x536/0x820
[  154.971850][ T7294]  ? aa_sock_msg_perm+0x91/0x160
[  154.976832][ T7294]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  154.982150][ T7294]  ? security_socket_sendmsg+0x87/0xb0
[  154.987648][ T7294]  ? __pfx_netlink_sendmsg+0x10/0x10
[  154.992960][ T7294]  __sock_sendmsg+0x221/0x270
[  154.997677][ T7294]  ____sys_sendmsg+0x525/0x7d0
[  155.002500][ T7294]  ? __pfx_____sys_sendmsg+0x10/0x10
[  155.007893][ T7294]  __sys_sendmsg+0x2b0/0x3a0
[  155.012537][ T7294]  ? __pfx___sys_sendmsg+0x10/0x10
[  155.017739][ T7294]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  155.024107][ T7294]  ? do_syscall_64+0x100/0x230
[  155.028915][ T7294]  ? do_syscall_64+0xb6/0x230
[  155.033633][ T7294]  do_syscall_64+0xf3/0x230
[  155.038172][ T7294]  ? clear_bhb_loop+0x35/0x90
[  155.042894][ T7294]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.048860][ T7294] RIP: 0033:0x7f43cec7cee9
[  155.053314][ T7294] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  155.072954][ T7294] RSP: 002b:00007f43cfa620c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  155.081422][ T7294] RAX: ffffffffffffffda RBX: 00007f43cedb3fa0 RCX: 00007f43cec7cee9
[  155.089480][ T7294] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  155.097527][ T7294] RBP: 00007f43cecc947f R08: 0000000000000000 R09: 0000000000000000
[  155.105527][ T7294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  155.113529][ T7294] R13: 000000000000004d R14: 00007f43cedb3fa0 R15: 00007ffe5c494158
[  155.121554][ T7294]  </TASK>
[  155.843906][ T7307] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'.
[  155.860203][ T4493] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  155.869986][ T7307] openvswitch: netlink: VXLAN extension message has 13 unknown bytes.
[  155.870220][ T4493] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  155.888301][ T4493] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  155.902869][ T4493] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  155.918169][ T4493] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  155.926054][ T4493] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  155.939780][ T7311] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  155.964811][ T7311] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  156.210534][ T7302] syzkaller0: entered promiscuous mode
[  156.229679][ T7302] syzkaller0: entered allmulticast mode
[  156.269287][ T7314] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  156.293806][ T7314] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  156.311445][ T5626] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.315942][ T7314] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  156.500289][ T5626] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.978017][ T5137] Bluetooth: hci2: command tx timeout
[  158.050517][ T5626] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.248568][ T5626] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.278751][ T7360] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  158.725255][ T5626] bridge_slave_1: left allmulticast mode
[  158.735297][ T5626] bridge_slave_1: left promiscuous mode
[  158.766159][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.796634][ T5626] bridge_slave_0: left allmulticast mode
[  158.802350][ T5626] bridge_slave_0: left promiscuous mode
[  158.815116][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.287167][ T5626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  159.303216][ T5626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  159.316589][ T5626] bond0 (unregistering): Released all slaves
[  159.400107][ T7300] chnl_net:caif_netlink_parms(): no params data found
[  159.635895][ T7410] netlink: 'syz-executor.3': attribute type 25 has an invalid length.
[  159.648218][ T7410] netlink: 'syz-executor.3': attribute type 7 has an invalid length.
[  159.926203][ T7300] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.949373][ T7300] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.970846][ T7300] bridge_slave_0: entered allmulticast mode
[  159.980547][ T7300] bridge_slave_0: entered promiscuous mode
[  160.061242][ T5137] Bluetooth: hci2: command tx timeout
[  160.075194][ T5626] hsr_slave_0: left promiscuous mode
[  160.102641][ T5626] hsr_slave_1: left promiscuous mode
[  160.128024][ T5626] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.139842][ T5626] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.157669][ T5626] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.174429][ T5626] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.207153][ T5626] veth1_macvtap: left promiscuous mode
[  160.212755][ T5626] veth0_macvtap: left promiscuous mode
[  160.218784][ T5626] veth1_vlan: left promiscuous mode
[  160.224179][ T5626] veth0_vlan: left promiscuous mode
[  160.739707][ T5626] team0 (unregistering): Port device team_slave_1 removed
[  160.787617][ T5626] team0 (unregistering): Port device team_slave_0 removed
[  161.165941][ T7300] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.173253][ T7300] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.184482][ T7300] bridge_slave_1: entered allmulticast mode
[  161.191656][ T7300] bridge_slave_1: entered promiscuous mode
[  161.270047][ T7300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.347009][ T7300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.477057][ T7300] team0: Port device team_slave_0 added
[  161.516286][ T7300] team0: Port device team_slave_1 added
[  161.617295][ T7300] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.634512][ T7300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.684328][ T7300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.733791][ T7300] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.757617][ T7300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.841665][ T7300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  162.048100][ T7300] hsr_slave_0: entered promiscuous mode
[  162.065623][ T7300] hsr_slave_1: entered promiscuous mode
[  162.084862][ T7300] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  162.092466][ T7300] Cannot create hsr debugfs directory
[  162.134451][ T5137] Bluetooth: hci2: command tx timeout
[  162.726566][ T7487] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
[  162.750889][ T7487] netlink: 'syz-executor.4': attribute type 7 has an invalid length.
[  163.396777][ T7300] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  163.410983][ T7300] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  163.440879][ T7300] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  163.455754][ T7300] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  163.627362][ T7526] netlink: 'syz-executor.3': attribute type 25 has an invalid length.
[  163.637805][ T7526] netlink: 'syz-executor.3': attribute type 7 has an invalid length.
[  163.672021][ T7300] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.721762][ T7300] 8021q: adding VLAN 0 to HW filter on device team0
[  163.753695][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.760923][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.806594][  T785] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.813789][  T785] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.010987][ T7300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  164.215467][ T5137] Bluetooth: hci2: command tx timeout
[  164.483923][ T7571] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
[  164.512150][ T7571] netlink: 'syz-executor.4': attribute type 7 has an invalid length.
[  164.601814][ T7300] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.770504][ T7300] veth0_vlan: entered promiscuous mode
[  164.801132][ T7300] veth1_vlan: entered promiscuous mode
[  164.918845][ T7300] veth0_macvtap: entered promiscuous mode
[  164.960629][ T7300] veth1_macvtap: entered promiscuous mode
[  165.032382][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.048803][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.063614][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.080014][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.103908][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.119474][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.136970][ T7300] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.213883][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.235476][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.258777][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.284905][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.317822][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.356027][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.388052][ T7300] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.423380][ T7590] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
[  165.508487][ T7300] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.545595][ T7300] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.574663][ T7300] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.588057][ T7300] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.688825][ T7616] netlink: 'syz-executor.2': attribute type 25 has an invalid length.
[  165.704704][ T7616] netlink: 'syz-executor.2': attribute type 7 has an invalid length.
[  165.925721][ T7300] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0
[  165.946861][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.001101][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.028357][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.067458][ T7637] xt_CT: You must specify a L4 protocol and not use inversions on it
[  166.113075][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.136449][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.155242][ T7644] xt_CT: You must specify a L4 protocol and not use inversions on it
[  166.337028][ T7655] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
[  166.350208][ T7655] netlink: 'syz-executor.4': attribute type 7 has an invalid length.
[  166.453468][ T7660] xt_CT: You must specify a L4 protocol and not use inversions on it
[  166.832790][ T7679] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  167.018421][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  167.523511][ T7704] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.2'.
[  167.593527][ T7704] caif0 speed is unknown, defaulting to 1000
[  167.744669][ T7704] caif0 speed is unknown, defaulting to 1000
[  167.787145][ T7704] caif0 speed is unknown, defaulting to 1000
[  168.039504][ T7719] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  168.202607][ T7704] infiniband syz1: set down
[  168.209015][ T5203] caif0 speed is unknown, defaulting to 1000
[  168.235552][ T7704] infiniband syz1: added caif0
[  168.442749][ T7704] RDS/IB: syz1: added
[  168.458228][ T7731] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  168.477491][ T7704] smc: adding ib device syz1 with port count 1
[  168.525828][ T7704] smc:    ib device syz1 port 1 has pnetid 
[  168.567983][ T7729] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  168.593362][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  168.671381][ T7742] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000
[  168.771250][ T7704] caif0 speed is unknown, defaulting to 1000
[  168.781985][ T5176] caif0 speed is unknown, defaulting to 1000
[  168.982693][ T7758] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  169.402587][ T7704] caif0 speed is unknown, defaulting to 1000
[  169.560500][ T7780] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  169.687698][ T7786] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000
[  170.015319][ T7704] caif0 speed is unknown, defaulting to 1000
[  170.543225][ T7704] caif0 speed is unknown, defaulting to 1000
[  170.872229][ T7704] caif0 speed is unknown, defaulting to 1000
[  170.979212][ T7833] __nla_validate_parse: 1 callbacks suppressed
[  170.979235][ T7833] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'.
[  171.188827][ T7837] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  171.198956][ T7704] caif0 speed is unknown, defaulting to 1000
[  171.228061][ T7839] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'.
[  171.518580][ T7704] caif0 speed is unknown, defaulting to 1000
[  171.844984][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  171.928131][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  172.031356][ T7704] syz-executor.2 (7704) used greatest stack depth: 18800 bytes left
[  172.112351][ T7869] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  172.207842][ T5203] IPVS: starting estimator thread 0...
[  172.326783][ T7873] IPVS: using max 16 ests per chain, 38400 per kthread
[  172.337107][ T7876] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'.
[  172.872179][ T7902] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.3'.
[  172.899512][ T7902] rdma_rxe: rxe_newlink: failed to add caif0
[  173.099584][ T7905] team_slave_0: entered promiscuous mode
[  173.105753][ T7905] team_slave_1: entered promiscuous mode
[  173.134792][ T7905] macsec1: entered promiscuous mode
[  173.140254][ T7905] team0: entered promiscuous mode
[  173.147773][ T7905] macsec1: entered allmulticast mode
[  173.153232][ T7905] team0: entered allmulticast mode
[  173.158910][ T7905] team_slave_0: entered allmulticast mode
[  173.166014][ T7905] team_slave_1: entered allmulticast mode
[  173.176175][ T7905] team0: left allmulticast mode
[  173.184180][ T7905] team_slave_0: left allmulticast mode
[  173.197170][ T7905] team_slave_1: left allmulticast mode
[  173.202710][ T7905] team0: left promiscuous mode
[  173.211733][ T7905] team_slave_0: left promiscuous mode
[  173.217272][ T7905] team_slave_1: left promiscuous mode
[  173.280538][ T7909] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'.
[  173.429953][ T7918] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'.
[  173.815631][ T7943] rdma_rxe: rxe_newlink: failed to add caif0
[  173.851585][ T7940] ip6erspan0: entered promiscuous mode
[  173.882179][ T7940] ip6erspan0: entered allmulticast mode
[  174.183490][ T7956] team_slave_0: entered promiscuous mode
[  174.189383][ T7956] team_slave_1: entered promiscuous mode
[  174.214655][ T7956] macsec1: entered promiscuous mode
[  174.232930][ T7956] team0: entered promiscuous mode
[  174.243387][ T7956] macsec1: entered allmulticast mode
[  174.251695][ T7956] team0: entered allmulticast mode
[  174.258890][ T7956] team_slave_0: entered allmulticast mode
[  174.275966][ T7956] team_slave_1: entered allmulticast mode
[  174.342672][ T7956] team0: left allmulticast mode
[  174.354036][ T7956] team_slave_0: left allmulticast mode
[  174.366207][ T7956] team_slave_1: left allmulticast mode
[  174.372002][ T7956] team0: left promiscuous mode
[  174.383102][ T7956] team_slave_0: left promiscuous mode
[  174.388736][ T7956] team_slave_1: left promiscuous mode
[  175.796497][ T8044] batadv_slave_1: entered promiscuous mode
[  175.820618][ T8043] batadv_slave_1: left promiscuous mode
[  176.464983][ T5137] Bluetooth: hci0: command tx timeout
[  177.367849][ T8099] caif0 speed is unknown, defaulting to 1000
[  178.251871][ T8138] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  178.876995][ T8156] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check.
[  178.907939][ T8156] validate_nla: 2 callbacks suppressed
[  178.907958][ T8156] netlink: 'syz-executor.2': attribute type 23 has an invalid length.
[  179.188699][ T8178] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  179.847335][ T8213] __nla_validate_parse: 7 callbacks suppressed
[  179.847356][ T8213] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  180.008523][ T8220] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[  180.231323][ T8234] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  182.517718][ T8330] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  182.547160][ T8333] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  182.565347][ T8330] tipc: Started in network mode
[  182.570923][ T8330] tipc: Node identity id-name-, cluster identity 4711
[  182.580328][ T8330] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  183.199269][ T8362] ipip0: entered promiscuous mode
[  183.239644][ T8364] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  183.418746][ T8376] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  183.509927][ T8380] 8021q: VLANs not supported on hsr0
[  184.432754][ T8411] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'.
[  184.460734][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  184.495328][ T8419] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  185.246458][ T8456] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  185.657617][ T8482] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'.
[  185.683132][ T8469] syzkaller0: entered promiscuous mode
[  185.691588][ T8469] syzkaller0: entered allmulticast mode
[  185.857522][ T8489] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  187.515859][ T8505] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  187.762777][ T8516] caif0 speed is unknown, defaulting to 1000
[  188.459290][ T8548] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  188.527460][ T8543] syzkaller0: entered promiscuous mode
[  188.533139][ T8543] syzkaller0: entered allmulticast mode
[  188.639870][ T8555] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  190.401085][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  190.418611][ T8565] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  190.425930][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  190.594199][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  191.116936][ T8600] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  191.154487][ T8600] bond2: entered promiscuous mode
[  191.180865][ T8600] bond0: (slave bond_slave_0): Releasing backup interface
[  191.207109][ T8600] bond2: (slave bond_slave_0): making interface the new active one
[  191.215626][ T8600] bond_slave_0: entered promiscuous mode
[  191.225697][ T8600] bond2: (slave bond_slave_0): Enslaving as an active interface with an up link
[  191.277276][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  191.297783][ T8600] bond2 (unregistering): (slave bond_slave_0): Releasing active interface
[  191.308720][ T8604] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  191.313037][ T8600] bond_slave_0: left promiscuous mode
[  191.326746][ T8600] bond2 (unregistering): Released all slaves
[  191.518952][ T8610] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[  192.131660][ T8637] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  192.173563][ T8633] caif0 speed is unknown, defaulting to 1000
[  192.754842][ T8659] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'.
[  192.784425][ T8659] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.804353][ T8659] batman_adv: batadv0: Removing interface: batadv_slave_0
[  193.561749][ T4493] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  193.573357][ T4493] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  193.584351][ T4493] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  193.602283][ T4493] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  193.615609][ T4493] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  193.623038][ T4493] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  193.698478][ T8679] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  193.750358][ T8672] caif0 speed is unknown, defaulting to 1000
[  194.281403][   T29] audit: type=1800 audit(1717184296.637:5): pid=8702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1959 res=0 errno=0
[  194.333549][ T5629] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.359305][   T29] audit: type=1804 audit(1717184296.687:6): pid=8702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir17960862/syzkaller.Gipp2v/183/memory.events" dev="sda1" ino=1959 res=1 errno=0
[  194.403617][   T29] audit: type=1804 audit(1717184296.717:7): pid=8702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir17960862/syzkaller.Gipp2v/183/memory.events" dev="sda1" ino=1959 res=1 errno=0
[  194.499664][ T5629] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.592198][ T5629] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.620939][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[  194.627960][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[  194.723654][ T5629] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.920131][ T8711] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  194.975262][ T8713] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'.
[  194.995526][ T8713] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'.
[  195.100838][ T8672] chnl_net:caif_netlink_parms(): no params data found
[  195.157797][ T8722] ieee802154 phy0 wpan0: encryption failed: -22
[  195.329762][ T5629] bridge_slave_1: left allmulticast mode
[  195.344738][ T5629] bridge_slave_1: left promiscuous mode
[  195.359269][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.370556][ T8718] vxcan0: tx drop: invalid da for name 0x0000000000000002
[  195.384153][ T5629] bridge_slave_0: left allmulticast mode
[  195.391583][ T5629] bridge_slave_0: left promiscuous mode
[  195.397570][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.657478][ T5126] Bluetooth: hci2: command tx timeout
[  195.700486][ T8743] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  195.838437][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  196.070058][ T8759] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'.
[  196.196509][ T8761] ieee802154 phy0 wpan0: encryption failed: -22
[  196.233806][ T5629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  196.251715][ T5629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  196.265151][ T5629] bond0 (unregistering): Released all slaves
[  196.313605][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  196.361256][ T8759] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'.
[  196.387198][ T8672] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.403673][ T8672] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.411064][ T8672] bridge_slave_0: entered allmulticast mode
[  196.426021][ T8672] bridge_slave_0: entered promiscuous mode
[  196.435416][ T8672] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.442682][ T8672] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.490456][ T8672] bridge_slave_1: entered allmulticast mode
[  196.510551][ T8672] bridge_slave_1: entered promiscuous mode
[  196.583404][ T8773] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  196.658158][ T8672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.676723][ T8672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.703746][ T5126] Bluetooth: hci1: command 0x0406 tx timeout
[  196.703766][ T5128] Bluetooth: hci4: command 0x0406 tx timeout
[  196.709861][   T53] Bluetooth: hci3: command 0x0405 tx timeout
[  196.767415][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  196.871113][ T8776] syzkaller0: entered promiscuous mode
[  196.877429][ T8776] syzkaller0: entered allmulticast mode
[  197.736090][ T4493] Bluetooth: hci2: command tx timeout
[  198.572755][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  198.605451][ T8672] team0: Port device team_slave_0 added
[  198.612117][ T8787] team1: Mode changed to "broadcast"
[  198.676187][ T8672] team0: Port device team_slave_1 added
[  198.942145][ T8672] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.959209][ T8672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.990567][ T8672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.000250][ T8804] netlink: 2840 bytes leftover after parsing attributes in process `syz-executor.3'.
[  199.021249][ T8672] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.040555][ T8672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.077428][ T8672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.160094][ T5629] hsr_slave_0: left promiscuous mode
[  199.163610][ T8815] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'.
[  199.184725][ T5629] hsr_slave_1: left promiscuous mode
[  199.212317][ T5629] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.220207][ T5629] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.270524][ T5629] veth1_macvtap: left promiscuous mode
[  199.276428][ T5629] veth0_macvtap: left promiscuous mode
[  199.282093][ T5629] veth1_vlan: left promiscuous mode
[  199.287561][ T5629] veth0_vlan: left promiscuous mode
[  199.772554][ T5629] team0 (unregistering): Port device team_slave_1 removed
[  199.818341][ T4493] Bluetooth: hci2: command tx timeout
[  199.833517][ T5629] team0 (unregistering): Port device team_slave_0 removed
[  200.229216][ T8815] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'.
[  200.398142][ T8672] hsr_slave_0: entered promiscuous mode
[  200.408441][ T8672] hsr_slave_1: entered promiscuous mode
[  200.415963][ T8819] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  200.425729][ T8672] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  200.437461][ T8672] Cannot create hsr debugfs directory
[  200.569810][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  200.612279][ T8821] team0: Port device team_slave_0 removed
[  200.635678][ T8821] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  201.189381][ T8848] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  201.527743][ T8672] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  201.542631][ T8672] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  201.553961][ T8672] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  201.573384][ T8672] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  201.733276][ T8672] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.773335][ T8672] 8021q: adding VLAN 0 to HW filter on device team0
[  201.793772][ T5174] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.800984][ T5174] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.831259][ T5174] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.838465][ T5174] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.894372][ T5137] Bluetooth: hci2: command tx timeout
[  201.958153][ T8870] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  202.090953][ T8874] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  202.371591][ T8672] 8021q: adding VLAN 0 to HW filter on device batadv0
[  202.531249][ T5119] syz-executor.0 (5119) used greatest stack depth: 18448 bytes left
[  202.591054][ T8672] veth0_vlan: entered promiscuous mode
[  202.618938][ T8672] veth1_vlan: entered promiscuous mode
[  202.641419][ T8881] dccp_invalid_packet: P.type (SYNC) not Data || [Data]Ack, while P.X == 0
[  202.673214][ T5131] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  202.683257][ T5131] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  202.697064][ T5131] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  202.731366][ T5131] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  202.739807][ T5131] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  202.749837][ T5131] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  202.857017][ T8672] veth0_macvtap: entered promiscuous mode
[  202.894118][ T8672] veth1_macvtap: entered promiscuous mode
[  202.941808][ T8886] caif0 speed is unknown, defaulting to 1000
[  202.984005][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.010013][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.034627][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.049444][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.063351][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.078581][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.093625][ T8672] batman_adv: batadv0: Interface activated: batadv_slave_0
[  203.139338][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.150796][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.167342][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.180486][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.201511][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.224761][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.248237][ T8672] batman_adv: batadv0: Interface activated: batadv_slave_1
[  203.302543][ T8672] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.317287][ T8672] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.321499][ T8903] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  203.333138][ T8672] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.344288][ T8904] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  203.356025][ T8672] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.414723][ T5131] Bluetooth: hci0: command 0x0c1a tx timeout
[  203.425083][ T4493] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  203.477528][ T8908] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  203.808992][ T8672] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0
[  203.825654][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.909612][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.924380][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.011598][ T8886] chnl_net:caif_netlink_parms(): no params data found
[  204.041001][ T8930] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  204.060482][ T8931] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  204.075690][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.083550][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.304190][ T8886] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.313100][ T8886] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.320579][ T8886] bridge_slave_0: entered allmulticast mode
[  204.330057][ T8886] bridge_slave_0: entered promiscuous mode
[  204.372283][ T8886] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.393862][ T8886] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.423590][ T8886] bridge_slave_1: entered allmulticast mode
[  204.460678][ T8886] bridge_slave_1: entered promiscuous mode
[  204.496615][ T5174] IPVS: starting estimator thread 0...
[  204.615649][ T8955] IPVS: using max 16 ests per chain, 38400 per kthread
[  204.696302][ T8886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  204.709173][ T8961] netlink: 'syz-executor.4': attribute type 298 has an invalid length.
[  204.722221][ T8886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  204.774929][ T4493] Bluetooth: hci1: command tx timeout
[  204.877820][ T8886] team0: Port device team_slave_0 added
[  204.926061][ T8886] team0: Port device team_slave_1 added
[  205.054956][ T8886] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.061966][ T8886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.096891][ T8886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.154156][ T8886] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.174761][ T8886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.208366][ T8886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.308695][ T8980] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  205.462032][ T8886] hsr_slave_0: entered promiscuous mode
[  205.492100][ T8986] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  205.497122][ T8985] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  205.617636][ T8886] hsr_slave_1: entered promiscuous mode
[  205.708232][ T8886] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  205.723566][ T8886] Cannot create hsr debugfs directory
[  206.543122][ T8886] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  206.554187][ T8886] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.748105][ T8886] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  206.772840][ T8886] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.855406][ T4493] Bluetooth: hci1: command tx timeout
[  206.980911][ T8886] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  207.000714][ T8886] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.113742][ T9010] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  207.211888][ T8886] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  207.231136][ T8886] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.367986][ T9018] bond0: option min_links: invalid value (18446744073709486080)
[  207.379361][ T9018] bond0: option min_links: allowed values 0 - 2147483647
[  207.558758][ T8886] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  207.573426][ T9022] netlink: 'syz-executor.4': attribute type 28 has an invalid length.
[  207.578484][ T8886] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  207.589332][ T9022] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.4'.
[  207.608086][ T8886] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  207.617230][ T9029] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  207.636649][ T8886] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  207.669833][ T9032] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'.
[  207.715581][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  208.218964][ T8886] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.246332][ T9043] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  208.322720][ T8886] 8021q: adding VLAN 0 to HW filter on device team0
[  208.367280][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.374582][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.416595][ T5175] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.423809][ T5175] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.934754][ T4493] Bluetooth: hci1: command tx timeout
[  209.221265][ T9077] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'.
[  209.247121][ T9079] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  209.337660][ T9083] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  209.363366][ T9083] hsr0: entered promiscuous mode
[  209.389850][ T9083] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  209.436505][ T9083] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  209.480879][ T9083] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  209.527690][ T9083] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  209.654115][ T8886] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.898357][ T8886] veth0_vlan: entered promiscuous mode
[  209.961965][ T8886] veth1_vlan: entered promiscuous mode
[  210.143718][ T9113] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  210.199458][ T8886] veth0_macvtap: entered promiscuous mode
[  210.288625][ T8886] veth1_macvtap: entered promiscuous mode
[  210.383393][ T8886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.455277][ T8886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.473087][ T8886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.483714][ T8886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.501126][ T8886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.565121][ T8886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.576168][ T8886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.586720][ T8886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.600518][ T8886] batman_adv: batadv0: Interface activated: batadv_slave_0
[  210.755537][ T8886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.784368][ T8886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.805582][ T8886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.823966][ T8886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.834002][ T8886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.894324][ T8886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.909619][ T8886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.934014][ T8886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.947807][ T8886] batman_adv: batadv0: Interface activated: batadv_slave_1
[  211.008092][ T8886] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.017619][ T4493] Bluetooth: hci1: command tx timeout
[  211.056201][ T8886] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.087990][ T8886] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.120497][ T8886] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.132740][ T9130] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  211.156522][ T9128] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'.
[  211.449622][ T8886] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0
[  211.469401][ T8886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.576090][ T5225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.583972][ T5225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.678378][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.688834][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.768284][ T9161] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  211.930300][ T9165] vlan2: entered promiscuous mode
[  211.939985][ T9165] dummy0: entered promiscuous mode
[  211.947598][ T9165] vlan2: entered allmulticast mode
[  211.954331][ T9165] dummy0: entered allmulticast mode
[  212.000687][ T9168] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'.
[  212.290148][ T9190] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  212.523780][ T9200] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'.
[  212.589573][ T9203] x_tables: duplicate underflow at hook 2
[  212.608814][ T9208] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  212.701333][ T9208] 8021q: adding VLAN 0 to HW filter on device team0
[  212.735789][ T9208] bond0: (slave team0): Enslaving as an active interface with an up link
[  212.760911][ T9205] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  212.862660][   T29] audit: type=1800 audit(1717184315.207:8): pid=9220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1955 res=0 errno=0
[  212.906573][ T9222] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  212.921191][   T29] audit: type=1804 audit(1717184315.207:9): pid=9220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2012273695/syzkaller.AXwnsK/25/memory.events" dev="sda1" ino=1955 res=1 errno=0
[  212.929143][ T9224] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  212.948673][   T29] audit: type=1804 audit(1717184315.247:10): pid=9220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2012273695/syzkaller.AXwnsK/25/memory.events" dev="sda1" ino=1955 res=1 errno=0
[  212.990316][ T9222] hsr0: entered promiscuous mode
[  213.004883][ T9222] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  213.034400][ T9222] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  213.052192][ T9222] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  213.065553][ T9222] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  213.673433][ T9264] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  213.818317][ T9271] ipip0: entered promiscuous mode
[  214.018918][ T9280] hsr0: entered promiscuous mode
[  214.172720][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  214.211963][ T9294] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
[  214.350188][ T9306] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  214.573331][ T9317] bond0: entered promiscuous mode
[  214.602129][ T9317] bond_slave_0: entered promiscuous mode
[  214.608660][ T9317] bond_slave_1: entered promiscuous mode
[  214.747746][ T9324] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  214.768433][ T9324] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  214.817624][ T9330] netlink: 'syz-executor.2': attribute type 27 has an invalid length.
[  214.849747][ T9333] netlink: 'syz-executor.2': attribute type 27 has an invalid length.
[  214.983722][ T9344] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  215.378038][ T9364] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
[  215.503485][ T9372] xt_CT: You must specify a L4 protocol and not use inversions on it
[  215.518777][ T9373] xt_CT: You must specify a L4 protocol and not use inversions on it
[  215.553675][ T9372] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  215.686761][ T9381] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  216.078940][ T9402] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
[  216.256217][ T9408] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0
[  216.277327][ T9408] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  216.313635][ T9411] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  216.314143][ T9408] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'.
[  216.348848][ T9412] caif0 speed is unknown, defaulting to 1000
[  216.720222][   T29] audit: type=1804 audit(1717184319.077:11): pid=9426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2311099303/syzkaller.tg1glx/19/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0
[  216.770117][ T9426] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[  217.197515][ T9447] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  217.450567][ T9457] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  217.975088][ T9480] team0: No ports can be present during mode change
[  218.014821][ T9480] tipc: Enabling of bearer <éb:b> rejected, media not registered
[  218.248016][ T9497] netlink: 'syz-executor.0': attribute type 30 has an invalid length.
[  218.278837][ T9497] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'.
[  218.292551][ T9500] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  218.306234][ T9497] bond0: option arp_missed_max: invalid value (0)
[  218.324668][ T9497] bond0: option arp_missed_max: allowed values 1 - 255
[  218.349127][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  219.034716][ T9525] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  219.478797][ T9535] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  219.618702][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  220.083376][ T9566] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  220.122350][ T9572] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  220.325611][ T9579] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  221.027417][ T9607] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  221.073018][ T9612] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  221.086592][ T9613] pimreg: entered allmulticast mode
[  221.110162][ T9613] nbd: couldn't find a device at index 1073741824
[  221.197686][ T9616] tipc: New replicast peer: 100.1.1.1
[  221.224670][ T9616] tipc: Enabled bearer <udp:syz2>, priority 10
[  221.248495][ T9616] netlink: 'syz-executor.3': attribute type 12 has an invalid length.
[  221.271560][ T9616] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'.
[  221.393696][ T9627] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  221.544975][ T9634] pimreg: left allmulticast mode
[  221.580118][ T9638] netlink: 'syz-executor.1': attribute type 49 has an invalid length.
[  221.618449][ T9638] netlink: 'syz-executor.1': attribute type 49 has an invalid length.
[  221.627969][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  221.699364][ T9640] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  222.235882][ T5175] tipc: Node number set to 134826051
[  222.567062][ T9669] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  222.626004][ T9673] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  222.699141][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  222.709786][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  222.720362][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  222.731731][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  222.766483][ T9682] pim6reg: entered allmulticast mode
[  222.768318][ T9683] SET target dimension over the limit!
[  222.779120][ T9680] pim6reg: left allmulticast mode
[  222.872305][ T9683] netlink: 'syz-executor.2': attribute type 40 has an invalid length.
[  223.439961][ T9712] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  223.493519][ T9714] caif0 speed is unknown, defaulting to 1000
[  223.746837][ T9717] syz-executor.2[9717] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  223.746994][ T9717] syz-executor.2[9717] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  223.867447][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  223.950981][ T9729] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  223.976195][ T9730] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  224.930609][ T9751] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  225.065355][ T9757] tipc: Started in network mode
[  225.070297][ T9757] tipc: Node identity ac1414aa, cluster identity 4711
[  225.094802][ T9757] tipc: New replicast peer: 100.1.1.1
[  225.113320][ T9757] tipc: Enabled bearer <udp:syz2>, priority 10
[  225.171885][ T9757] netlink: 'syz-executor.2': attribute type 12 has an invalid length.
[  225.279181][ T9757] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'.
[  225.648389][ T9766] syz-executor.2[9766] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  225.648542][ T9766] syz-executor.2[9766] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  226.106400][   T45] tipc: Node number set to 2886997162
[  226.275000][ T9790] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  226.661382][ T9812] caif0 speed is unknown, defaulting to 1000
[  226.848062][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  226.887441][ T9817] syz-executor.4[9817] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  226.887605][ T9817] syz-executor.4[9817] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  226.895021][ T9819] geneve1: mtu less than device minimum
[  226.938628][ T9820] geneve1: mtu less than device minimum
[  227.144719][ T9827] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  227.759887][ T9850] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'.
[  228.165854][ T9861] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  228.205204][ T9855] syz-executor.4[9855] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  228.205378][ T9855] syz-executor.4[9855] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  228.550982][ T9881] xt_TCPMSS: Only works on TCP SYN packets
[  228.593953][ T9881] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  228.654178][ T9885] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[  228.690464][ T9885] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  228.865629][ T9900] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  229.957330][ T9934] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[  229.981785][ T9934] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  230.063119][ T9936] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  230.158917][ T5131] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  230.174812][ T5131] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  230.190881][ T5131] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  230.204071][ T5131] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  230.215867][ T5131] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  230.218404][ T5629] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.235898][ T5131] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  230.420672][ T5629] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.442705][ T9949] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  230.490903][ T9937] caif0 speed is unknown, defaulting to 1000
[  230.621159][ T5629] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.759820][ T5629] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.042094][ T5629] bridge_slave_1: left allmulticast mode
[  231.073928][ T5629] bridge_slave_1: left promiscuous mode
[  231.080247][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.100941][ T9963] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  231.141782][ T5629] bridge_slave_0: left allmulticast mode
[  231.167313][ T5629] bridge_slave_0: left promiscuous mode
[  231.184451][ T9965] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  231.190012][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.308439][ T9969] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  231.940060][ T5629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  231.953555][ T5629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  231.967776][ T5629] bond0 (unregistering): Released all slaves
[  232.005783][ T9980] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  232.023434][ T9980] batman_adv: batadv0: Removing interface: batadv_slave_0
[  232.032378][ T9980] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  232.251281][ T9991] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.2'.
[  232.294488][ T5131] Bluetooth: hci2: command tx timeout
[  232.713171][T10004] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  232.720530][ T9937] chnl_net:caif_netlink_parms(): no params data found
[  232.960846][ T5629] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  232.975320][ T5629] batman_adv: batadv0: Removing interface: batadv_slave_0
[  232.985629][ T5629] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  232.993087][ T5629] batman_adv: batadv0: Removing interface: batadv_slave_1
[  233.048683][ T5629] veth1_macvtap: left promiscuous mode
[  233.054703][ T5629] veth0_macvtap: left promiscuous mode
[  233.060508][ T5629] veth1_vlan: left promiscuous mode
[  233.691083][T10026] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  234.376153][ T5131] Bluetooth: hci2: command tx timeout
[  234.405882][ T5629] team0 (unregistering): Port device team_slave_1 removed
[  234.587607][ T5629] team0 (unregistering): Port device team_slave_0 removed
[  235.628445][ T9937] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.652369][ T9937] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.673529][ T9937] bridge_slave_0: entered allmulticast mode
[  235.690523][ T9937] bridge_slave_0: entered promiscuous mode
[  235.716608][ T9937] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.732310][ T9937] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.759184][ T9937] bridge_slave_1: entered allmulticast mode
[  235.780780][ T9937] bridge_slave_1: entered promiscuous mode
[  235.917909][ T9937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  235.932289][ T9937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.050397][ T9937] team0: Port device team_slave_0 added
[  236.062188][ T9937] team0: Port device team_slave_1 added
[  236.186217][ T9937] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.200529][ T9937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.239159][ T9937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  236.265136][ T9937] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.272424][ T9937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.315402][ T9937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.460311][ T4493] Bluetooth: hci2: command tx timeout
[  237.096091][ T9937] hsr_slave_0: entered promiscuous mode
[  237.109270][ T9937] hsr_slave_1: entered promiscuous mode
[  237.145788][ T9937] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  237.173054][ T9937] Cannot create hsr debugfs directory
[  237.221716][T10087] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  237.613595][T10095] wg2: entered promiscuous mode
[  237.639529][T10095] wg2: entered allmulticast mode
[  238.166130][ T9937] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  238.178214][ T9937] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  238.192857][ T9937] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  238.206619][ T9937] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  238.373922][ T9937] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.403646][ T9937] 8021q: adding VLAN 0 to HW filter on device team0
[  238.421514][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.428777][ T5225] bridge0: port 1(bridge_slave_0) entered forwarding state
[  238.469673][ T5175] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.476886][ T5175] bridge0: port 2(bridge_slave_1) entered forwarding state
[  238.489665][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  238.507640][T10126] vxcan3: entered promiscuous mode
[  238.534698][ T4493] Bluetooth: hci2: command 0x0419 tx timeout
[  238.578162][ T9937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  238.666266][T10127] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  238.981562][T10144] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  239.022372][ T9937] 8021q: adding VLAN 0 to HW filter on device batadv0
[  239.083890][T10141] wg2: entered promiscuous mode
[  239.121168][T10141] wg2: entered allmulticast mode
[  239.325386][ T9937] veth0_vlan: entered promiscuous mode
[  239.367460][ T9937] veth1_vlan: entered promiscuous mode
[  239.471226][ T9937] veth0_macvtap: entered promiscuous mode
[  239.520640][ T9937] veth1_macvtap: entered promiscuous mode
[  239.588490][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.617511][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.628674][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.639580][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.650994][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.666484][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.697833][ T9937] batman_adv: batadv0: Interface activated: batadv_slave_0
[  239.737864][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.749820][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.766830][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.785510][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.795862][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.807917][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.818008][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.828867][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.840986][ T9937] batman_adv: batadv0: Interface activated: batadv_slave_1
[  239.853271][T10171] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  239.884192][T10171] vxcan3: entered promiscuous mode
[  239.907326][ T9937] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  239.921416][ T9937] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  239.931984][ T9937] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  239.941557][ T9937] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.068729][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  240.103324][T10181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  240.173420][ T9937] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0
[  240.194600][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.217116][ T5225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.228193][ T5225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.248788][T10184] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'.
[  240.306030][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.315399][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.328198][T10187] ip6t_rpfilter: unknown options
[  241.077131][T10219] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  241.145720][T10219] vxcan1: entered promiscuous mode
[  241.743140][T10246] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  241.756714][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  241.910880][T10257] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  242.106984][T10262] wg2: entered promiscuous mode
[  242.125295][T10262] wg2: entered allmulticast mode
[  242.604874][T10286] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  242.806905][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  242.834693][T10298] vxcan3: entered promiscuous mode
[  242.863501][T10300] wg2: entered promiscuous mode
[  242.875694][T10300] wg2: entered allmulticast mode
[  243.048630][T10307] xt_CT: No such helper "syz0"
[  243.173091][T10314] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  243.261288][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  243.271750][T10318] netlink: 'syz-executor.2': attribute type 15 has an invalid length.
[  243.287136][T10318] xt_CT: You must specify a L4 protocol and not use inversions on it
[  243.622197][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  243.650671][T10323] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  243.849370][T10338] wg2: left promiscuous mode
[  243.855983][T10338] wg2: left allmulticast mode
[  244.070069][T10350] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  244.162075][T10355] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  244.171081][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  244.206703][T10354] vxcan5: entered promiscuous mode
[  244.271505][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  244.310478][T10359] vxcan3: entered promiscuous mode
[  244.745947][T10371] wg2: left promiscuous mode
[  244.750577][T10371] wg2: left allmulticast mode
[  245.366237][T10392] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  245.393445][T10391] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  245.772532][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  245.831630][T10431] vxcan5: entered promiscuous mode
[  246.006814][T10444] wg2: left promiscuous mode
[  246.011474][T10444] wg2: left allmulticast mode
[  246.050501][T10446] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  246.069781][T10446] vlan3: entered promiscuous mode
[  246.075414][T10446] team0: entered promiscuous mode
[  246.080765][T10446] team_slave_1: entered promiscuous mode
[  246.101558][T10446] team0: left promiscuous mode
[  246.125299][T10446] team_slave_1: left promiscuous mode
[  246.164302][T10455] netlink: 'syz-executor.1': attribute type 19 has an invalid length.
[  246.318927][T10462] tipc: Started in network mode
[  246.333182][T10462] tipc: Node identity 069c9458e516, cluster identity 4711
[  246.356035][T10462] tipc: Enabled bearer <eth:hsr0>, priority 10
[  246.388215][T10462] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  246.407600][T10468] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000
[  246.898578][T10495] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  246.972438][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  247.019722][T10503] vxcan3: entered promiscuous mode
[  247.253434][T10519] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000
[  247.400254][T10525] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  247.464397][ T5225] tipc: Node number set to 3817509976
[  247.920618][T10542] vxcan7: entered promiscuous mode
[  248.132424][T10557] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000
[  248.389143][T10577] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  248.608248][T10584] vxcan3: entered promiscuous mode
[  248.705265][T10590] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  249.155856][T10606] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000
[  249.608102][T10633] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  250.143306][T10654] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000
[  250.227843][T10658] __nla_validate_parse: 2 callbacks suppressed
[  250.227865][T10658] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  250.269599][T10658] vxcan3: entered promiscuous mode
[  250.553184][T10679] ipip0: entered promiscuous mode
[  250.890392][T10695] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000
[  251.046906][T10701] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.3'.
[  251.151743][T10708] ipip0: entered promiscuous mode
[  251.239496][T10716] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[  251.270104][T10710] xt_cluster: node mask cannot exceed total number of nodes
[  251.549172][T10732] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000
[  251.675300][T10736] 
[  251.677686][T10736] ============================================
[  251.683849][T10736] WARNING: possible recursive locking detected
[  251.690010][T10736] 6.9.0-syzkaller-12171-gccf23c916ca3 #0 Not tainted
[  251.696701][T10736] --------------------------------------------
[  251.702862][T10736] syz-executor.4/10736 is trying to acquire lock:
[  251.709292][T10736] ffff888016e8c668 (&htab->buckets[i].lock){+.-.}-{2:2}, at: sock_hash_delete_elem+0x17c/0x400
[  251.719717][T10736] 
[  251.719717][T10736] but task is already holding lock:
[  251.727087][T10736] ffff88805fbef0b0 (&htab->buckets[i].lock){+.-.}-{2:2}, at: sock_hash_update_common+0x20c/0xa30
[  251.737642][T10736] 
[  251.737642][T10736] other info that might help us debug this:
[  251.745701][T10736]  Possible unsafe locking scenario:
[  251.745701][T10736] 
[  251.753144][T10736]        CPU0
[  251.756418][T10736]        ----
[  251.759692][T10736]   lock(&htab->buckets[i].lock);
[  251.764719][T10736]   lock(&htab->buckets[i].lock);
[  251.769757][T10736] 
[  251.769757][T10736]  *** DEADLOCK ***
[  251.769757][T10736] 
[  251.777890][T10736]  May be due to missing lock nesting notation
[  251.777890][T10736] 
[  251.786200][T10736] 4 locks held by syz-executor.4/10736:
[  251.791826][T10736]  #0: ffff88805aff90d8 (sk_lock-AF_INET){+.+.}-{0:0}, at: sock_map_update_elem_sys+0x1cc/0x910
[  251.802284][T10736]  #1: ffffffff8e333e60 (rcu_read_lock){....}-{1:2}, at: sock_map_update_elem_sys+0x1d8/0x910
[  251.812557][T10736]  #2: ffff88805fbef0b0 (&htab->buckets[i].lock){+.-.}-{2:2}, at: sock_hash_update_common+0x20c/0xa30
[  251.823514][T10736]  #3: ffffffff8e333e60 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x244/0x590
[  251.832934][T10736] 
[  251.832934][T10736] stack backtrace:
[  251.838836][T10736] CPU: 0 PID: 10736 Comm: syz-executor.4 Not tainted 6.9.0-syzkaller-12171-gccf23c916ca3 #0
[  251.848904][T10736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  251.858965][T10736] Call Trace:
[  251.862244][T10736]  <TASK>
[  251.865177][T10736]  dump_stack_lvl+0x241/0x360
[  251.869880][T10736]  ? __pfx_dump_stack_lvl+0x10/0x10
[  251.875091][T10736]  ? print_deadlock_bug+0x479/0x620
[  251.880304][T10736]  validate_chain+0x15d3/0x5900
[  251.885162][T10736]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  251.891606][T10736]  ? __pfx_validate_chain+0x10/0x10
[  251.896805][T10736]  ? stack_trace_save+0x118/0x1d0
[  251.901843][T10736]  ? __pfx_validate_chain+0x10/0x10
[  251.907043][T10736]  ? mark_lock+0x9a/0x350
[  251.911377][T10736]  ? __lock_acquire+0x1346/0x1fd0
[  251.916426][T10736]  ? __pfx_validate_chain+0x10/0x10
[  251.921619][T10736]  ? mark_lock+0x9a/0x350
[  251.925946][T10736]  ? __lock_acquire+0x1346/0x1fd0
[  251.930990][T10736]  ? mark_lock+0x9a/0x350
[  251.935329][T10736]  __lock_acquire+0x1346/0x1fd0
[  251.940253][T10736]  lock_acquire+0x1ed/0x550
[  251.944766][T10736]  ? sock_hash_delete_elem+0x17c/0x400
[  251.950235][T10736]  ? __pfx_lock_acquire+0x10/0x10
[  251.955278][T10736]  ? sock_hash_delete_elem+0x17c/0x400
[  251.960758][T10736]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  251.966585][T10736]  ? sock_hash_delete_elem+0x17c/0x400
[  251.972053][T10736]  _raw_spin_lock_bh+0x35/0x50
[  251.976826][T10736]  ? sock_hash_delete_elem+0x17c/0x400
[  251.982301][T10736]  sock_hash_delete_elem+0x17c/0x400
[  251.987603][T10736]  ? __pfx_sock_hash_delete_elem+0x10/0x10
[  251.993418][T10736]  ? register_lock_class+0x102/0x980
[  251.998712][T10736]  ? bpf_trace_run4+0x244/0x590
[  252.003573][T10736]  bpf_prog_bc4ba9860fbb0da4+0x46/0x4a
[  252.009044][T10736]  bpf_trace_run4+0x334/0x590
[  252.013728][T10736]  ? mark_lock+0x9a/0x350
[  252.018064][T10736]  ? __pfx_bpf_trace_run4+0x10/0x10
[  252.023275][T10736]  ? prepare_alloc_pages+0x369/0x5d0
[  252.028578][T10736]  __alloc_pages_noprof+0x694/0x6c0
[  252.033789][T10736]  ? __pfx___alloc_pages_noprof+0x10/0x10
[  252.039537][T10736]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  252.045523][T10736]  alloc_slab_page+0x5f/0x120
[  252.050224][T10736]  allocate_slab+0x5a/0x2e0
[  252.054732][T10736]  ___slab_alloc+0xcd1/0x14b0
[  252.059409][T10736]  ? bpf_map_kmalloc_node+0xd3/0x1c0
[  252.064697][T10736]  ? bpf_map_kmalloc_node+0xd3/0x1c0
[  252.069983][T10736]  __slab_alloc+0x58/0xa0
[  252.074316][T10736]  __kmalloc_node_noprof+0x286/0x440
[  252.079609][T10736]  ? bpf_map_kmalloc_node+0xd3/0x1c0
[  252.084896][T10736]  bpf_map_kmalloc_node+0xd3/0x1c0
[  252.090027][T10736]  sock_hash_update_common+0x415/0xa30
[  252.095503][T10736]  sock_map_update_elem_sys+0x5a4/0x910
[  252.101057][T10736]  ? sock_map_update_elem_sys+0x1d8/0x910
[  252.106789][T10736]  ? __pfx_sock_map_update_elem_sys+0x10/0x10
[  252.112886][T10736]  map_update_elem+0x53a/0x6f0
[  252.117675][T10736]  __sys_bpf+0x76f/0x810
[  252.121929][T10736]  ? __pfx___sys_bpf+0x10/0x10
[  252.126697][T10736]  ? __rseq_handle_notify_resume+0x353/0x14e0
[  252.132772][T10736]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  252.138754][T10736]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  252.145084][T10736]  ? do_syscall_64+0x100/0x230
[  252.149853][T10736]  __x64_sys_bpf+0x7c/0x90
[  252.154284][T10736]  do_syscall_64+0xf3/0x230
[  252.158802][T10736]  ? clear_bhb_loop+0x35/0x90
[  252.163483][T10736]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.169385][T10736] RIP: 0033:0x7f7be247cee9
[  252.173818][T10736] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  252.193423][T10736] RSP: 002b:00007f7be32c80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  252.201834][T10736] RAX: ffffffffffffffda RBX: 00007f7be25b3fa0 RCX: 00007f7be247cee9
[  252.209801][T10736] RDX: 0000000000000020 RSI: 0000000020000140 RDI: 0000000000000002
[  252.217768][T10736] RBP: 00007f7be24c947f R08: 0000000000000000 R09: 0000000000000000
2024/05/31 19:39:14 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  252.225735][T10736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  252.233729][T10736] R13: 000000000000004d R14: 00007f7be25b3fa0 R15: 00007ffcf12dc1e8
[  252.241715][T10736]  </TASK>